last executing test programs: 9m10.82244686s ago: executing program 1 (id=1093): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff80000000000000000000000000007f", 0x40}, 0x48, r0) r1 = socket(0x3a, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000580)={0x18, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000002180)={0x2020}, 0x2020) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @empty, 0x2}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x0, 0x30, 0x30, 0x31, 0x30, 0x65, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x37, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x35, 0x30, 0x30, 0x65, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x2caac0, 0x98) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x50) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x65, 0x30, 0x63, 0x34, 0x30, 0x63, 0x35, 0x63, 0x33, 0x30, 0x30, 0x35, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff001122334455767788998abbcdddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r0) 9m10.675192851s ago: executing program 1 (id=1095): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0036a0a8c70cae11689d9bddf5b0fbf794ef992a7f0818b971c84accaeef"]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket$igmp(0x2, 0x3, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x4) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@FILEID_INO32_GEN={0x8, 0x1, {0xc0000000, 0xd7}}, &(0x7f0000000280), 0x1000) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x6) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0xffffffffffffffda, r1, {0x7, 0x29, 0x2, 0xffffffff9080edc4, 0x0, 0x5, 0x7, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) 9m9.754464263s ago: executing program 1 (id=1111): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040050ec472000000000001090224000100000001090400080203000300092100000001221800090581030004000000"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000010}, 0x8000) 9m7.626219185s ago: executing program 3 (id=1132): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 9m7.436004375s ago: executing program 3 (id=1136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x2, 0x0, @vifc_lcl_addr=@remote, @dev}, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x3, 0xff, @vifc_lcl_ifindex, @empty}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000009f6000f9ff00000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRES8=r3], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000a00)) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000e80)={{0xffffffffffffffff, 0x0, 0x200000, 0x0, 0x1f4, 0x0, 0x0}, {[0x0, 0x6c, 0x4, 0x7f]}, 0x8a0d, 0x0, 0x0}) 9m6.65859778s ago: executing program 1 (id=1145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 9m6.622857558s ago: executing program 1 (id=1146): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0x87000000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e27, @empty}, @in={0x2, 0x100, @local}}}, 0x118) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r4, 0x2007) write(r0, &(0x7f0000000100)='file read /etc/passwd /as/\\-id=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/60, 0x3c) 9m6.503526958s ago: executing program 1 (id=1148): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01000000da74fe7c21332d4d6407020000000000000000e8d80000303c5d006349586c023290b8121a93f0e103764a80e4db0ce024e1cec678fe607bc5bdcb4183c31392fd280e178a34c71ec00f3d1c14730c4e45ddcd261c00581528c7cb00a4ef2ece0cb99bbd6ec07c8e8d8906be2150192a12df485ded5366bede10a61417c1f57f7be9aa8b8941a9db1c63c652b4a9a3442a7c900034691733eaa02a9d56d5bc95925ddcc2a3da534b60fed5b6ff0f9346b2a9f1f069e1d5f53ee9eebd6c8d59c6f3574eb7"], 0x14}}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r5, 0x301, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote}, 0x1c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r7) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, 0x2, 0x107fd, 0xc}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x5c, @local}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) 9m4.365745793s ago: executing program 3 (id=1155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 9m4.294254517s ago: executing program 3 (id=1156): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000048c0)="04e9", 0x2}], 0x1}}], 0x1, 0x4000001) r3 = dup(r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x2, 0x5, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x80000001, @remote, 0x3}}, @sadb_sa={0x2, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1}]}, 0x60}, 0x1, 0x7}, 0x20000030) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r0, 0x8de13c6b70ae92c3, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x5}, {0x0, 0x4000000000004, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0xffffffff, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 9m4.158670444s ago: executing program 3 (id=1158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0x87000000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e27, @empty}, @in={0x2, 0x100, @local}}}, 0x118) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r4, 0x2007) write(r0, &(0x7f0000000100)='file read /etc/passwd /as/\\-id=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/60, 0x3c) 9m4.014246787s ago: executing program 3 (id=1159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd0500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 9m3.223780499s ago: executing program 0 (id=1164): get_mempolicy(0x0, 0x0, 0xe, &(0x7f0000fec000/0x1000)=nil, 0x74a9a0d4687c6ab1) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x42001, 0x60) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) 9m2.95634029s ago: executing program 0 (id=1165): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="d130bcd78905a34c4299ebdc", @ANYRES16=r4, @ANYRES64=r4, @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f00000003c0)={0x76764d6d, 0x2, 'client1\x00', 0x0, "a37a95b2119d50d5", "e233eb089bb3a78d7edbca467029d242286643488f15215f4704b547299917f7", 0x7, 0x1}) r6 = socket(0x10, 0x2, 0x0) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 9m2.881403697s ago: executing program 0 (id=1166): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84553bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e4a83765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10500b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c7dcd6b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f4f1fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x4, 0x10000000000d08, 0x4, 0x2, 0x4, 0xc, 0x7, 0x7fffffff, 0x122, 0x6000, 0x10, r5, r6, 0x982}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) utimes(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x2710}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x808000}, 0x8) r8 = socket(0x40000000015, 0x5, 0x0) setns(0xc9, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="55c3422d944da1930496dd70212c9a00000000", @ANYRES16=r10, @ANYBLOB="010028bd7000f9dbdf252600000008000300", @ANYRES32=r11, @ANYBLOB="1e009400100001c34ea93e0000000002000500170000000600faffffff0f000004003400"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) setsockopt$sock_int(r8, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r8, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001140)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r13, r12, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000009c0)=[@acquire], 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/93, 0x5d}], 0x1, 0xffffffff, 0x0) 9m1.989443596s ago: executing program 0 (id=1167): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000048c0)="04e9", 0x2}], 0x1}}], 0x1, 0x4000001) r3 = dup(r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x2, 0x5, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x80000001, @remote, 0x3}}, @sadb_sa={0x2, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1}]}, 0x60}, 0x1, 0x7}, 0x20000030) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r0, 0x8de13c6b70ae92c3, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x5}, {0x0, 0x4000000000004, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0xffffffff, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 9m1.876957465s ago: executing program 0 (id=1168): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0x87000000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e27, @empty}, @in={0x2, 0x100, @local}}}, 0x118) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r4, 0x2007) write(r0, &(0x7f0000000100)='file read /etc/passwd /as/\\-id=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/60, 0x3c) 9m1.70372316s ago: executing program 0 (id=1169): mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 8m50.68117839s ago: executing program 32 (id=1148): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01000000da74fe7c21332d4d6407020000000000000000e8d80000303c5d006349586c023290b8121a93f0e103764a80e4db0ce024e1cec678fe607bc5bdcb4183c31392fd280e178a34c71ec00f3d1c14730c4e45ddcd261c00581528c7cb00a4ef2ece0cb99bbd6ec07c8e8d8906be2150192a12df485ded5366bede10a61417c1f57f7be9aa8b8941a9db1c63c652b4a9a3442a7c900034691733eaa02a9d56d5bc95925ddcc2a3da534b60fed5b6ff0f9346b2a9f1f069e1d5f53ee9eebd6c8d59c6f3574eb7"], 0x14}}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r5, 0x301, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote}, 0x1c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r7) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, 0x2, 0x107fd, 0xc}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x5c, @local}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) 8m48.452418198s ago: executing program 33 (id=1159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd0500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 8m45.760876668s ago: executing program 34 (id=1169): mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 7m13.565775895s ago: executing program 4 (id=1627): fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) (async) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) syz_usb_connect$uac2(0x3, 0x98, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000140)=@string={0x4, 0x3, "fcf5"}}]}) 7m10.478798605s ago: executing program 4 (id=1646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x2, 0x0, @vifc_lcl_addr=@remote, @dev}, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x3, 0xff, @vifc_lcl_ifindex, @empty}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000009f6000f9ff00000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRES8=r3], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000a00)) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000e80)={{0xffffffffffffffff, 0x0, 0x200000, 0x0, 0x1f4, 0x0, 0x0}, {[0x0, 0x6c, 0x4, 0x7f]}, 0x8a0d, 0x0, 0x0}) 7m7.404101131s ago: executing program 4 (id=1663): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x1, 0x10, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeef0000, 0x2011c0}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a30"], 0x30}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000380)='\xb4d\xafm\x8b\xc1\x9e\x84\xe8\xd3W`\xe4U\xa3\xd79A\xae/!c\x8b\x9e\xd8\x99\b\x98', 0x88480, &(0x7f0000000080)={@align=0x2477a0fc, {0x7, 0x4, 0x2, 0xa63}}, 0x10, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x6}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x2, 0x0, @pic={0xbf, 0x5b, 0x3, 0x0, 0xd7, 0xff, 0x1, 0x3, 0x9, 0x9a, 0x5, 0x1, 0x8, 0x2, 0xfe, 0x3}}) r2 = socket(0x10, 0x3, 0xfffffffd) r3 = socket(0x2c, 0xa, 0x7fffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x8f, 0x14d382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfff, 0x9}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt(r1, 0x1, 0xb, 0x0, &(0x7f0000000200)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000000)={0x79}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000001c0)=0x1fff) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x124, 0x25, 0x8, 0x70bd25, 0x25dfdbfb, {0x13}, [@generic="6012c5eb554e42cd4f4de263a7a576c95a76f21f3ba67781bbae0be41a9334823c2d77a83cca45d4c300ea791ab11c15f22da3ec67c422a1ce41f18637ed976379a6400150962607066d6e5df6f13597b0e072700dfb1bb03dcc793974d6bf9599ef5daf75d6ebea2fcb43bf07648308e873f20bbdc81a9638e40ad700f6b5a79d2ecc6ef43ed821064d150b99d9fc543214f23bb7306e640c983b31363bb0d125ed6646da6d29158cfd3bb4dd72340fb857225912fbfbe8fc608587c14c2666f4d52c4488432583145540b17b2196a5a287d532daa4917ba7465eda86048d74e98900f106ed98bfe1bd05aa", @nested={0x22, 0x76, 0x0, 0x1, [@nested={0x4, 0x94}, @generic="3e6816c459b536f3b7e81a4eacbe140b67a5", @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') utimensat(r7, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x56, &(0x7f00000005c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}, {&(0x7f0000000480)={0x0, 0x2f, 0x300, 0x70bd29, 0x25dfdbfc, "", [@generic="34a44e29da151e8ed075172d68a05b564750e35373c09eb0d53ed90b636d8cdd46f0546f2cc0464fb5ff6ead36578832028931e59276806ddb86857bf22531f0ee7933dae84a8fb817b3af1c5f6a4948bca16e5b8db4767945d12826b64a318d01cce1847d0dbb899760de244036ee6d7426e77e096a9666", @generic="1c5f9b1947266d060710c4854d22a7813795efc86831d3e741859cd64fcffc219b9a4d42f0f403aa8ede9196d2cc97b43778fab2f9dab1b63c75be6391fdc0fcddf9da38a1884c6d0ba76b84e63911fee65d8829e3cccb9012d4019e7af9154aabfbeb49b749c875a799a97dc151c181675d8e77e5e4620d9f327b3c9fd1df544c"]}}], 0x1}, 0x0) 4m55.070658699s ago: executing program 5 (id=2343): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:[:/\x00', 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188041d80ec59acbc0413a10048140000005e140602000000000e000a000f000000fe800000121f", 0x2e}], 0x1}, 0x0) 4m54.948811335s ago: executing program 5 (id=2345): syz_usb_connect(0x2, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0xe8, 0xfd, 0xd, 0x8, 0x1410, 0xa006, 0xf74e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x5, 0x3, 0x60, 0x2, "", [{{0x9, 0x4, 0x59, 0x0, 0x0, 0xab, 0xb, 0x45, 0x8}}, {{0x9, 0x4, 0x2d, 0xff, 0x0, 0x9d, 0xc0, 0xc5, 0x9}}, {{0x9, 0x4, 0x1a, 0x8, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff000705810240000007050102400000070582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 4m53.464299398s ago: executing program 5 (id=2350): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statfs(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8001) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0xc) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) 4m52.473021352s ago: executing program 5 (id=2358): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0xe9db8df3, @local, 0x2}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) ioctl$SNDCTL_TMR_START(r3, 0x5402) ioctl$SNDCTL_TMR_TEMPO(r3, 0xc0045405, &(0x7f0000000100)=0x2d) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x5) write(r0, &(0x7f0000000700)='1\n', 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="42d47a10067f7523fe817d45f09f2037c99b6f52aac83fae191cc05418442f5b9947e42a061c24fe9dbdfc52e87891b756ca88202dc686f222323b57443920c986c188329b44f1846a18de74cf7ab1a92ee9a40ffcaf8624435d2cf76f5b2f42cf47c33b0f448e", @ANYRESOCT, @ANYRES8, @ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x0) 4m52.149726299s ago: executing program 5 (id=2359): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x38, 0xd, 0xffffffffffffffff) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r5 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r5, 0x81, 0x8, &(0x7f0000000080)="00000000b3000000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 4m51.508597536s ago: executing program 36 (id=2359): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x38, 0xd, 0xffffffffffffffff) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r5 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r5, 0x81, 0x8, &(0x7f0000000080)="00000000b3000000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1m18.104522276s ago: executing program 8 (id=3782): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff80000000000000000000000000007f", 0x40}, 0x48, r0) r1 = socket(0x3a, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000580)={0x18, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000002180)={0x2020}, 0x2020) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @empty, 0x2}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x0, 0x30, 0x30, 0x31, 0x30, 0x65, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x37, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x35, 0x30, 0x30, 0x65, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x2caac0, 0x98) write$FUSE_DIRENT(r4, &(0x7f0000000480)=ANY=[], 0xfd72) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x50) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x65, 0x30, 0x63, 0x34, 0x30, 0x63, 0x35, 0x63, 0x33, 0x30, 0x30, 0x35, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff001122334455767788998abbcdddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r0) 1m17.91704387s ago: executing program 8 (id=3785): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) (fail_nth: 5) 1m17.616508386s ago: executing program 8 (id=3787): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 1m17.536685381s ago: executing program 8 (id=3788): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'wlan0\x00', 0x700}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'wlan0\x00', 0x1}) (async) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x1000) writev(r1, &(0x7f00000008c0)=[{&(0x7f00000006c0)="d04e1145a468955e8d08cbdcf0111921cae41c242910383fd8200943c9bd8f260b248bf90d488dbec9ed9992907d61b88b34e473a31ed1daee75de89e76b14db89c8f6b3b83108df158fbfa6735015ee1c34ab697035a5153112f4fc579dd4b0cdfb31ee6cadc2dfcc002a1fd45e95000dd2b9814350f1a68fa46fc934f4ae792280058e04b4b3b7227426609956d632e897a4c93c55db60030cad1c1bcb4a15b3aae4497d9f3e7d2d3e75abacfd16d60b38aee91f923ed8574257310472d8bcdc69b2c0257eec441e227995002ad34e76512d7d6f4e", 0xd6}, {&(0x7f0000000880)="cea28268d4bde37ec4c9a2057ee229c16154ade7c42a6daea64e8af83fb056", 0x1f}], 0x2) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) umount2(0x0, 0x8) (async) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01082abd70000cdcdf255100001008000300", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20060080}, 0x10) (async) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 1m17.288972518s ago: executing program 8 (id=3789): r0 = syz_open_dev$radio(0x0, 0x0, 0x2) ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x1200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x2}, {r0, 0x391}, {0xffffffffffffffff, 0xa000}, {0xffffffffffffffff, 0x1300}, {0xffffffffffffffff, 0x56}, {0xffffffffffffffff, 0x8}], 0x8, &(0x7f0000000380), &(0x7f00000003c0)={[0x7]}, 0x8) 1m16.724023815s ago: executing program 8 (id=3790): r0 = syz_ublk_setup_io_uring(0xe0, &(0x7f0000000500)={0x0, 0xf8c8, 0x80, 0x2, 0x162}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) ppoll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r5, 0x801, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x6, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x21, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x22, 0xcf5, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x8}}}, &(0x7f0000000940)) 1m16.020473902s ago: executing program 37 (id=3790): r0 = syz_ublk_setup_io_uring(0xe0, &(0x7f0000000500)={0x0, 0xf8c8, 0x80, 0x2, 0x162}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) ppoll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r5, 0x801, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x6, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x21, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x22, 0xcf5, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x8}}}, &(0x7f0000000940)) 13.252449749s ago: executing program 6 (id=4130): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x101, 0x0, 0x5b2, 0x207f}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 13.217281212s ago: executing program 6 (id=4132): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x40, 0x2e, 0x69, {0x69, 0x30, "092659d27f36a4689ccf1be841558967fb9e5c3b749775539c465129e389a8ce117b2f28c3d40fc6f5b9a0cb1d24b65c73f1a8a790ab84fbfa8676533ec084e38c68cb8c7e5fe2c874a5b869996e049fd6c93fe3da09efb93920ee6cce56476a6b78db847675af"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x1, 0x15, "0008af1c92262482cb12a2a2cdbbb9302658443dac"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x73}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x81, 0x3, "a5ab7f"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "86"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "ee145e"}, &(0x7f0000000440)={0x20, 0x84, 0x3, "da4cef"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "9faff3"}}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="12", 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10.05238848s ago: executing program 6 (id=4141): fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb0e8e7832cd2fa09}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x200, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002ff040140861246200001010203010902200001010080fa0904000002ff0401000705810200020007050102003325a86533f1498b9d3b465bf14e6258c04a2463ff94d3b212393583bf3a6c99bef8ba0cb789243ddf1e55da2a26c943be71916e7a"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRES64=0x0], 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x40, 0x3, 0x0, 0x1, 0x0, 0x4}, {0x2, 0x3, 0x8, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0xfffffffd, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x1000, 0x3, 0x0, 0xb9, 0x2, 0x8000000}}, 0xe4) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) eventfd2(0x0, 0x800) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001200)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x0) write(r1, &(0x7f0000000140)="e1ff0300e187927bc1", 0x9) 6.981880483s ago: executing program 6 (id=4149): epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0x1]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x2000, 0x3000003, 0x12, r0, 0x10000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$sock_int(r0, 0x1, 0x71, &(0x7f0000000040)=0x7fffffff, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5cab0000090601080000000000000000050000020900020073797a3100000000050001000700000034000780060004404e21000005000700550000000c000180080001400000000008000840000000210c00148008000140ffffffff"], 0x5c}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 6.41708678s ago: executing program 6 (id=4150): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x0) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_usb_disconnect(r3) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0) r4 = fanotify_init(0x200, 0x0) r5 = socket$inet6(0xa, 0x1, 0x10000006) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r5, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) pwrite64(r6, 0x0, 0x0, 0xffff) close(r5) fsetxattr$system_posix_acl(r4, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000340)=0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xb9e0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000200)={r8, 0xe7, "aca9ccf610e7348a8d8b102635d9bc83c3c31ab17ccf38ed7fffa73c51f17004cd4cc84bbdf41705b2aae0390c9908f5aafa989c0402dcebad6784c6ee76186d677d6cd8bcd22347fae1a002f46ae3069aeb75599c048062d5ae0751d2ee515af353afe53f31d0a3b13ba6b1f7d41d21db2a819136d609b4dc2aacc17634351ec7af2275af1d5c303360a57ddc30162a722bf04ccf431a1f6dd062bbae8306947ed4a80d97c27fcc11e6a4dee533e34906e88ee16abe5896e12661bb0be3b34fb46dea9ba1cf8dfb1ec9559595a362c8dceb1ab20a17c14ec287d3005a801e302330cea03511d3"}, &(0x7f0000000380)=0xef) 4.772460697s ago: executing program 9 (id=4152): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0x9, {0x0, 0x1}, {0x52, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xf, 0xfff9}, {0x6, 0x5, 0x1, 0x48, 0x2}]}) write$char_usb(r0, 0x0, 0x0) 4.641281556s ago: executing program 9 (id=4154): r0 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r0, 0x0) 4.60317639s ago: executing program 9 (id=4155): r0 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r0, 0x0) (fail_nth: 1) 4.491284679s ago: executing program 9 (id=4156): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) 4.35147023s ago: executing program 9 (id=4158): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) (fail_nth: 1) 4.120260246s ago: executing program 9 (id=4159): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x40, 0x2e, 0x69, {0x69, 0x30, "092659d27f36a4689ccf1be841558967fb9e5c3b749775539c465129e389a8ce117b2f28c3d40fc6f5b9a0cb1d24b65c73f1a8a790ab84fbfa8676533ec084e38c68cb8c7e5fe2c874a5b869996e049fd6c93fe3da09efb93920ee6cce56476a6b78db847675af"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x1, 0x15, "0008af1c92262482cb12a2a2cdbbb9302658443dac"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x73}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x81, 0x3, "a5ab7f"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "86"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "ee145e"}, &(0x7f0000000440)={0x20, 0x84, 0x3, "da4cef"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "9faff3"}}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="12", 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.312197146s ago: executing program 6 (id=4163): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80010a0}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x94, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'statm\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '{/(+}'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'wfdno'}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0xd0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c76657273d36f6e3d3970323001302c00"]) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x84000800}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8}, 0x101) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000100)="67400f00d9440f381c730866baf80cb838b97a83ef66bafc0c66b8000066ef430f005f000f01f865400f01c5c7442400bdc70000c7442402f7670000c7442406000000000f011c24c744240004000000c744240200580000ff1c2466baf80cb8ec337087ef66bafc0c66edb9260b00000f32", 0x72}], 0x1, 0x55, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000787134088106050041d81200010707100009"], 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000020900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000040)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4004880) (async) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x15, 0x5, 0x1, 0xea, 0x5e, 0xf0, 0xfe, 0x5b, 0x80, 0x11, 0x4, 0xc, 0x1, 0x6, 0x10, 0xa8}}) (async, rerun: 64) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r7, @ANYRESHEX=r8], 0x15) 2.345002998s ago: executing program 7 (id=4171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) pipe(&(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.096663508s ago: executing program 7 (id=4172): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ptrace(0x10, r0) ptrace$poke(0x1, r0, 0x0, 0x6) 2.075643637s ago: executing program 7 (id=4173): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0xffefffff, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) 2.029360339s ago: executing program 7 (id=4174): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./dev/sda\x00', &(0x7f0000000040)='mqueue\x00', 0x10009, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x84042, 0xc2) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) (async, rerun: 64) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) (async, rerun: 64) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x0, 0x31, 0xb2, {0xb2, 0x23, "bf39bfe462c6297f7e4a866b2949b3e6babae93acbb20dada57b73c6681fe03a33831283fe37888c53fc0b00a6bcc9a20e49178657411f3116e5ed7fdd2899855b82b8b23c1aebc53e253739c22a81180ad891b5b4626fff2d5e7c7cc14ffcca484df4d9cd4fbe2d2653eb53b00951b3bf57d1ca6cb28458e85ad89d366384352730f5e89745ec8ccb4e51fdbd3e667106ca042e105ecafe0c43b1cff29028ea4f1004c5e6b80a37b14c720aeae02bef"}}, &(0x7f0000000280)={0x0, 0x3, 0xa6, @string={0xa6, 0x3, "fcf950e03080d45df243066f1f36b872667f840c56792aa806f388f6ced4b70bb2072ec9f031d8744ae7d0ce3b41512d89e46df7cde8b01df00f8b74411579c3ac998877c318b0e41924e3a64daa32a829a37f9c479fd053df03a50bd646bc001b0c58a495e89c03cf7565a805fee01e7f9b0b33e35c52ee31f706bb3d8f096bf500dd12a6a8a65a4fe26eaee2ccb74caefe6b6a59153812cbe90ba7f0df13bd5cef08f4"}}, &(0x7f0000000340)={0x0, 0xf, 0xd7, {0x5, 0xf, 0xd7, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x1, 0x1, 0x2, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xa, 0x0, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x8, 0xb1, 0x7}, @generic={0xa2, 0x10, 0x3, "8da55fca07790a747f3458e315a67f69f8e82d52aea151bbf457d0f13d1adc936572b64b3686f0326c1d879087d54c5282131bd53c585af2c6db0228368494c1888d273878cf5b098ad86e685ac5382cb450d5c83817a5f0c58ddc6551a084c81eca519e0d34933858587dc8827432cc8e7de45690e15669d88ef2ade24f2ec6573faebf03019a996b8e4a5ec9e7568a81f249742009a8da2ea94467d441da"}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "67509f192e16556830c1bc8ea25c8447"}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x64, 0x6, "17377ee2", "1c0afd45"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x80, 0x70, 0x8, 0xa4, 0x4f98, 0x6}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x20, 0x6, 0x52, "c437750037683edc8faaa6654dcbacec6bf5c3367f506bdfb72cfb21d51f4e78a79171b6681b2917181dbb2d8b556d8e568934608de0263985e2e0c2241ccf808d1169bea70dd6c19e0ffaf7a420cd2cb8b0"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x1c00, 0x80, [0xff0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac80"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "9df9"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x1c, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xff}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x50, 0x2, 0x3, "bc57490002000000000000000700000000000000000000e9df4b9500", 0x31324d4e}) (async, rerun: 32) syz_usb_control_io$printer(r1, 0x0, 0x0) (async, rerun: 32) setitimer(0x0, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000a00)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 1.208690405s ago: executing program 2 (id=4175): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x34090000) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0xffefffff, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) 752.467891ms ago: executing program 7 (id=4176): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) 734.927028ms ago: executing program 7 (id=4177): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x80480, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x8b, 0x5f, 0xffffffffffffffff}) syz_usb_connect$midi(0x1, 0x59, &(0x7f0000000080)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1059, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x6, 0x20, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0x3, [@ms_header={0x7, 0x24, 0x1, 0xe98, 0x7}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x9, 0x0, [], 0x81}], [{{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x8e, 0x5e, 0x1, {0x4}}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x9, 0x0, 0x0, {0x4}}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x0, 0xfe, 0x7, {0x4}}}]}}}}}]}}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x80480, 0x0) (async) fcntl$lock(r0, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x8b, 0x5f, 0xffffffffffffffff}) (async) syz_usb_connect$midi(0x1, 0x59, &(0x7f0000000080)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1059, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x6, 0x20, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0x3, [@ms_header={0x7, 0x24, 0x1, 0xe98, 0x7}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x9, 0x0, [], 0x81}], [{{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x8e, 0x5e, 0x1, {0x4}}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x9, 0x0, 0x0, {0x4}}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x0, 0xfe, 0x7, {0x4}}}]}}}}}]}}, 0x0) (async) 265.756155ms ago: executing program 2 (id=4178): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x101, 0x0, 0x5b2, 0x207f}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 227.345413ms ago: executing program 2 (id=4179): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, 0x0) 192.831425ms ago: executing program 2 (id=4180): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x169802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r2 = dup(r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000980)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0xe9, 0x9, 0x7}]}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x3, 0x7fff}, 0x8) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x11, r2, 0xf2169000) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x1000000010) ioctl$BLKRRPART(r2, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) 8.239091ms ago: executing program 2 (id=4181): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x20000000000004}}) 0s ago: executing program 2 (id=4182): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88c0, 0x179) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x24) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0xfffffffffffffffb, 0x0) ioctl$EVIOCGLED(r2, 0x80284504, 0x0) close(r1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40043, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000003340)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0/file0\x00'}) read$FUSE(r4, &(0x7f0000003380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000053c0)={{0x1, 0x1, 0x18, r4, {0x0, 0xee00}}, './file0\x00'}) sendmmsg$unix(r1, &(0x7f00000056c0)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)="41786ef0e194eb87878a60907c1ba3e4d3703f7e76a5d78f", 0x18}, {&(0x7f00000003c0)="7360b4048aeb5e22f924d5059ccd7b8d31", 0x11}, {&(0x7f0000000400)="c1", 0x1}], 0x3, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x1c, 0x1, 0x1, [r4, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x60, 0x44084}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000800)="6baee3ce4e60ac887bc6f76506004639d96331265dbb5e6c52d7877d868d785ace87e812f20d3b9ade1a56d2fabe8a407cca84f9d250a88218e757ebf40b5e682c875f1b523de09b4eceaf9a5f397e11a78ca24d578ab44dce597e43001abcb2f0174447cbdeb71b7fc183eab17530f55ece15348cf227aa60162f0f32ea27", 0x7f}, {&(0x7f0000000880)="f8c70b5120089a079960868a2d19763ebc68f4955f70cf6e952a425b430d3842f3d8ea3b157fa2cd9bb138af7d2eb97bec06e1ba5aa7445130becd7f05a10c5ef60609e47984cbe1d0b2451026c880b83bbc4a0ac5f2c4819d143c21db2e7a0563a884d87ef570c81da700eecd12185883fe389f7b01f6a9e989bebacbac98699d2b55ae7cb07852be1a93d10de7f3169b208e790d922d7ed034ecbe88c51cdf9b66f737daeae4871b11c2a15c215e82f33ee9426754f1dccf901d0551a5c1892a9d6c6bd9d1f5b25fadc1558299cf432ea3f34e73e76f0cbf007e19f993e60e86bc9310d9e348a31f", 0xe9}, {&(0x7f0000000980)="5a79566623b67f30f9f63b6ee656890fab4e1b68444b2674ab1709ee1f9b87e7f7293a47459f783f195f56336938758cb2910e11d6cd45673aa3bcdc6122f0744146cd3c53a5276877516f5051621108e89eaa01604188714e2f5f0e109422dfb2fd", 0x62}, {&(0x7f0000000a00)="bd52e2e7e65f73132baf385e5d67c890cb83efa6b0b781f8a73dd704935a945372f4db963d920519bf5e602aea3b4dc7c50a48b5715520d20a9e4ede0f362c419eea0cbe0b3d1050b1ca0ebcdd6fd799084cf255f43c345f", 0x58}, {&(0x7f0000000a80)="de3b18957ea641674b819867c44d6b3b520e0bfc97436af601c44606e89de145dd1df00364b5546f89286c25b436f4e0d5ed47b3127d049fd6eead6771c501c453d3f71734e478f17c2bbbd020a6d724bd28003f7916c3bbcbd8119240e114134f27189f62179bcff7c3ff61da14a6e64f23b1996298dd59db682d05cdc972f49e591eb15e2d57f9b408fc3a20623cad27325d12831f84de84f612f33b02d841fd466cbf35ec34b01baf458e", 0xac}], 0x5, &(0x7f0000000d80)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r6}}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x78, 0x5}}, {{&(0x7f0000000e40)=@file={0x1, './file1/file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000ec0)="7ebf", 0x2}, {&(0x7f0000000f00)="b50ec43b454e6a678efad0e2e6f7f76e308fa658adf275868e2fb963e71f42400000000000000003e3d4a1f680896fb2927d101b52dc61b2d6e2e24734451baaf37d", 0x42}], 0x2, &(0x7f0000005400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000006b3d3666d7c75e001c0400000000000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x24004081}}, {{&(0x7f0000005500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005680)=[{&(0x7f0000005580)="cba24427a76edc5f4b6511a0a7038867d17b6976ac36622b197153766a79e3bbf0cef2cf554aa629dc63e09e3c5771d61e1373148f4e05d0e0912d7145d68b45718d6f8a41dee1831805cf2b5acab6e4e198bdec2657321ab2f5c3dc56edc86bf022669cdc29a4174ce697c77e411ae364e4f7ce15563dc87678ed0112f27fd7b0ce59f3a2b979e7142465aaca553f0f68ed5d", 0x93}, {&(0x7f0000005640)="ddaa902aec707f220a3c4255c6c6c169ab483093af3b773de381c6940cad4f0ad4faff0a1db0d08f748deeb475e1dddab04c", 0x32}], 0x2, 0x0, 0x0, 0x40}}], 0x4, 0x4000) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) read(r4, &(0x7f0000001240)=""/4096, 0x1000) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) close(r4) r12 = inotify_init1(0x0) readv(r4, &(0x7f0000000580)=[{&(0x7f0000000280)=""/89, 0x59}], 0x1) r13 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) r14 = fsmount(r13, 0x0, 0x1) fchdir(r14) r15 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r15, 0xfffffffffffffffc, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r11, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESOCT=r12, @ANYRESHEX=r16]) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.7.3957'. [ 694.014875][ T10] usb usb3-port1: unable to enumerate USB device [ 694.965787][T17931] (syz.6.3959,17931,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 694.965840][T17931] (syz.6.3959,17931,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 695.068761][T17933] aa_policy_admin_capable: cap_mac_admin? 1 [ 695.068809][T17933] aa_policy_admin_capable: policy locked? 0 [ 695.068953][T17933] unpack_pdb: unpacking tags [ 695.068963][T17933] unpack_pdb: done unpacking tags [ 695.068991][T17933] unpack_pdb: unpacking tags [ 695.069000][T17933] unpack_pdb: done unpacking tags [ 695.075029][ T31] audit: type=1400 audit(1787857995.284:188): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=17932 comm="syz.9.3961" [ 695.453584][ T189] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 695.465156][T16292] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 695.516438][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'. [ 695.614646][T16292] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 695.615922][T16292] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.615970][T16292] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.644768][ T189] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 695.656208][ T189] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.656282][ T189] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.696531][T17949] FAULT_INJECTION: forcing a failure. [ 695.696531][T17949] name failslab, interval 1, probability 0, space 0, times 0 [ 695.696600][T17949] CPU: 1 UID: 0 PID: 17949 Comm: syz.2.3968 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.696629][T17949] Tainted: [L]=SOFTLOCKUP [ 695.696637][T17949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 695.696647][T17949] Call Trace: [ 695.696655][T17949] [ 695.696662][T17949] dump_stack_lvl+0xe8/0x150 [ 695.696693][T17949] should_fail_ex+0x3eb/0x540 [ 695.696723][T17949] should_failslab+0xa8/0x100 [ 695.696745][T17949] __kmalloc_noprof+0xfe/0x720 [ 695.696768][T17949] ? rcu_is_watching+0x16/0xb0 [ 695.696788][T17949] ? tomoyo_realpath_from_path+0xef/0x640 [ 695.696806][T17949] ? tomoyo_realpath_from_path+0xef/0x640 [ 695.696832][T17949] tomoyo_realpath_from_path+0xef/0x640 [ 695.696863][T17949] tomoyo_check_open_permission+0x229/0x470 [ 695.696894][T17949] ? tomoyo_check_open_permission+0x1d3/0x470 [ 695.696919][T17949] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 695.696946][T17949] ? __asan_memset+0x22/0x50 [ 695.696976][T17949] ? lockdep_hardirqs_on+0x7b/0x110 [ 695.697029][T17949] ? tomoyo_file_open+0x163/0x220 [ 695.697055][T17949] security_file_open+0xa9/0x240 [ 695.697080][T17949] do_dentry_open+0x4a0/0x1380 [ 695.697110][T17949] vfs_open+0x3b/0x340 [ 695.697126][T17949] ? path_openat+0x1428/0x1d60 [ 695.697154][T17949] path_openat+0x1443/0x1d60 [ 695.697197][T17949] do_file_open+0x23e/0x4a0 [ 695.697226][T17949] ? __pfx_do_file_open+0x10/0x10 [ 695.697272][T17949] ? _raw_spin_unlock+0x28/0x50 [ 695.697297][T17949] ? alloc_fd+0x651/0x6c0 [ 695.697328][T17949] do_sys_openat2+0x115/0x200 [ 695.697350][T17949] ? __pfx_do_sys_openat2+0x10/0x10 [ 695.697370][T17949] ? ksys_write+0x242/0x270 [ 695.697395][T17949] ? __pfx_ksys_write+0x10/0x10 [ 695.697422][T17949] __x64_sys_openat+0x138/0x170 [ 695.697446][T17949] do_syscall_64+0x166/0x520 [ 695.697465][T17949] ? trace_irq_disable+0x3b/0x140 [ 695.697490][T17949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.697509][T17949] ? clear_bhb_loop+0x70/0xc0 [ 695.697532][T17949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.697550][T17949] RIP: 0033:0x7fa09bf5e98e [ 695.697568][T17949] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 695.697585][T17949] RSP: 002b:00007fa09cf21b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 695.697606][T17949] RAX: ffffffffffffffda RBX: 00007fa09cf226c0 RCX: 00007fa09bf5e98e [ 695.697620][T17949] RDX: 0000000000002000 RSI: 00007fa09cf21c00 RDI: ffffffffffffff9c [ 695.697634][T17949] RBP: 00007fa09cf21c00 R08: 0000000000000000 R09: 0000000000000000 [ 695.697646][T17949] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 695.697658][T17949] R13: 00007fa09c226038 R14: 00007fa09c225fa0 R15: 00007fffd98e4b58 [ 695.697687][T17949] [ 695.699253][T17949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 695.799407][T17952] profile_transition: unconfined exec no attachment [ 695.816446][T16286] usb 7-1: new full-speed USB device number 101 using dummy_hcd [ 695.857641][T17937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.858074][T17937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.908583][ T5764] usb 10-1: USB disconnect, device number 20 [ 695.960023][ T25] usb 8-1: USB disconnect, device number 4 [ 696.014144][T16286] usb 7-1: unable to get BOS descriptor or descriptor too short [ 696.014662][T16286] usb 7-1: not running at top speed; connect to a high speed hub [ 696.014693][T16286] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 696.014726][T16286] usb 7-1: no configurations [ 696.014738][T16286] usb 7-1: can't read configurations, error -22 [ 696.153589][T16286] usb 7-1: new full-speed USB device number 102 using dummy_hcd [ 696.157866][T16292] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 696.323555][T16292] usb 3-1: Using ep0 maxpacket: 32 [ 696.325387][T16292] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 696.327202][T16292] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.330884][T16286] usb 7-1: unable to get BOS descriptor or descriptor too short [ 696.331971][T16286] usb 7-1: not running at top speed; connect to a high speed hub [ 696.332002][T16286] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 696.332033][T16286] usb 7-1: no configurations [ 696.332093][T16286] usb 7-1: can't read configurations, error -22 [ 696.332949][T16292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.332970][T16292] usb 3-1: Product: syz [ 696.332984][T16292] usb 3-1: Manufacturer: syz [ 696.332997][T16292] usb 3-1: SerialNumber: syz [ 696.333200][T16286] usb usb7-port1: attempt power cycle [ 696.341867][T16292] usb 3-1: config 0 descriptor?? [ 696.352693][T16292] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 696.551501][T17951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.575448][T17951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.649496][T17960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.660187][T17960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.675465][T16286] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 696.683788][T17961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.694302][T17961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.713177][T16286] usb 7-1: unable to get BOS descriptor or descriptor too short [ 696.715357][T16286] usb 7-1: not running at top speed; connect to a high speed hub [ 696.715400][T16286] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 696.715460][T16286] usb 7-1: no configurations [ 696.715472][T16286] usb 7-1: can't read configurations, error -22 [ 696.771185][T17962] aa_policy_admin_capable: cap_mac_admin? 