last executing test programs: 3m53.329041524s ago: executing program 1 (id=737): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x405, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}}, 0x0) 3m45.016712144s ago: executing program 1 (id=748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x840) r4 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_read(r4, 0x1, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x40, &(0x7f0000000040)="900100"/64) r5 = socket(0x1d, 0x2, 0x6) r6 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000180)={0x2e, 0x66, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x33f81def, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000200)) syz_open_dev$sndctrl(&(0x7f0000000280), 0x1, 0x201) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000300)={0x8000, 0xc5fb, @value=0x3}) r7 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed23da02f7a291f", 0x3b, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r7, r8, r7}, &(0x7f0000000500)=""/83, 0xfffffffffffffe4f, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x0) setsockopt$ALG_SET_KEY(r5, 0x6a, 0x1, 0x0, 0xc) syz_usb_ep_write(r4, 0x81, 0x40, &(0x7f0000000080)="9101000000112233445500"/64) syz_usb_ep_read(r4, 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r9, 0x0) ioctl(r1, 0x4048aec9, &(0x7f0000000140)="030000000000000001") syz_open_dev$hiddev(&(0x7f0000000240), 0xff, 0x4040) 3m40.761757928s ago: executing program 1 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x4) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00}irro', 0xf) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100") 3m40.663475769s ago: executing program 1 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() gettid() timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0xff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='udp 2', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/versions\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='-2 ', 0x3) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000100)="d5", 0xb840c58f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1b) close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x100}, {r2, 0x10c}, {}, {r2, 0x8657}, {r1, 0x4c0}], 0x5, &(0x7f00000002c0)={r5, r6+60000000}, &(0x7f0000000200)={[0x361]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) 3m37.76155585s ago: executing program 1 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x4, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000019340)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0xb8208000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000019280)=ANY=[@ANYBLOB='new default user:syz 00'], 0x2a, 0x0) add_key(&(0x7f00000192c0)='encrypted\x00', &(0x7f0000019300), &(0x7f0000019340), 0xca, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f00000193c0), &(0x7f0000019400), 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') openat$cgroup_type(r4, &(0x7f00000000c0), 0x2, 0x0) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000240)=0x9, 0x4) 3m31.596450888s ago: executing program 1 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x10f0, r0, 0x1000000}, 0x38) 3m31.239381755s ago: executing program 32 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x10f0, r0, 0x1000000}, 0x38) 2m46.019862694s ago: executing program 0 (id=898): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) ptrace$ARCH_SET_GS(0x1e, r4, &(0x7f0000000180), 0x1001) setpgid(0x0, 0x0) setpgid(0x0, 0x0) 2m43.425901824s ago: executing program 0 (id=904): r0 = socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x561401, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) r2 = getpid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000300)={0xc}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x36f}) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000380)={&(0x7f00000003c0), 0x10, &(0x7f0000000400)={0x0, 0x51}, 0x2, 0x0, 0x0, 0x44184}, 0x8005) sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x400000bce) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x130, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x268, 0x20a, 0x278, 0x268, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @mcast1, [0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e20], [0x4e20, 0x4e22], 0x3, 0x8, 0x2, 0x7}}, @common=@inet=@tcp={{0x30}, {[0x0, 0x2], [], 0x0, 0x0, 0x40, 0xc}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x100, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}, {0x6}}, @common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x2d30, 0xe}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1}, {0x2, 0x5}, {0x2, 0x0, 0x5}, 0x7, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000880)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r6 = syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001780)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f000001a780)="5a000300010003", 0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$video(&(0x7f000001a7c0), 0x800010000000008, 0x123000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a800)={0x18, 