last executing test programs: 25m37.13231036s ago: executing program 32 (id=17): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000100)={0x0, &(0x7f0000000240)}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, 0x0, &(0x7f0000000500)='%+9llu \x00'}, 0x20) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40000, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1, 0x4f, 0x4e) r3 = syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000640)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r4, &(0x7f0000000680)=""/145, 0x91) msync(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) fcntl$notify(r4, 0x402, 0x1a) pread64(r3, &(0x7f0000000740)=""/237, 0xed, 0x4eb) read$FUSE(r3, &(0x7f0000000840)={0x2020}, 0x2020) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0xff8c) splice(r3, &(0x7f0000002880)=0x4, r4, &(0x7f00000028c0)=0x7, 0xeb24, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) 24m21.892553969s ago: executing program 33 (id=104): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(r0, 0x3, &(0x7f00000002c0)=0x40000000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0xc6fffffd) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10}, 0x94) r4 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80, 0x800) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x80) write(r5, &(0x7f0000000240)='0000:00:03.0', 0xc) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092ad44886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) 22m26.929853431s ago: executing program 34 (id=222): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0xb, &(0x7f0000000440)) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3d4, 0x208, 0x2d0, 0xfeffffff, 0x2d0, 0x208, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x1, 0x9}, 0x0, 0xf0, 0x124, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x1, 0x7]}}}, @common=@set={{0x40}, {{0x0, [], 0x5}}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x64}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x430) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x44000) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000004c0)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r4, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}, 0x1c) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./gadget\x00', &(0x7f0000000680)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./gadget/dummy_udc\x00', 0x2, 0x0) 21m36.300372408s ago: executing program 35 (id=278): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r0, 0x84, 0x75, 0xfffffffffffffffe, &(0x7f0000000540)=0x41) socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x5036c2, 0x0) sigaltstack(&(0x7f0000000640)={0x0, 0x80000001}, 0x0) sigaltstack(0x0, &(0x7f0000000880)={0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000008c0), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = io_uring_setup(0x539d, &(0x7f0000000900)={0x0, 0x86b8, 0x8000, 0x1000, 0x126, 0x0, r1}) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000980)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x8010) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x100000000000000, 0x0) sched_setattr(0x0, &(0x7f0000000a40)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r2, r2, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000a80)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x1000000, 0x0, 0x0, 0x1, 0x40, r5, &(0x7f0000000100)='8', 0x1, 0x10000000005971}]) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000ac0)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x40241, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000bc0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newtfilter={0x104, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0xd4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x8, 0x1, 0x19, 0x7}, {0x0, 0x7, 0xfe000000, 0x1}, {0x5, 0x4, 0x4, 0x2}, {0x7, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x3, 0xffffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x36}, {0x4, 0xe8c, 0xcc, 0x5}, {0xc, 0x80, 0xffffffff, 0xc0000000}, {0x7, 0xe, 0x9, 0x35ad5b6d}, {0x5, 0x6, 0xff, 0x4}, {0x0, 0xffff, 0x78e, 0x400}]}}]}}]}, 0x104}}, 0x0) 20m33.431445059s ago: executing program 36 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r0, 0x5417, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500200a14000000110001000000a885d348b8a8bcf89ecf16be0183d2aec112c4a9db273d390d7e4df0bc72928fa6f681acd535305818cef00000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$netlink(0x10, 0x3, 0xb) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x9840) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) pipe(0x0) fsopen(&(0x7f0000000180)='autofs\x00', 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x305001, 0x8) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000440)={0x4, 0x7, 0x40, {0x762, 0x8}, 0x8000, 0xffff}) 9m57.289614877s ago: executing program 37 (id=2143): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1, 0x3ebc, 0x3) 8m5.457930282s ago: executing program 2 (id=2508): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r5, 0x0, &(0x7f0000000000/0xb000)=nil, 0xb000, 0x7ffffffe}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x50621}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0), &(0x7f00000004c0)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00 \x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\x04\x00\x00\x00\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xc1\xfbVC\xd2\x81\x98\x02H\xda\xbd0\xf8\nZ\xf8\x8d\x19\x8e\xe0\x06\x00}\xc4|\xa7{ \xfa+\x89\xaa\n\x84\x17z\t\xc1\xb7}\x9d{*4Q\xbb^>\xc3\xd5\xa1\xc9\xc7\xe3\xfbP\x1d\r\xd7Nw,~\xe6\x06\xf3\xceU}\xa9,:\xcc\xa7\xa84\xe6\x1b\xd9\\7u\x1d @\x8a\xf4\x0e\x85S\r\x1e\xff\xde:<\x00\x00\x00\x00\x00\xf2\x04T\xd1\'\xf6\xf8\xbe>^\xcb\xd3\x9f\xf0~i&\x82\xbdZ\x80\x11\x94\xb2\x1f\xa7}Z@n\x0f\x9d\xf8s*\xa0l\xea\xd0\xb5\x80\x93\b\xea\xb3&\xf0\t}|\x8a\xae\xa3_\"fc\x94\xbc\xc4I\xc1M\x16U5\xf53|(AErb\xee\x10\xa9\xcbN\xaf\x8e\xacY!=u\xefc\x0e\x96\xd0\x16\xd0)x\t<\xb6\xa3+wY\xed\x11\xe0\x17\x91\xaf*4\xfa\xe4n\xa1P<\xec\xf7V\x1c\xbd\xb3\xd6O\x84I\x91[\xf6{\xc7\'5\x9eZB\xe0\x8a\x17\t Y\x84\xc6\xa5\x899\xf9\x1c)(T\xc9e9\x8d\x13\xe4Q\xc5Y\xe5\xf6\x1d\xd7\xa1Oz+\xceH\xdfG_\xf3T\xd7\x18\xab\x9e\xf3w\xc3\x93\x10\nq.\x06qi\x9eT;\f\xcc\xdf\x86^\xc7\x82h\x14\x827\x12h{\a>\xf6\x02\xb7=\xe2\xe5%\xb5\x9f\n\x18N\xff\xbe5\xca\xb7G\xd8) \x7f\xf6\f\xca\xa9\xd0\xd5\x18f\xf8\xfa\xc8\x92We\xff\xca\xbd\xdfg\xb2~\x0f\xf6\xf72)k\x8f=\xfdb\xc3\xe0\xcf\xbaJ\xdfi\xa7\xad\x84\x1f\xcc\x10SV\xcc/o\xad\xa4s@\xd0Mw\x7fsM\x03\\\xa8\xa0k\x8d', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="44000280400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300030000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7m33.30485325s ago: executing program 9 (id=2588): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x7) sendmmsg$unix(r4, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./dev/mtdblock0\x00', 0x42, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/mtdblock0\x00', 0x8000, 0x0) sendfile(r5, r6, 0x0, 0x110000) close(r5) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000900), 0x4) sendmsg$kcm(r1, 0x0, 0x40004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x4c, r8, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 7m31.80005751s ago: executing program 8 (id=2589): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback=r0, r1, 0x2f, 0x2030, 0x4, @void, @void, @value=r2}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) 7m31.727266261s ago: executing program 9 (id=2590): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = io_uring_setup(0x3454, &(0x7f0000000300)={0x0, 0x7fffeff6, 0x18, 0x2, 0x1ffffffd}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001240)=""/4095, 0x440000}], 0x100000000000011a) 7m31.345586688s ago: executing program 8 (id=2592): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000004c0)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) read$hiddev(r0, 0x0, 0x0) 7m31.34491226s ago: executing program 9 (id=2593): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x21, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [0xff000000, 0x0, 0xff], @ipv4=@private=0xa010100, [0xff000000, 0xffffffff, 0xffffff00, 0xff], 0x4d4, 0x3500, 0x2b, 0x1, 0xa, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff000000, 0xff], @ipv4=@private=0xa010100, [0x0, 0x0, 0x0, 0xff000000], 0x4d4, 0x0, 0x4, 0x84c8c1ffaf088238, 0x6}, {@ipv6=@private1, [0x0, 0x0, 0x6471b27323fbf78f], @ipv6=@private1, [0xff, 0x0, 0x0, 0xffffff00], 0x4d4, 0x3501, 0x87, 0x1, 0x2, 0x2}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff000000], @ipv4=@broadcast, [0xff000000, 0xff, 0xff000000, 0xffffffff], 0x4d2, 0x3506, 0x2f, 0x0, 0x0, 0x1e}], 0xf, 0x6}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv0\x00', 'veth1\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m29.666830404s ago: executing program 8 (id=2597): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3c5093, 0x0) umount2(&(0x7f0000000300)='./file0/file0\x00', 0x0) 7m29.459098165s ago: executing program 8 (id=2598): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x80000000) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x10) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 7m28.485507291s ago: executing program 9 (id=2600): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x84000, 0x0) 7m28.335557565s ago: executing program 9 (id=2601): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x202, 0x1000, @empty}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e1f, 0x22200006, @remote, 0x8}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 7m26.638788385s ago: executing program 8 (id=2602): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0xf) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x72}}}}}]}}]}}, 0x0) 7m26.258071161s ago: executing program 39 (id=2602): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0xf) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x72}}}}}]}}]}}, 0x0) 7m25.879033406s ago: executing program 9 (id=2605): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='27', 0x2) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) 7m25.509220742s ago: executing program 40 (id=2605): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='27', 0x2) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) 7m23.874947776s ago: executing program 7 (id=2612): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) 7m23.380092688s ago: executing program 7 (id=2615): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x41, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00243f000000220188ff5cb5e85ead4c31157ebe44f218649e06254e2a58111c57c4f48570e081"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7m21.418704669s ago: executing program 7 (id=2616): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r5, 0x0, &(0x7f0000000000/0xb000)=nil, 0xb000, 0x7ffffffe}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x50621}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0), &(0x7f00000004c0)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00 \x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\x04\x00\x00\x00\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xc1\xfbVC\xd2\x81\x98\x02H\xda\xbd0\xf8\nZ\xf8\x8d\x19\x8e\xe0\x06\x00}\xc4|\xa7{ \xfa+\x89\xaa\n\x84\x17z\t\xc1\xb7}\x9d{*4Q\xbb^>\xc3\xd5\xa1\xc9\xc7\xe3\xfbP\x1d\r\xd7Nw,~\xe6\x06\xf3\xceU}\xa9,:\xcc\xa7\xa84\xe6\x1b\xd9\\7u\x1d @\x8a\xf4\x0e\x85S\r\x1e\xff\xde:<\x00\x00\x00\x00\x00\xf2\x04T\xd1\'\xf6\xf8\xbe>^\xcb\xd3\x9f\xf0~i&\x82\xbdZ\x80\x11\x94\xb2\x1f\xa7}Z@n\x0f\x9d\xf8s*\xa0l\xea\xd0\xb5\x80\x93\b\xea\xb3&\xf0\t}|\x8a\xae\xa3_\"fc\x94\xbc\xc4I\xc1M\x16U5\xf53|(AErb\xee\x10\xa9\xcbN\xaf\x8e\xacY!=u\xefc\x0e\x96\xd0\x16\xd0)x\t<\xb6\xa3+wY\xed\x11\xe0\x17\x91\xaf*4\xfa\xe4n\xa1P<\xec\xf7V\x1c\xbd\xb3\xd6O\x84I\x91[\xf6{\xc7\'5\x9eZB\xe0\x8a\x17\t Y\x84\xc6\xa5\x899\xf9\x1c)(T\xc9e9\x8d\x13\xe4Q\xc5Y\xe5\xf6\x1d\xd7\xa1Oz+\xceH\xdfG_\xf3T\xd7\x18\xab\x9e\xf3w\xc3\x93\x10\nq.\x06qi\x9eT;\f\xcc\xdf\x86^\xc7\x82h\x14\x827\x12h{\a>\xf6\x02\xb7=\xe2\xe5%\xb5\x9f\n\x18N\xff\xbe5\xca\xb7G\xd8) \x7f\xf6\f\xca\xa9\xd0\xd5\x18f\xf8\xfa\xc8\x92We\xff\xca\xbd\xdfg\xb2~\x0f\xf6\xf72)k\x8f=\xfdb\xc3\xe0\xcf\xbaJ\xdfi\xa7\xad\x84\x1f\xcc\x10SV\xcc/o\xad\xa4s@\xd0Mw\x7fsM\x03\\\xa8\xa0k\x8d', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000003200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003280), 0x651, 0x0) recvmmsg(r5, &(0x7f00000032c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003300)=0x6) ftruncate(0xffffffffffffffff, 0x10003) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r7, 0x0, 0x0, 0x14) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf, 0x401d031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000003340), 0x680cbe19, 0x60140) read$FUSE(r8, &(0x7f0000003380)={0x2020}, 0x2020) sendmsg$key(r2, &(0x7f0000005400)={0x0, 0x0, &(0x7f0000005440)={&(0x7f0000005480)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000054c0)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000005540)=ANY=[@ANYBLOB="021200"], 0x10}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) 4m29.133997753s ago: executing program 1 (id=2799): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) socket$inet6_sctp(0xa, 0x5, 0x84) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./trace/error_log\x00', 0x118) close_range(r0, 0xffffffffffffffff, 0x0) 4m28.877369086s ago: executing program 1 (id=2800): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x35) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @broadcast}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') 4m28.562892168s ago: executing program 1 (id=2801): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1184, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 4m28.407082694s ago: executing program 1 (id=2802): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='27', 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x2000007, 0x401d031, r0, 0x0) syz_open_procfs$userns(0x0, &(0x7f00000018c0)) 4m22.94205825s ago: executing program 1 (id=2803): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) fchdir(r0) close(r0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x9) fchdir(r2) 4m22.297858838s ago: executing program 42 (id=2803): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) fchdir(r0) close(r0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x9) fchdir(r2) 8.103957452s ago: executing program 5 (id=3181): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) syz_io_uring_setup(0x48ce, &(0x7f00000006c0)={0x0, 0xd353, 0x3000, 0x2, 0x19a}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 7.82683427s ago: executing program 5 (id=3183): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x9) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 7.266592642s ago: executing program 5 (id=3186): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/fs/smackfs/access\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7395, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x2, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000002, 0x4000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 6.302110084s ago: executing program 3 (id=3192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000002c0)=""/211) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffc2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r5, &(0x7f00000002c0)=ANY=[], 0x200002e6) read$FUSE(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e040e2720"], 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000082"], 0x0, 0x26, 0x0, 0x1, 0x6}, 0x28) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f0000000180)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffefff, 0x6}) r8 = syz_open_procfs(0x0, 0x0) lseek(r8, 0x2000, 0x0) 6.09100592s ago: executing program 5 (id=3193): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x98, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x96b6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x35}}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd405}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xd1f, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000580), 0x7, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x114e, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) syz_open_dev$usbfs(&(0x7f00000005c0), 0x20000007d, 0x0) 5.92320669s ago: executing program 0 (id=3195): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 5.79893666s ago: executing program 4 (id=3196): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000240)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000807, 0x200000000000000) 5.595767744s ago: executing program 4 (id=3198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, &(0x7f0000000600)="e73706985dc4e4b6dbe2dd84e9e0aef539885a133ba0f40825415c7a213987838db1934842f8907db5d078533f66e597e667bc048434aea2721e38acde620045dda47df0c9140f10126a2944d292cb4e1ecfaea2360471f16f0a0b66f090f5fd3267ee93e750edc866ac9d7abf26", 0x0, 0x4}, 0x20) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000005c0)=@x86={0x5, 0x8, 0xfe, 0x0, 0x6ed, 0x2, 0xe, 0xd, 0x9, 0x2, 0xe8, 0x26, 0x0, 0xe5, 0x74, 0x7, 0x2, 0xd, 0x9, '\x00', 0x2, 0x4000000b}) 5.464390238s ago: executing program 0 (id=3199): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2042, 0x19d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) unshare(0x8040480) pselect6(0x40, &(0x7f0000000440)={0x4, 0x2, 0x0, 0x8, 0x800, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000480)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0xf17, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 4.803969913s ago: executing program 0 (id=3200): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002023a5d40f905ffff9f61810203010902120001bd00100209047fc700ff02c106"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) 4.574841485s ago: executing program 5 (id=3201): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xd54895b78f604514) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000001640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000003680)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000003700)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f0000003740)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000005740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000005800)="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", 0x2000, &(0x7f0000007800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4.302494026s ago: executing program 6 (id=3203): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffff9, 0x7, 0x0, 0xd, 0x7bffffff, 0xfffffffffffffffe, 0x7, 0x200000000000000, 0xbd, 0x6, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x5988, 0x8000000000005a, 0x3, 0x4}) 4.261560628s ago: executing program 3 (id=3204): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='100', 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0xe) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.114899126s ago: executing program 6 (id=3205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000500)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000800)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000840)={0x8, 0x0, &(0x7f0000000880)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x100a, 0x1, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x14}, @fda={0x66646185, 0x0, 0x1, 0x7}}, &(0x7f0000000a00)={0x0, 0x18, 0x40}}, 0x400}]}) 3.101479458s ago: executing program 0 (id=3206): syz_open_dev$sg(0x0, 0x0, 0x802) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000910000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000908000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000000c00)='X', 0x1, 0xe0, &(0x7f0000000c40)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.078607367s ago: executing program 3 (id=3207): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000a40)='proc\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='14', 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) open_tree(r2, 0x0, 0x81801) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000380)={r1, @in6={{0xa, 0x3, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}}}, &(0x7f0000000440)=0x49) 3.018934201s ago: executing program 5 (id=3208): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff67) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 3.017605734s ago: executing program 4 (id=3209): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000040)={0x1, 0x20}, 0x0) getsockname$packet(r0, 0x0, 0x0) write(r0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 2.828552882s ago: executing program 6 (id=3210): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xe10, 0x80000001f000000, 0x3ffff}) 2.626048704s ago: executing program 3 (id=3211): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x25b0cb03ac6b0240, 0x1006, 0x15a, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x800, 0x10000000, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x40000, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r5, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2.488171696s ago: executing program 4 (id=3212): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371ac", 0xdf}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001340)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}], 0x2, 0x2090) sendto(r0, &(0x7f0000000340)="8d13b131c0604d4e6803c5e647f6e73536f245d12e4c532e6d18a98975fb1bf89996780d90887aff960b233ff00c0977b69374083a", 0x35, 0x4000041, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.221699896s ago: executing program 6 (id=3213): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet6(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) 1.891448163s ago: executing program 4 (id=3214): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.878969196s ago: executing program 0 (id=3215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4ce95}, 0x20048040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4) 1.515889094s ago: executing program 6 (id=3216): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2020000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb3d6dd5582203865}, 0x48) 1.110733728s ago: executing program 3 (id=3217): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7f, 0x200004d, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0x404d, 0x2ba9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000980)={0x5, 0x2, 0x9}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 147.704013ms ago: executing program 0 (id=3218): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd5000fadbdf2555000000080001004f001e0208000300", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x200440c1}, 0x24008000) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 95.344912ms ago: executing program 6 (id=3219): creat(&(0x7f0000000040)='./file0\x00', 0x8a) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x1000008, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0xc}, 0x50) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000000)={"338dc6b9d7927e51443e52f6f1c99e8ae47418dec775b90e2f7b5c62af08dbaf", r2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xf, 0xb, 0xff}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x5, 0x4, 0x10007e, 0x20000006, 0x53, 0x6, 0x10001, 0x80005, 0x102, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x3, 0x2, 0x7, 0x4, 0x200ffff, 0x40000026, 0xd, 0x53b7, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x2c, 0x8, 0x4c74, 0x201, 0x8bec, 0x4, 0x5, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x2, 0x4, 0x9, 0x400, 0x80, 0x10001, 0x5, 0x10001, 0x6, 0x5, 0xfffffffe, 0x40], [0xd, 0x9, 0x80000130, 0x8004, 0x8001, 0xfffffff3, 0x2, 0x4, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0x80, 0x312, 0x78, 0x1, 0x2, 0xffff, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f2f, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x200, 0x104, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x7, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x14, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x5, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x1000, 0x80aaed, 0x4, 0x24], [0x9, 0x840bb33, 0x7ffffffd, 0xb, 0x5, 0x100093a, 0x7, 0x1000006, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10003, 0x2, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x4, 0x1000, 0x7, 0xaf, 0x8, 0x3fc, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x1000a1f, 0xffffffff, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc2, 0x200, 0xffff2441, 0xf7f]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 9.176385ms ago: executing program 4 (id=3220): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000080)='S', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x41) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0xa2c65) r2 = syz_io_uring_setup(0xf04, &(0x7f0000000340)={0x0, 0x595f, 0x10000, 0x0, 0x10000055}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0x72, 0x5, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=3221): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) kernel console output (not intermixed with test programs): 1487.545392][T18240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.545503][T18240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.545706][T18240] bridge_slave_1: entered allmulticast mode [ 1487.559351][T18240] bridge_slave_1: entered promiscuous mode [ 1487.921633][ T5612] Bluetooth: hci1: command tx timeout [ 1488.121418][T18240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.171962][T18240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.294240][T17888] veth0_macvtap: entered promiscuous mode [ 1488.431262][ T48] hsr_slave_0: left promiscuous mode [ 1488.456786][ T48] hsr_slave_1: left promiscuous mode [ 1488.459070][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1488.459096][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1488.497454][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1488.497487][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1488.576440][ T48] veth1_macvtap: left promiscuous mode [ 1488.576554][ T48] veth0_macvtap: left promiscuous mode [ 1488.576799][ T48] veth1_vlan: left promiscuous mode [ 1488.577002][ T48] veth0_vlan: left promiscuous mode [ 1488.888682][ T5612] Bluetooth: hci3: command tx timeout [ 1489.685722][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1489.754141][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1490.383480][T18240] team0: Port device team_slave_0 added [ 1490.417975][T17888] veth1_macvtap: entered promiscuous mode [ 1490.438073][T18240] team0: Port device team_slave_1 added [ 1490.444801][T18246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.444921][T18246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.445110][T18246] bridge_slave_0: entered allmulticast mode [ 1490.474450][T18246] bridge_slave_0: entered promiscuous mode [ 1490.521558][T18246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.521677][T18246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.521851][T18246] bridge_slave_1: entered allmulticast mode [ 1490.547891][T18246] bridge_slave_1: entered promiscuous mode [ 1490.892490][T18240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.892509][T18240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.892533][T18240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.959655][T18240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.959673][T18240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.959699][T18240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1490.983871][T18246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1491.014714][T18246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.051383][T17888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1491.310116][T18246] team0: Port device team_slave_0 added [ 1491.387194][T18246] team0: Port device team_slave_1 added [ 1491.408699][T17888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1491.490557][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 1491.490575][ T36] audit: type=1800 audit(2000000470.844:4483): pid=18129 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24329 res=0 errno=0 [ 1491.506424][T18240] hsr_slave_0: entered promiscuous mode [ 1491.514085][T18240] hsr_slave_1: entered promiscuous mode [ 1491.514961][T18240] debugfs: 'hsr0' already exists in 'hsr' [ 1491.514998][T18240] Cannot create hsr debugfs directory [ 1491.551302][ T36] audit: type=1800 audit(2000000470.844:4484): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=480536 res=0 errno=0 [ 1491.905373][T18246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.905391][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.905417][T18246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.918644][T18246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.918662][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.918688][T18246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.026145][T18035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.393596][T18246] hsr_slave_0: entered promiscuous mode [ 1492.396752][T18246] hsr_slave_1: entered promiscuous mode [ 1492.402010][T18246] debugfs: 'hsr0' already exists in 'hsr' [ 1492.402050][T18246] Cannot create hsr debugfs directory [ 1493.739299][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.009559][ T36] audit: type=1800 audit(2000000473.169:4485): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=482791 res=0 errno=0 [ 1494.719511][T18129] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1494.777160][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1494.811887][ T36] audit: type=1800 audit(2000000473.907:4486): pid=18240 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 1495.107837][T18129] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1495.133885][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1495.207236][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.207260][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.231924][T18129] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1495.268328][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1495.280425][ T36] audit: type=1800 audit(2000000474.341:4487): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=484115 res=0 errno=0 [ 1495.318759][T18129] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1495.350385][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1496.670162][ T36] audit: type=1800 audit(2000000475.624:4488): pid=18246 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 1496.685789][ T9423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.685810][ T9423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.686614][T18035] veth0_vlan: entered promiscuous mode [ 1497.333845][T18035] veth1_vlan: entered promiscuous mode [ 1497.506151][ T5987] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1497.646461][T18035] veth0_macvtap: entered promiscuous mode [ 1497.692718][ T5987] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1497.694136][ T5987] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1497.694162][ T5987] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1497.697936][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.697961][ T5987] usb 6-1: Product: syz [ 1497.697974][ T5987] usb 6-1: Manufacturer: syz [ 1497.697988][ T5987] usb 6-1: SerialNumber: syz [ 1497.721883][ T36] audit: type=1800 audit(2000000476.593:4489): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=484766 res=0 errno=0 [ 1497.736617][ T36] audit: type=1800 audit(2000000476.611:4490): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=484798 res=0 errno=0 [ 1497.741867][ T36] audit: type=1800 audit(2000000476.620:4491): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=484773 res=0 errno=0 [ 1497.744089][ T36] audit: type=1800 audit(2000000476.620:4492): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=484774 res=0 errno=0 [ 1498.467442][ T36] audit: type=1800 audit(2000000477.285:4493): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=484837 res=0 errno=0 [ 1498.480765][ T36] audit: type=1800 audit(2000000477.294:4494): pid=18245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=484842 res=0 errno=0 [ 1498.488237][ T36] audit: type=1800 audit(2000000477.294:4495): pid=18245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=484846 res=0 errno=0 [ 1498.491206][ T36] audit: type=1800 audit(2000000477.303:4496): pid=18245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=484845 res=0 errno=0 [ 1498.494305][ T36] audit: type=1800 audit(2000000477.303:4497): pid=18245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=484848 res=0 errno=0 [ 1498.841336][ C0] usb 6-1: short aprc response received [ 1499.106583][ T5987] usb 6-1: failed to execute ARPC: -110 [ 1499.106607][ T5987] usb 6-1: failed to set connected state for cport 0: -110 [ 1499.106707][ T5987] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 1499.219355][T18035] veth1_macvtap: entered promiscuous mode [ 1499.297776][ T5987] usb 6-1: failed to send ARPC request 3: -71 [ 1499.298227][ T5987] usb 6-1: failed to execute ARPC: -71 [ 1499.298403][ T5987] usb 6-1: failed to clear cport 0: -71 [ 1499.298420][ T5987] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 1499.565364][ T5987] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 1499.575357][ T5987] usb 6-1: USB disconnect, device number 7 [ 1499.595978][ T36] audit: type=1800 audit(2000000478.318:4498): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=484795 res=0 errno=0 [ 1500.044347][T18035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.118848][T18035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.474935][ T48] bridge_slave_1: left allmulticast mode [ 1500.474969][ T48] bridge_slave_1: left promiscuous mode [ 1500.475214][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.595440][ T48] bridge_slave_0: left allmulticast mode [ 1500.595478][ T48] bridge_slave_0: left promiscuous mode [ 1500.595707][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.841160][ T48] bridge_slave_1: left allmulticast mode [ 1500.841196][ T48] bridge_slave_1: left promiscuous mode [ 1500.841478][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.983009][ T48] bridge_slave_0: left allmulticast mode [ 1500.983056][ T48] bridge_slave_0: left promiscuous mode [ 1500.984250][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.239229][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1502.316169][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1502.360888][ T48] bond0 (unregistering): Released all slaves [ 1503.095091][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1503.160842][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1503.193268][ T48] bond0 (unregistering): Released all slaves [ 1504.003357][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 1504.003376][ T36] audit: type=1800 audit(2000000482.387:4518): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=485335 res=0 errno=0 [ 1504.497090][T18426] FAULT_INJECTION: forcing a failure. [ 1504.497090][T18426] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.497130][T18426] CPU: 1 UID: 0 PID: 18426 Comm: syz.5.2808 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1504.497160][T18426] Tainted: [L]=SOFTLOCKUP [ 1504.497168][T18426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1504.497181][T18426] Call Trace: [ 1504.497190][T18426] [ 1504.497201][T18426] dump_stack_lvl+0xe8/0x150 [ 1504.497241][T18426] should_fail_ex+0x46b/0x600 [ 1504.497272][T18426] should_failslab+0xa8/0x100 [ 1504.497311][T18426] __kmalloc_cache_noprof+0x9c/0x670 [ 1504.497339][T18426] ? pkcs8_key_preparse+0x12d/0x3e0 [ 1504.497362][T18426] ? pkcs8_key_preparse+0x12d/0x3e0 [ 1504.497402][T18426] pkcs8_key_preparse+0x12d/0x3e0 [ 1504.497425][T18426] ? kfree+0x1c5/0x6d0 [ 1504.497450][T18426] ? __pfx_pkcs8_key_preparse+0x10/0x10 [ 1504.497480][T18426] ? x509_cert_parse+0x66f/0x7a0 [ 