1 [ 696.771267][T17962] aa_policy_admin_capable: policy locked? 0 [ 696.772074][T17962] unpack_pdb: unpacking tags [ 696.772087][T17962] unpack_pdb: done unpacking tags [ 696.772115][T17962] unpack_pdb: unpacking tags [ 696.772124][T17962] unpack_pdb: done unpacking tags [ 696.777884][ T31] audit: type=1400 audit(1787857996.984:189): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=17958 comm="syz.9.3970" [ 696.843561][T16286] usb 7-1: new full-speed USB device number 104 using dummy_hcd [ 696.876434][T16292] usb 3-1: qt2_attach - failed to power on unit: -71 [ 696.876625][T16292] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 696.879474][T16286] usb 7-1: unable to get BOS descriptor or descriptor too short [ 696.879969][T16286] usb 7-1: not running at top speed; connect to a high speed hub [ 696.879998][T16286] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 696.880028][T16286] usb 7-1: no configurations [ 696.880040][T16286] usb 7-1: can't read configurations, error -22 [ 696.880342][T16286] usb usb7-port1: unable to enumerate USB device [ 696.897578][T16292] usb 3-1: USB disconnect, device number 6 [ 697.470135][T17974] FAULT_INJECTION: forcing a failure. [ 697.470135][T17974] name failslab, interval 1, probability 0, space 0, times 0 [ 697.470183][T17974] CPU: 1 UID: 0 PID: 17974 Comm: syz.2.3975 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.470211][T17974] Tainted: [L]=SOFTLOCKUP [ 697.470218][T17974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.470230][T17974] Call Trace: [ 697.470238][T17974] [ 697.470245][T17974] dump_stack_lvl+0xe8/0x150 [ 697.470274][T17974] should_fail_ex+0x3eb/0x540 [ 697.470304][T17974] should_failslab+0xa8/0x100 [ 697.470326][T17974] __kmalloc_cache_noprof+0xa3/0x600 [ 697.470352][T17974] ? binder_transaction+0x6d7/0x7080 [ 697.470372][T17974] ? binder_transaction+0x6d7/0x7080 [ 697.470396][T17974] binder_transaction+0x6d7/0x7080 [ 697.470417][T17974] ? lock_acquire+0x115/0x350 [ 697.470459][T17974] ? is_bpf_text_address+0x26/0x2b0 [ 697.470491][T17974] ? kernel_text_address+0xa5/0xe0 [ 697.470510][T17974] ? __kernel_text_address+0xd/0x30 [ 697.470550][T17974] ? __pfx_binder_transaction+0x10/0x10 [ 697.470570][T17974] ? __lock_acquire+0x6df/0x2e50 [ 697.470607][T17974] ? __lock_acquire+0x6df/0x2e50 [ 697.470637][T17974] ? __lock_acquire+0x6df/0x2e50 [ 697.470669][T17974] ? __lock_acquire+0x6df/0x2e50 [ 697.470699][T17974] ? lock_acquire+0x115/0x350 [ 697.470736][T17974] ? __might_fault+0xaf/0x130 [ 697.470764][T17974] binder_ioctl_write_read+0xb29/0xa940 [ 697.470802][T17974] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 697.470841][T17974] ? stack_trace_save+0xa9/0x100 [ 697.470864][T17974] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 697.470880][T17974] ? kasan_save_track+0x4f/0x80 [ 697.470908][T17974] ? stack_depot_save_flags+0x33/0x7f0 [ 697.470934][T17974] ? __lock_acquire+0x6df/0x2e50 [ 697.470965][T17974] ? __lock_acquire+0x6df/0x2e50 [ 697.471012][T17974] ? __pfx_binder_debug+0x10/0x10 [ 697.471043][T17974] ? do_raw_spin_lock+0x12b/0x2f0 [ 697.471078][T17974] ? _raw_spin_unlock+0x28/0x50 [ 697.471105][T17974] ? binder_get_thread+0x176/0x6d0 [ 697.471130][T17974] ? binder_ioctl+0x186/0x1b00 [ 697.471150][T17974] binder_ioctl+0x41d/0x1b00 [ 697.471168][T17974] ? tomoyo_path_number_perm+0x219/0x5f0 [ 697.471195][T17974] ? tomoyo_path_number_perm+0x219/0x5f0 [ 697.471222][T17974] ? do_vfs_ioctl+0x116f/0x1530 [ 697.471248][T17974] ? __pfx_binder_ioctl+0x10/0x10 [ 697.471266][T17974] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 697.471303][T17974] ? hook_file_ioctl+0x1f2/0x600 [ 697.471347][T17974] ? __fget_files+0x2a/0x420 [ 697.471370][T17974] ? __fget_files+0x2a/0x420 [ 697.471389][T17974] ? __fget_files+0x3a2/0x420 [ 697.471409][T17974] ? __fget_files+0x2a/0x420 [ 697.471433][T17974] ? bpf_lsm_file_ioctl+0x9/0x20 [ 697.471455][T17974] ? __pfx_binder_ioctl+0x10/0x10 [ 697.471472][T17974] __se_sys_ioctl+0xfc/0x170 [ 697.471499][T17974] do_syscall_64+0x166/0x520 [ 697.471519][T17974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.471537][T17974] ? clear_bhb_loop+0x70/0xc0 [ 697.471566][T17974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.471584][T17974] RIP: 0033:0x7fa09bf9e159 [ 697.471603][T17974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.471618][T17974] RSP: 002b:00007fa09cf22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.471640][T17974] RAX: ffffffffffffffda RBX: 00007fa09c225fa0 RCX: 00007fa09bf9e159 [ 697.471654][T17974] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 697.471667][T17974] RBP: 00007fa09cf22090 R08: 0000000000000000 R09: 0000000000000000 [ 697.471678][T17974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.471689][T17974] R13: 00007fa09c226038 R14: 00007fa09c225fa0 R15: 00007fffd98e4b58 [ 697.471718][T17974] [ 697.568388][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3976'. [ 697.862791][T17987] profile_transition: 3 callbacks suppressed [ 697.862811][T17987] profile_transition: unconfined exec no attachment [ 697.897903][T17989] binder: 17986:17989 unknown command 8192 [ 697.897908][T17990] aa_policy_admin_capable: cap_mac_admin? 1 [ 697.897928][T17989] binder: 17986:17989 ioctl c0306201 2000000001c0 returned -22 [ 697.924237][T17990] aa_policy_admin_capable: policy locked? 0 [ 697.930388][T17990] unpack_pdb: unpacking tags [ 697.930482][T17990] unpack_pdb: done unpacking tags [ 697.935923][T17990] unpack_pdb: unpacking tags [ 697.941079][T17990] unpack_pdb: done unpacking tags [ 697.951027][T17991] profile_transition: unconfined exec no attachment [ 697.956293][ T31] audit: type=1400 audit(1787857998.174:190): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=17988 comm="syz.9.3980" [ 698.088390][T17997] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3983'. [ 698.179976][T18003] netlink: 'syz.9.3982': attribute type 1 has an invalid length. [ 698.333540][ T189] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 698.453862][T16292] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 698.463478][ T189] usb 3-1: device descriptor read/64, error -71 [ 698.604933][T16292] usb 8-1: Using ep0 maxpacket: 32 [ 698.607825][T16292] usb 8-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 698.608946][T16292] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.608989][T16292] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 698.609012][T16292] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 698.609035][T16292] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.611420][T16292] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.611457][T16292] usb 8-1: Product: syz [ 698.611472][T16292] usb 8-1: Manufacturer: syz [ 698.611487][T16292] usb 8-1: SerialNumber: syz [ 698.618492][T16292] usb 8-1: config 0 descriptor?? [ 698.630469][T16292] usb 8-1: no audio or video endpoints found [ 698.754826][ T189] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 698.822258][T10716] usb 8-1: USB disconnect, device number 5 [ 698.893496][ T189] usb 3-1: device descriptor read/64, error -71 [ 698.943886][T16286] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 699.003954][ T189] usb usb3-port1: attempt power cycle [ 699.093504][T16286] usb 7-1: Using ep0 maxpacket: 32 [ 699.099239][T16286] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 699.104328][T16286] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.109375][T16286] usb 7-1: config 0 descriptor?? [ 699.116279][T16286] gspca_main: sunplus-2.14.0 probing 041e:400b [ 699.343599][ T189] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 699.364400][ T189] usb 3-1: device descriptor read/8, error -71 [ 699.478585][T18019] aa_policy_admin_capable: cap_mac_admin? 1 [ 699.478619][T18019] aa_policy_admin_capable: policy locked? 0 [ 699.478790][T18019] unpack_pdb: unpacking tags [ 699.478802][T18019] unpack_pdb: done unpacking tags [ 699.478860][T18019] unpack_pdb: unpacking tags [ 699.478870][T18019] unpack_pdb: done unpacking tags [ 699.479085][ T31] audit: type=1400 audit(1787857999.694:191): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=18018 comm="syz.7.3990" [ 699.526251][T18015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.526775][T18015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.563597][ T5764] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 699.603575][ T189] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 699.625738][ T189] usb 3-1: device descriptor read/8, error -71 [ 699.713765][ T5764] usb 10-1: Using ep0 maxpacket: 8 [ 699.746094][ T189] usb usb3-port1: unable to enumerate USB device [ 699.817340][ T5764] usb 10-1: unable to get BOS descriptor or descriptor too short [ 699.817426][ T5764] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 699.825951][T16292] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 699.827285][ T5764] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 699.827352][ T5764] usb 10-1: can't read configurations, error -71 [ 699.955665][T16292] usb 8-1: device descriptor read/64, error -71 [ 700.193656][T16292] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 700.323508][T16292] usb 8-1: device descriptor read/64, error -71 [ 700.372870][T18025] FAULT_INJECTION: forcing a failure. [ 700.372870][T18025] name failslab, interval 1, probability 0, space 0, times 0 [ 700.372971][T18025] CPU: 1 UID: 0 PID: 18025 Comm: syz.9.3992 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.372998][T18025] Tainted: [L]=SOFTLOCKUP [ 700.373005][T18025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.373016][T18025] Call Trace: [ 700.373024][T18025] [ 700.373033][T18025] dump_stack_lvl+0xe8/0x150 [ 700.373072][T18025] should_fail_ex+0x3eb/0x540 [ 700.373103][T18025] should_failslab+0xa8/0x100 [ 700.373123][T18025] ? skb_clone+0x212/0x3a0 [ 700.373148][T18025] kmem_cache_alloc_noprof+0xa1/0x600 [ 700.373175][T18025] ? skb_clone+0x212/0x3a0 [ 700.373205][T18025] skb_clone+0x212/0x3a0 [ 700.373232][T18025] __netlink_deliver_tap+0x413/0x860 [ 700.373269][T18025] ? netlink_deliver_tap+0x2e/0x1b0 [ 700.373296][T18025] netlink_deliver_tap+0x19c/0x1b0 [ 700.373322][T18025] netlink_dump+0x95b/0xee0 [ 700.373358][T18025] ? __pfx_netlink_dump+0x10/0x10 [ 700.373403][T18025] netlink_recvmsg+0x683/0xa50 [ 700.373437][T18025] ? __pfx_netlink_recvmsg+0x10/0x10 [ 700.373461][T18025] ? lock_acquire+0x115/0x350 [ 700.373490][T18025] ? aa_sock_msg_perm+0x144/0x210 [ 700.373522][T18025] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 700.373540][T18025] ? security_socket_recvmsg+0x7e/0x2c0 [ 700.373561][T18025] ? __pfx_netlink_recvmsg+0x10/0x10 [ 700.373587][T18025] sock_recvmsg+0x196/0x1e0 [ 700.373609][T18025] ____sys_recvmsg+0x1e6/0x4a0 [ 700.373642][T18025] ? __pfx_____sys_recvmsg+0x10/0x10 [ 700.373680][T18025] ? import_iovec+0x73/0xa0 [ 700.373704][T18025] ___sys_recvmsg+0x213/0x5a0 [ 700.373734][T18025] ? __pfx____sys_recvmsg+0x10/0x10 [ 700.373763][T18025] ? lock_acquire+0x115/0x350 [ 700.373803][T18025] ? __fget_files+0x3a2/0x420 [ 700.373834][T18025] do_recvmmsg+0x31a/0x7f0 [ 700.373866][T18025] ? __pfx_do_recvmmsg+0x10/0x10 [ 700.373902][T18025] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 700.373933][T18025] ? __fget_files+0x3a2/0x420 [ 700.373963][T18025] __x64_sys_recvmmsg+0x198/0x250 [ 700.373991][T18025] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 700.374027][T18025] do_syscall_64+0x166/0x520 [ 700.374046][T18025] ? trace_irq_disable+0x3b/0x140 [ 700.374070][T18025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.374089][T18025] ? clear_bhb_loop+0x70/0xc0 [ 700.374111][T18025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.374130][T18025] RIP: 0033:0x7f4595b9e159 [ 700.374148][T18025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.374164][T18025] RSP: 002b:00007f4596acc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 700.374185][T18025] RAX: ffffffffffffffda RBX: 00007f4595e25fa0 RCX: 00007f4595b9e159 [ 700.374199][T18025] RDX: 0000000000000003 RSI: 000020000000b400 RDI: 0000000000000003 [ 700.374211][T18025] RBP: 00007f4596acc090 R08: 0000000000000000 R09: 0000000000000000 [ 700.374223][T18025] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 700.374235][T18025] R13: 00007f4595e26038 R14: 00007f4595e25fa0 R15: 00007ffe191d4128 [ 700.374265][T18025] [ 700.438893][T16292] usb usb8-port1: attempt power cycle [ 700.549461][T16286] gspca_sunplus: reg_w_riv err -71 [ 700.549555][T16286] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 700.559497][T16286] usb 7-1: USB disconnect, device number 105 [ 700.601040][T18027] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3993'. [ 700.793496][T16292] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 700.814582][T16292] usb 8-1: device descriptor read/8, error -71 [ 701.054173][T16292] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 701.074479][T16292] usb 8-1: device descriptor read/8, error -71 [ 701.183925][T16292] usb usb8-port1: unable to enumerate USB device [ 701.225162][T16286] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 701.386832][T16286] usb 10-1: unable to get BOS descriptor or descriptor too short [ 701.394114][T18042] aa_policy_admin_capable: cap_mac_admin? 1 [ 701.394135][T18042] aa_policy_admin_capable: policy locked? 0 [ 701.394252][T18042] unpack_pdb: unpacking tags [ 701.394262][T18042] unpack_pdb: done unpacking tags [ 701.394297][T18042] unpack_pdb: unpacking tags [ 701.394306][T18042] unpack_pdb: done unpacking tags [ 701.394489][ T31] audit: type=1400 audit(1787858001.604:192): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=18041 comm="syz.6.3999" [ 701.420214][T16286] usb 10-1: not running at top speed; connect to a high speed hub [ 701.420258][T16286] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 701.449901][T16286] usb 10-1: config 0 has no interfaces? [ 701.479400][T16286] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.479446][T16286] usb 10-1: Product: syz [ 701.479478][T16286] usb 10-1: Manufacturer: syz [ 701.479496][T16286] usb 10-1: SerialNumber: syz [ 701.509402][T16286] usb 10-1: config 0 descriptor?? [ 701.605643][T18045] bond0: (slave bond_slave_1): Releasing backup interface [ 701.733015][T16286] usb 10-1: USB disconnect, device number 23 [ 702.349401][T18052] FAULT_INJECTION: forcing a failure. [ 702.349401][T18052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.363769][T18052] CPU: 1 UID: 0 PID: 18052 Comm: syz.9.4002 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.363802][T18052] Tainted: [L]=SOFTLOCKUP [ 702.363810][T18052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 702.363822][T18052] Call Trace: [ 702.363831][T18052] [ 702.363840][T18052] dump_stack_lvl+0xe8/0x150 [ 702.363877][T18052] should_fail_ex+0x3eb/0x540 [ 702.363915][T18052] _copy_from_user+0x2d/0xb0 [ 702.363940][T18052] memdup_user+0x5e/0xd0 [ 702.363975][T18052] strndup_user+0x68/0xd0 [ 702.364004][T18052] __se_sys_add_key+0x1ca/0x420 [ 702.364035][T18052] ? __pfx___se_sys_add_key+0x10/0x10 [ 702.364070][T18052] ? __x64_sys_add_key+0x20/0xc0 [ 702.364097][T18052] do_syscall_64+0x166/0x520 [ 702.364124][T18052] ? trace_irq_disable+0x3b/0x140 [ 702.364154][T18052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.364177][T18052] ? clear_bhb_loop+0x70/0xc0 [ 702.364204][T18052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.364225][T18052] RIP: 0033:0x7f4595b9e159 [ 702.364252][T18052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.364271][T18052] RSP: 002b:00007f4596acc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 702.364296][T18052] RAX: ffffffffffffffda RBX: 00007f4595e25fa0 RCX: 00007f4595b9e159 [ 702.364312][T18052] RDX: 0000200000000100 RSI: 0000200000000540 RDI: 0000200000000080 [ 702.364328][T18052] RBP: 00007f4596acc090 R08: 000000000dc792c2 R09: 0000000000000000 [ 702.364343][T18052] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 702.364366][T18052] R13: 00007f4595e26038 R14: 00007f4595e25fa0 R15: 00007ffe191d4128 [ 702.364400][T18052] [ 702.450084][T18053] (syz.2.4001,18053,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 702.450114][T18053] (syz.2.4001,18053,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 702.851005][T18063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.861313][T18063] batadv_slave_0: entered promiscuous mode [ 702.867715][T18063] batadv_slave_0: entered allmulticast mode [ 702.954579][T18067] aa_policy_admin_capable: cap_mac_admin? 1 [ 702.960728][T18067] aa_policy_admin_capable: policy locked? 