0x19, &(0x7f000001a8c0)=ANY=[@ANYBLOB="180000008b00000000000000ffffffff1811", @ANYBLOB], &(0x7f000001a980)='GPL\x00', 0x6, 0x1001, &(0x7f000001a9c0)=""/4097, 0x41000, 0x24}, 0x94) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000), 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001740)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf250100000008000100", @ANYBLOB], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x4000}, 0x0) 2m42.503619802s ago: executing program 0 (id=906): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r1, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r3) getsockname$packet(r3, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c80)=0x14) sendmsg$inet(r2, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x0) 2m37.538731558s ago: executing program 0 (id=916): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000540)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8, @remote, 0xe}, r1}}, 0x30) 2m36.607185159s ago: executing program 0 (id=920): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e20], [0x4e20, 0x4e22], 0x3, 0x8, 0xc2, 0x7}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x16, &(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2m35.623327478s ago: executing program 0 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() gettid() timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0xff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='udp 2', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/versions\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='-2 ', 0x3) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000100)="d5", 0xb840c58f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1b) close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x100}, {r2, 0x10c}, {}, {r2, 0x8657}, {r1, 0x4c0}], 0x5, &(0x7f00000002c0)={r5, r6+60000000}, &(0x7f0000000200)={[0x361]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) 2m20.478114023s ago: executing program 33 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() gettid() timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0xff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='udp 2', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/versions\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='-2 ', 0x3) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000100)="d5", 0xb840c58f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1b) close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x100}, {r2, 0x10c}, {}, {r2, 0x8657}, {r1, 0x4c0}], 0x5, &(0x7f00000002c0)={r5, r6+60000000}, &(0x7f0000000200)={[0x361]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) 1m50.417306277s ago: executing program 4 (id=1037): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x1, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x101, 0xffff0001, 0x0, 0xd25d, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1m50.234976618s ago: executing program 4 (id=1040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) ptrace$ARCH_SET_GS(0x1e, r4, &(0x7f0000000180), 0x1001) setpgid(0x0, 0x0) setpgid(0x0, 0x0) 1m49.25788017s ago: executing program 4 (id=1041): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}, {@noextend}]}}) 1m48.231913886s ago: executing program 4 (id=1042): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) prlimit64(r1, 0xe, &(0x7f0000000180)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x4a102) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r3 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x8880, 0x85) lseek(r5, 0x101, 0x1) write(0xffffffffffffffff, &(0x7f0000000480)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) syz_pidfd_open(0x0, 0xf0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x400000000000ec0, 0x2, &(0x7f0000000500)={0x77359400}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000540)={0x0, 0x0, 0x7}) 1m44.977035995s ago: executing program 4 (id=1052): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000100)='./nfsd\x00', 0x2000, 0x88) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r3 = openat(r2, &(0x7f0000000180)='./nfsd/max_block_size\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)={0x40, 0x100, 0x12}, 0x18) write$cgroup_devices(r3, 0x0, 0x9) 1m44.88125524s ago: executing program 4 (id=1054): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f00000077c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000020800)=0x7) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 3) 1m29.283700106s ago: executing program 34 (id=1054): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f00000077c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000020800)=0x7) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 3) 26.465273839s ago: executing program 7 (id=1280): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone3(&(0x7f0000000040)={0x40000800, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 21.936157266s ago: executing program 7 (id=1287): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x1b0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x1, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x101, 