1504.497502][T18426] ? __pfx_down_read+0x10/0x10 [ 1504.497526][T18426] ? x509_key_preparse+0x74/0x6d0 [ 1504.497557][T18426] asymmetric_key_preparse+0xb9/0x1b0 [ 1504.497581][T18426] __key_create_or_update+0x34f/0xa70 [ 1504.497617][T18426] ? __pfx___key_create_or_update+0x10/0x10 [ 1504.497660][T18426] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1504.497692][T18426] key_create_or_update+0x42/0x60 [ 1504.497719][T18426] __se_sys_add_key+0x349/0x420 [ 1504.497753][T18426] ? __pfx___se_sys_add_key+0x10/0x10 [ 1504.497791][T18426] ? __x64_sys_add_key+0x20/0xc0 [ 1504.497825][T18426] do_syscall_64+0x166/0x520 [ 1504.497852][T18426] ? trace_irq_disable+0x3b/0x140 [ 1504.497876][T18426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.497898][T18426] ? clear_bhb_loop+0x70/0xc0 [ 1504.497923][T18426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.497945][T18426] RIP: 0033:0x7f58d858f559 [ 1504.497965][T18426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.497984][T18426] RSP: 002b:00007f58d67de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1504.498007][T18426] RAX: ffffffffffffffda RBX: 00007f58d8815fa0 RCX: 00007f58d858f559 [ 1504.498024][T18426] RDX: 0000200000000480 RSI: 00002000000003c0 RDI: 0000200000000380 [ 1504.498040][T18426] RBP: 00007f58d8626b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1504.498056][T18426] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1504.498070][T18426] R13: 00007f58d8816038 R14: 00007f58d8815fa0 R15: 00007ffef7478738 [ 1504.498102][T18426] [ 1504.951522][T18129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.648538][ T36] audit: type=1800 audit(2000000483.900:4519): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=485354 res=0 errno=0 [ 1506.624673][T18129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.856678][ T48] hsr_slave_0: left promiscuous mode [ 1506.903460][ T48] hsr_slave_1: left promiscuous mode [ 1506.919461][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1506.919480][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1506.959057][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1506.959086][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1506.993635][ T36] audit: type=1800 audit(2000000485.146:4520): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=485480 res=0 errno=0 [ 1507.010438][ T36] audit: type=1800 audit(2000000485.164:4521): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=485495 res=0 errno=0 [ 1507.014186][ T36] audit: type=1800 audit(2000000485.164:4522): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=485498 res=0 errno=0 [ 1507.017643][ T36] audit: type=1800 audit(2000000485.164:4523): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=485497 res=0 errno=0 [ 1507.022162][ T36] audit: type=1800 audit(2000000485.174:4524): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=485496 res=0 errno=0 [ 1507.023888][ T36] audit: type=1800 audit(2000000485.174:4525): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=485487 res=0 errno=0 [ 1507.026005][ T36] audit: type=1800 audit(2000000485.174:4526): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=485490 res=0 errno=0 [ 1507.035699][ T36] audit: type=1800 audit(2000000485.183:4527): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=485483 res=0 errno=0 [ 1507.146827][T18440] input: syz0 as /devices/virtual/input/input31 [ 1507.344919][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1507.377641][ T48] hsr_slave_0: left promiscuous mode [ 1507.420330][ T48] hsr_slave_1: left promiscuous mode [ 1507.421392][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1507.421414][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1507.464099][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1507.464127][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1507.672752][T18446] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1508.228505][ T48] veth1_macvtap: left promiscuous mode [ 1508.295111][ T48] veth0_macvtap: left promiscuous mode [ 1508.337641][ T48] veth1_vlan: left promiscuous mode [ 1508.379744][ T48] veth0_vlan: left promiscuous mode [ 1508.654417][ T48] veth1_macvtap: left promiscuous mode [ 1508.654487][ T48] veth0_macvtap: left promiscuous mode [ 1508.654744][ T48] veth1_vlan: left promiscuous mode [ 1508.665437][ T48] veth0_vlan: left promiscuous mode [ 1510.000973][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1510.068819][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1510.093038][T18455] FAULT_INJECTION: forcing a failure. [ 1510.093038][T18455] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1510.093087][T18455] CPU: 1 UID: 0 PID: 18455 Comm: syz.5.2816 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1510.093113][T18455] Tainted: [L]=SOFTLOCKUP [ 1510.093120][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1510.093131][T18455] Call Trace: [ 1510.093140][T18455] [ 1510.093154][T18455] dump_stack_lvl+0xe8/0x150 [ 1510.093192][T18455] should_fail_ex+0x46b/0x600 [ 1510.093221][T18455] get_futex_key+0x1ab/0x1410 [ 1510.093254][T18455] ? futex_unqueue+0x22/0x240 [ 1510.093282][T18455] ? __pfx_get_futex_key+0x10/0x10 [ 1510.093307][T18455] ? __futex_wait+0x3c9/0x480 [ 1510.093334][T18455] futex_requeue+0x23a/0x1ab0 [ 1510.093369][T18455] ? try_to_wake_up+0x854/0x1430 [ 1510.093398][T18455] ? __pfx_futex_requeue+0x10/0x10 [ 1510.093428][T18455] ? futex_wait+0x2a2/0x390 [ 1510.093450][T18455] ? __pfx_futex_wait+0x10/0x10 [ 1510.093495][T18455] do_futex+0x41b/0x4e0 [ 1510.093529][T18455] ? __pfx_do_futex+0x10/0x10 [ 1510.093555][T18455] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1510.093587][T18455] __se_sys_futex+0x3a8/0x450 [ 1510.093620][T18455] ? __pfx___se_sys_futex+0x10/0x10 [ 1510.093646][T18455] ? rcu_is_watching+0x16/0xb0 [ 1510.093678][T18455] ? __x64_sys_futex+0x21/0xf0 [ 1510.093706][T18455] do_syscall_64+0x166/0x520 [ 1510.093732][T18455] ? trace_irq_disable+0x3b/0x140 [ 1510.093753][T18455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.093772][T18455] ? clear_bhb_loop+0x70/0xc0 [ 1510.093795][T18455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.093814][T18455] RIP: 0033:0x7f58d858f559 [ 1510.093832][T18455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.093848][T18455] RSP: 002b:00007f58d67de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1510.093869][T18455] RAX: ffffffffffffffda RBX: 00007f58d8815fa0 RCX: 00007f58d858f559 [ 1510.093883][T18455] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 0000000000000000 [ 1510.093894][T18455] RBP: 00007f58d8626b20 R08: 0000000000000000 R09: 0000000000000001 [ 1510.093906][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1510.093918][T18455] R13: 00007f58d8816038 R14: 00007f58d8815fa0 R15: 00007ffef7478738 [ 1510.093950][T18455] [ 1510.368214][T18457] loop5: detected capacity change from 0 to 7 [ 1510.370610][T18457] Dev loop5: unable to read RDB block 7 [ 1510.370639][T18457] loop5: AHDI p1 p2 p3 [ 1510.370658][T18457] loop5: partition table partially beyond EOD, truncated [ 1510.370891][T18457] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1510.370915][T18457] loop5: p3 start 335544320 is beyond EOD, truncated [ 1511.291968][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1511.354772][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1511.716591][ T1360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.716613][ T1360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.718972][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 1511.718988][ T36] audit: type=1800 audit(2000000489.510:4530): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=485531 res=0 errno=0 [ 1511.844758][ T1544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.845025][ T1544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.975026][ T36] audit: type=1800 audit(2000000489.686:4531): pid=18246 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24329 res=0 errno=0 [ 1512.012874][ T36] audit: type=1800 audit(2000000489.778:4532): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=485543 res=0 errno=0 [ 1512.094733][ T1544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.094876][ T1544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.226818][ T1544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.226851][ T1544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.301790][ T9423] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.324862][ T1426] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.608382][ T1360] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.614445][T12202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.615620][ T1009] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.615832][ T1009] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.616022][ T1009] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.616201][ T1009] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.319584][ T36] audit: type=1800 audit(2000000490.987:4533): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=485725 res=0 errno=0 [ 1513.340139][ T36] audit: type=1800 audit(2000000491.005:4534): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=485736 res=0 errno=0 [ 1513.930139][T18129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1514.297150][ T36] audit: type=1800 audit(2000000491.891:4535): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=486047 res=0 errno=0 [ 1514.391356][T18240] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1514.446070][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1514.461598][T18240] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1514.515408][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1514.636320][T18240] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1514.763129][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1514.801788][T18240] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1514.926172][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1515.580698][ T60] Bluetooth: hci4: command 0x1003 tx timeout [ 1515.581476][ T5612] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1516.033285][T18510] FAULT_INJECTION: forcing a failure. [ 1516.033285][T18510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1516.033319][T18510] CPU: 0 UID: 0 PID: 18510 Comm: syz.5.2824 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1516.033341][T18510] Tainted: [L]=SOFTLOCKUP [ 1516.033347][T18510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1516.033357][T18510] Call Trace: [ 1516.033364][T18510] [ 1516.033372][T18510] dump_stack_lvl+0xe8/0x150 [ 1516.033413][T18510] should_fail_ex+0x46b/0x600 [ 1516.033434][T18510] _copy_from_user+0x2d/0xb0 [ 1516.033453][T18510] do_sock_getsockopt+0x200/0x7e0 [ 1516.033482][T18510] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1516.033515][T18510] ? __fget_files+0x2a/0x420 [ 1516.033538][T18510] __x64_sys_getsockopt+0x1aa/0x250 [ 1516.033567][T18510] do_syscall_64+0x166/0x520 [ 1516.033593][T18510] ? trace_irq_disable+0x3b/0x140 [ 1516.033614][T18510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.033630][T18510] ? clear_bhb_loop+0x70/0xc0 [ 1516.033649][T18510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.033664][T18510] RIP: 0033:0x7f58d858f559 [ 1516.033680][T18510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.033695][T18510] RSP: 002b:00007f58d67de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1516.033720][T18510] RAX: ffffffffffffffda RBX: 00007f58d8815fa0 RCX: 00007f58d858f559 [ 1516.033734][T18510] RDX: 000000000000000c RSI: 0000000000000084 RDI: 0000000000000004 [ 1516.033745][T18510] RBP: 00007f58d8626b20 R08: 0000200000004b80 R09: 0000000000000000 [ 1516.033758][T18510] R10: 0000200000004b40 R11: 0000000000000246 R12: 0000000000000000 [ 1516.033769][T18510] R13: 00007f58d8816038 R14: 00007f58d8815fa0 R15: 00007ffef7478738 [ 1516.033797][T18510] [ 1516.127372][T18129] veth0_vlan: entered promiscuous mode [ 1516.419604][T18129] veth1_vlan: entered promiscuous mode [ 1516.528814][T18246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1516.582631][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1516.586999][T18246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1516.615890][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1516.619521][T18246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1516.788073][T18515] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1517.776705][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1517.789631][T18246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1517.850904][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1518.077271][T18129] veth0_macvtap: entered promiscuous mode [ 1518.123087][T18129] veth1_macvtap: entered promiscuous mode [ 1518.298603][T18240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.395513][T18129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.521439][T18129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.592388][T18240] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.646889][ T1009] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.772802][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.772938][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.979016][ T9423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.979192][ T9423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.486570][ T36] audit: type=1800 audit(2000000497.593:4536): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=486407 res=0 errno=0 [ 1520.895515][T18246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.930696][ T36] audit: type=1800 audit(2000000498.008:4537): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31153 res=0 errno=0 [ 1520.958610][ T36] audit: type=1800 audit(2000000498.036:4538): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31176 res=0 errno=0 [ 1521.054715][ T9423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.054737][ T9423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.057236][ T36] audit: type=1800 audit(2000000498.128:4539): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=486541 res=0 errno=0 [ 1521.180989][T18246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1521.236783][ T5719] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1521.294535][ T9423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.294559][ T9423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.362484][ T9441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.362726][ T9441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.399333][ T5719] usb 5-1: Using ep0 maxpacket: 8 [ 1521.400156][ T5719] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1521.401537][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1521.401581][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.446765][ T5719] usb 5-1: config 0 descriptor?? [ 1521.451105][ T36] audit: type=1800 audit(2000000498.488:4540): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=486667 res=0 errno=0 [ 1521.466044][ T36] audit: type=1800 audit(2000000498.507:4541): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=486696 res=0 errno=0 [ 1521.472233][ T36] audit: type=1800 audit(2000000498.507:4542): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=486674 res=0 errno=0 [ 1521.473568][ T36] audit: type=1800 audit(2000000498.507:4543): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=486675 res=0 errno=0 [ 1521.488847][ T36] audit: type=1800 audit(2000000498.525:4544): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=486676 res=0 errno=0 [ 1521.493270][ T9441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.493416][ T9441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.528602][ T36] audit: type=1800 audit(2000000498.553:4545): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=486716 res=0 errno=0 [ 1521.714732][ T5719] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1521.830696][T18240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.248082][T18240] veth0_vlan: entered promiscuous mode [ 1522.320008][T18240] veth1_vlan: entered promiscuous mode [ 1522.372644][T18246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.458595][ T5719] usb 5-1: USB disconnect, device number 2 [ 1522.634016][T18240] veth0_macvtap: entered promiscuous mode [ 1522.666764][T18240] veth1_macvtap: entered promiscuous mode [ 1522.727099][T18246] veth0_vlan: entered promiscuous mode [ 1522.765099][T18240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.766307][T18246] veth1_vlan: entered promiscuous mode [ 1522.811210][T18240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1523.102660][ T200] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1523.288564][ T200] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1523.289885][ T200] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 1523.289924][ T200] usb 6-1: config 0 has no interface number 0 [ 1523.289964][ T200] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.311141][ T200] usb 6-1: config 0 descriptor?? [ 1523.324265][ T200] ums-realtek 6-1:0.3: USB Mass Storage device detected [ 1523.354418][T18246] veth0_macvtap: entered promiscuous mode [ 1523.645086][T18246] veth1_macvtap: entered promiscuous mode [ 1523.965168][ T200] usb 6-1: USB disconnect, device number 8 [ 1524.436405][T18598] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1525.817521][T18246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1526.015886][T18246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1526.043895][T12202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.043922][T12202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.074582][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 1526.074602][ T36] audit: type=1800 audit(2000000502.760:4557): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=487015 res=0 errno=0 [ 1526.124138][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.125667][ T1426] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.126003][ T1426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.126189][ T1426] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.126434][ T1426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.126606][ T1426] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.126788][ T1426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.771021][T18624] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (264047) [ 1526.774016][ T1426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.774036][ T1426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.981526][ T1426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.981645][ T1426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.982064][ T1426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.982246][ T1426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.850516][ T36] audit: type=1800 audit(2000000504.393:4558): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=487141 res=0 errno=0 [ 1528.373951][ T1360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.373971][ T1360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.410297][ T36] audit: type=1800 audit(2000000504.910:4559): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=487275 res=0 errno=0 [ 1528.662318][T18639] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1530.204048][ T1544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.204073][ T1544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.361741][ T36] audit: type=1800 audit(2000000506.709:4560): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=487558 res=0 errno=0 [ 1530.396610][ T36] audit: type=1800 audit(2000000506.746:4561): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=487467 res=0 errno=0 [ 1531.373541][T18662] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1533.112779][T18680] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1535.135227][T18699] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1536.886513][ T8864] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1536.962421][T16376] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1537.138059][T16376] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1537.139547][T16376] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1537.139573][T16376] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.139591][T16376] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1537.139636][T16376] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1537.139661][T16376] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1537.142698][T16376] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1537.142723][T16376] usb 6-1: Product: syz [ 1537.142735][T16376] usb 6-1: Manufacturer: syz [ 1537.331012][T16376] cdc_wdm 6-1:1.0: skipping garbage [ 1537.331036][T16376] cdc_wdm 6-1:1.0: skipping garbage [ 1537.378886][ T36] audit: type=1800 audit(2000000513.187:4562): pid=18715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=487602 res=0 errno=0 [ 1537.461400][T16376] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1537.461452][T16376] cdc_wdm 6-1:1.0: Unknown control protocol [ 1537.650178][ T36] audit: type=1800 audit(2000000513.353:4563): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31103 res=0 errno=0 [ 1537.692618][ T36] audit: type=1800 audit(2000000513.473:4564): pid=18715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=487633 res=0 errno=0 [ 1537.692665][ T36] audit: type=1800 audit(2000000513.473:4565): pid=18715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=487609 res=0 errno=0 [ 1537.692701][ T36] audit: type=1800 audit(2000000513.473:4566): pid=18715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=487610 res=0 errno=0 [ 1537.783429][ T36] audit: type=1800 audit(2000000513.556:4567): pid=18715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=487631 res=0 errno=0 [ 1537.784916][ T36] audit: type=1800 audit(2000000513.556:4568): pid=18715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=487632 res=0 errno=0 [ 1537.929301][ T36] audit: type=1800 audit(2000000513.694:4569): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31126 res=0 errno=0 [ 1538.092469][ T36] audit: type=1800 audit(2000000513.851:4570): pid=18715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=487611 res=0 errno=0 [ 1538.177443][ T36] audit: type=1800 audit(2000000513.925:4571): pid=18715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=487653 res=0 errno=0 [ 1538.208752][ T5987] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1538.519416][ T5987] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1538.563410][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.563447][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1538.581584][ T5987] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1538.581613][ T5987] usb 4-1: Manufacturer: syz [ 1538.683587][ T5987] usb 4-1: config 0 descriptor?? [ 1539.180391][ T8864] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1539.180429][ T8864] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 1539.181598][ T8864] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1539.181683][ T8864] usb 1-1: can't read configurations, error -71 [ 1539.584285][T18736] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1540.697039][T18744] netlink: 'syz.6.2865': attribute type 1 has an invalid length. [ 1540.738172][ T5987] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #200: -71 [ 1540.738341][ T5987] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 1540.738359][ T5987] uclogic 0003:256C:006D.001B: failed probing pen v2 parameters: -71 [ 1540.738411][ T5987] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 1540.738514][ T5987] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 1540.757003][ T5987] usb 4-1: USB disconnect, device number 4 [ 1541.110600][T18713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.111216][T18713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.574508][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2870'. [ 1541.807829][ T5987] usb 6-1: USB disconnect, device number 9 [ 1541.828396][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888060a4f400: rx timeout, send abort [ 1543.317079][T18797] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1545.043068][T18811] macvlan2: entered promiscuous mode [ 1545.043259][T18811] macvlan2: entered allmulticast mode [ 1545.838897][T18833] FAULT_INJECTION: forcing a failure. [ 1545.838897][T18833] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.838935][T18833] CPU: 0 UID: 0 PID: 18833 Comm: syz.0.2888 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1545.838974][T18833] Tainted: [L]=SOFTLOCKUP [ 1545.838982][T18833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1545.838994][T18833] Call Trace: [ 1545.839003][T18833] [ 1545.839012][T18833] dump_stack_lvl+0xe8/0x150 [ 1545.839051][T18833] should_fail_ex+0x46b/0x600 [ 1545.839082][T18833] ? __d_alloc+0x37/0x830 [ 1545.839108][T18833] should_failslab+0xa8/0x100 [ 1545.839141][T18833] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 1545.839169][T18833] ? __d_alloc+0x37/0x830 [ 1545.839197][T18833] __d_alloc+0x37/0x830 [ 1545.839223][T18833] __d_alloc_parallel+0xde/0x1710 [ 1545.839265][T18833] ? lock_acquire+0x115/0x350 [ 1545.839292][T18833] ? __pfx___d_alloc_parallel+0x10/0x10 [ 1545.839327][T18833] ? down_read+0x151/0x200 [ 1545.839345][T18833] ? __pfx_down_read+0x10/0x10 [ 1545.839367][T18833] __lookup_slow+0x82/0x2f0 [ 1545.839394][T18833] lookup_slow+0x59/0x80 [ 1545.839416][T18833] lookup_noperm_positive_unlocked+0x1e/0xa0 [ 1545.839439][T18833] debugfs_lookup+0x100/0x150 [ 1545.839513][T18833] ? __pfx_debugfs_lookup+0x10/0x10 [ 1545.839539][T18833] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1545.839568][T18833] ? mutex_lock_nested+0x14d/0x1d0 [ 1545.839593][T18833] ? kvm_create_vm_debugfs+0x12a/0x8f0 [ 1545.839633][T18833] kvm_create_vm_debugfs+0x139/0x8f0 [ 1545.839658][T18833] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1545.839682][T18833] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 1545.839701][T18833] ? alloc_pages_mpol+0x11b/0x280 [ 1545.839726][T18833] ? __rt_spin_lock_init+0x3e/0x50 [ 1545.839760][T18833] kvm_dev_ioctl+0x13ca/0x17e0 [ 1545.839790][T18833] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1545.839815][T18833] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1545.839842][T18833] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1545.839863][T18833] __se_sys_ioctl+0xff/0x170 [ 1545.839890][T18833] do_syscall_64+0x166/0x520 [ 1545.839917][T18833] ? trace_irq_disable+0x3b/0x140 [ 1545.839939][T18833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.839959][T18833] ? clear_bhb_loop+0x70/0xc0 [ 1545.839990][T18833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.840010][T18833] RIP: 0033:0x7f113e16f559 [ 1545.840029][T18833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.840046][T18833] RSP: 002b:00007f113c3be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1545.840067][T18833] RAX: ffffffffffffffda RBX: 00007f113e3f5fa0 RCX: 00007f113e16f559 [ 1545.840082][T18833] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 1545.840095][T18833] RBP: 00007f113e206b20 R08: 0000000000000000 R09: 0000000000000000 [ 1545.840107][T18833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1545.840117][T18833] R13: 00007f113e3f6038 R14: 00007f113e3f5fa0 R15: 00007ffecc787038 [ 1545.840149][T18833] [ 1545.891289][T18832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2889'. [ 1546.556857][T18846] syz_tun: entered allmulticast mode [ 1546.670071][T18853] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1547.603137][T18840] syz_tun: left allmulticast mode [ 1548.060183][T17975] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1548.934777][T17975] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 1548.986480][T17975] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1548.988601][T17975] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1548.989125][T17975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.376867][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 1549.376885][ T36] audit: type=1800 audit(2000000524.259:4584): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=488232 res=0 errno=0 [ 1549.399400][ T36] audit: type=1800 audit(2000000524.278:4585): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=488261 res=0 errno=0 [ 1549.410393][ T36] audit: type=1800 audit(2000000524.287:4586): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=488239 res=0 errno=0 [ 1549.417776][ T36] audit: type=1800 audit(2000000524.296:4587): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=488240 res=0 errno=0 [ 1549.428986][ T36] audit: type=1800 audit(2000000524.296:4588): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=488241 res=0 errno=0 [ 1549.590475][ T36] audit: type=1800 audit(2000000524.444:4589): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=488290 res=0 errno=0 [ 1550.085362][T18890] netlink: 'syz.3.2901': attribute type 1 has an invalid length. [ 1550.727258][T16376] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1550.888877][T16376] usb 6-1: Using ep0 maxpacket: 16 [ 1550.895057][T16376] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1550.959307][T16376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.959335][T16376] usb 6-1: Product: syz [ 1550.959348][T16376] usb 6-1: Manufacturer: syz [ 1550.959361][T16376] usb 6-1: SerialNumber: syz [ 1551.004724][ T36] audit: type=1800 audit(2000000525.754:4590): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=488480 res=0 errno=0 [ 1551.024915][ T36] audit: type=1800 audit(2000000525.782:4591): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=488512 res=0 errno=0 [ 1551.031533][ T36] audit: type=1800 audit(2000000525.791:4592): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=488487 res=0 errno=0 [ 1551.039454][ T36] audit: type=1800 audit(2000000525.791:4593): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=488488 res=0 errno=0 [ 1551.229434][T17975] pegasus 1-1:1.0: can't reset MAC [ 1551.230085][T17975] pegasus 1-1:1.0: probe with driver pegasus failed with error -5 [ 1551.298187][T17975] usb 1-1: USB disconnect, device number 8 [ 1551.473038][T16376] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1551.565756][T16376] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1551.569219][T16376] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1551.569293][T16376] usb 6-1: media controller created [ 1551.619864][T16376] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1551.816210][T16376] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1551.879073][T16376] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1551.898514][T16376] usb 6-1: USB disconnect, device number 10 [ 1552.287443][T18929] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1552.752098][T18933] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1555.849817][T18963] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1557.059551][T18968] kvm: emulating exchange as write [ 1557.732056][T18987] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1557.736550][T18988] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1558.350491][T18982] FAULT_INJECTION: forcing a failure. [ 1558.350491][T18982] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.350529][T18982] CPU: 1 UID: 0 PID: 18982 Comm: syz.5.2920 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1558.350551][T18982] Tainted: [L]=SOFTLOCKUP [ 1558.350557][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1558.350569][T18982] Call Trace: [ 1558.350577][T18982] [ 1558.350586][T18982] dump_stack_lvl+0xe8/0x150 [ 1558.350617][T18982] should_fail_ex+0x46b/0x600 [ 1558.350643][T18982] should_failslab+0xa8/0x100 [ 1558.350673][T18982] __kmalloc_cache_noprof+0x9c/0x670 [ 1558.350699][T18982] ? tipc_group_create_member+0x61/0x540 [ 1558.350811][T18982] ? tipc_group_create_member+0x61/0x540 [ 1558.350835][T18982] tipc_group_create_member+0x61/0x540 [ 1558.350854][T18982] ? tipc_nametbl_build_group+0x2e/0x530 [ 1558.350910][T18982] tipc_nametbl_build_group+0x34d/0x530 [ 1558.350928][T18982] ? tipc_nametbl_build_group+0x2e/0x530 [ 1558.350954][T18982] tipc_sk_join+0x3a8/0x6a0 [ 1558.351011][T18982] ? __pfx_tipc_sk_join+0x10/0x10 [ 1558.351036][T18982] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1558.351060][T18982] ? lockdep_hardirqs_on+0x7b/0x110 [ 1558.351093][T18982] tipc_setsockopt+0x73e/0x9a0 [ 1558.351121][T18982] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1558.351149][T18982] ? __fget_files+0x3a8/0x420 [ 1558.351166][T18982] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1558.351182][T18982] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1558.351205][T18982] do_sock_setsockopt+0x17c/0x1b0 [ 1558.351246][T18982] __x64_sys_setsockopt+0x143/0x1b0 [ 1558.351277][T18982] do_syscall_64+0x166/0x520 [ 1558.351302][T18982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.351323][T18982] ? clear_bhb_loop+0x70/0xc0 [ 1558.351346][T18982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.351365][T18982] RIP: 0033:0x7f58d858f559 [ 1558.351383][T18982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.351400][T18982] RSP: 002b:00007f58d67de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1558.351421][T18982] RAX: ffffffffffffffda RBX: 00007f58d8815fa0 RCX: 00007f58d858f559 [ 1558.351435][T18982] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 1558.351447][T18982] RBP: 00007f58d8626b20 R08: 000000000000002e R09: 0000000000000000 [ 1558.351458][T18982] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 1558.351470][T18982] R13: 00007f58d8816038 R14: 00007f58d8815fa0 R15: 00007ffef7478738 [ 1558.351500][T18982] [ 1560.363858][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 1560.363877][ T36] audit: type=1800 audit(2000000534.400:4596): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=488925 res=0 errno=0 [ 1560.503282][ T200] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1560.903724][T19021] Bluetooth: hci4: Frame reassembly failed (-84) [ 1560.952029][ T200] usb 1-1: Using ep0 maxpacket: 32 [ 1561.017018][T19022] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2930'. [ 1561.021638][ T200] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1561.070555][ T36] audit: type=1800 audit(2000000534.999:4597): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=488944 res=0 errno=0 [ 1561.133354][ T200] usb 1-1: config 0 has no interfaces? [ 1561.149364][ T200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.149391][ T200] usb 1-1: Product: syz [ 1561.149404][ T200] usb 1-1: Manufacturer: syz [ 1561.149418][ T200] usb 1-1: SerialNumber: syz [ 1561.184337][ T36] audit: type=1800 audit(2000000535.147:4598): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=488955 res=0 errno=0 [ 1561.198539][T19023] Bluetooth: hci4: Frame reassembly failed (-84) [ 1561.243278][ T9441] Bluetooth: hci4: Frame reassembly failed (-84) [ 1561.342405][ T200] usb 1-1: config 0 descriptor?? [ 1561.356574][ T36] audit: type=1800 audit(2000000535.304:4599): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=488974 res=0 errno=0 [ 1561.388874][ T36] audit: type=1800 audit(2000000535.341:4600): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=489006 res=0 errno=0 [ 1561.390165][ T36] audit: type=1800 audit(2000000535.341:4601): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=488981 res=0 errno=0 [ 1561.408344][ T36] audit: type=1800 audit(2000000535.359:4602): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=488982 res=0 errno=0 [ 1561.422889][ T36] audit: type=1800 audit(2000000535.369:4603): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=489003 res=0 errno=0 [ 1561.422937][ T36] audit: type=1800 audit(2000000535.369:4604): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=489004 res=0 errno=0 [ 1561.436148][ T36] audit: type=1800 audit(2000000535.387:4605): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=488983 res=0 errno=0 [ 1561.627529][ T200] usb 1-1: USB disconnect, device