0 [ 702.967337][T18067] unpack_pdb: unpacking tags [ 702.967401][T18067] unpack_pdb: done unpacking tags [ 702.972225][T18067] unpack_pdb: unpacking tags [ 702.977903][T18067] unpack_pdb: done unpacking tags [ 702.982818][ T31] audit: type=1400 audit(1787858003.204:193): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=18066 comm="syz.9.4008" [ 703.043487][ T189] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 703.145789][T18074] FAULT_INJECTION: forcing a failure. [ 703.145789][T18074] name failslab, interval 1, probability 0, space 0, times 0 [ 703.145832][T18074] CPU: 1 UID: 0 PID: 18074 Comm: syz.2.4012 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.145869][T18074] Tainted: [L]=SOFTLOCKUP [ 703.145877][T18074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 703.145888][T18074] Call Trace: [ 703.145896][T18074] [ 703.145904][T18074] dump_stack_lvl+0xe8/0x150 [ 703.145936][T18074] should_fail_ex+0x3eb/0x540 [ 703.145969][T18074] should_failslab+0xa8/0x100 [ 703.145995][T18074] __kmalloc_noprof+0xfe/0x720 [ 703.146021][T18074] ? rcu_is_watching+0x16/0xb0 [ 703.146043][T18074] ? tomoyo_realpath_from_path+0xef/0x640 [ 703.146064][T18074] ? tomoyo_realpath_from_path+0xef/0x640 [ 703.146092][T18074] tomoyo_realpath_from_path+0xef/0x640 [ 703.146116][T18074] ? get_mm_exe_file+0x1c/0x170 [ 703.146160][T18074] tomoyo_get_exe+0x60/0x90 [ 703.146243][T18074] tomoyo_write_control+0x802/0x13d0 [ 703.146266][T18074] ? lock_acquire+0x115/0x350 [ 703.146300][T18074] ? tomoyo_write_control+0x175/0x13d0 [ 703.146339][T18074] ? __pfx_tomoyo_write_control+0x10/0x10 [ 703.146371][T18074] ? __pfx_tomoyo_write+0x10/0x10 [ 703.146390][T18074] vfs_write+0x296/0xba0 [ 703.146425][T18074] ? __pfx_vfs_write+0x10/0x10 [ 703.146451][T18074] ? __fget_files+0x2a/0x420 [ 703.146479][T18074] ? __fget_files+0x3a2/0x420 [ 703.146501][T18074] ? __fget_files+0x2a/0x420 [ 703.146533][T18074] ksys_write+0x150/0x270 [ 703.146560][T18074] ? __pfx_ksys_write+0x10/0x10 [ 703.146597][T18074] do_syscall_64+0x166/0x520 [ 703.146617][T18074] ? trace_irq_disable+0x3b/0x140 [ 703.146643][T18074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.146663][T18074] ? clear_bhb_loop+0x70/0xc0 [ 703.146688][T18074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.146708][T18074] RIP: 0033:0x7fa09bf9e159 [ 703.146729][T18074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.146745][T18074] RSP: 002b:00007fa09cf22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 703.146768][T18074] RAX: ffffffffffffffda RBX: 00007fa09c225fa0 RCX: 00007fa09bf9e159 [ 703.146782][T18074] RDX: 000000000000ff40 RSI: 0000200000000100 RDI: 0000000000000004 [ 703.146795][T18074] RBP: 00007fa09cf22090 R08: 0000000000000000 R09: 0000000000000000 [ 703.146808][T18074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.146820][T18074] R13: 00007fa09c226038 R14: 00007fa09c225fa0 R15: 00007fffd98e4b58 [ 703.146853][T18074] [ 703.146869][T18074] ERROR: Out of memory at tomoyo_realpath_from_path. [ 703.224231][ T189] usb 8-1: Using ep0 maxpacket: 32 [ 703.236729][ T189] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 703.248969][ T189] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.302900][ T189] usb 8-1: config 0 descriptor?? [ 703.311206][ T189] gspca_main: sunplus-2.14.0 probing 041e:400b [ 703.353473][T10716] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 703.387657][T16286] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 703.412809][T18079] FAULT_INJECTION: forcing a failure. [ 703.412809][T18079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.412842][T18079] CPU: 0 UID: 0 PID: 18079 Comm: syz.2.4014 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.412869][T18079] Tainted: [L]=SOFTLOCKUP [ 703.412876][T18079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 703.412887][T18079] Call Trace: [ 703.412896][T18079] [ 703.412905][T18079] dump_stack_lvl+0xe8/0x150 [ 703.412942][T18079] should_fail_ex+0x3eb/0x540 [ 703.412974][T18079] _copy_to_user+0x31/0xb0 [ 703.412996][T18079] simple_read_from_buffer+0xe1/0x170 [ 703.413025][T18079] proc_fail_nth_read+0x1bb/0x230 [ 703.413051][T18079] ? common_file_perm+0x20e/0x2b0 [ 703.413096][T18079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 703.413124][T18079] ? rw_verify_area+0x24a/0x4c0 [ 703.413150][T18079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 703.413175][T18079] vfs_read+0x213/0xa80 [ 703.413203][T18079] ? __pfx___mutex_lock+0x10/0x10 [ 703.413227][T18079] ? __pfx_vfs_read+0x10/0x10 [ 703.413252][T18079] ? __fget_files+0x2a/0x420 [ 703.413277][T18079] ? __fget_files+0x3a2/0x420 [ 703.413298][T18079] ? __fget_files+0x2a/0x420 [ 703.413336][T18079] ksys_read+0x150/0x270 [ 703.413361][T18079] ? __pfx_ksys_read+0x10/0x10 [ 703.413396][T18079] do_syscall_64+0x166/0x520 [ 703.413416][T18079] ? trace_irq_disable+0x3b/0x140 [ 703.413442][T18079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.413462][T18079] ? clear_bhb_loop+0x70/0xc0 [ 703.413484][T18079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.413504][T18079] RIP: 0033:0x7fa09bf5e98e [ 703.413523][T18079] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 703.413540][T18079] RSP: 002b:00007fa09cf21fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 703.413561][T18079] RAX: ffffffffffffffda RBX: 00007fa09cf226c0 RCX: 00007fa09bf5e98e [ 703.413575][T18079] RDX: 000000000000000f RSI: 00007fa09cf220a0 RDI: 0000000000000003 [ 703.413587][T18079] RBP: 00007fa09cf22090 R08: 0000000000000000 R09: 0000000000000000 [ 703.413600][T18079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.413612][T18079] R13: 00007fa09c226038 R14: 00007fa09c225fa0 R15: 00007fffd98e4b58 [ 703.413642][T18079] [ 703.504056][T18081] binder: 18080:18081 ioctl c0306201 0 returned -14 [ 703.518074][T18081] CIFS mount error: No usable UNC path provided in device string! [ 703.518074][T18081] [ 703.518095][T18081] smb3_fs_context_validate: 57 callbacks suppressed [ 703.518107][T18081] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 703.531706][T10716] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 703.534169][T10716] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 703.534194][T10716] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.534212][T10716] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 703.534278][T10716] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 703.537084][T10716] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 703.537107][T10716] usb 7-1: Product: syz [ 703.537120][T10716] usb 7-1: Manufacturer: syz [ 703.557564][T10716] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 703.707466][T16286] usb 10-1: unable to get BOS descriptor or descriptor too short [ 703.725494][T16286] usb 10-1: not running at top speed; connect to a high speed hub [ 703.725524][T16286] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 703.740213][T18059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.743227][T18059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.802137][T16286] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 703.802179][T16286] usb 10-1: can't read configurations, error -61 [ 703.825024][T18069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.831180][T10716] usb 7-1: USB disconnect, device number 106 [ 704.022198][T18059] jffs2: notice: (18059) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 704.028534][T18059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.029521][T18059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.057150][T16286] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 704.067043][ T42] IPVS: starting estimator thread 0... [ 704.152883][ T189] gspca_sunplus: reg_r err -71 [ 704.152983][ T189] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 704.158366][T18085] IPVS: using max 28 ests per chain, 67200 per kthread [ 704.180928][ T189] usb 8-1: USB disconnect, device number 10 [ 704.215659][T16286] usb 10-1: unable to get BOS descriptor or descriptor too short [ 704.225574][T16286] usb 10-1: not running at top speed; connect to a high speed hub [ 704.233766][T16286] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 704.245024][T16286] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 704.245083][T16286] usb 10-1: can't read configurations, error -61 [ 704.245528][T16286] usb usb10-port1: attempt power cycle [ 704.583807][T16286] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 704.606602][T16286] usb 10-1: unable to get BOS descriptor or descriptor too short [ 704.607208][T16286] usb 10-1: not running at top speed; connect to a high speed hub [ 704.607239][T16286] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 704.608756][T16286] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 704.608788][T16286] usb 10-1: can't read configurations, error -61 [ 704.734988][T16286] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 704.758825][T18098] FAULT_INJECTION: forcing a failure. [ 704.758825][T18098] name failslab, interval 1, probability 0, space 0, times 0 [ 704.758918][T18098] CPU: 1 UID: 0 PID: 18098 Comm: syz.6.4027 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.758948][T18098] Tainted: [L]=SOFTLOCKUP [ 704.758955][T18098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 704.758968][T18098] Call Trace: [ 704.758977][T18098] [ 704.758987][T18098] dump_stack_lvl+0xe8/0x150 [ 704.759024][T18098] should_fail_ex+0x3eb/0x540 [ 704.759059][T18098] ? __alloc_empty_sheaf+0x28/0x40 [ 704.759087][T18098] should_failslab+0xa8/0x100 [ 704.759110][T18098] ? __alloc_empty_sheaf+0x28/0x40 [ 704.759135][T18098] __kmalloc_flags_noprof+0x128/0x7a0 [ 704.759168][T18098] ? __alloc_empty_sheaf+0x28/0x40 [ 704.759201][T18098] __alloc_empty_sheaf+0x28/0x40 [ 704.759227][T18098] __pcs_replace_empty_main+0x43b/0x6c0 [ 704.759258][T18098] kmem_cache_alloc_noprof+0x399/0x600 [ 704.759294][T18098] ? __kmalloc_noprof+0x38c/0x720 [ 704.759320][T18098] ? copy_net_ns+0x1e3/0x780 [ 704.759344][T18098] ? kmem_cache_alloc_noprof+0x156/0x600 [ 704.759370][T18098] ? copy_net_ns+0x1b1/0x780 [ 704.759388][T18098] ? copy_net_ns+0x1e3/0x780 [ 704.759417][T18098] copy_net_ns+0x1e3/0x780 [ 704.759436][T18098] ? copy_cgroup_ns+0x65f/0x880 [ 704.759477][T18098] create_new_namespaces+0x3f0/0x6b0 [ 704.759507][T18098] ? security_capable+0x7e/0x2c0 [ 704.759545][T18098] unshare_nsproxy_namespaces+0x149/0x190 [ 704.759573][T18098] ksys_unshare+0x5a7/0x950 [ 704.759607][T18098] ? __pfx_ksys_unshare+0x10/0x10 [ 704.759635][T18098] ? __pfx_ksys_write+0x10/0x10 [ 704.759673][T18098] __x64_sys_unshare+0x38/0x50 [ 704.759700][T18098] do_syscall_64+0x166/0x520 [ 704.759724][T18098] ? trace_irq_disable+0x3b/0x140 [ 704.759752][T18098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.759772][T18098] ? clear_bhb_loop+0x70/0xc0 [ 704.759798][T18098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.759819][T18098] RIP: 0033:0x7f16b419e159 [ 704.759840][T18098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.759857][T18098] RSP: 002b:00007f16b5026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 704.759881][T18098] RAX: ffffffffffffffda RBX: 00007f16b4425fa0 RCX: 00007f16b419e159 [ 704.759897][T18098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 704.759910][T18098] RBP: 00007f16b5026090 R08: 0000000000000000 R09: 0000000000000000 [ 704.759924][T18098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.759938][T18098] R13: 00007f16b4426038 R14: 00007f16b4425fa0 R15: 00007ffeda4aa648 [ 704.759972][T18098] [ 704.762323][T16286] usb 10-1: unable to get BOS descriptor or descriptor too short [ 704.762823][T16286] usb 10-1: not running at top speed; connect to a high speed hub [ 704.762852][T16286] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 704.766973][T16286] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 704.767006][T16286] usb 10-1: can't read configurations, error -61 [ 704.767505][T16286] usb usb10-port1: unable to enumerate USB device [ 705.296099][T18104] (syz.7.4019,18104,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 705.302965][T18103] aa_policy_admin_capable: cap_mac_admin? 1 [ 705.302984][T18103] aa_policy_admin_capable: policy locked? 0 [ 705.303106][T18103] unpack_pdb: unpacking tags [ 705.303116][T18103] unpack_pdb: done unpacking tags [ 705.303144][T18103] unpack_pdb: unpacking tags [ 705.303152][T18103] unpack_pdb: done unpacking tags [ 705.304678][ T31] audit: type=1400 audit(1787858005.514:194): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=18102 comm="syz.6.4020" [ 705.305213][T18104] (syz.7.4019,18104,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 705.588581][T18107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.588838][T18107] batadv_slave_0: entered promiscuous mode [ 705.588857][T18107] batadv_slave_0: entered allmulticast mode [ 705.748999][T18111] bond0: (slave bond_slave_1): Releasing backup interface [ 705.848437][T18115] tmpfs: Unknown parameter 'context' [ 705.960175][T18117] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4025'. [ 706.003579][T18119] jffs2: notice: (18119) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 706.098561][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4028'. [ 706.277685][T18128] aa_policy_admin_capable: cap_mac_admin? 1 [ 706.277732][T18128] aa_policy_admin_capable: policy locked? 0 [ 706.277894][T18128] unpack_pdb: unpacking tags [ 706.277906][T18128] unpack_pdb: done unpacking tags [ 706.277935][T18128] unpack_pdb: unpacking tags [ 706.277944][T18128] unpack_pdb: done unpacking tags [ 706.278782][ T31] audit: type=1400 audit(1787858006.494:195): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=18127 comm="syz.7.4030" [ 706.506031][T18133] syz.7.4033 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 706.517233][T18133] CPU: 0 UID: 0 PID: 18133 Comm: syz.7.4033 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.517272][T18133] Tainted: [L]=SOFTLOCKUP [ 706.517280][T18133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 706.517295][T18133] Call Trace: [ 706.517305][T18133] [ 706.517324][T18133] dump_stack_lvl+0xe8/0x150 [ 706.517360][T18133] dump_header+0xd3/0x4b0 [ 706.517412][T18133] oom_kill_process+0x3ab/0x9e0 [ 706.517448][T18133] out_of_memory+0x1064/0x1480 [ 706.517470][T18133] ? try_charge_memcg+0xc32/0x15e0 [ 706.517506][T18133] ? __pfx_out_of_memory+0x10/0x10 [ 706.517528][T18133] ? do_raw_spin_unlock+0xf5/0x200 [ 706.517567][T18133] try_charge_memcg+0xcdf/0x15e0 [ 706.517595][T18133] ? stack_depot_save_flags+0x33/0x7f0 [ 706.517646][T18133] ? __pfx_try_charge_memcg+0x10/0x10 [ 706.517676][T18133] ? percpu_ref_tryget+0x15/0x180 [ 706.517702][T18133] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 706.517744][T18133] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 706.517774][T18133] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 706.517807][T18133] __memcg_slab_post_alloc_hook+0x92b/0xf80 [ 706.517854][T18133] ? sk_prot_alloc+0x57/0x210 [ 706.517883][T18133] kmem_cache_alloc_noprof+0x367/0x600 [ 706.517910][T18133] ? sk_prot_alloc+0x57/0x210 [ 706.517932][T18133] ? kmem_cache_alloc_noprof+0x156/0x600 [ 706.517957][T18133] ? sk_prot_alloc+0x57/0x210 [ 706.517989][T18133] sk_prot_alloc+0x57/0x210 [ 706.518011][T18133] ? sk_alloc+0x27/0x390 [ 706.518036][T18133] sk_alloc+0x3a/0x390 [ 706.518064][T18133] inet6_create+0x81a/0x1270 [ 706.518096][T18133] ? inet6_create+0x80/0x1270 [ 706.518131][T18133] __sock_create+0x4b3/0x9d0 [ 706.518164][T18133] inet_ctl_sock_create+0xa2/0x220 [ 706.518206][T18133] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 706.518235][T18133] ? ndisc_net_init+0x1ac/0x260 [ 706.518262][T18133] ? __pfx_ndisc_net_init+0x10/0x10 [ 706.518288][T18133] igmp6_net_init+0x184/0x3f0 [ 706.518328][T18133] ops_init+0x35d/0x5d0 [ 706.518365][T18133] setup_net+0x118/0x350 [ 706.518393][T18133] ? __pfx_setup_net+0x10/0x10 [ 706.518418][T18133] ? down_read_killable+0x1bb/0x3b0 [ 706.518447][T18133] ? __ns_common_init+0x2fc/0x4a0 [ 706.518496][T18133] copy_net_ns+0x53b/0x780 [ 706.518545][T18133] create_new_namespaces+0x3f0/0x6b0 [ 706.518575][T18133] ? security_capable+0x7e/0x2c0 [ 706.518617][T18133] unshare_nsproxy_namespaces+0x149/0x190 [ 706.518648][T18133] ksys_unshare+0x5a7/0x950 [ 706.518695][T18133] ? __pfx_ksys_unshare+0x10/0x10 [ 706.518723][T18133] ? rcu_is_watching+0x16/0xb0 [ 706.518760][T18133] __x64_sys_unshare+0x38/0x50 [ 706.518789][T18133] do_syscall_64+0x166/0x520 [ 706.518812][T18133] ? trace_irq_disable+0x3b/0x140 [ 706.518840][T18133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.518864][T18133] ? clear_bhb_loop+0x70/0xc0 [ 706.518892][T18133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.518915][T18133] RIP: 0033:0x7f2f8d59e159 [ 706.518937][T18133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.518958][T18133] RSP: 002b:00007f2f8e40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 706.518984][T18133] RAX: ffffffffffffffda RBX: 00007f2f8d825fa0 RCX: 00007f2f8d59e159 [ 706.519000][T18133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 706.519015][T18133] RBP: 00007f2f8d635024 R08: 0000000000000000 R09: 0000000000000000 [ 706.519029][T18133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.519042][T18133] R13: 00007f2f8d826038 R14: 00007f2f8d825fa0 R15: 00007ffd63ef1aa8 [ 706.519078][T18133] [ 706.557312][T18133] memory: usage 96kB, limit 96kB, failcnt 34 [ 706.557333][T18133] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 706.557347][T18133] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 706.557360][T18133] Memory cgroup stats for /syz7/test: [ 706.557714][T18133] cache 0 [ 706.557724][T18133] rss 0 [ 706.557731][T18133] rss_huge 0 [ 706.557739][T18133] shmem 0 [ 706.557746][T18133] mapped_file 0 [ 706.557754][T18133] dirty 0 [ 706.557761][T18133] writeback 0 [ 706.557768][T18133] workingset_refault_anon 0 [ 706.557776][T18133] workingset_refault_file 0 [ 706.557784][T18133] swap 0 [ 706.557791][T18133] swapcached 0 [ 706.557798][T18133] pgpgin 0 [ 706.557805][T18133] pgpgout 0 [ 706.557812][T18133] pgfault 0 [ 706.557819][T18133] pgmajfault 0 [ 706.557826][T18133] inactive_anon 0 [ 706.557834][T18133] active_anon 0 [ 706.557851][T18133] inactive_file 0 [ 706.557875][T18133] active_file 0 [ 706.557883][T18133] unevictable 0 [ 706.557891][T18133] hierarchical_memory_limit 98304 [ 706.557899][T18133] hierarchical_memsw_limit 9223372036854771712 [ 706.557908][T18133] total_cache 0 [ 706.557916][T18133] total_rss 0 [ 706.557923][T18133] total_rss_huge 0 [ 706.557931][T18133] total_shmem 0 [ 706.557938][T18133] total_mapped_file 0 [ 706.557946][T18133] total_dirty 0 [ 706.557954][T18133] total_writeback 0 [ 706.557961][T18133] total_workingset_refault_anon 0 [ 706.557969][T18133] total_workingset_refault_file 0 [ 706.557977][T18133] total_swap 0 [ 706.557984][T18133] total_swapcached 0 [ 706.557992][T18133] total_pgpgin 0 [ 706.557999][T18133] total_pgpgout 0 [ 706.558007][T18133] total_pgfault 0 [ 706.558016][T18133] total_pgmajfault 0 [ 706.558023][T18133] total_inactive_anon 0 [ 706.558031][T18133] total_active_anon 0 [ 706.558039][T18133] total_inactive_file 0 [ 706.558047][T18133] total_active_file 0 [ 706.558055][T18133] total_unevictable 0 [ 706.558062][T18133] anon_cost 0 [ 706.558069][T18133] file_cost 0 [ 706.558078][T18133] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.4033,pid=18132,uid=0 [ 706.561661][T18133] Memory cgroup out of memory: Killed process 18132 (syz.7.4033) total-vm:102252kB, anon-rss:1428kB, file-rss:22932kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 706.578719][T18136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.579159][T18136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.637238][T18133] Failed to initialize the IGMP6 autojoin socket (err -105) [ 706.784473][ T989] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 706.914443][ T989] usb 10-1: device descriptor read/64, error -71 [ 707.145181][T18147] FAULT_INJECTION: forcing a failure. [ 707.145181][T18147] name failslab, interval 1, probability 0, space 0, times 0 [ 707.145213][T18147] CPU: 1 UID: 0 PID: 18147 Comm: syz.7.4037 Tainted: G L syzkaller #0 PREEMPT(full) [ 707.145238][T18147] Tainted: [L]=SOFTLOCKUP [ 707.145245][T18147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 707.145257][T18147] Call Trace: [ 707.145265][T18147] [ 707.145273][T18147] dump_stack_lvl+0xe8/0x150 [ 707.145303][T18147] should_fail_ex+0x3eb/0x540 [ 707.145334][T18147] should_failslab+0xa8/0x100 [ 707.145353][T18147] ? skb_clone+0x212/0x3a0 [ 707.145378][T18147] kmem_cache_alloc_noprof+0xa1/0x600 [ 707.145405][T18147] ? skb_clone+0x212/0x3a0 [ 707.145442][T18147] skb_clone+0x212/0x3a0 [ 707.145470][T18147] __netlink_deliver_tap+0x413/0x860 [ 707.145513][T18147] ? netlink_deliver_tap+0x2e/0x1b0 [ 707.145540][T18147] netlink_deliver_tap+0x19c/0x1b0 [ 707.145566][T18147] netlink_unicast+0x781/0x940 [ 707.145600][T18147] netlink_sendmsg+0x813/0xb40 [ 707.145648][T18147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.145681][T18147] ? apparmor_socket_sendmsg+0x98/0x360 [ 707.145708][T18147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.145733][T18147] sock_sendmsg_nosec+0x13a/0x180 [ 707.145763][T18147] ____sys_sendmsg+0x54e/0x850 [ 707.145792][T18147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.145825][T18147] ? import_iovec+0x73/0xa0 [ 707.145848][T18147] ___sys_sendmsg+0x2a5/0x360 [ 707.145870][T18147] ? __lock_acquire+0x6df/0x2e50 [ 707.145900][T18147] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.145956][T18147] ? __fget_files+0x2a/0x420 [ 707.145977][T18147] ? __fget_files+0x3a2/0x420 [ 707.146008][T18147] __x64_sys_sendmsg+0x1b1/0x290 [ 707.146034][T18147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 707.146078][T18147] do_syscall_64+0x166/0x520 [ 707.146099][T18147] ? trace_irq_disable+0x3b/0x140 [ 707.146123][T18147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.146144][T18147] ? clear_bhb_loop+0x70/0xc0 [ 707.146168][T18147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.146188][T18147] RIP: 0033:0x7f2f8d59e159 [ 707.146208][T18147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.146224][T18147] RSP: 002b:00007f2f8e40e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.146246][T18147] RAX: ffffffffffffffda RBX: 00007f2f8d825fa0 RCX: 00007f2f8d59e159 [ 707.146260][T18147] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 707.146272][T18147] RBP: 00007f2f8e40e090 R08: 0000000000000000 R09: 0000000000000000 [ 707.146285][T18147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.146296][T18147] R13: 00007f2f8d826038 R14: 00007f2f8d825fa0 R15: 00007ffd63ef1aa8 [ 707.146326][T18147] [ 707.156539][ T989] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 707.294602][ T989] usb 10-1: device descriptor read/64, error -71 [ 707.407504][ T989] usb usb10-port1: attempt power cycle [ 707.565326][T18155] profile_transition: unconfined exec no attachment [ 707.624111][T18157] aa_policy_admin_capable: cap_mac_admin? 