0xffff0001, 0x0, 0xd25d, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 21.638766297s ago: executing program 7 (id=1292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000240)='\\\x00', 0x0, r3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000280)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x300, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000300)={0x1f}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 18.670096647s ago: executing program 7 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000002c0)=0x405, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x4000) shutdown(0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f00000005c0)=""/28, 0xfffffffffffffdee) write$tun(r4, 0x0, 0xffe) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r6, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000004740)={0x12, 0x6, 0xfa00, {0x0, r6, r5}}, 0x18) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='./mnt/trace_pipe\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="666c6f6352aab3ab854b9b7f6175746f63656c6c2c666c6f636b3d64796e2c666c6f636b3d810000006c2c6613b9f057be333719c43a9d6c6f756b3d737472696319e307c8d5b393dc0e8b742c666c6f636b3d776f743d072e2c647374656d5f"]) read(r1, &(0x7f0000000740)=""/16384, 0x4000) write$binfmt_script(r0, 0x0, 0x0) 13.314099165s ago: executing program 6 (id=1306): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) 12.084160837s ago: executing program 3 (id=1308): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000002c0)=0x405, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x4000) shutdown(0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f00000005c0)=""/28, 0xfffffffffffffdee) write$tun(r4, 0x0, 0xffe) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r6, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000004740)={0x12, 0x6, 0xfa00, {0x0, r6, r5}}, 0x18) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB='#syz1:syz1'], &(0x7f0000000100)='./mnt/trace_pipe\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="666c6f6352aab3ab854b9b7f6175746f63656c6c2c666c6f636b3d64796e2c666c6f636b3d810000006c2c6613b9f057be333719c43a9d6c6f756b3d737472696319e307c8d5b393dc0e8b742c666c6f636b3d776f743d072e2c647374656d5f"]) read(r1, &(0x7f0000000740)=""/16384, 0x4000) write$binfmt_script(r0, 0x0, 0x0) 12.071588239s ago: executing program 7 (id=1309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0xb, &(0x7f0000000040)) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @rand_addr, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="b800000000020100020000000000000002000000340001801400018008000100c0a8010108000200c0a801021c000280050001000600000006000200303900000600030000150000340002801400018008000100c0a8010208000200c0a801011c00028005000100060000000600020000000000060003004e20000034000380140001"], 0xb8}}, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)) 11.253000216s ago: executing program 7 (id=1311): syz_usb_connect(0x3, 0x32, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001f30080320904000002080650000705810200020007050202"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller1\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7, 0x5ee, 0x1}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044005}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_GET_TSC_KHZ_vm(r7, 0xaea3) syz_usb_connect$uac3(0x5, 0xba, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001000000080c2018104000010203010902a8000301081001080b0001010130350904000000010130000a240108440005000000142402020404060409000000030080000200070013240303050404050200000000ff00ff037f001324030403"], 0x0) sendmmsg$unix(r5, &(0x7f0000000340), 0x400000000000041, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r8, 0x0, 0x7}, 0x38) write$FUSE_INIT(r1, &(0x7f0000000500)={0x50, 0x0, r2, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x5, 0x1d45, 0x20008, 0x0, 0x0, 0x40, 0x4000000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004440)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004480)='./file0\x00', 0x101201, 0x12) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r9) tkill(r9, 0x2) tkill(r9, 0x12) ptrace(0x4208, r9) 11.203123797s ago: executing program 5 (id=1312): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1}, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x143102) writev(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000800)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000840)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000008c0)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) sendto$inet6(r1, &(0x7f0000000900)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x400c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="602200004400010029bd7000040000000200000004004880482201"], 0x2260}, 0x1, 0x0, 0x0, 0x4040994}, 0x20008814) (fail_nth: 3) 9.65635623s ago: executing program 2 (id=1314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000fc0)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r4, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045081}, 