number 9 [ 1561.722217][T19030] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1563.439152][ T60] Bluetooth: hci4: command 0x1003 tx timeout [ 1563.439466][ T5612] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1564.860752][T19056] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1566.005709][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 1566.005728][ T36] audit: type=1800 audit(2000000539.585:4607): pid=19061 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2938" name="remove" dev="sysfs" ino=2470 res=0 errno=0 [ 1566.220036][T19044] tipc: Started in network mode [ 1566.220067][T19044] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1566.375027][T19044] tipc: Enabled bearer , priority 10 [ 1566.467582][T19070] FAULT_INJECTION: forcing a failure. [ 1566.467582][T19070] name failslab, interval 1, probability 0, space 0, times 0 [ 1566.467619][T19070] CPU: 1 UID: 0 PID: 19070 Comm: syz.4.2940 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1566.467646][T19070] Tainted: [L]=SOFTLOCKUP [ 1566.467654][T19070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1566.467666][T19070] Call Trace: [ 1566.467674][T19070] [ 1566.467684][T19070] dump_stack_lvl+0xe8/0x150 [ 1566.467718][T19070] should_fail_ex+0x46b/0x600 [ 1566.467748][T19070] should_failslab+0xa8/0x100 [ 1566.467780][T19070] kmem_cache_alloc_node_noprof+0xa7/0x660 [ 1566.467806][T19070] ? alloc_pwq+0xaa6/0xe00 [ 1566.467826][T19070] ? alloc_pwq+0xaa6/0xe00 [ 1566.467853][T19070] alloc_pwq+0xaa6/0xe00 [ 1566.467885][T19070] apply_wqattrs_prepare+0x389/0xdc0 [ 1566.467910][T19070] ? pcpu_alloc_noprof+0xfd6/0x18d0 [ 1566.467959][T19070] __alloc_workqueue+0x11bb/0x1fe0 [ 1566.468004][T19070] alloc_workqueue_noprof+0xe3/0x210 [ 1566.468034][T19070] ? is_dynamic_key+0xd4/0x1c0 [ 1566.468056][T19070] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1566.468085][T19070] ? __kasan_kmalloc+0x93/0xb0 [ 1566.468112][T19070] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1566.468142][T19070] hci_register_dev+0x27c/0x880 [ 1566.468263][T19070] hci_uart_tty_ioctl+0x846/0xa80 [ 1566.468371][T19070] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 1566.468391][T19070] tty_ioctl+0x9c3/0xde0 [ 1566.468412][T19070] ? __pfx_tty_ioctl+0x10/0x10 [ 1566.468430][T19070] __se_sys_ioctl+0xff/0x170 [ 1566.468459][T19070] do_syscall_64+0x166/0x520 [ 1566.468497][T19070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.468517][T19070] ? clear_bhb_loop+0x70/0xc0 [ 1566.468542][T19070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.468565][T19070] RIP: 0033:0x7fc6bdf7f559 [ 1566.468589][T19070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1566.468606][T19070] RSP: 002b:00007fc6bc1ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1566.468627][T19070] RAX: ffffffffffffffda RBX: 00007fc6be205fa0 RCX: 00007fc6bdf7f559 [ 1566.468642][T19070] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 1566.468654][T19070] RBP: 00007fc6be016b20 R08: 0000000000000000 R09: 0000000000000000 [ 1566.468667][T19070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1566.468680][T19070] R13: 00007fc6be206038 R14: 00007fc6be205fa0 R15: 00007ffe6ccfb5f8 [ 1566.468713][T19070] [ 1566.625259][ T5987] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1566.753241][T19070] Bluetooth: Can't register HCI device [ 1566.831228][ T5987] usb 4-1: Using ep0 maxpacket: 16 [ 1566.848050][ T5987] usb 4-1: New USB device found, idVendor=146d, idProduct=0721, bcdDevice=9c.25 [ 1566.856890][ T5987] usb 4-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1566.861700][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.861716][ T5987] usb 4-1: Product: syz [ 1566.861724][ T5987] usb 4-1: Manufacturer: syz [ 1566.861731][ T5987] usb 4-1: SerialNumber: syz [ 1566.885403][ T200] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1566.906471][ T5987] usb 4-1: config 0 descriptor?? [ 1566.937070][ T5987] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 1566.961186][ T36] audit: type=1800 audit(2000000540.480:4608): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=489137 res=0 errno=0 [ 1566.965652][ T36] audit: type=1800 audit(2000000540.489:4609): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=489169 res=0 errno=0 [ 1566.987531][ T36] audit: type=1800 audit(2000000540.499:4610): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=489144 res=0 errno=0 [ 1566.992683][ T36] audit: type=1800 audit(2000000540.508:4611): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=489145 res=0 errno=0 [ 1567.025513][ T36] audit: type=1800 audit(2000000540.536:4612): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=489166 res=0 errno=0 [ 1567.041460][ T36] audit: type=1800 audit(2000000540.554:4613): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=489167 res=0 errno=0 [ 1567.062683][ T200] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1567.065657][ T200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.080173][ T36] audit: type=1800 audit(2000000540.591:4614): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=489146 res=0 errno=0 [ 1567.101299][ T36] audit: type=1800 audit(2000000540.609:4615): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=489168 res=0 errno=0 [ 1567.115706][ T36] audit: type=1800 audit(2000000540.628:4616): pid=18912 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=489225 res=0 errno=0 [ 1567.334493][ T200] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1567.387728][T18631] usb 4-1: USB disconnect, device number 5 [ 1567.579872][ T5751] tipc: Node number set to 4269801488 [ 1567.702134][T18631] usb 1-1: USB disconnect, device number 10 [ 1568.119167][T19095] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1569.145590][ T9442] IPVS: starting estimator thread 0... [ 1569.259078][T19098] IPVS: using max 16 ests per chain, 38400 per kthread [ 1569.664458][T19110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2946'. [ 1570.083285][T19111] snd_dummy snd_dummy.0: control 1:9:195: :53367 is already present [ 1571.251350][ T5612] Bluetooth: hci6: command 0x0406 tx timeout [ 1572.640681][T19126] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1572.694122][ T60] Bluetooth: hci6: unexpected event for opcode 0x2003 [ 1573.919171][ T200] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1573.937251][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1574.103297][ T200] usb 4-1: Using ep0 maxpacket: 16 [ 1574.104279][ T200] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1574.106098][ T200] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1574.106122][ T200] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.106142][ T200] usb 4-1: config 0 has no interfaces? [ 1574.110617][ T200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.110642][ T200] usb 4-1: Product: syz [ 1574.110656][ T200] usb 4-1: Manufacturer: syz [ 1574.110670][ T200] usb 4-1: SerialNumber: syz [ 1574.146192][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 1574.146213][ T36] audit: type=1800 audit(2000000547.096:4628): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=489403 res=0 errno=0 [ 1574.154433][ T200] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1574.154459][ T200] r8152-cfgselector 4-1: config 0 descriptor?? [ 1574.177638][ T36] audit: type=1800 audit(2000000547.133:4629): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=489435 res=0 errno=0 [ 1574.201682][ T36] audit: type=1800 audit(2000000547.170:4630): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=489410 res=0 errno=0 [ 1574.210854][ T36] audit: type=1800 audit(2000000547.170:4631): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=489411 res=0 errno=0 [ 1574.218666][ T36] audit: type=1800 audit(2000000547.179:4632): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=489432 res=0 errno=0 [ 1574.228397][ T36] audit: type=1800 audit(2000000547.188:4633): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=489433 res=0 errno=0 [ 1574.237530][ T36] audit: type=1800 audit(2000000547.188:4634): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=489412 res=0 errno=0 [ 1574.246713][ T36] audit: type=1800 audit(2000000547.207:4635): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=489434 res=0 errno=0 [ 1574.278203][T19139] FAULT_INJECTION: forcing a failure. [ 1574.278203][T19139] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.278241][T19139] CPU: 0 UID: 0 PID: 19139 Comm: syz.5.2955 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1574.278269][T19139] Tainted: [L]=SOFTLOCKUP [ 1574.278277][T19139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1574.278290][T19139] Call Trace: [ 1574.278298][T19139] [ 1574.278306][T19139] dump_stack_lvl+0xe8/0x150 [ 1574.278348][T19139] should_fail_ex+0x46b/0x600 [ 1574.278377][T19139] should_failslab+0xa8/0x100 [ 1574.278409][T19139] __kmalloc_noprof+0xf6/0x790 [ 1574.278434][T19139] ? landlock_init_hierarchy_log+0x16c/0x5f0 [ 1574.278460][T19139] ? landlock_init_hierarchy_log+0x16c/0x5f0 [ 1574.278492][T19139] landlock_init_hierarchy_log+0x16c/0x5f0 [ 1574.278520][T19139] landlock_merge_ruleset+0x748/0xaa0 [ 1574.278553][T19139] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 1574.278583][T19139] do_syscall_64+0x166/0x520 [ 1574.278610][T19139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.278629][T19139] ? clear_bhb_loop+0x70/0xc0 [ 1574.278651][T19139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.278670][T19139] RIP: 0033:0x7f58d858f559 [ 1574.278689][T19139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.278706][T19139] RSP: 002b:00007f58d67de028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1574.278727][T19139] RAX: ffffffffffffffda RBX: 00007f58d8815fa0 RCX: 00007f58d858f559 [ 1574.278742][T19139] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 1574.278754][T19139] RBP: 00007f58d8626b20 R08: 0000000000000000 R09: 0000000000000000 [ 1574.278765][T19139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.278777][T19139] R13: 00007f58d8816038 R14: 00007f58d8815fa0 R15: 00007ffef7478738 [ 1574.278810][T19139] [ 1574.687913][ T36] audit: type=1800 audit(2000000547.604:4636): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=489474 res=0 errno=0 [ 1574.717672][ T36] audit: type=1800 audit(2000000547.640:4637): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=489489 res=0 errno=0 [ 1575.137353][T17943] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 1575.288016][T19163] FAULT_INJECTION: forcing a failure. [ 1575.288016][T19163] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.288053][T19163] CPU: 1 UID: 0 PID: 19163 Comm: syz.3.2959 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1575.288080][T19163] Tainted: [L]=SOFTLOCKUP [ 1575.288087][T19163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1575.288099][T19163] Call Trace: [ 1575.288109][T19163] [ 1575.288117][T19163] dump_stack_lvl+0xe8/0x150 [ 1575.288151][T19163] should_fail_ex+0x46b/0x600 [ 1575.288181][T19163] should_failslab+0xa8/0x100 [ 1575.288214][T19163] __kmalloc_noprof+0xf6/0x790 [ 1575.288239][T19163] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 1575.288262][T19163] ? x509_get_sig_params+0x305/0x630 [ 1575.288285][T19163] ? x509_get_sig_params+0x305/0x630 [ 1575.288315][T19163] x509_get_sig_params+0x305/0x630 [ 1575.288347][T19163] x509_cert_parse+0x514/0x7a0 [ 1575.288373][T19163] x509_key_preparse+0x64/0x6d0 [ 1575.288403][T19163] asymmetric_key_preparse+0xb9/0x1b0 [ 1575.288426][T19163] __key_create_or_update+0x34f/0xa70 [ 1575.288458][T19163] ? __pfx___key_create_or_update+0x10/0x10 [ 1575.288499][T19163] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1575.288532][T19163] key_create_or_update+0x42/0x60 [ 1575.288558][T19163] __se_sys_add_key+0x349/0x420 [ 1575.288591][T19163] ? __pfx___se_sys_add_key+0x10/0x10 [ 1575.288626][T19163] ? __x64_sys_add_key+0x20/0xc0 [ 1575.288653][T19163] do_syscall_64+0x166/0x520 [ 1575.288687][T19163] ? trace_irq_disable+0x3b/0x140 [ 1575.288711][T19163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.288731][T19163] ? clear_bhb_loop+0x70/0xc0 [ 1575.288755][T19163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.288775][T19163] RIP: 0033:0x7fa5d5f7f559 [ 1575.288793][T19163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.288810][T19163] RSP: 002b:00007fa5d41ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1575.288831][T19163] RAX: ffffffffffffffda RBX: 00007fa5d6205fa0 RCX: 00007fa5d5f7f559 [ 1575.288846][T19163] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1575.288859][T19163] RBP: 00007fa5d6016b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1575.288872][T19163] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1575.288884][T19163] R13: 00007fa5d6206038 R14: 00007fa5d6205fa0 R15: 00007ffde7f553e8 [ 1575.288915][T19163] [ 1575.443881][T19165] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1575.488106][ T60] Bluetooth: hci6: unexpected event for opcode 0x2003 [ 1576.838201][ T5751] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1576.855489][T19180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2963'. [ 1577.013899][ T5751] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1577.059641][ T5751] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1577.104098][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.104128][ T5751] usb 4-1: Product: syz [ 1577.104142][ T5751] usb 4-1: Manufacturer: syz [ 1577.104156][ T5751] usb 4-1: SerialNumber: syz [ 1577.264491][ T5751] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1577.887639][ T5751] gspca_mr97310a: reg write [21] error -110 [ 1577.887820][ T5751] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -110 [ 1579.199436][T19192] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1580.784134][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 1580.784156][ T36] audit: type=1800 audit(2000000553.241:4649): pid=19217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2971" name="resource1" dev="sysfs" ino=2611 res=0 errno=0 [ 1581.250747][T18631] usb 4-1: USB disconnect, device number 7 [ 1581.375506][T18155] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1581.538644][T18155] usb 6-1: Using ep0 maxpacket: 32 [ 1581.545461][T18155] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1581.572693][T19239] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1581.756735][T18155] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1581.756884][T18155] usb 6-1: config 0 has no interface number 0 [ 1581.762109][T18155] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1582.049071][T18155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.049168][T18155] usb 6-1: Product: syz [ 1582.049228][T18155] usb 6-1: Manufacturer: syz [ 1582.049291][T18155] usb 6-1: SerialNumber: syz [ 1582.552290][T18155] usb 6-1: config 0 descriptor?? [ 1582.574067][ T36] audit: type=1800 audit(2000000554.884:4650): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=489670 res=0 errno=0 [ 1582.590675][ T36] audit: type=1800 audit(2000000554.893:4651): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=489702 res=0 errno=0 [ 1582.590722][ T36] audit: type=1800 audit(2000000554.911:4652): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=489677 res=0 errno=0 [ 1582.641912][ T36] audit: type=1800 audit(2000000554.948:4653): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=489678 res=0 errno=0 [ 1582.702410][T19246] loop0: detected capacity change from 0 to 4096 [ 1582.715044][ T36] audit: type=1800 audit(2000000555.013:4654): pid=18912 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14714 res=0 errno=0 [ 1583.315852][T19257] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1584.187766][T18155] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1584.187806][T18155] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1584.907797][ T36] audit: type=1800 audit(2000000557.033:4655): pid=19274 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2984" name="remove" dev="sysfs" ino=177483 res=0 errno=0 [ 1585.168368][T18155] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1585.168399][T18155] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1585.168416][T18155] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1585.198610][T18155] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1585.224915][ T36] audit: type=1800 audit(2000000557.338:4656): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=489699 res=0 errno=0 [ 1585.332069][ T36] audit: type=1800 audit(2000000557.430:4657): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=489700 res=0 errno=0 [ 1585.337830][T18155] usb 6-1: USB disconnect, device number 11 [ 1585.351365][ T36] audit: type=1800 audit(2000000557.449:4658): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=489679 res=0 errno=0 [ 1586.520372][T19303] FAULT_INJECTION: forcing a failure. [ 1586.520372][T19303] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.520411][T19303] CPU: 0 UID: 0 PID: 19303 Comm: syz.4.2989 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1586.520438][T19303] Tainted: [L]=SOFTLOCKUP [ 1586.520446][T19303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1586.520458][T19303] Call Trace: [ 1586.520466][T19303] [ 1586.520475][T19303] dump_stack_lvl+0xe8/0x150 [ 1586.520510][T19303] should_fail_ex+0x46b/0x600 [ 1586.520538][T19303] should_failslab+0xa8/0x100 [ 1586.520569][T19303] __kmalloc_noprof+0xf6/0x790 [ 1586.520594][T19303] ? ima_write_template_field_data+0x47/0x490 [ 1586.520618][T19303] ? ima_write_template_field_data+0x47/0x490 [ 1586.520651][T19303] ? do_file_open+0x23e/0x4a0 [ 1586.520679][T19303] ima_write_template_field_data+0x47/0x490 [ 1586.520704][T19303] ? ima_eventdigest_init_common+0x2b1/0x400 [ 1586.520733][T19303] ima_eventdigest_init_common+0x2cc/0x400 [ 1586.520760][T19303] ? ima_eventdigest_init_common+0x1c1/0x400 [ 1586.520786][T19303] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 1586.520829][T19303] ? trace_kmalloc+0x20/0xf0 [ 1586.520856][T19303] ? __kmalloc_noprof+0x439/0x790 [ 1586.520881][T19303] ? ima_alloc_init_template+0x185/0x700 [ 1586.520904][T19303] ? __pfx_ima_eventdigest_ng_init+0x10/0x10 [ 1586.520927][T19303] ima_alloc_init_template+0x323/0x700 [ 1586.520955][T19303] ima_store_measurement+0x1da/0x6a0 [ 1586.520983][T19303] ? __pfx_ima_store_measurement+0x10/0x10 [ 1586.521000][T19303] ? ima_d_path+0x16b/0x230 [ 1586.521027][T19303] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1586.521049][T19303] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1586.521083][T19303] process_measurement+0x15bc/0x1c20 [ 1586.521126][T19303] ? __pfx_process_measurement+0x10/0x10 [ 1586.521153][T19303] ? smack_log+0xf5/0x3f0 [ 1586.521203][T19303] ? __pfx_smack_file_open+0x10/0x10 [ 1586.521247][T19303] ima_file_check+0xdc/0x130 [ 1586.521273][T19303] ? do_dentry_open+0xd56/0x1410 [ 1586.521299][T19303] ? __pfx_ima_file_check+0x10/0x10 [ 1586.521334][T19303] security_file_post_open+0xb3/0x260 [ 1586.521367][T19303] path_openat+0x174d/0x2100 [ 1586.521412][T19303] do_file_open+0x23e/0x4a0 [ 1586.521434][T19303] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1586.521469][T19303] ? __pfx_do_file_open+0x10/0x10 [ 1586.521521][T19303] ? alloc_fd+0x6b2/0x760 [ 1586.521553][T19303] do_sys_openat2+0x115/0x200 [ 1586.521581][T19303] ? __se_sys_futex+0x3a8/0x450 [ 1586.521610][T19303] ? __pfx_do_sys_openat2+0x10/0x10 [ 1586.521652][T19303] ? rcu_is_watching+0x16/0xb0 [ 1586.521685][T19303] __x64_sys_openat+0x138/0x170 [ 1586.521708][T19303] do_syscall_64+0x166/0x520 [ 1586.521736][T19303] ? trace_irq_disable+0x3b/0x140 [ 1586.521758][T19303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.521778][T19303] ? clear_bhb_loop+0x70/0xc0 [ 1586.521801][T19303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.521820][T19303] RIP: 0033:0x7fc6bdf7f559 [ 1586.521839][T19303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.521853][T19303] RSP: 002b:00007fc6bc1ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1586.521874][T19303] RAX: ffffffffffffffda RBX: 00007fc6be205fa0 RCX: 00007fc6bdf7f559 [ 1586.521887][T19303] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1586.521900][T19303] RBP: 00007fc6be016b20 R08: 0000000000000000 R09: 0000000000000000 [ 1586.521910][T19303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1586.521921][T19303] R13: 00007fc6be206038 R14: 00007fc6be205fa0 R15: 00007ffe6ccfb5f8 [ 1586.521949][T19303] [ 1586.542607][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 1586.542624][ T36] audit: type=1804 audit(2000000558.547:4661): pid=19303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=add_template_measure cause=ENOMEM comm="syz.4.2989" name="/newroot/39/security/integrity/ima/policy" dev="securityfs" ino=3489 res=0 errno=0 [ 1586.569251][ T36] audit: type=1807 audit(2000000558.574:4662): action=appraise UNKNOWN=f res=0 [ 1586.569292][ T36] audit: type=1802 audit(2000000558.574:4663): pid=19303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.4.2989" res=0 errno=0 [ 1586.574346][T19300] ima: policy update failed [ 1586.574937][ T36] audit: type=1802 audit(2000000558.574:4664): pid=19300 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.4.2989" res=0 errno=0 [ 1587.327640][T19314] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1587.369008][T15864] Bluetooth: hci2: command 0x0406 tx timeout [ 1588.866564][T19326] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1588.967254][T19337] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1591.086179][T17943] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1591.263974][T17943] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1591.273388][T17943] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1591.273418][T17943] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1591.273454][T17943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.593832][ T36] audit: type=1800 audit(2000000563.206:4665): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=489824 res=0 errno=0 [ 1591.636846][ T36] audit: type=1800 audit(2000000563.234:4666): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=489853 res=0 errno=0 [ 1591.636893][ T36] audit: type=1800 audit(2000000563.243:4667): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=489831 res=0 errno=0 [ 1591.690298][ T36] audit: type=1800 audit(2000000563.299:4668): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=489832 res=0 errno=0 [ 1592.009335][ T36] audit: type=1800 audit(2000000563.594:4669): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=489833 res=0 errno=0 [ 1592.040383][T17943] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1592.053259][T17943] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input32 [ 1592.076533][ T36] audit: type=1800 audit(2000000563.658:4670): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=489873 res=0 errno=0 [ 1592.188620][ T36] audit: type=1800 audit(2000000563.760:4671): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=489892 res=0 errno=0 [ 1592.214976][ T36] audit: type=1800 audit(2000000563.788:4672): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=489908 res=0 errno=0 [ 1592.216400][ T36] audit: type=1800 audit(2000000563.788:4673): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=489911 res=0 errno=0 [ 1592.217768][ T36] audit: type=1800 audit(2000000563.788:4674): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=489910 res=0 errno=0 [ 1592.219144][ T36] audit: type=1800 audit(2000000563.788:4675): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=489909 res=0 errno=0 [ 1592.220481][ T36] audit: type=1800 audit(2000000563.788:4676): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=489900 res=0 errno=0 [ 1592.338504][ T36] audit: type=1800 audit(2000000563.898:4677): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=489903 res=0 errno=0 [ 1592.364384][ T36] audit: type=1800 audit(2000000563.917:4678): pid=18935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=489874 res=0 errno=0 [ 1592.435244][T17943] input: failed to attach handler kbd to device input32, error: -5 [ 1593.635891][T17943] usb 4-1: USB disconnect, device number 8 [ 1594.037199][T19397] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1595.018001][T19399] netlink: 'syz.6.3011': attribute type 4 has an invalid length. [ 1595.589161][T19412] FAULT_INJECTION: forcing a failure. [ 1595.589161][T19412] name failslab, interval 1, probability 0, space 0, times 0 [ 1595.589203][T19412] CPU: 1 UID: 0 PID: 19412 Comm: syz.5.3015 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1595.589233][T19412] Tainted: [L]=SOFTLOCKUP [ 1595.589240][T19412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1595.589252][T19412] Call Trace: [ 1595.589261][T19412] [ 1595.589270][T19412] dump_stack_lvl+0xe8/0x150 [ 1595.589306][T19412] should_fail_ex+0x46b/0x600 [ 1595.589337][T19412] should_failslab+0xa8/0x100 [ 1595.589369][T19412] __kmalloc_cache_noprof+0x9c/0x670 [ 1595.589396][T19412] ? vidtv_psi_eit_event_init+0x336/0x460 [ 1595.589561][T19412] ? vidtv_psi_short_event_desc_init+0xec/0x6c0 [ 1595.589583][T19412] ? vidtv_psi_short_event_desc_init+0xec/0x6c0 [ 1595.589604][T19412] ? __pfx_vidtv_psi_eit_event_init+0x10/0x10 [ 1595.589631][T19412] vidtv_psi_short_event_desc_init+0xec/0x6c0 [ 1595.589658][T19412] vidtv_psi_desc_clone+0x299/0x680 [ 1595.589685][T19412] vidtv_channel_si_init+0x898/0x15c0 [ 1595.589743][T19412] vidtv_mux_init+0x503/0x1960 [ 1595.589781][T19412] vidtv_start_feed+0x36b/0x5a0 [ 1595.589812][T19412] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1595.589835][T19412] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1595.589869][T19412] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1595.589901][T19412] ? mutex_lock_interruptible_nested+0x14d/0x1c0 [ 1595.589925][T19412] ? dmx_section_feed_start_filtering+0x55/0x6b0 [ 1595.590022][T19412] dmx_section_feed_start_filtering+0x519/0x6b0 [ 1595.590055][T19412] dvb_dmxdev_filter_start+0xcdb/0x10d0 [ 1595.590084][T19412] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 1595.590106][T19412] dvb_demux_do_ioctl+0x473/0x540 [ 1595.590130][T19412] dvb_usercopy+0x199/0x2e0 [ 1595.590149][T19412] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1595.590170][T19412] ? __pfx_dvb_usercopy+0x10/0x10 [ 1595.590201][T19412] ? __fget_files+0x2a/0x420 [ 1595.590227][T19412] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1595.590248][T19412] dvb_demux_ioctl+0x29/0x40 [ 1595.590268][T19412] __se_sys_ioctl+0xff/0x170 [ 1595.590299][T19412] do_syscall_64+0x166/0x520 [ 1595.590325][T19412] ? trace_irq_disable+0x3b/0x140 [ 1595.590351][T19412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.590371][T19412] ? clear_bhb_loop+0x70/0xc0 [ 1595.590395][T19412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.590417][T19412] RIP: 0033:0x7f58d858f559 [ 1595.590437][T19412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.590456][T19412] RSP: 002b:00007f58d67de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1595.590478][T19412] RAX: ffffffffffffffda RBX: 00007f58d8815fa0 RCX: 00007f58d858f559 [ 1595.590493][T19412] RDX: 0000200000000840 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 1595.590504][T19412] RBP: 00007f58d8626b20 R08: 0000000000000000 R09: 0000000000000000 [ 1595.590516][T19412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1595.590527][T19412] R13: 00007f58d8816038 R14: 00007f58d8815fa0 R15: 00007ffef7478738 [ 1595.590555][T19412] [ 1595.781991][T19423] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1597.849237][T19450] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1597.894505][ T5612] Bluetooth: hci6: unexpected event for opcode 0x2003 [ 1600.606158][T19474] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1600.672990][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1602.641780][T19486] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3028'. [ 1602.750397][T19491] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1602.837295][ T5612] Bluetooth: hci6: unexpected event for opcode 0x2003 [ 1603.087295][T19494] syzkaller1: entered promiscuous mode [ 1603.087322][T19494] syzkaller1: entered allmulticast mode [ 1606.500200][T19526] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1606.522884][ T5612] Bluetooth: hci6: unexpected event for opcode 0x2003 [ 1607.412675][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 1607.412695][ T36] audit: type=1800 audit(2000000577.813:4728): pid=19534 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.3040" name="map_device" dev="sysfs" ino=20881 res=0 errno=0 [ 1607.927955][ T8391] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1608.346270][ T8391] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1608.593245][ T8391] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.975481][ T8391] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1608.975517][ T8391] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1608.975556][ T8391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.030185][ T8391] usb 5-1: config 0 descriptor?? [ 1609.046875][ T36] audit: type=1800 audit(2000000579.307:4729): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=490237 res=0 errno=0 [ 1609.093261][ T36] audit: type=1800 audit(2000000579.354:4730): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=490266 res=0 errno=0 [ 1609.122692][ T36] audit: type=1800 audit(2000000579.391:4731): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=490244 res=0 errno=0 [ 1609.127353][ T36] audit: type=1800 audit(2000000579.391:4732): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=490245 res=0 errno=0 [ 1609.182250][ T36] audit: type=1800 audit(2000000579.437:4733): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=490246 res=0 errno=0 [ 1609.261134][ T36] audit: type=1800 audit(2000000579.501:4734): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=490286 res=0 errno=0 [ 1609.534960][T19563] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3047'. [ 1609.567450][ T36] audit: type=1800 audit(2000000579.797:4735): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=490304 res=0 errno=0 [ 1609.571002][ T8391] playstation 0003:054C:09CC.001C: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.4-1/input0 [ 1609.643820][ T36] audit: type=1800 audit(2000000579.870:4736): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=490326 res=0 errno=0 [ 1609.792388][ T36] audit: type=1800 audit(2000000580.009:4737): pid=19573 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=490306 res=0 errno=0 [ 1609.976501][ T8391] playstation 0003:054C:09CC.001C: Invalid reportID received, expected 18 got 161 [ 1609.976530][ T8391] playstation 0003:054C:09CC.001C: Failed to retrieve DualShock4 pairing info: -22 [ 1609.976583][ T8391] playstation 0003:054C:09CC.001C: Failed to get MAC address from DualShock4 [ 1609.976667][ T8391] playstation 0003:054C:09CC.001C: Failed to create dualshock4. [ 1611.113569][ T8391] playstation 0003:054C:09CC.001C: probe with driver playstation failed with error -22 [ 1611.430380][T19591] input: syz1 as /devices/virtual/input/input33 [ 1611.629366][T18730] usb 5-1: USB disconnect, device number 3 [ 1613.170261][T19607] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1615.026747][T19607] Bluetooth: hci1: command 0x0406 tx timeout [ 1616.196141][ T5612] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1617.075691][T19655] ./dev/sda1: Can't lookup blockdev [ 1617.091189][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 1617.091207][ T36] audit: type=1800 audit(2000000586.735:4748): pid=19649 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.3069" name="file2" dev="tmpfs" ino=281 res=0 errno=0 [ 1618.354018][T18155] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1618.511123][T19685] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1618.543746][ T5612] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1619.397087][T18155] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1619.424711][T18155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.424740][T18155] usb 6-1: Product: syz [ 1619.424755][T18155] usb 6-1: Manufacturer: syz [ 1619.424770][T18155] usb 6-1: SerialNumber: syz [ 1619.467615][T18155] usb 6-1: config 0 descriptor?? [ 1619.491649][ T36] audit: type=1800 audit(2000000588.950:4749): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=490580 res=0 errno=0 [ 1619.524399][ T36] audit: type=1800 audit(2000000588.977:4750): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=490612 res=0 errno=0 [ 1619.544957][ T36] audit: type=1800 audit(2000000588.996:4751): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=490587 res=0 errno=0 [ 1619.561831][ T36] audit: type=1800 audit(2000000589.014:4752): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=490588 res=0 errno=0 [ 1619.749798][T19690] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3077'. [ 1619.855838][T18155] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1620.012412][T19697] syz_tun: entered allmulticast mode [ 1620.300591][T19695] syz_tun: left allmulticast mode [ 1620.724393][T19716] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1620.754082][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1621.731695][T19720] syz_tun: entered allmulticast mode [ 1621.989941][ T5612] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1622.972829][T19726] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1622.972829][T19726] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1623.060496][T18155] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1623.074469][ T36] audit: type=1800 audit(2000000592.253:4753): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=490609 res=0 errno=0 [ 1623.074513][ T36] audit: type=1800 audit(2000000592.253:4754): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=490610 res=0 errno=0 [ 1623.091490][T18155] usb 6-1: USB disconnect, device number 12 [ 1623.103386][ T36] audit: type=1800 audit(2000000592.290:4755): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=490589 res=0 errno=0 [ 1623.114776][ T36] audit: type=1800 audit(2000000592.299:4756): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=490611 res=0 errno=0 [ 1625.520448][ T36] audit: type=1800 audit(2000000594.514:4757): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=490668 res=0 errno=0 [ 1625.538757][ T36] audit: type=1800 audit(2000000594.523:4758): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=490672 res=0 errno=0 [ 1625.603829][T19757] fuse: fd is not a fuse device [ 1625.665794][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1627.402015][T19814] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1627.422560][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1628.440324][T19816] FAULT_INJECTION: forcing a failure. [ 1628.440324][T19816] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.440362][T19816] CPU: 1 UID: 0 PID: 19816 Comm: syz.6.3099 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1628.440390][T19816] Tainted: [L]=SOFTLOCKUP [ 1628.440398][T19816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1628.440411][T19816] Call Trace: [ 1628.440419][T19816] [ 1628.440429][T19816] dump_stack_lvl+0xe8/0x150 [ 1628.440465][T19816] should_fail_ex+0x46b/0x600 [ 1628.440493][T19816] should_failslab+0xa8/0x100 [ 1628.440524][T19816] __kmalloc_noprof+0xf6/0x790 [ 1628.440550][T19816] ? __tipc_nl_compat_dumpit+0x2a4/0xca0 [ 1628.440572][T19816] ? __tipc_nl_compat_dumpit+0x2a4/0xca0 [ 1628.440601][T19816] __tipc_nl_compat_dumpit+0x2a4/0xca0 [ 1628.440622][T19816] ? do_syscall_64+0x166/0x520 [ 1628.440664][T19816] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 1628.440706][T19816] ? rcu_is_watching+0x16/0xb0 [ 1628.440759][T19816] ? __asan_memset+0x22/0x50 [ 1628.440783][T19816] ? __nlmsg_put+0xef/0x1b0 [ 1628.440899][T19816] tipc_nl_compat_dumpit+0x54b/0x790 [ 1628.440928][T19816] tipc_nl_compat_recv+0x899/0xcf0 [ 1628.440952][T19816] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1628.440973][T19816] ? __pfx_tipc_nl_compat_name_table_dump_header+0x10/0x10 [ 1628.440998][T19816] ? __pfx_tipc_nl_name_table_dump+0x10/0x10 [ 1628.441016][T19816] ? __pfx_tipc_nl_compat_name_table_dump+0x10/0x10 [ 1628.441046][T19816] ? __lock_acquire+0x747/0x2de0 [ 1628.441081][T19816] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 1628.441114][T19816] genl_family_rcv_msg_doit+0x233/0x340 [ 1628.441146][T19816] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1628.441184][T19816] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1628.441218][T19816] genl_rcv_msg+0x614/0x7a0 [ 1628.441248][T19816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1628.441269][T19816] ? ref_tracker_free+0x668/0x820 [ 1628.441290][T19816] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1628.441314][T19816] ? __pfx_ref_tracker_free+0x10/0x10 [ 1628.441350][T19816] netlink_rcv_skb+0x226/0x4a0 [ 1628.441370][T19816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1628.441396][T19816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1628.441428][T19816] ? netlink_deliver_tap+0x2e/0x1b0 [ 1628.441447][T19816] ? netlink_deliver_tap+0x2e/0x1b0 [ 1628.441471][T19816] genl_rcv+0x28/0x40 [ 1628.441493][T19816] netlink_unicast+0x90c/0xac0 [ 1628.441583][T19816] netlink_sendmsg+0x7f0/0xb20 [ 1628.441611][T19816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1628.441630][T19816] ? __lock_acquire+0x747/0x2de0 [ 1628.441656][T19816] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1628.441688][T19816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1628.441708][T19816] sock_sendmsg_nosec+0x13a/0x180 [ 1628.441741][T19816] ____sys_sendmsg+0x565/0x870 [ 1628.441780][T19816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1628.441817][T19816] ? import_iovec+0x73/0xa0 [ 1628.441843][T19816] ___sys_sendmsg+0x2a5/0x360 [ 1628.441868][T19816] ? __lock_acquire+0x747/0x2de0 [ 1628.441894][T19816] ? __pfx____sys_sendmsg+0x10/0x10 [ 1628.441924][T19816] ? futex_wait+0x2a2/0x390 [ 1628.441976][T19816] ? __fget_files+0x3a8/0x420 [ 1628.441996][T19816] ? __fget_files+0x2a/0x420 [ 1628.442026][T19816] __x64_sys_sendmsg+0x1b7/0x290 [ 1628.442056][T19816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1628.442104][T19816] do_syscall_64+0x166/0x520 [ 1628.442130][T19816] ? trace_irq_disable+0x3b/0x140 [ 1628.442152][T19816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.442172][T19816] ? clear_bhb_loop+0x70/0xc0 [ 1628.442195][T19816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.442215][T19816] RIP: 0033:0x7f693ecbf559 [ 1628.442234][T19816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.442251][T19816] RSP: 002b:00007f693cf0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1628.442273][T19816] RAX: ffffffffffffffda RBX: 00007f693ef45fa0 RCX: 00007f693ecbf559 [ 1628.442287][T19816] RDX: 000000002c040090 RSI: 0000200000000840 RDI: 0000000000000003 [ 1628.442301][T19816] RBP: 00007f693ed56b20 R08: 0000000000000000 R09: 0000000000000000 [ 1628.442313][T19816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1628.442325][T19816] R13: 00007f693ef46038 R14: 00007f693ef45fa0 R15: 00007fffc0ac2ab8 [ 1628.442358][T19816] [ 1629.030258][T19826] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1629.064537][ T5612] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1631.799131][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1633.109526][ T36] audit: type=1800 audit(2000000601.517:4759): pid=19898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3117" name="ignore_ce" dev="sysfs" ino=53023 res=0 errno=0 [ 1634.514774][T19905] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3118'. [ 1637.636102][ T5612] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1638.720328][T19927] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1638.763288][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1639.814805][ T36] audit: type=1800 audit(2000000607.699:4760): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=491103 res=0 errno=0 [ 1639.921514][T19936] FAULT_INJECTION: forcing a failure. [ 1639.921514][T19936] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.921555][T19936] CPU: 0 UID: 0 PID: 19936 Comm: syz.3.3125 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1639.921583][T19936] Tainted: [L]=SOFTLOCKUP [ 1639.921590][T19936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1639.921602][T19936] Call Trace: [ 1639.921610][T19936] [ 1639.921619][T19936] dump_stack_lvl+0xe8/0x150 [ 1639.921663][T19936] should_fail_ex+0x46b/0x600 [ 1639.921691][T19936] should_failslab+0xa8/0x100 [ 1639.921719][T19936] ? radix_tree_node_alloc+0xd0/0x400 [ 1639.921836][T19936] kmem_cache_alloc_noprof+0x99/0x680 [ 1639.921861][T19936] ? __lock_acquire+0x747/0x2de0 [ 1639.921884][T19936] ? radix_tree_node_alloc+0xd0/0x400 [ 1639.921918][T19936] radix_tree_node_alloc+0xd0/0x400 [ 1639.921944][T19936] ? __lock_acquire+0x747/0x2de0 [ 1639.921972][T19936] idr_get_free+0x295/0xa20 [ 1639.922011][T19936] idr_alloc_u32+0x190/0x340 [ 1639.922071][T19936] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1639.922090][T19936] ? rcu_is_watching+0x16/0xb0 [ 1639.922123][T19936] ? __pfx_rt_spin_lock+0x10/0x10 [ 1639.922145][T19936] ? __local_bh_disable_ip+0x3d/0x420 [ 1639.922174][T19936] idr_alloc+0x6e/0xd0 [ 1639.922196][T19936] tipc_conn_alloc+0x338/0x500 [ 1639.922222][T19936] ? tipc_conn_alloc+0x30d/0x500 [ 1639.922254][T19936] tipc_topsrv_kern_subscr+0xf8/0x250 [ 1639.922282][T19936] ? tipc_own_addr+0x45/0x2a0 [ 1639.922303][T19936] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 1639.922335][T19936] ? tipc_own_addr+0x45/0x2a0 [ 1639.922355][T19936] ? __asan_memset+0x22/0x50 [ 1639.922381][T19936] tipc_group_create+0x35b/0x4f0 [ 1639.922407][T19936] tipc_sk_join+0x25d/0x6a0 [ 1639.922440][T19936] ? __pfx_tipc_sk_join+0x10/0x10 [ 1639.922467][T19936] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1639.922489][T19936] ? lockdep_hardirqs_on+0x7b/0x110 [ 1639.922521][T19936] tipc_setsockopt+0x73e/0x9a0 [ 1639.922553][T19936] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1639.922585][T19936] ? __fget_files+0x3a8/0x420 [ 1639.922605][T19936] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1639.922624][T19936] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1639.922659][T19936] do_sock_setsockopt+0x17c/0x1b0 [ 1639.922693][T19936] __x64_sys_setsockopt+0x143/0x1b0 [ 1639.922726][T19936] do_syscall_64+0x166/0x520 [ 1639.922753][T19936] ? trace_irq_disable+0x3b/0x140 [ 1639.922775][T19936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.922795][T19936] ? clear_bhb_loop+0x70/0xc0 [ 1639.922819][T19936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.922838][T19936] RIP: 0033:0x7fa5d5f7f559 [ 1639.922857][T19936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1639.922873][T19936] RSP: 002b:00007fa5d41ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1639.922897][T19936] RAX: ffffffffffffffda RBX: 00007fa5d6205fa0 RCX: 00007fa5d5f7f559 [ 1639.922912][T19936] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 1639.922924][T19936] RBP: 00007fa5d6016b20 R08: 000000000000002e R09: 0000000000000000 [ 1639.922937][T19936] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 1639.922949][T19936] R13: 00007fa5d6206038 R14: 00007fa5d6205fa0 R15: 00007ffde7f553e8 [ 1639.922983][T19936] [ 1640.341544][ T36] audit: type=1800 audit(2000000608.188:4761): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=491122 res=0 errno=0 [ 1640.375363][ T36] audit: type=1800 audit(2000000608.216:4762): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=491132 res=0 errno=0 [ 1640.523620][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1641.721449][ T5612] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 1643.526881][T19951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1643.635465][T19941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1643.739329][T19987] netlink: 'syz.3.3136': attribute type 4 has an invalid length. [ 1643.784840][T19987] netlink: 'syz.3.3136': attribute type 4 has an invalid length. [ 1644.133812][T19999] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1644.172246][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1645.714535][ T5612] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 1646.304933][T18631] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1647.371978][T18631] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1647.387868][T18631] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1647.387917][T18631] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 1647.387949][T18631] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1647.387971][T18631] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1647.490230][T18631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.490256][T18631] usb 4-1: Product: syz [ 1647.490271][T18631] usb 4-1: Manufacturer: syz [ 1647.490284][T18631] usb 4-1: SerialNumber: syz [ 1647.556081][T20027] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1647.568627][ T36] audit: type=1800 audit(2000000614.859:4763): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=491244 res=0 errno=0 [ 1647.592392][ T36] audit: type=1800 audit(2000000614.878:4764): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=491276 res=0 errno=0 [ 1647.604070][ T36] audit: type=1800 audit(2000000614.887:4765): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=491251 res=0 errno=0 [ 1647.611993][ T36] audit: type=1800 audit(2000000614.896:4766): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=491252 res=0 errno=0 [ 1647.676470][T18631] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1647.676495][T18631] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1647.676619][T18631] usbserial_generic 4-1:1.0: generic converter detected [ 1647.765736][T18631] usb 4-1: generic converter now attached to ttyUSB0 [ 1647.815787][ T36] audit: type=1800 audit(2000000615.081:4767): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=491273 res=0 errno=0 [ 1648.091650][ T36] audit: type=1800 audit(2000000615.339:4768): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=491274 res=0 errno=0 [ 1648.128459][ T36] audit: type=1800 audit(2000000615.367:4769): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=491253 res=0 errno=0 [ 1648.135229][T18631] usb 4-1: USB disconnect, device number 9 [ 1648.276017][T18631] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1648.286353][T18631] usbserial_generic 4-1:1.0: device disconnected [ 1648.307633][ T36] audit: type=1800 audit(2000000615.542:4770): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=491275 res=0 errno=0 [ 1648.583847][T20047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1648.583874][T20047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1648.583891][T20047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1648.663870][T20047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1648.663894][T20047] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1648.724724][T18631] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1648.884641][T18631] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1648.886054][T18631] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1648.886115][T18631] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 1648.886140][T18631] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1648.886163][T18631] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1648.889509][T18631] usb 4-1: string descriptor 0 read error: -22 [ 1648.889641][T18631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.285105][ T36] audit: type=1800 audit(2000000616.446:4771): pid=20042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=491389 res=0 errno=0 [ 1649.287976][T20045] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1649.323568][T18631] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1649.323620][T18631] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1649.323665][T18631] usbserial_generic 4-1:1.0: generic converter detected [ 1649.337114][ T36] audit: type=1800 audit(2000000616.474:4772): pid=20042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=491418 res=0 errno=0 [ 1649.392004][T18631] usb 4-1: generic converter now attached to ttyUSB1 [ 1649.414947][ T5751] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1649.463935][T18631] usb 4-1: USB disconnect, device number 10 [ 1649.499823][T18631] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 1649.512070][T18631] usbserial_generic 4-1:1.0: device disconnected [ 1649.577441][ T5751] usb 6-1: Using ep0 maxpacket: 32 [ 1649.580041][ T5751] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1649.580097][ T5751] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1649.582481][ T5751] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1649.582504][ T5751] usb 6-1: config 14 has an invalid interface number: 81 but max is 1 [ 1649.582523][ T5751] usb 6-1: config 14 has no interface number 0 [ 1649.582538][ T5751] usb 6-1: config 14 has no interface number 1 [ 1649.582613][ T5751] usb 6-1: config 14 interface 81 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1649.582635][ T5751] usb 6-1: config 14 interface 81 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1649.582711][ T5751] usb 6-1: config 14 interface 81 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1649.582740][ T5751] usb 6-1: config 14 interface 81 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1649.582765][ T5751] usb 6-1: config 14 interface 81 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1649.582793][ T5751] usb 6-1: config 14 interface 81 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1649.582812][ T5751] usb 6-1: config 14 interface 81 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1649.582837][ T5751] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1649.582854][ T5751] usb 6-1: config 14 interface 81 has no altsetting 0 [ 1649.593575][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.593600][ T5751] usb 6-1: Product: syz [ 1649.593614][ T5751] usb 6-1: Manufacturer: syz [ 1649.593627][ T5751] usb 6-1: SerialNumber: syz [ 1649.904497][T20062] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1649.930606][ T5612] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1651.163363][ T5751] legousbtower 6-1:14.57: interrupt endpoints not found [ 1651.432474][T20070] pimreg: entered allmulticast mode [ 1651.541003][ T5751] legousbtower 6-1:14.81: LEGO USB Tower firmware version is 0.0 build 0 [ 1651.557863][ T5751] legousbtower 6-1:14.81: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1651.969398][T20087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3164'. [ 1652.805136][T18730] usb 6-1: USB disconnect, device number 13 [ 1652.890903][T20094] usb 6-1: LEGO USB Tower reset control request failed [ 1652.891258][T18730] legousbtower 6-1:14.81: LEGO USB Tower #-160 now disconnected [ 1653.031647][T20106] fuse: fd is not a fuse device [ 1653.270347][T20110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3173'. [ 1653.663524][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1653.963971][T20119] binder: 20116:20119 ioctl c0306201 0 returned -14 [ 1654.082267][T20124] binder: 20123:20124 ioctl c0306201 200000000080 returned -14 [ 1654.290307][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 1654.290326][ T36] audit: type=1800 audit(2000000621.060:4790): pid=20127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3178" name="nx_huge_pages" dev="sysfs" ino=53727 res=0 errno=0 [ 1655.446631][T20141] fuse: fd is not a fuse device [ 1655.661889][T20147] fuse: fd is not a fuse device [ 1657.352038][ T5612] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 1657.409309][ T36] audit: type=1804 audit(2000000623.865:4791): pid=20180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.3197" name="/newroot/64/file0" dev="tmpfs" ino=347 res=1 errno=0 [ 1657.593320][ T36] audit: type=1804 audit(2000000624.095:4792): pid=20180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.3197" name="/newroot/64/file0" dev="tmpfs" ino=347 res=1 errno=0 [ 1658.219179][ T36] audit: type=1800 audit(2000000624.686:4793): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=491979 res=0 errno=0 [ 1658.473617][T20208] FAULT_INJECTION: forcing a failure. [ 1658.473617][T20208] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.473656][T20208] CPU: 1 UID: 0 PID: 20208 Comm: syz.3.3204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1658.473684][T20208] Tainted: [L]=SOFTLOCKUP [ 1658.473692][T20208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1658.473704][T20208] Call Trace: [ 1658.473712][T20208] [ 1658.473722][T20208] dump_stack_lvl+0xe8/0x150 [ 1658.473760][T20208] should_fail_ex+0x46b/0x600 [ 1658.473791][T20208] should_failslab+0xa8/0x100 [ 1658.473822][T20208] ? ptlock_alloc+0x20/0x70 [ 1658.473847][T20208] kmem_cache_alloc_noprof+0x99/0x680 [ 1658.473873][T20208] ? ptlock_alloc+0x20/0x70 [ 1658.473902][T20208] ptlock_alloc+0x20/0x70 [ 1658.473926][T20208] pte_alloc_one+0x7e/0x380 [ 1658.473955][T20208] __pte_alloc+0x25/0x1a0 [ 1658.473987][T20208] copy_pmd_range+0x4fa7/0x58f0 [ 1658.474053][T20208] ? __pfx_copy_pmd_range+0x10/0x10 [ 1658.474082][T20208] ? __lock_acquire+0x747/0x2de0 [ 1658.474128][T20208] copy_page_range+0xb7b/0x11c0 [ 1658.474176][T20208] ? __pfx_copy_page_range+0x10/0x10 [ 1658.474224][T20208] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1658.474257][T20208] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1658.474283][T20208] ? up_write+0x5a/0x190 [ 1658.474312][T20208] dup_mmap+0xf83/0x1d80 [ 1658.474357][T20208] ? __pfx_dup_mmap+0x10/0x10 [ 1658.474380][T20208] ? reacquire_held_locks+0x117/0x1a0 [ 1658.474405][T20208] ? rt_spin_lock+0x1e2/0x400 [ 1658.474442][T20208] ? lock_acquire+0x115/0x350 [ 1658.474484][T20208] copy_mm+0x115/0x470 [ 1658.474510][T20208] copy_process+0x1ed1/0x44c0 [ 1658.474548][T20208] ? copy_process+0xd17/0x44c0 [ 1658.474589][T20208] ? __pfx_copy_process+0x10/0x10 [ 1658.474614][T20208] ? futex_wake+0x51e/0x600 [ 1658.474643][T20208] kernel_clone+0x2d2/0x8d0 [ 1658.474668][T20208] ? __pfx_kernel_clone+0x10/0x10 [ 1658.474700][T20208] ? do_futex+0x458/0x4e0 [ 1658.474732][T20208] __x64_sys_clone+0x1b6/0x230 [ 1658.474757][T20208] ? __pfx___x64_sys_clone+0x10/0x10 [ 1658.474795][T20208] ? rcu_is_watching+0x16/0xb0 [ 1658.474832][T20208] do_syscall_64+0x166/0x520 [ 1658.474857][T20208] ? trace_irq_disable+0x3b/0x140 [ 1658.474879][T20208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.474899][T20208] ? clear_bhb_loop+0x70/0xc0 [ 1658.474922][T20208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.474940][T20208] RIP: 0033:0x7fa5d5f7f559 [ 1658.474959][T20208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1658.474974][T20208] RSP: 002b:00007fa5d41cdfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1658.474995][T20208] RAX: ffffffffffffffda RBX: 00007fa5d6205fa0 RCX: 00007fa5d5f7f559 [ 1658.475009][T20208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000081000000 [ 1658.475020][T20208] RBP: 00007fa5d6016b20 R08: 0000000000000000 R09: 0000000000000000 [ 1658.475032][T20208] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1658.475042][T20208] R13: 00007fa5d6206038 R14: 00007fa5d6205fa0 R15: 00007ffde7f553e8 [ 1658.475074][T20208] [ 1659.763010][T20220] FAULT_INJECTION: forcing a failure. [ 1659.763010][T20220] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.763051][T20220] CPU: 1 UID: 0 PID: 20220 Comm: syz.3.3207 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1659.763080][T20220] Tainted: [L]=SOFTLOCKUP [ 1659.763088][T20220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1659.763100][T20220] Call Trace: [ 1659.763109][T20220] [ 1659.763118][T20220] dump_stack_lvl+0xe8/0x150 [ 1659.763162][T20220] should_fail_ex+0x46b/0x600 [ 1659.763191][T20220] should_failslab+0xa8/0x100 [ 1659.763220][T20220] ? sk_prot_alloc+0x57/0x210 [ 1659.763251][T20220] kmem_cache_alloc_noprof+0x99/0x680 [ 1659.763274][T20220] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1659.763298][T20220] ? sk_prot_alloc+0x57/0x210 [ 1659.763325][T20220] ? kmem_cache_alloc_noprof+0x3c1/0x680 [ 1659.763354][T20220] sk_prot_alloc+0x57/0x210 [ 1659.763385][T20220] sk_clone+0x7c/0x1080 [ 1659.763420][T20220] sctp_clone_sock+0x31/0x1570 [ 1659.763446][T20220] ? bpf_lsm_socket_post_create+0x9/0x20 [ 1659.763483][T20220] ? sock_create_lite+0x2e4/0x4e0 [ 1659.763511][T20220] sctp_getsockopt_peeloff_common+0x226/0x5f0 [ 1659.763627][T20220] ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10 [ 1659.763665][T20220] sctp_getsockopt_peeloff_flags+0x14b/0x240 [ 1659.763686][T20220] ? __local_bh_enable+0x1e3/0x2f0 [ 1659.763713][T20220] ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10 [ 1659.763740][T20220] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1659.763763][T20220] ? lockdep_hardirqs_on+0x7b/0x110 [ 1659.763795][T20220] sctp_getsockopt+0x3a5/0xb90 [ 1659.763820][T20220] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1659.763845][T20220] do_sock_getsockopt+0x51d/0x7e0 [ 1659.763878][T20220] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1659.763923][T20220] ? __fget_files+0x2a/0x420 [ 1659.763952][T20220] __x64_sys_getsockopt+0x1aa/0x250 [ 1659.763985][T20220] do_syscall_64+0x166/0x520 [ 1659.764008][T20220] ? trace_irq_disable+0x3b/0x140 [ 1659.764029][T20220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.764047][T20220] ? clear_bhb_loop+0x70/0xc0 [ 1659.764069][T20220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.764087][T20220] RIP: 0033:0x7fa5d5f7f559 [ 1659.764105][T20220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1659.764131][T20220] RSP: 002b:00007fa5d41ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1659.764152][T20220] RAX: ffffffffffffffda RBX: 00007fa5d6205fa0 RCX: 00007fa5d5f7f559 [ 1659.764166][T20220] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 1659.764179][T20220] RBP: 00007fa5d6016b20 R08: 0000200000000440 R09: 0000000000000000 [ 1659.764191][T20220] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 1659.764204][T20220] R13: 00007fa5d6206038 R14: 00007fa5d6205fa0 R15: 00007ffde7f553e8 [ 1659.764235][T20220] [ 1659.920069][T20224] FAULT_INJECTION: forcing a failure. [ 1659.920069][T20224] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.920106][T20224] CPU: 0 UID: 0 PID: 20224 Comm: syz.4.3209 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1659.920133][T20224] Tainted: [L]=SOFTLOCKUP [ 1659.920140][T20224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1659.920152][T20224] Call Trace: [ 1659.920161][T20224] [ 1659.920169][T20224] dump_stack_lvl+0xe8/0x150 [ 1659.920202][T20224] should_fail_ex+0x46b/0x600 [ 1659.920230][T20224] should_failslab+0xa8/0x100 [ 1659.920262][T20224] __kmalloc_cache_noprof+0x9c/0x670 [ 1659.920291][T20224] ? init_srcu_struct_fields+0x7f/0xaa0 [ 1659.920341][T20224] ? init_srcu_struct_fields+0x7f/0xaa0 [ 1659.920370][T20224] init_srcu_struct_fields+0x7f/0xaa0 [ 1659.920402][T20224] blk_mq_alloc_tag_set+0x3d6/0x1000 [ 1659.920445][T20224] loop_add+0x436/0xb50 [ 1659.920542][T20224] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1659.920572][T20224] ? __pfx_loop_add+0x10/0x10 [ 1659.920626][T20224] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1659.920660][T20224] loop_control_ioctl+0x12b/0x5b0 [ 1659.920688][T20224] ? __fget_files+0x2a/0x420 [ 1659.920710][T20224] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1659.920740][T20224] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1659.920761][T20224] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1659.920787][T20224] __se_sys_ioctl+0xff/0x170 [ 1659.920813][T20224] do_syscall_64+0x166/0x520 [ 1659.920839][T20224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.920859][T20224] ? clear_bhb_loop+0x70/0xc0 [ 1659.920879][T20224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.920898][T20224] RIP: 0033:0x7fc6bdf7f559 [ 1659.920916][T20224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1659.920932][T20224] RSP: 002b:00007fc6bc1ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1659.920952][T20224] RAX: ffffffffffffffda RBX: 00007fc6be205fa0 RCX: 00007fc6bdf7f559 [ 1659.920967][T20224] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1659.920979][T20224] RBP: 00007fc6be016b20 R08: 0000000000000000 R09: 0000000000000000 [ 1659.920991][T20224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1659.921003][T20224] R13: 00007fc6be206038 R14: 00007fc6be205fa0 R15: 00007ffe6ccfb5f8 [ 1659.921033][T20224] [ 1660.892812][T20247] netlink: 'syz.0.3215': attribute type 1 has an invalid length. [ 1661.020786][T20246] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1661.377793][T20250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1661.389514][T20250] bond1: (slave bond2): making interface the new active one [ 1661.399222][T20250] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1662.650862][T20264] netlink: 12 bytes leftover after parsing attributes in pr ** replaying previous printk message ** [ 1662.650862][T20264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3218'. [ 1662.664682][T20264] [ 1662.680589][T20264] ====================================================== [ 1662.687616][T20264] WARNING: possible circular locking dependency detected [ 1662.695276][T20264] syzkaller #0 Tainted: G L [ 1662.701262][T20264] ------------------------------------------------------ [ 1662.708285][T20264] syz.0.3218/20264 is trying to acquire lock: [ 1662.714367][T20264] ffffffff908486c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1662.722146][T20264] [ 1662.722146][T20264] but task is already holding lock: [ 1662.729509][T20264] ffff888086a18058 (&pipe->mutex){+.+.}-{4:4}, at: splice_to_socket+0x14f/0x1460 [ 1662.738694][T20264] [ 1662.738694][T20264] which lock already depends on the new lock. [ 1662.738694][T20264] [ 1662.749099][T20264] [ 1662.749099][T20264] the existing dependency chain (in reverse order) is: [ 1662.758147][T20264] [ 1662.758147][T20264] -> #5 (&pipe->mutex){+.+.}-{4:4}: [ 1662.765539][T20264] mutex_lock_nested+0x55/0x1d0 [ 1662.770933][T20264] anon_pipe_write+0x292/0x1a90 [ 1662.776325][T20264] __kernel_write_iter+0x453/0x8f0 [ 1662.781984][T20264] __kernel_write+0x106/0x170 [ 1662.787194][T20264] autofs_notify_daemon+0x7aa/0xf60 [ 1662.792986][T20264] autofs_wait+0x11c5/0x18d0 [ 1662.798109][T20264] autofs_mount_wait+0x16b/0x390 [ 1662.803583][T20264] autofs_d_automount+0x64e/0x810 [ 1662.809146][T20264] __traverse_mounts+0x2fe/0x5d0 [ 1662.814615][T20264] step_into_slowpath+0x4ba/0x820 [ 1662.820165][T20264] path_lookupat+0x433/0x8c0 [ 1662.825284][T20264] filename_lookup+0x265/0x5d0 [ 1662.830583][T20264] kern_path+0x3d/0x150 [ 1662.835312][T20264] unix_find_other+0x18d/0xaf0 [ 1662.840710][T20264] unix_dgram_sendmsg+0x72c/0x17e0 [ 1662.846366][T20264] sock_sendmsg_nosec+0x13a/0x180 [ 1662.851937][T20264] ____sys_sendmsg+0x565/0x870 [ 1662.857251][T20264] ___sys_sendmsg+0x2a5/0x360 [ 1662.862467][T20264] __sys_sendmmsg+0x279/0x4e0 [ 1662.867673][T20264] __x64_sys_sendmmsg+0xa0/0xc0 [ 1662.873041][T20264] do_syscall_64+0x166/0x520 [ 1662.878145][T20264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.884549][T20264] [ 1662.884549][T20264] -> #4 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1662.892266][T20264] mutex_lock_nested+0x55/0x1d0 [ 1662.897631][T20264] autofs_notify_daemon+0x797/0xf60 [ 1662.903348][T20264] autofs_wait+0x11c5/0x18d0 [ 1662.908461][T20264] autofs_mount_wait+0x16b/0x390 [ 1662.913910][T20264] autofs_d_automount+0x64e/0x810 [ 1662.919446][T20264] __traverse_mounts+0x2fe/0x5d0 [ 1662.924891][T20264] step_into_slowpath+0x4ba/0x820 [ 1662.930428][T20264] path_lookupat+0x433/0x8c0 [ 1662.935700][T20264] filename_lookup+0x265/0x5d0 [ 1662.940970][T20264] kern_path+0x3d/0x150 [ 1662.945669][T20264] lookup_bdev+0xc8/0x2b0 [ 1662.950509][T20264] resume_store+0x181/0x500 [ 1662.955523][T20264] kernfs_fop_write_iter+0x3a5/0x540 [ 1662.961320][T20264] vfs_write+0x61e/0xbb0 [ 1662.966069][T20264] ksys_write+0x156/0x270 [ 1662.970906][T20264] do_syscall_64+0x166/0x520 [ 1662.976013][T20264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.982412][T20264] [ 1662.982412][T20264] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1662.989609][T20264] mutex_lock_nested+0x55/0x1d0 [ 1662.995005][T20264] kernfs_seq_start+0x5d/0x420 [ 1663.000304][T20264] traverse+0x192/0x620 [ 1663.004973][T20264] seq_read_iter+0xb6b/0xcb0 [ 1663.010078][T20264] copy_splice_read+0x605/0xab0 [ 1663.015449][T20264] splice_direct_to_actor+0x496/0xcc0 [ 1663.021358][T20264] do_splice_direct+0x19b/0x2a0 [ 1663.026769][T20264] vfs_copy_file_range+0xb0e/0x1370 [ 1663.032489][T20264] __se_sys_copy_file_range+0x2fb/0x480 [ 1663.038555][T20264] do_syscall_64+0x166/0x520 [ 1663.043664][T20264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.050067][T20264] [ 1663.050067][T20264] -> #2 (&p->lock){+.+.}-{4:4}: [ 1663.057093][T20264] mutex_lock_nested+0x55/0x1d0 [ 1663.062453][T20264] seq_read_iter+0xa5/0xcb0 [ 1663.067473][T20264] __kernel_read+0x4d3/0x970 [ 1663.072571][T20264] integrity_kernel_read+0x89/0xd0 [ 1663.078201][T20264] ima_calc_file_hash+0x45d/0x8a0 [ 1663.083739][T20264] ima_collect_measurement+0x521/0xa10 [ 1663.089708][T20264] process_measurement+0x1282/0x1c20 [ 1663.095506][T20264] ima_file_check+0xdc/0x130 [ 1663.100609][T20264] security_file_post_open+0xb3/0x260 [ 1663.106494][T20264] path_openat+0x174d/0x2100 [ 1663.111598][T20264] do_file_open+0x23e/0x4a0 [ 1663.116612][T20264] do_sys_openat2+0x115/0x200 [ 1663.121807][T20264] __x64_sys_openat+0x138/0x170 [ 1663.127164][T20264] do_syscall_64+0x166/0x520 [ 1663.132273][T20264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.138681][T20264] [ 1663.138681][T20264] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1663.147364][T20264] mutex_lock_nested+0x55/0x1d0 [ 1663.152732][T20264] process_measurement+0x7e0/0x1c20 [ 1663.158446][T20264] ima_file_check+0xdc/0x130 [ 1663.163642][T20264] security_file_post_open+0xb3/0x260 [ 1663.169525][T20264] path_openat+0x174d/0x2100 [ 1663.174665][T20264] do_file_open+0x23e/0x4a0 [ 1663.179699][T20264] filp_open+0x16d/0x1d0 [ 1663.184473][T20264] kernel_read_file_from_path_initns+0xde/0x1e0 [ 1663.191236][T20264] _request_firmware+0xa2b/0x1750 [ 1663.196850][T20264] request_firmware+0x36/0x50 [ 1663.202069][T20264] reg_reload_regdb+0x95/0x490 [ 1663.207416][T20264] genl_family_rcv_msg_doit+0x233/0x340 [ 1663.213475][T20264] genl_rcv_msg+0x614/0x7a0 [ 1663.218488][T20264] netlink_rcv_skb+0x226/0x4a0 [ 1663.223760][T20264] genl_rcv+0x28/0x40 [ 1663.228251][T20264] netlink_unicast+0x90c/0xac0 [ 1663.233529][T20264] netlink_sendmsg+0x7f0/0xb20 [ 1663.238803][T20264] sock_sendmsg_nosec+0x13a/0x180 [ 1663.244345][T20264] ____sys_sendmsg+0x565/0x870 [ 1663.249629][T20264] ___sys_sendmsg+0x2a5/0x360 [ 1663.254824][T20264] __x64_sys_sendmsg+0x1b7/0x290 [ 1663.260277][T20264] do_syscall_64+0x166/0x520 [ 1663.265389][T20264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.271800][T20264] [ 1663.271800][T20264] -> #0 (cb_lock){++++}-{4:4}: [ 1663.278737][T20264] __lock_acquire+0x164c/0x2de0 [ 1663.284101][T20264] lock_acquire+0x115/0x350 [ 1663.289114][T20264] down_read+0x92/0x200 [ 1663.293811][T20264] genl_rcv+0x19/0x40 [ 1663.298311][T20264] netlink_unicast+0x90c/0xac0 [ 1663.303591][T20264] netlink_sendmsg+0x7f0/0xb20 [ 1663.308867][T20264] sock_sendmsg_nosec+0x13a/0x180 [ 1663.314410][T20264] sock_sendmsg+0x1ca/0x2d0 [ 1663.319424][T20264] splice_to_socket+0xc50/0x1460 [ 1663.324876][T20264] do_splice+0xfb3/0x1a10 [ 1663.329722][T20264] __se_sys_splice+0x353/0x490 [ 1663.335003][T20264] do_syscall_64+0x166/0x520 [ 1663.340114][T20264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.346525][T20264] [ 1663.346525][T20264] other info that might help us debug this: [ 1663.346525][T20264] [ 1663.356745][T20264] Chain exists of: [ 1663.356745][T20264] cb_lock --> &sbi->pipe_mutex --> &pipe->mutex [ 1663.356745][T20264] [ 1663.368913][T20264] Possible unsafe locking scenario: [ 1663.368913][T20264] [ 1663.376351][T20264] CPU0 CPU1 [ 1663.381699][T20264] ---- ---- [ 1663.387046][T20264] lock(&pipe->mutex); [ 1663.391192][T20264] lock(&sbi->pipe_mutex); [ 1663.398199][T20264] lock(&pipe->mutex); [ 1663.404866][T20264] rlock(cb_lock); [ 1663.408662][T20264] [ 1663.408662][T20264] *** DEADLOCK *** [ 1663.408662][T20264] [ 1663.416787][T20264] locks held by syz.0.3218/20264: 1, last CPU#0: [ 1663.423098][T20264] #0: ffff888086a18058 (&pipe->mutex){+.+.}-{4:4}, at: splice_to_socket+0x14f/0x1460 [ 1663.432664][T20264] [ 1663.432664][T20264] stack backtrace: [ 1663.438545][T20264] CPU: 0 UID: 0 PID: 20264 Comm: syz.0.3218 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1663.450017][T20264] Tainted: [L]=SOFTLOCKUP [ 1663.454331][T20264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1663.464372][T20264] Call Trace: [ 1663.467650][T20264] [ 1663.470573][T20264] dump_stack_lvl+0xe8/0x150 [ 1663.475162][T20264] print_circular_bug+0x2e2/0x300 [ 1663.480181][T20264] check_noncircular+0x12f/0x150 [ 1663.485114][T20264] __lock_acquire+0x164c/0x2de0 [ 1663.489961][T20264] ? ref_tracker_free+0x668/0x820 [ 1663.494982][T20264] ? __pfx_ref_tracker_free+0x10/0x10 [ 1663.500354][T20264] lock_acquire+0x115/0x350 [ 1663.504852][T20264] ? genl_rcv+0x19/0x40 [ 1663.509007][T20264] down_read+0x92/0x200 [ 1663.513152][T20264] ? genl_rcv+0x19/0x40 [ 1663.517299][T20264] ? __pfx_down_read+0x10/0x10 [ 1663.522057][T20264] ? netlink_deliver_tap+0x2e/0x1b0 [ 1663.527243][T20264] ? netlink_deliver_tap+0x2e/0x1b0 [ 1663.532435][T20264] genl_rcv+0x19/0x40 [ 1663.536409][T20264] netlink_unicast+0x90c/0xac0 [ 1663.541173][T20264] netlink_sendmsg+0x7f0/0xb20 [ 1663.545934][T20264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1663.551209][T20264] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1663.557616][T20264] ? finish_task_switch+0x40e/0xc60 [ 1663.562805][T20264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1663.568089][T20264] sock_sendmsg_nosec+0x13a/0x180 [ 1663.573106][T20264] sock_sendmsg+0x1ca/0x2d0 [ 1663.577603][T20264] ? __pfx_sock_sendmsg+0x10/0x10 [ 1663.582709][T20264] ? __asan_memset+0x22/0x50 [ 1663.587293][T20264] ? iov_iter_bvec+0xb8/0x180 [ 1663.591961][T20264] splice_to_socket+0xc50/0x1460 [ 1663.596897][T20264] ? __pfx_splice_to_socket+0x10/0x10 [ 1663.602269][T20264] ? bpf_lsm_file_permission+0x9/0x20 [ 1663.607630][T20264] ? security_file_permission+0x75/0x260 [ 1663.613259][T20264] ? rw_verify_area+0x209/0x4d0 [ 1663.618100][T20264] ? __pfx_splice_to_socket+0x10/0x10 [ 1663.623465][T20264] do_splice+0xfb3/0x1a10 [ 1663.627791][T20264] ? __fget_files+0x2a/0x420 [ 1663.632375][T20264] ? __pfx_do_splice+0x10/0x10 [ 1663.637124][T20264] ? __fget_files+0x2a/0x420 [ 1663.641701][T20264] ? fdget+0x1b2/0x250 [ 1663.645759][T20264] __se_sys_splice+0x353/0x490 [ 1663.650514][T20264] ? __pfx___se_sys_splice+0x10/0x10 [ 1663.655801][T20264] ? __x64_sys_splice+0x21/0xf0 [ 1663.660641][T20264] do_syscall_64+0x166/0x520 [ 1663.665225][T20264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.671278][T20264] ? clear_bhb_loop+0x70/0xc0 [ 1663.675946][T20264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.681826][T20264] RIP: 0033:0x7f113e16f559 [ 1663.686233][T20264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.705835][T20264] RSP: 002b:00007f113c3be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1663.714260][T20264] RAX: ffffffffffffffda RBX: 00007f113e3f5fa0 RCX: 00007f113e16f559 [ 1663.722227][T20264] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1663.730191][T20264] RBP: 00007f113e206b20 R08: 0000000000003000 R09: 100000000000000d [ 1663.738155][T20264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1663.746114][T20264] R13: 00007f113e3f6038 R14: 00007f113e3f5fa0 R15: 00007ffecc787038 [ 1663.754083][T20264] [ 1663.885361][T20264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3218'.