1 [ 707.637165][T18157] aa_policy_admin_capable: policy locked? 0 [ 707.637306][T18157] unpack_pdb: unpacking tags [ 707.637318][T18157] unpack_pdb: done unpacking tags [ 707.637350][T18157] unpack_pdb: unpacking tags [ 707.637360][T18157] unpack_pdb: done unpacking tags [ 707.640530][ T31] audit: type=1400 audit(1787858007.854:196): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=18156 comm="syz.2.4041" [ 707.744200][ T989] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 707.769001][ T989] usb 10-1: device descriptor read/8, error -71 [ 707.829466][T18160] (syz.6.4036,18160,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 707.834375][T18160] (syz.6.4036,18160,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 708.005993][ T989] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 708.026886][ T989] usb 10-1: device descriptor read/8, error -71 [ 708.094004][T10716] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 708.134339][ T989] usb usb10-port1: unable to enumerate USB device [ 708.223489][T10716] usb 3-1: device descriptor read/64, error -71 [ 708.287542][T18166] FAULT_INJECTION: forcing a failure. [ 708.287542][T18166] name failslab, interval 1, probability 0, space 0, times 0 [ 708.304096][T18166] CPU: 0 UID: 0 PID: 18166 Comm: syz.6.4044 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.304132][T18166] Tainted: [L]=SOFTLOCKUP [ 708.304141][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.304154][T18166] Call Trace: [ 708.304164][T18166] [ 708.304173][T18166] dump_stack_lvl+0xe8/0x150 [ 708.304209][T18166] should_fail_ex+0x3eb/0x540 [ 708.304254][T18166] should_failslab+0xa8/0x100 [ 708.304276][T18166] ? do_getname+0x2e/0x250 [ 708.304296][T18166] kmem_cache_alloc_noprof+0xa1/0x600 [ 708.304326][T18166] ? do_getname+0x2e/0x250 [ 708.304353][T18166] do_getname+0x2e/0x250 [ 708.304373][T18166] ? user_path_at+0x1e/0x160 [ 708.304401][T18166] user_path_at+0x2a/0x160 [ 708.304430][T18166] __se_sys_mount+0x2dc/0x420 [ 708.304461][T18166] ? __pfx___se_sys_mount+0x10/0x10 [ 708.304492][T18166] ? __x64_sys_mount+0x20/0xc0 [ 708.304519][T18166] do_syscall_64+0x166/0x520 [ 708.304542][T18166] ? trace_irq_disable+0x3b/0x140 [ 708.304570][T18166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.304591][T18166] ? clear_bhb_loop+0x70/0xc0 [ 708.304617][T18166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.304637][T18166] RIP: 0033:0x7f16b419e159 [ 708.304658][T18166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.304675][T18166] RSP: 002b:00007f16b5026028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 708.304700][T18166] RAX: ffffffffffffffda RBX: 00007f16b4425fa0 RCX: 00007f16b419e159 [ 708.304716][T18166] RDX: 0000200000000300 RSI: 0000200000000540 RDI: 0000000000000000 [ 708.304729][T18166] RBP: 00007f16b5026090 R08: 00002000000000c0 R09: 0000000000000000 [ 708.304744][T18166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.304757][T18166] R13: 00007f16b4426038 R14: 00007f16b4425fa0 R15: 00007ffeda4aa648 [ 708.304790][T18166] [ 708.506348][T10716] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 708.550377][T18168] tmpfs: Unknown parameter 'context' [ 708.644786][T10716] usb 3-1: device descriptor read/64, error -71 [ 708.670094][ T52] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 708.755813][T10716] usb usb3-port1: attempt power cycle [ 708.799604][T18178] aa_policy_admin_capable: cap_mac_admin? 1 [ 708.799633][T18178] aa_policy_admin_capable: policy locked? 0 [ 708.799764][T18178] unpack_pdb: unpacking tags [ 708.799776][T18178] unpack_pdb: done unpacking tags [ 708.799803][T18178] unpack_pdb: unpacking tags [ 708.799812][T18178] unpack_pdb: done unpacking tags [ 708.799995][ T31] audit: type=1400 audit(1787858009.014:197): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=18177 comm="syz.7.4050" [ 709.001386][T18182] (syz.7.4051,18182,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 709.001424][T18182] (syz.7.4051,18182,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 709.123964][T10716] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 709.144806][T10716] usb 3-1: device descriptor read/8, error -71 [ 709.393640][T10716] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 709.409187][T18188] Bluetooth: hci0: unsupported parameter 5135 [ 709.409217][T18188] Bluetooth: hci0: unsupported parameter 8192 [ 709.409283][T18188] Bluetooth: hci0: unsupported parameter 5135 [ 709.409296][T18188] Bluetooth: hci0: unsupported parameter 8192 [ 709.414253][ T989] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 709.445787][T10716] usb 3-1: device descriptor read/8, error -71 [ 709.553907][T10716] usb usb3-port1: unable to enumerate USB device [ 709.573113][ T989] usb 8-1: unable to get BOS descriptor or descriptor too short [ 709.573188][ T989] usb 8-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 709.575459][ T989] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.575481][ T989] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 709.579295][ T989] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.579321][ T989] usb 8-1: Product: syz [ 709.579334][ T989] usb 8-1: Manufacturer: syz [ 709.579348][ T989] usb 8-1: SerialNumber: syz [ 709.857182][ T989] usb 8-1: selecting invalid altsetting 1 [ 709.857234][ T989] snd-usb-us122l 8-1:1.1: usb_set_interface error [ 709.857681][ T989] snd-usb-us122l 8-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 709.864238][ T989] usb 8-1: USB disconnect, device number 11 [ 709.953238][ T8932] udevd[8932]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 710.203467][T16292] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 710.306308][T18200] aa_policy_admin_capable: cap_mac_admin? 1 [ 710.306343][T18200] aa_policy_admin_capable: policy locked? 0 [ 710.306484][T18200] unpack_pdb: unpacking tags [ 710.306495][T18200] unpack_pdb: done unpacking tags [ 710.306523][T18200] unpack_pdb: unpacking tags [ 710.306532][T18200] unpack_pdb: done unpacking tags [ 710.306712][ T31] audit: type=1400 audit(1787858010.524:198): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=18199 comm="syz.6.4059" [ 710.354538][T16292] usb 10-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 710.356382][T16292] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.356430][T16292] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.365620][T16292] usb 10-1: config 0 descriptor?? [ 710.377617][T16292] rndis_host 10-1:0.0: ACM capabilities ff, not really RNDIS? [ 710.565464][T18206] (syz.6.4060,18206,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 710.565504][T18206] (syz.6.4060,18206,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 710.587331][T18196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.598119][T18196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.609247][T16292] usb 10-1: USB disconnect, device number 32 [ 710.722123][T18208] FAULT_INJECTION: forcing a failure. [ 710.722123][T18208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.722179][T18208] CPU: 0 UID: 0 PID: 18208 Comm: syz.6.4062 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.722209][T18208] Tainted: [L]=SOFTLOCKUP [ 710.722216][T18208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.722226][T18208] Call Trace: [ 710.722233][T18208] [ 710.722240][T18208] dump_stack_lvl+0xe8/0x150 [ 710.722269][T18208] should_fail_ex+0x3eb/0x540 [ 710.722301][T18208] _copy_to_user+0x31/0xb0 [ 710.722323][T18208] simple_read_from_buffer+0xe1/0x170 [ 710.722351][T18208] proc_fail_nth_read+0x1bb/0x230 [ 710.722375][T18208] ? common_file_perm+0x20e/0x2b0 [ 710.722405][T18208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.722432][T18208] ? rw_verify_area+0x24a/0x4c0 [ 710.722457][T18208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.722481][T18208] vfs_read+0x213/0xa80 [ 710.722508][T18208] ? __pfx___mutex_lock+0x10/0x10 [ 710.722532][T18208] ? __pfx_vfs_read+0x10/0x10 [ 710.722555][T18208] ? __fget_files+0x2a/0x420 [ 710.722581][T18208] ? __fget_files+0x3a2/0x420 [ 710.722601][T18208] ? __fget_files+0x2a/0x420 [ 710.722631][T18208] ksys_read+0x150/0x270 [ 710.722656][T18208] ? __pfx_ksys_read+0x10/0x10 [ 710.722686][T18208] ? __pfx_tty_ioctl+0x10/0x10 [ 710.722721][T18208] do_syscall_64+0x166/0x520 [ 710.722741][T18208] ? trace_irq_disable+0x3b/0x140 [ 710.722766][T18208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.722784][T18208] ? clear_bhb_loop+0x70/0xc0 [ 710.722807][T18208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.722825][T18208] RIP: 0033:0x7f16b415e98e [ 710.722843][T18208] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 710.722860][T18208] RSP: 002b:00007f16b5025fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.722881][T18208] RAX: ffffffffffffffda RBX: 00007f16b50266c0 RCX: 00007f16b415e98e [ 710.722894][T18208] RDX: 000000000000000f RSI: 00007f16b50260a0 RDI: 0000000000000004 [ 710.722906][T18208] RBP: 00007f16b5026090 R08: 0000000000000000 R09: 0000000000000000 [ 710.722918][T18208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.722929][T18208] R13: 00007f16b4426038 R14: 00007f16b4425fa0 R15: 00007ffeda4aa648 [ 710.722960][T18208] [ 710.803465][T18210] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4063'. [ 710.946742][T18210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.991758][T18210] bond0 (unregistering): (slave vlan0): Releasing backup interface [ 711.007463][T18210] bond0 (unregistering): Released all slaves [ 711.225735][T18221] aa_policy_admin_capable: cap_mac_admin? 1 [ 711.225765][T18221] aa_policy_admin_capable: policy locked? 0 [ 711.226382][T18221] unpack_pdb: unpacking tags [ 711.226394][T18221] unpack_pdb: done unpacking tags [ 711.226423][T18221] unpack_pdb: unpacking tags [ 711.226432][T18221] unpack_pdb: done unpacking tags [ 711.231797][ T31] audit: type=1400 audit(1787858011.444:199): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=18220 comm="syz.9.4068" [ 711.285816][T10716] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 711.326533][T18224] binder: 18223:18224 ioctl c0306201 200000000080 returned -14 [ 711.328084][T18224] binder: 18223:18224 ioctl c0306201 2000000003c0 returned -14 [ 711.328688][T18224] FAULT_INJECTION: forcing a failure. [ 711.328688][T18224] name failslab, interval 1, probability 0, space 0, times 0 [ 711.328714][T18224] CPU: 0 UID: 0 PID: 18224 Comm: syz.9.4069 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.328739][T18224] Tainted: [L]=SOFTLOCKUP [ 711.328747][T18224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 711.328758][T18224] Call Trace: [ 711.328766][T18224] [ 711.328774][T18224] dump_stack_lvl+0xe8/0x150 [ 711.328809][T18224] should_fail_ex+0x3eb/0x540 [ 711.328840][T18224] should_failslab+0xa8/0x100 [ 711.328861][T18224] __kmalloc_cache_noprof+0xa3/0x600 [ 711.328888][T18224] ? binder_transaction+0x6d7/0x7080 [ 711.328909][T18224] ? binder_transaction+0x6d7/0x7080 [ 711.328934][T18224] binder_transaction+0x6d7/0x7080 [ 711.328955][T18224] ? lock_acquire+0x115/0x350 [ 711.328997][T18224] ? is_bpf_text_address+0x26/0x2b0 [ 711.329021][T18224] ? kernel_text_address+0xa5/0xe0 [ 711.329039][T18224] ? __kernel_text_address+0xd/0x30 [ 711.329072][T18224] ? __pfx_binder_transaction+0x10/0x10 [ 711.329092][T18224] ? __lock_acquire+0x6df/0x2e50 [ 711.329128][T18224] ? __lock_acquire+0x6df/0x2e50 [ 711.329159][T18224] ? __lock_acquire+0x6df/0x2e50 [ 711.329190][T18224] ? __lock_acquire+0x6df/0x2e50 [ 711.329220][T18224] ? lock_acquire+0x115/0x350 [ 711.329258][T18224] ? __might_fault+0xaf/0x130 [ 711.329286][T18224] binder_ioctl_write_read+0xb29/0xa940 [ 711.329332][T18224] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 711.329369][T18224] ? stack_trace_save+0xa9/0x100 [ 711.329393][T18224] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 711.329409][T18224] ? kasan_save_track+0x4f/0x80 [ 711.329441][T18224] ? stack_depot_save_flags+0x33/0x7f0 [ 711.329467][T18224] ? __lock_acquire+0x6df/0x2e50 [ 711.329507][T18224] ? __lock_acquire+0x6df/0x2e50 [ 711.329554][T18224] ? __pfx_binder_debug+0x10/0x10 [ 711.329578][T18224] ? do_raw_spin_lock+0x12b/0x2f0 [ 711.329614][T18224] ? _raw_spin_unlock+0x28/0x50 [ 711.329640][T18224] ? binder_get_thread+0x176/0x6d0 [ 711.329666][T18224] ? binder_ioctl+0x186/0x1b00 [ 711.329686][T18224] binder_ioctl+0x41d/0x1b00 [ 711.329703][T18224] ? tomoyo_path_number_perm+0x219/0x5f0 [ 711.329729][T18224] ? tomoyo_path_number_perm+0x219/0x5f0 [ 711.329756][T18224] ? do_vfs_ioctl+0x116f/0x1530 [ 711.329782][T18224] ? __pfx_binder_ioctl+0x10/0x10 [ 711.329800][T18224] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 711.329837][T18224] ? hook_file_ioctl+0x1f2/0x600 [ 711.329881][T18224] ? __fget_files+0x2a/0x420 [ 711.329904][T18224] ? __fget_files+0x2a/0x420 [ 711.329923][T18224] ? __fget_files+0x3a2/0x420 [ 711.329943][T18224] ? __fget_files+0x2a/0x420 [ 711.329967][T18224] ? bpf_lsm_file_ioctl+0x9/0x20 [ 711.329989][T18224] ? __pfx_binder_ioctl+0x10/0x10 [ 711.330007][T18224] __se_sys_ioctl+0xfc/0x170 [ 711.330034][T18224] do_syscall_64+0x166/0x520 [ 711.330053][T18224] ? trace_irq_disable+0x3b/0x140 [ 711.330077][T18224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.330095][T18224] ? clear_bhb_loop+0x70/0xc0 [ 711.330118][T18224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.330136][T18224] RIP: 0033:0x7f4595b9e159 [ 711.330154][T18224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.330170][T18224] RSP: 002b:00007f4596acc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 711.330191][T18224] RAX: ffffffffffffffda RBX: 00007f4595e25fa0 RCX: 00007f4595b9e159 [ 711.330205][T18224] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 711.330218][T18224] RBP: 00007f4596acc090 R08: 0000000000000000 R09: 0000000000000000 [ 711.330230][T18224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.330241][T18224] R13: 00007f4595e26038 R14: 00007f4595e25fa0 R15: 00007ffe191d4128 [ 711.330270][T18224] [ 711.355028][T16292] usb 7-1: new full-speed USB device number 107 using dummy_hcd [ 711.435577][T10716] usb 3-1: device descriptor read/64, error -71 [ 711.614830][T16292] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 711.646963][T16292] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 711.647002][T16292] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 711.647031][T16292] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 711.683547][T10716] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 711.739201][T16292] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.739233][T16292] usb 7-1: Product: syz [ 711.739250][T16292] usb 7-1: Manufacturer: syz [ 711.739265][T16292] usb 7-1: SerialNumber: syz [ 711.779987][T18229] (syz.9.4070,18229,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 711.780134][T18229] (syz.9.4070,18229,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 711.813514][T10716] usb 3-1: device descriptor read/64, error -71 [ 711.844239][T16292] usb 7-1: config 0 descriptor?? [ 711.850657][T18217] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 711.862424][T18230] profile_transition: unconfined exec no attachment [ 711.923458][T16292] rc_core: IR keymap rc-streamzap not found [ 711.925037][T10716] usb usb3-port1: attempt power cycle [ 711.930605][T16292] Registered IR keymap rc-empty [ 711.954388][T16292] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 711.968528][T16292] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input163 [ 712.113953][ T189] usb 7-1: USB disconnect, device number 107 [ 712.243633][T16292] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 712.263746][T10716] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 712.293906][T10716] usb 3-1: device descriptor read/8, error -71 [ 712.373532][T16292] usb 10-1: device descriptor read/64, error -71 [ 712.393825][T18237] binder: 18236:18237 ioctl c0306201 200000000080 returned -14 [ 712.395933][T18237] binder: 18236:18237 ioctl c0306201 2000000003c0 returned -14 [ 712.543686][T10716] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 712.563943][T10716] usb 3-1: device descriptor read/8, error -71 [ 712.613514][T16292] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 712.684776][ T989] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 712.693750][T10716] usb usb3-port1: unable to enumerate USB device [ 712.698401][T18243] aa_policy_admin_capable: cap_mac_admin? 1 [ 712.698420][T18243] aa_policy_admin_capable: policy locked? 0 [ 712.698536][T18243] unpack_pdb: unpacking tags [ 712.698546][T18243] unpack_pdb: done unpacking tags [ 712.698574][T18243] unpack_pdb: unpacking tags [ 712.698583][T18243] unpack_pdb: done unpacking tags [ 712.698763][ T31] audit: type=1400 audit(1787858012.914:200): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=18242 comm="syz.6.4077" [ 712.743771][T16292] usb 10-1: device descriptor read/64, error -71 [ 712.774450][T18246] FAULT_INJECTION: forcing a failure. [ 712.774450][T18246] name failslab, interval 1, probability 0, space 0, times 0 [ 712.774492][T18246] CPU: 0 UID: 0 PID: 18246 Comm: syz.6.4078 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.774522][T18246] Tainted: [L]=SOFTLOCKUP [ 712.774529][T18246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 712.774541][T18246] Call Trace: [ 712.774548][T18246] [ 712.774556][T18246] dump_stack_lvl+0xe8/0x150 [ 712.774586][T18246] should_fail_ex+0x3eb/0x540 [ 712.774618][T18246] should_failslab+0xa8/0x100 [ 712.774638][T18246] ? skb_clone+0x212/0x3a0 [ 712.774664][T18246] kmem_cache_alloc_noprof+0xa1/0x600 [ 712.774690][T18246] ? skb_clone+0x212/0x3a0 [ 712.774720][T18246] skb_clone+0x212/0x3a0 [ 712.774747][T18246] __netlink_deliver_tap+0x413/0x860 [ 712.774785][T18246] ? netlink_deliver_tap+0x2e/0x1b0 [ 712.774812][T18246] netlink_deliver_tap+0x19c/0x1b0 [ 712.774838][T18246] netlink_unicast+0x781/0x940 [ 712.774872][T18246] netlink_sendmsg+0x813/0xb40 [ 712.774906][T18246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 712.774940][T18246] ? apparmor_socket_sendmsg+0x98/0x360 [ 712.774967][T18246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 712.774992][T18246] sock_sendmsg_nosec+0x13a/0x180 [ 712.775023][T18246] ____sys_sendmsg+0x54e/0x850 [ 712.775052][T18246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 712.775085][T18246] ? import_iovec+0x73/0xa0 [ 712.775109][T18246] ___sys_sendmsg+0x2a5/0x360 [ 712.775131][T18246] ? __lock_acquire+0x6df/0x2e50 [ 712.775170][T18246] ? __pfx____sys_sendmsg+0x10/0x10 [ 712.775228][T18246] ? __fget_files+0x2a/0x420 [ 712.775248][T18246] ? __fget_files+0x3a2/0x420 [ 712.775279][T18246] __x64_sys_sendmsg+0x1b1/0x290 [ 712.775305][T18246] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 712.775348][T18246] do_syscall_64+0x166/0x520 [ 712.775368][T18246] ? trace_irq_disable+0x3b/0x140 [ 712.775393][T18246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.775412][T18246] ? clear_bhb_loop+0x70/0xc0 [ 712.775435][T18246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.775453][T18246] RIP: 0033:0x7f16b419e159 [ 712.775472][T18246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.775487][T18246] RSP: 002b:00007f16b5026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.775509][T18246] RAX: ffffffffffffffda RBX: 00007f16b4425fa0 RCX: 00007f16b419e159 [ 712.775523][T18246] RDX: 0000000000044000 RSI: 0000200000000200 RDI: 0000000000000003 [ 712.775535][T18246] RBP: 00007f16b5026090 R08: 0000000000000000 R09: 0000000000000000 [ 712.775547][T18246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.775558][T18246] R13: 00007f16b4426038 R14: 00007f16b4425fa0 R15: 00007ffeda4aa648 [ 712.775589][T18246] [ 712.855463][T16292] usb usb10-port1: attempt power cycle [ 712.870674][ T989] usb 8-1: Using ep0 maxpacket: 8 [ 713.063740][ T989] usb 8-1: unable to get BOS descriptor or descriptor too short [ 713.063808][ T989] usb 8-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 713.085860][ T989] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 713.085891][ T989] usb 8-1: can't read configurations, error -71 [ 713.343479][T16292] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 713.374110][T16292] usb 10-1: device descriptor read/8, error -71 [ 713.623504][T16292] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 713.648771][T16292] usb 10-1: device descriptor read/8, error -71 [ 713.711068][T18252] (syz.7.4080,18252,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 713.719993][T18252] (syz.7.4080,18252,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 713.753960][T16292] usb usb10-port1: unable to enumerate USB device [ 714.093010][T18268] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4084'. [ 714.108549][T18268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.120211][T18268] bond0 (unregistering): Released all slaves [ 714.264153][T16286] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 714.281601][T18275] aa_policy_admin_capable: cap_mac_admin? 