0x20004004) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001240)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000012c0)=@xdp={0x2c, 0x7, r4, 0x3d}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001380)="5b9d6d11290136449525ff", 0xb}], 0x1}, 0x5) 7.737165573s ago: executing program 3 (id=1315): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x3}, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000940)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005a6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e1f, 0x3, @mcast2, 0x3}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f0000000f00)={0x2, 0x200, "f7ff00", 0x0, 0x1}) sendmsg(r2, &(0x7f0000000e00)={0x0, 0x952b, &(0x7f0000000e40)=[{&(0x7f0000000e80)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000140)=0x80000001, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000180)={0x4, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x2000300, 0x70, 0x0, &(0x7f0000000740)='\x00'/14, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) syz_clone(0x800000, &(0x7f0000000780)="a7d77fa58466720dccb79ffd8f031de9db6dc46d28eea5772c88313ab04466054e71551d4a760744c00a06359f358215414e0273c83c0ebbdc2c820ac17c33064ecd67673c17cc38901990230e2457e57065c83eaca35948d74d9fedf9396833c4332a8136e6770b398929dde8f791b51a38599094685e813bd08c453e76ddd76caa4a1ebaa58a5eeea77c9f70e377c774768a61cf644c9038974434203b6fc943ab5fc7bbf3abe49b4eb58173149619e9a0f52a0c3030d2a424759f8cceb25a18a5ece3c779eb6364b676c78898d1146d77a67e3c142b0b060bb0082d34c21cd4cb85", 0xe3, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)="fc1e9547e0e092698f68c19368f2189089df1ccdfadf727faaa71b3bdd03933775f807e8fc41f5c19c03d3ae92d28f0cf68fc3e7e8d9cbec62f18dc2") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x5, 0xe, 0x0, &(0x7f0000000380)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x86) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.current\x00', 0x26e1, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000ec0)={'virt_wifi0\x00', @random="030000000018"}) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/170, 0xaa}], 0x1}, 0x200}], 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0xff7a, 0x0, 0x0, 0x0, 0x0}, 0x40) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r8 = openat(r6, &(0x7f0000000f40)='./config/usb_gadget/g1/UDC\x00', 0x4100, 0x188) write(r8, &(0x7f0000000480)='usbip-vudc.0', 0xc) 7.609168176s ago: executing program 5 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000240)='\\\x00', 0x0, r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000280)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x300, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000300)={0x1f}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 7.565287894s ago: executing program 2 (id=1317): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f00000077c0)=""/102392, 0x18ff8) futex(0x0, 0x10b, 0x2, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000020800)=0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) sendmsg$nl_xfrm(r4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r6}, &(0x7f0000000b00), 0x0}, 0x20) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 7.090266407s ago: executing program 5 (id=1318): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000003b00010329bd7000fbdbdf25070000007f34a6d34112a9be351db45810090963a6ab883d9e6c8fee4ec951e773cc53a3b4b06bd62ecde05cbbf094afa087923f54b439746cb3d9afb368e1b4a171d4886806b9eba6c14ce05ce62709110a645787560ae952b8cd9c7860aeaddc4bd34061d11deabb813d1d6d648b07b4ede8e1ce79f343a554ed98cecdc65369f7c466de"], 0x14}, 0x1, 0x0, 0x0, 0x240441c2}, 0x2004c844) 6.153220789s ago: executing program 2 (id=1319): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)={&(0x7f0000000240), 0x1000}, &(0x7f0000000280)={&(0x7f0000000300), 0x1000, 0x1}}, 0x1) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r2 = dup(r1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000300)=ANY=[], 0x50) r3 = open(&(0x7f00000003c0)='./file0\x00', 0x181c42, 0x81) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000340)={0x0, 0x3}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000080)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff8}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r4, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="414983", 0x3}], 0x1}}], 0x1, 0x2400c8c4) 6.016153856s ago: executing program 5 (id=1320): socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000840), &(0x7f0000000880)=0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x80000, 0xff) connect$inet6(r2, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000008c0)=0x3, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000900)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000940)=0x2000008, 0x4) connect$inet(r5, &(0x7f0000000980)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000a80)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 4.764697657s ago: executing program 3 (id=1321): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x1b0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x1, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x101, 0xffff0001, 0x0, 0xd25d, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 4.554426785s ago: executing program 6 (id=1322): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000003b00010329bd7000fbdbdf25070000007f34a6d34112a9be351db45810090963a6ab883d9e6c8fee4ec951e773cc53a3b4b06bd62ecde05cbbf094afa087923f54b439746cb3d9afb368e1b4a171d4886806b9eba6c14ce05ce62709110a645787560ae952b8cd9c7860aeaddc4bd34061d11deabb813d1d6d648b07b4ede8e1ce79f343a554ed98cecdc65369f7c466de"], 0x14}, 0x1, 0x0, 0x0, 0x240441c2}, 0x2004c844) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000140) 4.476693749s ago: executing program 3 (id=1323): syz_io_uring_setup(0x336a, &(0x7f00000000c0)={0x0, 0xf962, 0x100, 0x2, 0x35}, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000009c0), 0xa88, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000003600000085000000a000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x141102) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000840)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000880), 0x0, 0x2) pselect6(0x40, &(0x7f00000008c0)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0xc, 0x4}, 0x0, &(0x7f0000000940)={0x3ff, 0x6, 0x7b6e, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 4.323712288s ago: executing program 6 (id=1324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="080008000201060003002f004000496d008900650000ec06"], 0x97) 3.281386495s ago: executing program 6 (id=1325): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000002c0)=0x405, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x4000) shutdown(0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f00000005c0)=""/28, 0xfffffffffffffdee) write$tun(r4, 0x0, 0xffe) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r6, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000004740)={0x12, 0x6, 0xfa00, {0x0, r6, r5}}, 0x18) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB='#syz1:syz1'], &(0x7f0000000100)='./mnt/trace_pipe\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="666c6f6352aab3ab854b9b7f6175746f63656c6c2c666c6f636b3d64796e2c666c6f636b3d810000006c2c6613b9f057be333719c43a9d6c6f756b3d737472696319e307c8d5b393dc0e8b742c666c6f636b3d776f743d072e2c647374656d5f"]) read(r1, &(0x7f0000000740)=""/16384, 0x4000) write$binfmt_script(r0, 0x0, 0x0) 3.034456219s ago: executing program 3 (id=1326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000020a01010000000000000000010000000900010073797a3000"], 0x248}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r1, &(0x7f0000001900)={0x2020}, 0xfffffc7a) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003980), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000003ac0)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a80)={&(0x7f00000039c0)={0x8c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xb09, 0x7}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x41}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf9}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa, 0xac, "eb2dfcd84c53"}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40040d1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) tgkill(r3, r3, 0x2d) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r7, 0x4020565b, &(0x7f0000000080)={0x0, 0x7}) close_range(r6, 0xffffffffffffffff, 0x0) 2.112427076s ago: executing program 6 (id=1327): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f00000077c0)=""/102392, 0x18ff8) futex(0x0, 0x10b, 0x2, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000020800)=0x7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) sendmsg$nl_xfrm(r5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000f4eef989b3f6a94197c100cbaabfc234b5347e4e9ff3a2b83fa6a57f6394321c3c99f5507a5ab61e7e89e32aa0271bfddb4e2258241f4941acd779506866e38d20ff1a45653602d6448cb992f46a7eea796a8090303cf592260cb1a43b36d8fb2855ae417ac633447e81673a12088afe408cc0a9da8f1de3dd9962808371ca5353b27333a7e666c24eba2c4dd848cd607647a60cfbe2aa53b76c065683", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000fea0c63b23a54043a143b8e4d2c131c77c815be66fb1e0043d24c7786e2ec337fe3422604e0099d8e14174f56f86c04f2b31deb5b4dadcc0a39450d0ec01b4a2698d4e4fa084b044e49fd2f8baf1346fb8334680c6c55910e4757130e666d031212939c15ff69eac1fa52fd05cf752be1255e37a38f93f5fd4e517575162ffdd3f6af09d99e4cbb5896cd3c56530a05de19160c9d10455cd66de45056bab797e153d69af73", @ANYRES32=r7, @ANYRES8=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r7}, &(0x7f0000000b00), 0x0}, 0x20) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) 2.093966757s ago: executing program 2 (id=1328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000240)='\\\x00', 0x0, r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000280)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x300, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000300)={0x1f}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 1.241277153s ago: executing program 3 (id=1329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000040)={'wlan1\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ff7f00"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000cbf9a6770593ba88929d0563e0c9f17c5b8f73a70ea56c17ffd5e373cddb3e91f2a261448d363b206c56da1c4c70584bfb0c03d88172984f2e139d595d8ec748a1777750841fc73fbf60108414a9cdfa677aa0262d2dcad66c8b0d639b9117a679a4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/kmsg\x00', 