1 [ 714.281630][T18275] aa_policy_admin_capable: policy locked? 0 [ 714.281764][T18275] unpack_pdb: unpacking tags [ 714.281775][T18275] unpack_pdb: done unpacking tags [ 714.281804][T18275] unpack_pdb: unpacking tags [ 714.281813][T18275] unpack_pdb: done unpacking tags [ 714.288860][ T31] audit: type=1400 audit(1787858014.494:201): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=18274 comm="syz.2.4087" [ 714.434489][T16286] usb 7-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 714.444907][T16286] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.445297][T16286] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 714.445357][T16286] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.456026][T16286] ums-alauda 7-1:1.0: USB Mass Storage device detected [ 714.467752][T16286] ums-alauda 7-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 714.467752][T16286] Please send a copy of this message to and [ 714.474565][T16286] scsi host1: usb-storage 7-1:1.0 [ 714.633513][T10716] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 714.783479][T10716] usb 3-1: Using ep0 maxpacket: 8 [ 714.905227][T10716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 714.913144][T10716] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 714.914564][T10716] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 714.914598][T10716] usb 3-1: can't read configurations, error -71 [ 715.173321][T18288] (syz.9.4090,18288,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 715.173562][T18288] (syz.9.4090,18288,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 715.312168][T18290] FAULT_INJECTION: forcing a failure. [ 715.312168][T18290] name failslab, interval 1, probability 0, space 0, times 0 [ 715.324477][T18290] CPU: 0 UID: 0 PID: 18290 Comm: syz.9.4091 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.324510][T18290] Tainted: [L]=SOFTLOCKUP [ 715.324517][T18290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 715.324529][T18290] Call Trace: [ 715.324537][T18290] [ 715.324545][T18290] dump_stack_lvl+0xe8/0x150 [ 715.324576][T18290] should_fail_ex+0x3eb/0x540 [ 715.324613][T18290] should_failslab+0xa8/0x100 [ 715.324634][T18290] __kmalloc_noprof+0xfe/0x720 [ 715.324658][T18290] ? __netlink_lookup+0x7e4/0x8b0 [ 715.324685][T18290] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 715.324705][T18290] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 715.324734][T18290] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 715.324764][T18290] genl_start+0x180/0x6d0 [ 715.324792][T18290] __netlink_dump_start+0x442/0x7b0 [ 715.324832][T18290] genl_family_rcv_msg_dumpit+0x213/0x310 [ 715.324857][T18290] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 715.324877][T18290] ? genl_get_cmd+0x6cc/0x960 [ 715.324902][T18290] ? __pfx_genl_start+0x10/0x10 [ 715.324920][T18290] ? __pfx_genl_dumpit+0x10/0x10 [ 715.324938][T18290] ? __pfx_genl_done+0x10/0x10 [ 715.324960][T18290] ? __dev_queue_xmit+0x29b/0x3820 [ 715.324997][T18290] genl_rcv_msg+0x5e1/0x7a0 [ 715.325024][T18290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 715.325043][T18290] ? __pfx_ethnl_default_start+0x10/0x10 [ 715.325130][T18290] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 715.325147][T18290] ? __pfx_ethnl_default_done+0x10/0x10 [ 715.325167][T18290] ? __pfx_ref_tracker_free+0x10/0x10 [ 715.325186][T18290] ? __asan_memcpy+0x40/0x70 [ 715.325210][T18290] ? __skb_clone+0x5c/0x6c0 [ 715.325240][T18290] netlink_rcv_skb+0x226/0x4a0 [ 715.325267][T18290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 715.325289][T18290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 715.325330][T18290] ? down_read+0x2be/0x330 [ 715.325357][T18290] genl_rcv+0x28/0x40 [ 715.325376][T18290] netlink_unicast+0x7bd/0x940 [ 715.325411][T18290] netlink_sendmsg+0x813/0xb40 [ 715.325446][T18290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.325480][T18290] ? apparmor_socket_sendmsg+0x98/0x360 [ 715.325508][T18290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.325532][T18290] sock_sendmsg_nosec+0x13a/0x180 [ 715.325564][T18290] ____sys_sendmsg+0x54e/0x850 [ 715.325593][T18290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.325626][T18290] ? import_iovec+0x73/0xa0 [ 715.325649][T18290] ___sys_sendmsg+0x2a5/0x360 [ 715.325671][T18290] ? __lock_acquire+0x6df/0x2e50 [ 715.325701][T18290] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.325759][T18290] ? __fget_files+0x2a/0x420 [ 715.325780][T18290] ? __fget_files+0x3a2/0x420 [ 715.325819][T18290] __x64_sys_sendmsg+0x1b1/0x290 [ 715.325845][T18290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 715.325890][T18290] do_syscall_64+0x166/0x520 [ 715.325908][T18290] ? trace_irq_disable+0x3b/0x140 [ 715.325933][T18290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.325952][T18290] ? clear_bhb_loop+0x70/0xc0 [ 715.325976][T18290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.325994][T18290] RIP: 0033:0x7f4595b9e159 [ 715.326013][T18290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.326029][T18290] RSP: 002b:00007f4596acc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.326050][T18290] RAX: ffffffffffffffda RBX: 00007f4595e25fa0 RCX: 00007f4595b9e159 [ 715.326065][T18290] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 715.326078][T18290] RBP: 00007f4596acc090 R08: 0000000000000000 R09: 0000000000000000 [ 715.326090][T18290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.326102][T18290] R13: 00007f4595e26038 R14: 00007f4595e25fa0 R15: 00007ffe191d4128 [ 715.326133][T18290] [ 715.479909][T18292] netlink: 'syz.9.4092': attribute type 1 has an invalid length. [ 715.479932][T18292] netlink: 244 bytes leftover after parsing attributes in process `syz.9.4092'. [ 715.610103][T10245] scsi 1:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 715.624202][T10245] scsi 1:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 715.791842][T16292] usb 7-1: USB disconnect, device number 108 [ 715.824112][ T1172] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 715.854323][T10245] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 715.964039][T18303] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4095'. [ 715.999438][ T1172] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 716.028494][T10245] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 716.030220][T18303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.041099][ T1160] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 716.042275][ T9752] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 716.079056][ T1160] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 716.079130][ T1160] sd 1:0:0:1: [sdc] Sense not available. [ 716.112678][ T1160] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 716.112759][ T1160] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 716.116432][ T1160] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 716.118785][ T1160] sd 1:0:0:1: [sdc] Asking for cache data failed [ 716.118836][ T1160] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 716.148890][T18303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.156115][T18305] profile_transition: unconfined exec no attachment [ 716.166671][T18303] bond0 (unregistering): Released all slaves [ 716.347308][T18306] profile_transition: unconfined exec no attachment [ 716.457766][ T1160] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 716.572493][ T52] Bluetooth: hci2: unexpected cc 0x200b length: 2 > 1 [ 716.614921][ T8538] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 716.620509][T18308] netlink: 'syz.7.4104': attribute type 11 has an invalid length. [ 716.797645][T18315] profile_transition: unconfined exec no attachment [ 717.063521][T10716] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 717.164920][T18323] profile_transition: unconfined exec no attachment [ 717.204878][T18324] (syz.9.4099,18324,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 717.205631][T10716] usb 3-1: device descriptor read/64, error -71 [ 717.226831][T18324] (syz.9.4099,18324,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 717.270533][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 717.311626][ T8932] udevd[8932]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 717.424817][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 717.443589][T10716] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 717.573829][T18332] profile_transition: unconfined exec no attachment [ 717.575158][T10716] usb 3-1: device descriptor read/64, error -71 [ 717.627706][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 717.627769][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 717.628670][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 717.628703][ T10] usb 8-1: can't read configurations, error -71 [ 717.648328][T18335] profile_transition: unconfined exec no attachment [ 717.684360][T10716] usb usb3-port1: attempt power cycle [ 718.023534][T10716] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 718.044178][T10716] usb 3-1: device descriptor read/8, error -71 [ 718.248665][T18346] FAULT_INJECTION: forcing a failure. [ 718.248665][T18346] name failslab, interval 1, probability 0, space 0, times 0 [ 718.248722][T18346] CPU: 0 UID: 0 PID: 18346 Comm: syz.7.4110 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.248752][T18346] Tainted: [L]=SOFTLOCKUP [ 718.248760][T18346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 718.248773][T18346] Call Trace: [ 718.248782][T18346] [ 718.248793][T18346] dump_stack_lvl+0xe8/0x150 [ 718.248826][T18346] should_fail_ex+0x3eb/0x540 [ 718.248861][T18346] should_failslab+0xa8/0x100 [ 718.248882][T18346] ? skb_clone+0x212/0x3a0 [ 718.248906][T18346] kmem_cache_alloc_noprof+0xa1/0x600 [ 718.248930][T18346] ? skb_clone+0x212/0x3a0 [ 718.248959][T18346] skb_clone+0x212/0x3a0 [ 718.248986][T18346] __netlink_deliver_tap+0x413/0x860 [ 718.249025][T18346] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.249052][T18346] netlink_deliver_tap+0x19c/0x1b0 [ 718.249078][T18346] netlink_unicast+0x781/0x940 [ 718.249113][T18346] netlink_sendmsg+0x813/0xb40 [ 718.249148][T18346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.249181][T18346] ? apparmor_socket_sendmsg+0x98/0x360 [ 718.249209][T18346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.249238][T18346] sock_sendmsg_nosec+0x13a/0x180 [ 718.249269][T18346] ____sys_sendmsg+0x54e/0x850 [ 718.249298][T18346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 718.249330][T18346] ? import_iovec+0x73/0xa0 [ 718.249353][T18346] ___sys_sendmsg+0x2a5/0x360 [ 718.249375][T18346] ? __lock_acquire+0x6df/0x2e50 [ 718.249405][T18346] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.249462][T18346] ? __fget_files+0x2a/0x420 [ 718.249482][T18346] ? __fget_files+0x3a2/0x420 [ 718.249513][T18346] __x64_sys_sendmsg+0x1b1/0x290 [ 718.249539][T18346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 718.249582][T18346] do_syscall_64+0x166/0x520 [ 718.249612][T18346] ? trace_irq_disable+0x3b/0x140 [ 718.249636][T18346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.249655][T18346] ? clear_bhb_loop+0x70/0xc0 [ 718.249679][T18346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.249697][T18346] RIP: 0033:0x7f2f8d59e159 [ 718.249715][T18346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.249731][T18346] RSP: 002b:00007f2f8e40e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.249752][T18346] RAX: ffffffffffffffda RBX: 00007f2f8d825fa0 RCX: 00007f2f8d59e159 [ 718.249766][T18346] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 718.249778][T18346] RBP: 00007f2f8e40e090 R08: 0000000000000000 R09: 0000000000000000 [ 718.249789][T18346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.249801][T18346] R13: 00007f2f8d826038 R14: 00007f2f8d825fa0 R15: 00007ffd63ef1aa8 [ 718.249831][T18346] [ 718.285679][T10716] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 718.307114][T10716] usb 3-1: device descriptor read/8, error -71 [ 718.405432][T18350] FAULT_INJECTION: forcing a failure. [ 718.405432][T18350] name failslab, interval 1, probability 0, space 0, times 0 [ 718.405466][T18350] CPU: 0 UID: 0 PID: 18350 Comm: syz.7.4113 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.405492][T18350] Tainted: [L]=SOFTLOCKUP [ 718.405500][T18350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 718.405510][T18350] Call Trace: [ 718.405518][T18350] [ 718.405526][T18350] dump_stack_lvl+0xe8/0x150 [ 718.405556][T18350] should_fail_ex+0x3eb/0x540 [ 718.405589][T18350] should_failslab+0xa8/0x100 [ 718.405619][T18350] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 718.405647][T18350] ? rnbd_clt_map_device_store+0x627/0xd60 [ 718.405763][T18350] ? rnbd_clt_map_device_store+0x627/0xd60 [ 718.405796][T18350] kmemdup_nul+0x36/0xf0 [ 718.405826][T18350] rnbd_clt_map_device_store+0x627/0xd60 [ 718.405859][T18350] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 718.405886][T18350] ? look_up_lock_class+0x57/0x110 [ 718.405947][T18350] ? __lock_acquire+0x6df/0x2e50 [ 718.405999][T18350] ? lock_acquire+0x115/0x350 [ 718.406024][T18350] ? sysfs_file_kobj+0x1a/0x230 [ 718.406056][T18350] ? sysfs_file_kobj+0x1a/0x230 [ 718.406078][T18350] ? sysfs_file_kobj+0x1e4/0x230 [ 718.406100][T18350] ? sysfs_kf_write+0x166/0x260 [ 718.406126][T18350] ? __pfx_sysfs_kf_write+0x10/0x10 [ 718.406146][T18350] kernfs_fop_write_iter+0x3a4/0x540 [ 718.406171][T18350] vfs_write+0x612/0xba0 [ 718.406204][T18350] ? __pfx_vfs_write+0x10/0x10 [ 718.406238][T18350] ? __fget_files+0x2a/0x420 [ 718.406269][T18350] ksys_write+0x150/0x270 [ 718.406295][T18350] ? __pfx_ksys_write+0x10/0x10 [ 718.406330][T18350] do_syscall_64+0x166/0x520 [ 718.406350][T18350] ? trace_irq_disable+0x3b/0x140 [ 718.406374][T18350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.406393][T18350] ? clear_bhb_loop+0x70/0xc0 [ 718.406416][T18350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.406435][T18350] RIP: 0033:0x7f2f8d59e159 [ 718.406453][T18350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.406469][T18350] RSP: 002b:00007f2f8e40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.406490][T18350] RAX: ffffffffffffffda RBX: 00007f2f8d825fa0 RCX: 00007f2f8d59e159 [ 718.406503][T18350] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 0000000000000003 [ 718.406515][T18350] RBP: 00007f2f8e40e090 R08: 0000000000000000 R09: 0000000000000000 [ 718.406527][T18350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.406539][T18350] R13: 00007f2f8d826038 R14: 00007f2f8d825fa0 R15: 00007ffd63ef1aa8 [ 718.406571][T18350] [ 718.418024][T10716] usb usb3-port1: unable to enumerate USB device [ 718.912505][T18361] (syz.6.4111,18361,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 718.912563][T18361] (syz.6.4111,18361,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 719.107253][T18368] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4120'. [ 719.118952][T18369] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4120'. [ 719.136734][T18368] sg_write: data in/out 394205/258 bytes for SCSI command 0x0-- guessing data in; [ 719.136734][T18368] program syz.6.4120 not setting count and/or reply_len properly [ 719.253593][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 719.403529][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 719.473731][T16292] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 719.505380][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 719.513255][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 719.524057][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 719.524107][ T10] usb 8-1: can't read configurations, error -71 [ 719.623460][T16292] usb 7-1: Using ep0 maxpacket: 32 [ 719.625874][T16292] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 719.626958][T16292] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.626985][T16292] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.627019][T16292] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.632006][T16292] usb 7-1: config 0 descriptor?? [ 719.729556][ T20] MTRR: CPU 0: Writing MSR 202 to d0000002:0 failed [ 719.729606][ T23] MTRR: CPU 1: Writing MSR 202 to d0000002:0 failed [ 720.133464][ T189] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 720.203655][T10716] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 720.238538][T16292] usbhid 7-1:0.0: can't add hid device: -71 [ 720.238688][T16292] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 720.260984][T16292] usb 7-1: USB disconnect, device number 109 [ 720.284413][ T189] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 720.295021][ T189] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 720.295067][ T189] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 720.295101][ T189] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 720.297885][ T189] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.297911][ T189] usb 10-1: Product: syz [ 720.297925][ T189] usb 10-1: Manufacturer: syz [ 720.297939][ T189] usb 10-1: SerialNumber: syz [ 720.309493][ T189] usb 10-1: config 0 descriptor?? [ 720.312337][T18379] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 720.326506][T18382] profile_transition: unconfined exec no attachment [ 720.337507][T10716] usb 3-1: device descriptor read/64, error -71 [ 720.413496][ T189] rc_core: IR keymap rc-streamzap not found [ 720.413528][ T189] Registered IR keymap rc-empty [ 720.414850][ T189] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 720.421770][ T189] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input164 [ 720.573510][T10716] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 720.585298][T16292] usb 10-1: USB disconnect, device number 37 [ 720.703573][T10716] usb 3-1: device descriptor read/64, error -71 [ 720.815064][T10716] usb usb3-port1: attempt power cycle [ 721.154115][T10716] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 721.178583][T10716] usb 3-1: device descriptor read/8, error -71 [ 721.207489][T18392] (syz.7.4128,18392,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 721.216519][T18392] (syz.7.4128,18392,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 721.337355][T18397] profile_transition: unconfined exec no attachment [ 721.419279][T10716] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 721.446781][T10716] usb 3-1: device descriptor read/8, error -71 [ 721.463459][T16286] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 721.475451][ T189] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 721.514241][T18399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 721.527959][T18399] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 721.537312][T18399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 721.555015][T10716] usb usb3-port1: unable to enumerate USB device [ 721.561790][T18399] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 721.574831][T18399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 721.603752][T18401] profile_transition: unconfined exec no attachment [ 721.604179][T16286] usb 7-1: device descriptor read/64, error -71 [ 721.626877][ T189] usb 10-1: unable to get BOS descriptor or descriptor too short [ 721.626944][ T189] usb 10-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 721.630307][ T189] usb 10-1: config 3 has an invalid interface number: 249 but max is 0 [ 721.630331][ T189] usb 10-1: config 3 has no interface number 0 [ 721.630359][ T189] usb 10-1: config 3 interface 249 has no altsetting 0 [ 721.639084][ T189] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.639109][ T189] usb 10-1: Product: syz [ 721.639124][ T189] usb 10-1: Manufacturer: syz [ 721.639137][ T189] usb 10-1: SerialNumber: syz [ 721.709788][T18402] profile_transition: unconfined exec no attachment [ 721.775291][T18403] profile_transition: unconfined exec no attachment [ 721.828851][T18404] profile_transition: unconfined exec no attachment [ 721.856844][T16286] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 721.902159][T18396] bonding: m is being created... [ 721.908378][T12284] syz_tun (unregistering): left allmulticast mode [ 721.970017][T18406] profile_transition: unconfined exec no attachment [ 721.985548][ T189] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 721.999947][ T189] gspca_sn9c2028: read1 error -71 [ 722.003436][T16286] usb 7-1: device descriptor read/64, error -71 [ 722.010244][T18407] profile_transition: unconfined exec no attachment [ 722.012124][ T189] gspca_sn9c2028: read1 error -71 [ 722.025254][ T189] gspca_sn9c2028: read1 error -71 [ 722.030873][ T189] sn9c2028 10-1:3.249: probe with driver sn9c2028 failed with error -71 [ 722.044957][ T189] usb 10-1: USB disconnect, device number 38 [ 722.091826][T18408] profile_transition: unconfined exec no attachment [ 722.111648][T16286] usb usb7-port1: attempt power cycle [ 722.150257][T18409] profile_transition: unconfined exec no attachment [ 722.404486][T18412] profile_transition: unconfined exec no attachment [ 722.446176][T16286] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 722.470635][T16286] usb 7-1: device descriptor read/8, error -71 [ 722.703932][T16286] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 722.724152][T16286] usb 7-1: device descriptor read/8, error -71 [ 722.729281][T18398] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.729451][T18398] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.729588][T18398] bridge_slave_0: entered allmulticast mode [ 722.731468][T18398] bridge_slave_0: entered promiscuous mode [ 722.735019][T18398] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.735163][T18398] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.735283][T18398] bridge_slave_1: entered allmulticast mode [ 722.737197][T18398] bridge_slave_1: entered promiscuous mode [ 722.772068][T18398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.776115][T18398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.822402][T18398] team0: Port device team_slave_0 added [ 722.832021][T18398] team0: Port device team_slave_1 added [ 722.843947][T16286] usb usb7-port1: unable to enumerate USB device [ 722.902379][T18398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.902419][T18398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.902474][T18398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.952020][T18398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.960308][T18398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.989712][T18398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.033742][T18424] FAULT_INJECTION: forcing a failure. [ 723.033742][T18424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.033794][T18424] CPU: 0 UID: 0 PID: 18424 Comm: syz.2.4137 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.033823][T18424] Tainted: [L]=SOFTLOCKUP [ 723.033830][T18424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 723.033842][T18424] Call Trace: [ 723.033851][T18424] [ 723.033860][T18424] dump_stack_lvl+0xe8/0x150 [ 723.033891][T18424] should_fail_ex+0x3eb/0x540 [ 723.033926][T18424] _copy_from_iter+0x1d3/0x1660 [ 723.033956][T18424] ? __alloc_skb+0x27a/0x7a0 [ 723.033982][T18424] ? __alloc_skb+0x27a/0x7a0 [ 723.034006][T18424] ? __alloc_skb+0x27a/0x7a0 [ 723.034028][T18424] ? __pfx__copy_from_iter+0x10/0x10 [ 723.034056][T18424] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 723.034081][T18424] ? __alloc_skb+0x27a/0x7a0 [ 723.034102][T18424] ? __alloc_skb+0x27a/0x7a0 [ 723.034131][T18424] ? netlink_sendmsg+0x650/0xb40 [ 723.034160][T18424] ? skb_put+0x112/0x210 [ 723.034187][T18424] netlink_sendmsg+0x6c0/0xb40 [ 723.034229][T18424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.034268][T18424] ? apparmor_socket_sendmsg+0x98/0x360 [ 723.034300][T18424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.034329][T18424] sock_sendmsg_nosec+0x13a/0x180 [ 723.034364][T18424] ____sys_sendmsg+0x54e/0x850 [ 723.034397][T18424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.034433][T18424] ? import_iovec+0x73/0xa0 [ 723.034457][T18424] ___sys_sendmsg+0x2a5/0x360 [ 723.034482][T18424] ? __lock_acquire+0x6df/0x2e50 [ 723.034515][T18424] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.034578][T18424] ? __fget_files+0x2a/0x420 [ 723.034602][T18424] ? __fget_files+0x3a2/0x420 [ 723.034645][T18424] __x64_sys_sendmsg+0x1b1/0x290 [ 723.034675][T18424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 723.034724][T18424] do_syscall_64+0x166/0x520 [ 723.034748][T18424] ? trace_irq_disable+0x3b/0x140 [ 723.034777][T18424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.034798][T18424] ? clear_bhb_loop+0x70/0xc0 [ 723.034825][T18424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.034846][T18424] RIP: 0033:0x7fa09bf9e159 [ 723.034866][T18424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.034885][T18424] RSP: 002b:00007fa09cf22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.034909][T18424] RAX: ffffffffffffffda RBX: 00007fa09c225fa0 RCX: 00007fa09bf9e159 [ 723.034924][T18424] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000006 [ 723.034938][T18424] RBP: 00007fa09cf22090 R08: 0000000000000000 R09: 0000000000000000 [ 723.034952][T18424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.034966][T18424] R13: 00007fa09c226038 R14: 00007fa09c225fa0 R15: 00007fffd98e4b58 [ 723.034999][T18424] [ 723.069923][T18398] hsr_slave_0: entered promiscuous mode [ 723.070900][T18398] hsr_slave_1: entered promiscuous mode [ 723.071591][T18398] debugfs: 'hsr0' already exists in 'hsr' [ 723.071610][T18398] Cannot create hsr debugfs directory [ 723.118219][T10716] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 723.395340][T18430] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4138'. [ 723.405595][T18430] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4138'. [ 723.416308][T10716] usb 10-1: Using ep0 maxpacket: 8 [ 723.576755][T10716] usb 10-1: unable to get BOS descriptor or descriptor too short [ 723.576840][T10716] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 723.577686][T10716] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 723.577717][T10716] usb 10-1: can't read configurations, error -71 [ 723.608154][T18398] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.634144][ T52] Bluetooth: hci1: command tx timeout [ 723.700235][T18398] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.783288][T18398] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.783872][T16286] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 723.851449][T18398] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.923922][T16286] usb 3-1: device descriptor read/64, error -71 [ 724.007921][T18398] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 724.018637][T18398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.019572][T18398] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 724.037609][T18398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.038521][T18398] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 724.048139][T18398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.062420][T18398] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 724.071592][T18398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.164689][T16286] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 724.189853][T18398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.227876][T18398] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.250727][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.250885][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.254818][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.254910][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.303844][T16286] usb 3-1: device descriptor read/64, error -71 [ 724.413923][T16286] usb usb3-port1: attempt power cycle [ 724.655213][ T989] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 724.730998][T18464] program syz.9.4146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 724.753627][T16286] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 724.774294][T16286] usb 3-1: device descriptor read/8, error -71 [ 724.815285][ T989] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 724.816711][ T989] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13056, setting to 1024 [ 724.816740][ T989] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 724.819048][ T989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.819080][ T989] usb 7-1: Product: syz [ 724.819094][ T989] usb 7-1: Manufacturer: syz [ 724.819107][ T989] usb 7-1: SerialNumber: syz [ 724.823094][T18448] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 724.825249][ T989] usb 7-1: NFC: intf ffff88807c600000 id ffffffff8fa6f120 [ 724.938153][ T989] nfcmrvl 7-1:1.0: NFC: registered with nci successfully [ 724.984864][T18398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.013529][T16286] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 725.021285][T10716] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 725.035458][T16286] usb 3-1: device descriptor read/8, error -71 [ 725.054910][T18448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.055444][T18448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.143967][T16286] usb usb3-port1: unable to enumerate USB device [ 725.175856][T10716] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 725.189192][T10716] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.189266][T10716] usb 10-1: Product: syz [ 725.189605][T10716] usb 10-1: Manufacturer: syz [ 725.189621][T10716] usb 10-1: SerialNumber: syz [ 725.261638][T10716] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 725.289935][ T50] nfcmrvl 7-1:1.0: NFC: send entry, len 4 [ 725.299232][ C0] nfcmrvl 7-1:1.0: NFC: urb ffff888034396c00 status -71 count 0 [ 725.330618][T18398] veth0_vlan: entered promiscuous mode [ 725.341461][T18398] veth1_vlan: entered promiscuous mode [ 725.381242][T18398] veth0_macvtap: entered promiscuous mode [ 725.386327][T18398] veth1_macvtap: entered promiscuous mode [ 725.402699][T18398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.408820][T18398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.433739][T10245] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.448578][T10245] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.473717][T10245] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.484045][T10245] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.493230][T18464] x_tables: duplicate underflow at hook 2 [ 725.698494][T16286] usb 10-1: USB disconnect, device number 41 [ 725.713664][ T52] Bluetooth: hci1: command tx timeout [ 726.354201][T10716] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 726.354439][T10716] ath9k_htc: Failed to initialize the device [ 726.367726][T16286] usb 10-1: ath9k_htc: USB layer deinitialized [ 726.663510][T16286] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 726.813666][T16286] usb 10-1: Using ep0 maxpacket: 8 [ 726.933491][T16292] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 727.063525][T16292] usb 3-1: device descriptor read/64, error -71 [ 727.303818][T16292] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 727.321971][T18448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.356565][ T10] usb 7-1: USB disconnect, device number 114 [ 727.384021][ T10] usb 7-1: NFC: intf ffff88807c600000 [ 727.439420][T16292] usb 3-1: device descriptor read/64, error -71 [ 727.441204][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.441242][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.547109][T16292] usb usb3-port1: attempt power cycle [ 727.607688][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.616042][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.788407][T16286] usb 10-1: unable to get BOS descriptor or descriptor too short [ 727.788482][T16286] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 727.789390][T16286] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 727.789430][T16286] usb 10-1: can't read configurations, error -71 [ 727.811989][ T52] Bluetooth: hci1: command tx timeout [ 728.024062][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 728.053555][T16292] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 728.075690][T16292] usb 3-1: device descriptor read/8, error -71 [ 728.188732][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 728.206107][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.206145][ T10] usb 8-1: Product: syz [ 728.206503][ T10] usb 8-1: Manufacturer: syz [ 728.206518][ T10] usb 8-1: SerialNumber: syz [ 728.224535][ T5763] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 728.313520][T16292] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 728.334112][T16292] usb 3-1: device descriptor read/8, error -71 [ 728.374586][ T5763] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 728.376283][ T5763] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.376332][ T5763] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.381957][ T5763] usb 7-1: config 0 descriptor?? [ 728.443780][T16292] usb usb3-port1: unable to enumerate USB device [ 728.591509][T10716] usb 7-1: USB disconnect, device number 115 [ 728.621521][T18488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.632156][T18488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.993558][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 729.033493][ T5702] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 729.187604][ T5702] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 729.189308][ T5702] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.189358][ T5702] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.199250][ T5702] usb 7-1: config 0 descriptor?? [ 729.409457][T18492] aa_policy_admin_capable: cap_mac_admin? 1 [ 729.409485][T18492] aa_policy_admin_capable: policy locked? 0 [ 729.884789][T18399] Bluetooth: hci1: command tx timeout [ 730.075352][T18511] FAULT_INJECTION: forcing a failure. [ 730.075352][T18511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.090351][T18511] CPU: 0 UID: 0 PID: 18511 Comm: syz.9.4158 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.090386][T18511] Tainted: [L]=SOFTLOCKUP [ 730.090394][T18511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.090406][T18511] Call Trace: [ 730.090414][T18511] [ 730.090423][T18511] dump_stack_lvl+0xe8/0x150 [ 730.090459][T18511] should_fail_ex+0x3eb/0x540 [ 730.090494][T18511] _copy_to_user+0x31/0xb0 [ 730.090519][T18511] simple_read_from_buffer+0xe1/0x170 [ 730.090549][T18511] proc_fail_nth_read+0x1bb/0x230 [ 730.090586][T18511] ? common_file_perm+0x20e/0x2b0 [ 730.090616][T18511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 730.090635][T18511] ? rw_verify_area+0x24a/0x4c0 [ 730.090651][T18511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 730.090667][T18511] vfs_read+0x213/0xa80 [ 730.090685][T18511] ? __pfx___mutex_lock+0x10/0x10 [ 730.090700][T18511] ? __pfx_vfs_read+0x10/0x10 [ 730.090716][T18511] ? __fget_files+0x2a/0x420 [ 730.090733][T18511] ? __fget_files+0x3a2/0x420 [ 730.090746][T18511] ? __fget_files+0x2a/0x420 [ 730.090764][T18511] ksys_read+0x150/0x270 [ 730.090781][T18511] ? __pfx_ksys_read+0x10/0x10 [ 730.090803][T18511] do_syscall_64+0x166/0x520 [ 730.090816][T18511] ? trace_irq_disable+0x3b/0x140 [ 730.090833][T18511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.090845][T18511] ? clear_bhb_loop+0x70/0xc0 [ 730.090861][T18511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.090873][T18511] RIP: 0033:0x7f4595b5e98e [ 730.090886][T18511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 730.090896][T18511] RSP: 002b:00007f4596acbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 730.090912][T18511] RAX: ffffffffffffffda RBX: 00007f4596acc6c0 RCX: 00007f4595b5e98e [ 730.090922][T18511] RDX: 000000000000000f RSI: 00007f4596acc0a0 RDI: 0000000000000003 [ 730.090930][T18511] RBP: 00007f4596acc090 R08: 0000000000000000 R09: 0000000000000000 [ 730.090937][T18511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.090945][T18511] R13: 00007f4595e26038 R14: 00007f4595e25fa0 R15: 00007ffe191d4128 [ 730.090964][T18511] [ 730.333493][ T5763] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 730.484916][ T5763] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 730.486330][ T5763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13056, setting to 1024 [ 730.486359][ T5763] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 730.488888][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.488909][ T5763] usb 3-1: Product: syz [ 730.488923][ T5763] usb 3-1: Manufacturer: syz [ 730.488963][ T5763] usb 3-1: SerialNumber: syz [ 730.495722][T18512] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 730.499301][ T5763] usb 3-1: NFC: intf ffff88804bbd3000 id ffffffff8fa6f120 [ 730.538486][ T5763] nfcmrvl 3-1:1.0: NFC: registered with nci successfully [ 730.553711][T10716] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 730.703538][T10716] usb 10-1: Using ep0 maxpacket: 32 [ 730.711988][T10716] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 730.723638][T10716] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.723687][T10716] usb 10-1: config 0 has no interfaces? [ 730.742477][T18512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.745556][T10716] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.745582][T10716] usb 10-1: Product: syz [ 730.745596][T10716] usb 10-1: Manufacturer: syz [ 730.745609][T10716] usb 10-1: SerialNumber: syz [ 730.751653][T18512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.779324][T10716] usb 10-1: config 0 descriptor?? [ 730.791866][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 730.791979][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 730.804561][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 730.804617][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 730.828676][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 730.842335][ T10] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 730.870772][ T10] usb 8-1: USB disconnect, device number 18 [ 730.917641][T16286] usb 7-1: USB disconnect, device number 116 [ 731.007413][ T1151] nfcmrvl 3-1:1.0: NFC: send entry, len 4 [ 731.008375][ C0] nfcmrvl 3-1:1.0: NFC: urb ffff88802978cd00 status -71 count 0 [ 731.060956][T18527] FAULT_INJECTION: forcing a failure. [ 731.060956][T18527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.061052][T18527] CPU: 0 UID: 0 PID: 18527 Comm: syz.7.4162 Tainted: G L syzkaller #0 PREEMPT(full) [ 731.061080][T18527] Tainted: [L]=SOFTLOCKUP [ 731.061086][T18527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 731.061096][T18527] Call Trace: [ 731.061104][T18527] [ 731.061113][T18527] dump_stack_lvl+0xe8/0x150 [ 731.061148][T18527] should_fail_ex+0x3eb/0x540 [ 731.061180][T18527] _copy_from_user+0x2d/0xb0 [ 731.061202][T18527] copy_from_sockptr+0x48/0x70 [ 731.061316][T18527] ip_mroute_setsockopt+0x839/0x10d0 [ 731.061348][T18527] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 731.061372][T18527] ? get_pid_task+0x20/0x1f0 [ 731.061395][T18527] ? get_pid_task+0x20/0x1f0 [ 731.061438][T18527] do_ip_setsockopt+0xeba/0x2e30 [ 731.061479][T18527] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 731.061506][T18527] ? lock_acquire+0x115/0x350 [ 731.061543][T18527] ? aa_sock_opt_perm+0xe8/0x1e0 [ 731.061575][T18527] ip_setsockopt+0x66/0x110 [ 731.061595][T18527] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 731.061618][T18527] do_sock_setsockopt+0x17c/0x1b0 [ 731.061647][T18527] __x64_sys_setsockopt+0x13d/0x1b0 [ 731.061676][T18527] do_syscall_64+0x166/0x520 [ 731.061696][T18527] ? trace_irq_disable+0x3b/0x140 [ 731.061721][T18527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.061740][T18527] ? clear_bhb_loop+0x70/0xc0 [ 731.061764][T18527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.061783][T18527] RIP: 0033:0x7f1689d9e159 [ 731.061803][T18527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.061820][T18527] RSP: 002b:00007f168ac32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 731.061841][T18527] RAX: ffffffffffffffda RBX: 00007f168a025fa0 RCX: 00007f1689d9e159 [ 731.061856][T18527] RDX: 00000000000000cc RSI: 0000000000000000 RDI: 0000000000000003 [ 731.061869][T18527] RBP: 00007f168ac32090 R08: 000000000000003c R09: 0000000000000000 [ 731.061881][T18527] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 731.061895][T18527] R13: 00007f168a026038 R14: 00007f168a025fa0 R15: 00007ffce5ab2318 [ 731.061926][T18527] [ 731.312560][T18535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4165'. [ 731.406705][T18541] FAULT_INJECTION: forcing a failure. [ 731.406705][T18541] name failslab, interval 1, probability 0, space 0, times 0 [ 731.420373][T18541] CPU: 1 UID: 0 PID: 18541 Comm: syz.7.4166 Tainted: G L syzkaller #0 PREEMPT(full) [ 731.420407][T18541] Tainted: [L]=SOFTLOCKUP [ 731.420415][T18541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 731.420427][T18541] Call Trace: [ 731.420436][T18541] [ 731.420445][T18541] dump_stack_lvl+0xe8/0x150 [ 731.420479][T18541] should_fail_ex+0x3eb/0x540 [ 731.420515][T18541] should_failslab+0xa8/0x100 [ 731.420539][T18541] __kmalloc_noprof+0xfe/0x720 [ 731.420564][T18541] ? rcu_is_watching+0x16/0xb0 [ 731.420586][T18541] ? tomoyo_realpath_from_path+0xef/0x640 [ 731.420607][T18541] ? tomoyo_realpath_from_path+0xef/0x640 [ 731.420636][T18541] tomoyo_realpath_from_path+0xef/0x640 [ 731.420668][T18541] ? tomoyo_path_number_perm+0x219/0x5f0 [ 731.420696][T18541] tomoyo_path_number_perm+0x246/0x5f0 [ 731.420728][T18541] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 731.420756][T18541] ? __lock_acquire+0x6df/0x2e50 [ 731.420802][T18541] ? hook_file_ioctl+0x1f2/0x600 [ 731.420852][T18541] ? __fget_files+0x2a/0x420 [ 731.420880][T18541] ? __fget_files+0x2a/0x420 [ 731.420901][T18541] ? __fget_files+0x3a2/0x420 [ 731.420923][T18541] ? __fget_files+0x2a/0x420 [ 731.420962][T18541] security_file_ioctl+0xc3/0x2a0 [ 731.420991][T18541] __se_sys_ioctl+0x47/0x170 [ 731.421028][T18541] do_syscall_64+0x166/0x520 [ 731.421058][T18541] ? trace_irq_disable+0x3b/0x140 [ 731.421087][T18541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.421108][T18541] ? clear_bhb_loop+0x70/0xc0 [ 731.421133][T18541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.421154][T18541] RIP: 0033:0x7f1689d9e159 [ 731.421174][T18541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.421193][T18541] RSP: 002b:00007f168ac32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.421216][T18541] RAX: ffffffffffffffda RBX: 00007f168a025fa0 RCX: 00007f1689d9e159 [ 731.421232][T18541] RDX: 0000200000000140 RSI: 00000000000089e1 RDI: 0000000000000003 [ 731.421246][T18541] RBP: 00007f168ac32090 R08: 0000000000000000 R09: 0000000000000000 [ 731.421259][T18541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.421271][T18541] R13: 00007f168a026038 R14: 00007f168a025fa0 R15: 00007ffce5ab2318 [ 731.421305][T18541] [ 731.432534][T18541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 731.623818][ T10] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 731.679223][T18545] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 731.773605][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 731.779860][ T10] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=d8.41 [ 731.782713][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 731.782748][ T10] usb 7-1: can't read configurations, error -61 [ 731.819231][T18548] profile_transition: 17 callbacks suppressed [ 731.819268][T18548] profile_transition: unconfined exec no attachment [ 731.857572][T18547] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 731.857644][T18547] md: pers->run() failed ... [ 731.913638][ T10] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 732.063486][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 732.064498][ T10] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=d8.41 [ 732.066281][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 732.066315][ T10] usb 7-1: can't read configurations, error -61 [ 732.066880][ T10] usb usb7-port1: attempt power cycle [ 732.404084][ T10] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 732.424572][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 732.425492][ T10] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=d8.41 [ 732.427772][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 732.427806][ T10] usb 7-1: can't read configurations, error -61 [ 732.553507][ T10] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 732.574396][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 732.580222][ T10] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=d8.41 [ 732.582363][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 732.582439][ T10] usb 7-1: can't read configurations, error -61 [ 732.583049][ T10] usb usb7-port1: unable to enumerate USB device [ 732.597676][ T5763] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 732.747130][ T5763] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 732.759393][ T5763] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.759426][ T5763] usb 8-1: Product: syz [ 732.759865][ T5763] usb 8-1: Manufacturer: syz [ 732.759881][ T5763] usb 8-1: SerialNumber: syz [ 732.772807][ T5763] usb 8-1: config 0 descriptor?? [ 732.779723][ T5763] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 732.979960][T18566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.980620][T18566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.981801][T18566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.982363][T18566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.984091][T18566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.984620][T18566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.986436][T18566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.986999][T18566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.988169][T18566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.988745][T18566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.025963][ T5763] gspca_stk1135: reg_w 0x2 err -71 [ 733.029555][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 733.029571][ T5763] gspca_stk1135: Sensor write failed [ 733.029594][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 733.029604][ T5763] gspca_stk1135: Sensor write failed [ 733.029655][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 733.029665][ T5763] gspca_stk1135: Sensor read failed [ 733.029687][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 733.029697][ T5763] gspca_stk1135: Sensor read failed [ 733.029703][ T5763] gspca_stk1135: Detected sensor type unknown (0x0) [ 733.029731][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 733.029740][ T5763] gspca_stk1135: Sensor read failed [ 733.029787][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 733.029796][ T5763] gspca_stk1135: Sensor read failed [ 733.029820][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 733.029829][ T5763] gspca_stk1135: Sensor write failed [ 733.029851][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 733.029861][ T5763] gspca_stk1135: Sensor write failed [ 733.029961][ T5763] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 733.040427][ T5763] usb 8-1: USB disconnect, device number 19 [ 733.052603][T18512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 733.119356][ T5702] usb 3-1: USB disconnect, device number 37 [ 733.132734][ T5702] usb 3-1: NFC: intf ffff88804bbd3000 [ 733.903519][ T989] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 734.053444][ T989] usb 8-1: Invalid ep0 maxpacket: 16 [ 734.183934][ T989] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 734.274169][T18587] Trying to write to read-only block-device nullb0 [ 734.333472][ T989] usb 8-1: Invalid ep0 maxpacket: 16 [ 734.333860][ T989] usb usb8-port1: attempt power cycle [ 734.375568][T18591] profile_transition: unconfined exec no attachment [ 734.377231][T18591] [ 734.386157][T18591] ====================================================== [ 734.393254][T18591] WARNING: possible circular locking dependency detected [ 734.400380][T18591] syzkaller #0 Tainted: G L [ 734.406376][T18591] ------------------------------------------------------ [ 734.413384][T18591] syz.2.4182/18591 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 734.419459][T18591] ffff888033492bb8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_file_truncate+0xb6/0x170 [ 734.429814][T18591] [ 734.429814][T18591] but task is already holding lock: [ 734.437199][T18591] ffff8880780be460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 734.445973][T18591] [ 734.445973][T18591] which lock already depends on the new lock. [ 734.445973][T18591] [ 734.456392][T18591] [ 734.456392][T18591] the existing dependency chain (in reverse order) is: [ 734.465426][T18591] [ 734.465426][T18591] -> #3 (sb_writers#5){.+.+}-{0:0}: [ 734.472841][T18591] sb_start_write+0x4d/0x1d0 [ 734.477964][T18591] mnt_want_write+0x41/0x90 [ 734.483001][T18591] lookup_open+0x1e6/0x1a40 [ 734.488048][T18591] path_openat+0x677/0x1d60 [ 734.493197][T18591] do_file_open+0x23e/0x4a0 [ 734.498326][T18591] filp_open+0x16d/0x1d0 [ 734.503121][T18591] nvmet_file_ns_enable+0x74/0x350 [ 734.508902][T18591] nvmet_ns_enable+0xaa/0x780 [ 734.514112][T18591] nvmet_ns_enable_store+0xd7/0x170 [ 734.519840][T18591] configfs_write_iter+0x337/0x430 [ 734.525577][T18591] vfs_write+0x612/0xba0 [ 734.530347][T18591] ksys_write+0x150/0x270 [ 734.535205][T18591] do_syscall_64+0x166/0x520 [ 734.540322][T18591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.546767][T18591] [ 734.546767][T18591] -> #2 (&subsys->lock){+.+.}-{4:4}: [ 734.554281][T18591] __mutex_lock+0x19d/0x1550 [ 734.559488][T18591] nvmet_ns_buffered_io_store+0xe1/0x200 [ 734.565662][T18591] configfs_write_iter+0x337/0x430 [ 734.571326][T18591] vfs_write+0x612/0xba0 [ 734.576105][T18591] ksys_write+0x150/0x270 [ 734.581000][T18591] do_syscall_64+0x166/0x520 [ 734.586133][T18591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.592559][T18591] [ 734.592559][T18591] -> #1 (&p->frag_sem){++++}-{4:4}: [ 734.599949][T18591] down_read+0x4a/0x330 [ 734.604627][T18591] __configfs_open_file+0xd8/0x7d0 [ 734.610263][T18591] do_dentry_open+0x816/0x1380 [ 734.615550][T18591] vfs_open+0x3b/0x340 [ 734.620144][T18591] dentry_open+0x61/0xa0 [ 734.624927][T18591] ima_calc_file_hash+0x15f/0x890 [ 734.630506][T18591] ima_collect_measurement+0x51b/0xa00 [ 734.636594][T18591] process_measurement+0x1272/0x1c10 [ 734.642503][T18591] ima_file_check+0xe1/0x130 [ 734.647801][T18591] security_file_post_open+0xb3/0x260 [ 734.653703][T18591] path_openat+0x1485/0x1d60 [ 734.658830][T18591] do_file_open+0x23e/0x4a0 [ 734.663947][T18591] do_sys_openat2+0x115/0x200 [ 734.669150][T18591] __x64_sys_openat+0x138/0x170 [ 734.674523][T18591] do_syscall_64+0x166/0x520 [ 734.679724][T18591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.686142][T18591] [ 734.686142][T18591] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 734.694754][T18591] __lock_acquire+0x15ff/0x2e50 [ 734.700136][T18591] lock_acquire+0x115/0x350 [ 734.705172][T18591] __mutex_lock+0x19d/0x1550 [ 734.710289][T18591] ima_file_truncate+0xb6/0x170 [ 734.715664][T18591] security_file_truncate+0x118/0x240 [ 734.721564][T18591] path_openat+0x1569/0x1d60 [ 734.726681][T18591] do_file_open+0x23e/0x4a0 [ 734.731712][T18591] do_sys_openat2+0x115/0x200 [ 734.736918][T18591] __x64_sys_creat+0x8f/0xc0 [ 734.742159][T18591] do_syscall_64+0x166/0x520 [ 734.747298][T18591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.753745][T18591] [ 734.753745][T18591] other info that might help us debug this: [ 734.753745][T18591] [ 734.764074][T18591] Chain exists of: [ 734.764074][T18591] &ima_iint_mutex_key[depth] --> &subsys->lock --> sb_writers#5 [ 734.764074][T18591] [ 734.777661][T18591] Possible unsafe locking scenario: [ 734.777661][T18591] [ 734.785117][T18591] CPU0 CPU1 [ 734.790718][T18591] ---- ---- [ 734.796083][T18591] rlock(sb_writers#5); [ 734.800336][T18591] lock(&subsys->lock); [ 734.807101][T18591] lock(sb_writers#5); [ 734.813785][T18591] lock(&ima_iint_mutex_key[depth]); [ 734.819162][T18591] [ 734.819162][T18591] *** DEADLOCK *** [ 734.819162][T18591] [ 734.827304][T18591] locks held by syz.2.4182/18591: 1, last CPU#0: [ 734.833632][T18591] #0: ffff8880780be460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 734.842877][T18591] [ 734.842877][T18591] stack backtrace: [ 734.848774][T18591] CPU: 0 UID: 0 PID: 18591 Comm: syz.2.4182 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.859713][T18591] Tainted: [L]=SOFTLOCKUP [ 734.864037][T18591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 734.874099][T18591] Call Trace: [ 734.877380][T18591] [ 734.880318][T18591] dump_stack_lvl+0xe8/0x150 [ 734.885024][T18591] print_circular_bug+0x2e2/0x300 [ 734.890072][T18591] check_noncircular+0x12f/0x150 [ 734.895044][T18591] __lock_acquire+0x15ff/0x2e50 [ 734.899954][T18591] ? kasan_quarantine_put+0xbb/0x1f0 [ 734.905260][T18591] lock_acquire+0x115/0x350 [ 734.909780][T18591] ? ima_file_truncate+0xb6/0x170 [ 734.914812][T18591] __mutex_lock+0x19d/0x1550 [ 734.919419][T18591] ? ima_file_truncate+0xb6/0x170 [ 734.924562][T18591] ? ima_file_truncate+0xb6/0x170 [ 734.929604][T18591] ? __pfx___mutex_lock+0x10/0x10 [ 734.934644][T18591] ? apparmor_file_truncate+0x39f/0x470 [ 734.940218][T18591] ? __pfx_apparmor_file_truncate+0x10/0x10 [ 734.946121][T18591] ima_file_truncate+0xb6/0x170 [ 734.950979][T18591] security_file_truncate+0x118/0x240 [ 734.956363][T18591] path_openat+0x1569/0x1d60 [ 734.960969][T18591] do_file_open+0x23e/0x4a0 [ 734.965487][T18591] ? __pfx_do_file_open+0x10/0x10 [ 734.970529][T18591] ? _raw_spin_unlock+0x28/0x50 [ 734.975389][T18591] ? alloc_fd+0x651/0x6c0 [ 734.979750][T18591] do_sys_openat2+0x115/0x200 [ 734.984432][T18591] ? __se_sys_futex+0x3a8/0x450 [ 734.989288][T18591] ? __pfx_do_sys_openat2+0x10/0x10 [ 734.994489][T18591] ? __pfx___se_sys_futex+0x10/0x10 [ 734.999718][T18591] ? rcu_is_watching+0x16/0xb0 [ 735.004571][T18591] __x64_sys_creat+0x8f/0xc0 [ 735.009164][T18591] do_syscall_64+0x166/0x520 [ 735.013756][T18591] ? trace_irq_disable+0x3b/0x140 [ 735.018790][T18591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.024884][T18591] ? clear_bhb_loop+0x70/0xc0 [ 735.029652][T18591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.035547][T18591] RIP: 0033:0x7fa09bf9e159 [ 735.039966][T18591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.059590][T18591] RSP: 002b:00007fa09cf22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 735.068036][T18591] RAX: ffffffffffffffda RBX: 00007fa09c225fa0 RCX: 00007fa09bf9e159 [ 735.076024][T18591] RDX: 0000000000000000 RSI: 0000000000000024 RDI: 00002000000000c0 [ 735.084003][T18591] RBP: 00007fa09c035024 R08: 0000000000000000 R09: 0000000000000000 [ 735.091981][T18591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.099954][T18591] R13: 00007fa09c226038 R14: 00007fa09c225fa0 R15: 00007fffd98e4b58 [ 735.107939][T18591] [ 735.243663][ T989] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 735.608082][ T5763] usb 10-1: USB disconnect, device number 44 [ 735.621586][ T1172] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.694888][ T989] usb 8-1: device descriptor read/8, error -71 [ 735.737055][ T1172] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.769676][ T1172] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.830611][ T1172] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.909095][ T1172] bridge_slave_1: left allmulticast mode [ 735.915378][ T1172] bridge_slave_1: left promiscuous mode [ 735.921226][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.929481][ T1172] bridge_slave_0: left allmulticast mode [ 735.929512][ T1172] bridge_slave_0: left promiscuous mode [ 735.929663][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.990119][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.004398][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.013970][ T1172] bond0 (unregistering): Released all slaves [ 736.016679][ T1172] m (unregistering): Released all slaves [ 736.028399][T18594] profile_transition: unconfined exec no attachment [ 736.049848][T18595] profile_transition: unconfined exec no attachment [ 736.105887][T18598] profile_transition: unconfined exec no attachment [ 736.144635][T18600] profile_transition: unconfined exec no attachment [ 736.182014][T18603] profile_transition: unconfined exec no attachment [ 736.232313][T18605] profile_transition: unconfined exec no attachment [ 736.256881][ T1172] hsr_slave_0: left promiscuous mode [ 736.270956][ T1172] hsr_slave_1: left promiscuous mode [ 736.278456][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.279670][T18606] profile_transition: unconfined exec no attachment [ 736.286020][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.301509][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.310808][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.313284][T18607] profile_transition: unconfined exec no attachment [ 736.321555][ T1172] veth1_macvtap: left promiscuous mode [ 736.328483][ T1172] veth0_macvtap: left promiscuous mode [ 736.328586][ T1172] veth1_vlan: left promiscuous mode [ 736.328636][ T1172] veth0_vlan: left promiscuous mode [ 736.428571][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 736.438024][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 736.478847][ T5278] 8021q: adding VLAN 0 to HW filter on device eth25 [ 736.741487][ T1172] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.769677][ T1172] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.812197][ T1172] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.835451][ T1172] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.851441][T18621] profile_transition: 7 callbacks suppressed [ 736.851473][T18621] profile_transition: unconfined exec no attachment [ 736.875126][ T5278] 8021q: adding VLAN 0 to HW filter on device eth26 [ 736.888982][T18622] profile_transition: unconfined exec no attachment [ 736.925684][T18623] profile_transition: unconfined exec no attachment [ 736.967751][ T1172] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.991854][T18626] profile_transition: unconfined exec no attachment [ 737.018236][ T1172] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.027462][T18628] profile_transition: unconfined exec no attachment [ 737.063178][T18631] profile_transition: unconfined exec no attachment [ 737.098866][ T1172] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.118266][T18633] profile_transition: unconfined exec no attachment [ 737.138412][T18634] profile_transition: unconfined exec no attachment [ 737.149820][ T1172] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.182231][T18635] profile_transition: unconfined exec no attachment [ 737.224209][ T5278] 8021q: adding VLAN 0 to HW filter on device eth27 [ 737.255994][ T1172] bridge_slave_1: left allmulticast mode [ 737.256036][ T1172] bridge_slave_1: left promiscuous mode [ 737.256171][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.259332][T18636] profile_transition: unconfined exec no attachment [ 737.268163][ T1172] : left allmulticast mode [ 737.268188][ T1172] : left promiscuous mode [ 737.268351][ T1172] bridge0: port 1(1) entered disabled state [ 737.298698][ T1172] bridge_slave_1: left allmulticast mode [ 737.298721][ T1172] bridge_slave_1: left promiscuous mode [ 737.298857][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.308435][ T1172] bridge_slave_0: left allmulticast mode [ 737.308457][ T1172] bridge_slave_0: left promiscuous mode [ 737.308582][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.487727][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.499619][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.500781][ T1172] bond0 (unregistering): Released all slaves [ 737.645897][ T5278] 8021q: adding VLAN 0 to HW filter on device eth28 [ 737.865032][ T1172] hsr_slave_0: left promiscuous mode [ 737.870933][ T1172] hsr_slave_1: left promiscuous mode [ 737.877406][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.885434][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.885455][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.904094][ T1172] hsr_slave_0: left promiscuous mode [ 737.909970][ T1172] hsr_slave_1: left promiscuous mode [ 737.916311][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.923893][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.924634][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.924653][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.954416][ T1172] veth1_macvtap: left promiscuous mode [ 737.960115][ T1172] veth0_macvtap: left promiscuous mode [ 737.967386][ T1172] veth1_vlan: left promiscuous mode [ 737.972725][ T1172] veth0_vlan: left promiscuous mode [ 737.979281][ T1172] veth1_macvtap: left promiscuous mode [ 737.985506][ T1172] veth0_macvtap: left promiscuous mode [ 737.988155][ T1172] veth1_vlan: left promiscuous mode [ 737.988205][ T1172] veth0_vlan: left promiscuous mode [ 738.111331][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 738.120983][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 738.219301][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 738.228560][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 738.269397][ T5278] 8021q: adding VLAN 0 to HW filter on device eth29 [ 738.716773][ T1172] IPVS: stop unused estimator thread 0... [ 738.746699][ T5278] 8021q: adding VLAN 0 to HW filter on device eth30 [ 739.000253][ T5278] 8021q: adding VLAN 0 to HW filter on device eth31 [ 739.242948][ T5278] 8021q: adding VLAN 0 to HW filter on device eth32 [ 739.477535][ T5278] 8021q: adding VLAN 0 to HW filter on device eth33 [ 739.699604][ T5278] 8021q: adding VLAN 0 to HW filter on device eth34 [ 739.931791][ T5278] 8021q: adding VLAN 0 to HW filter on device eth35 [ 740.166007][ T5278] 8021q: adding VLAN 0 to HW filter on device eth36