0x0, 0x24) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) readv(r6, &(0x7f0000000880)=[{0x0}], 0x1) getpeername$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000dc0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000680)='map_files\x00') r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f00000008c0)={0x0, 0xb007}, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000900)={'ip6_vti0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000940)="ef", 0x1, 0x20040415, &(0x7f0000000980)={0x11, 0x9, r11, 0x1, 0x5, 0x6, @remote}, 0x14) fchdir(r9) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x42, 0x0) ioctl$XFS_IOC_BULKSTAT(r8, 0x8040587f, &(0x7f0000000c80)={{0x4, 0x7, 0x3, 0x9, 0x2}, &(0x7f0000000680)}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010000305fafff678f9346a958971c51e", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000100000100c2800008000500", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) ioctl$SIOCX25SSUBSCRIP(r12, 0x89e1, &(0x7f0000000440)={'ip6gretap0\x00', 0x9, 0x6c200000}) 1.052185409s ago: executing program 2 (id=1330): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000003b00010329bd7000fbdbdf25070000007f34a6d34112a9be351db45810090963a6ab883d9e6c8fee4ec951e773cc53a3b4b06bd62ecde05cbbf094afa087923f54b439746cb3d9afb368e1b4a171d4886806b9eba6c14ce05ce62709110a645787560ae952b8cd9c7860aeaddc4bd34061d11deabb813d1d6d648b07b4ede8e1ce79f343a554ed98cecdc65369f7c466de"], 0x14}, 0x1, 0x0, 0x0, 0x240441c2}, 0x2004c844) 1.015918292s ago: executing program 5 (id=1331): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10169, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 978.498941ms ago: executing program 6 (id=1332): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000041100000000000000000000020000000000f6000000000087e19d310e8150a35fffcae5867b43ed01bbb3c25fdfa8013aa02afd02a5921e59777e3560db2fafb2b7b498d8e7e51cddbac200db8d4fd4054d4ed5b500caa318304b642b62a54d2a14a46957508e1e3bd6c78b507da8e12278a109791453336e99a9bccf72e5fdf7e1e99ca3ce8b8ac608249ae45f5bbe6885a3bbb615692f0cd3443e000000000000000966680172d38386594ff602a486adfa215e02369a31031799f565764880281ae7477828693daf4453f03901a085a36d7a95"], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) 836.745315ms ago: executing program 2 (id=1333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000020a01010000000000000000010000000900010073797a3000"], 0x248}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r1, &(0x7f0000001900)={0x2020}, 0xfffffc7a) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003980), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000003ac0)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a80)={&(0x7f00000039c0)={0x8c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xb09, 0x7}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x41}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf9}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa, 0xac, "eb2dfcd84c53"}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40040d1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000280)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) tgkill(r3, r3, 0x2d) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r7, 0x4020565b, &(0x7f0000000080)={0x0, 0x7}) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1334): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)) (fail_nth: 1) kernel console output (not intermixed with test programs): 3] Bluetooth: hci6: command tx timeout [ 490.396816][T10093] virtio-fs: tag not found [ 490.496643][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1103'. [ 490.656928][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.657060][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.657185][T10033] bridge_slave_0: entered allmulticast mode [ 490.659282][T10033] bridge_slave_0: entered promiscuous mode [ 490.723095][T10102] vivid-000: disconnect [ 491.059767][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.059897][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.059999][T10033] bridge_slave_1: entered allmulticast mode [ 491.061157][T10033] bridge_slave_1: entered promiscuous mode [ 491.081111][T10033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.083212][T10033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.085078][ T1556] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 491.117416][T10033] team0: Port device team_slave_0 added [ 491.119441][T10033] team0: Port device team_slave_1 added [ 491.157071][T10033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.157087][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.157109][T10033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.161632][T10033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.161646][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.161666][T10033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.273325][ T1556] usb 6-1: Using ep0 maxpacket: 32 [ 491.274242][ T1556] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 491.277396][ T1556] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 491.279281][T10033] hsr_slave_0: entered promiscuous mode [ 491.281208][ T1556] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 491.281231][ T1556] usb 6-1: Product: syz [ 491.281244][ T1556] usb 6-1: Manufacturer: syz [ 491.281258][ T1556] usb 6-1: SerialNumber: syz [ 491.281565][T10033] hsr_slave_1: entered promiscuous mode [ 491.287215][T10033] debugfs: 'hsr0' already exists in 'hsr' [ 491.287232][T10033] Cannot create hsr debugfs directory [ 491.310373][ T1556] usb 6-1: config 0 descriptor?? [ 491.330491][T10095] vivid-000: reconnect [ 491.357951][T10104] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 491.382221][ T1556] hub 6-1:0.0: bad descriptor, ignoring hub [ 491.382245][ T1556] hub 6-1:0.0: probe with driver hub failed with error -5 [ 492.387567][ T5613] Bluetooth: hci6: command tx timeout [ 492.583632][T10104] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 492.814121][T10115] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 493.626212][ T31] audit: type=1400 audit(1791737350.378:1277): avc: denied { write } for pid=10103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.787989][ T31] audit: type=1400 audit(1791737350.538:1278): avc: denied { setattr } for pid=10122 comm="syz.3.1106" name="PACKET" dev="sockfs" ino=26565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 493.868085][T10033] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 493.876690][ T31] audit: type=1400 audit(1791737350.628:1279): avc: denied { write } for pid=10121 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.883735][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.886974][T10033] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 493.912298][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.914584][T10033] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 493.921650][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.922454][T10033] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 493.936514][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.050314][T10134] evm: overlay not supported [ 494.068606][T10070] raw-gadget.0 gadget.5: failed to queue suspend event [ 494.077103][T10132] xt_connbytes: Forcing CT accounting to be enabled [ 494.083944][T10136] syzkaller0: entered promiscuous mode [ 494.083961][T10136] syzkaller0: entered allmulticast mode [ 494.143567][T10104] raw-gadget.0 gadget.5: failed to queue resume event [ 494.167198][ T9885] raw-gadget.0 gadget.5: failed to queue suspend event [ 494.190923][T10033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.235688][T10104] raw-gadget.0 gadget.5: failed to queue resume event [ 494.256124][ T9885] raw-gadget.0 gadget.5: failed to queue suspend event [ 494.277960][T10138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10138 comm=syz.3.1107 [ 494.353625][T10104] raw-gadget.0 gadget.5: failed to queue resume event [ 494.377717][ T3340] raw-gadget.0 gadget.5: failed to queue suspend event [ 494.423101][T10115] raw-gadget.0 gadget.5: failed to queue disconnect event [ 495.416609][T10033] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.424409][ T1556] usb 6-1: USB disconnect, device number 9 [ 495.607695][ T30] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 495.906853][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.906905][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.533322][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 496.533963][ T30] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 496.534976][ T30] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 496.535001][ T30] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 496.535023][ T30] usb 7-1: config 0 interface 0 has no altsetting 0 [ 496.536888][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.536908][ T30] usb 7-1: Product: syz [ 496.536921][ T30] usb 7-1: Manufacturer: syz [ 496.536936][ T30] usb 7-1: SerialNumber: syz [ 496.542292][ T30] usb 7-1: config 0 descriptor?? [ 497.338575][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.338658][ T9885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.342864][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.342940][ T9885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.452219][ T31] audit: type=1400 audit(1791737354.198:1280): avc: denied { getopt } for pid=10152 comm="syz.5.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 497.531484][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'. [ 497.817184][T10159] vivid-000: disconnect [ 497.817467][T10159] vivid-000: reconnect [ 498.386101][ T30] gs_usb 7-1:0.0: Couldn't get device config: (err=-110) [ 498.386217][ T30] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110 [ 498.947791][ T31] audit: type=1400 audit(1791737355.698:1281): avc: denied { execute } for pid=10168 comm="syz.2.1117" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 499.435793][ T1556] usb 7-1: USB disconnect, device number 5 [ 499.655737][T10182] syzkaller0: entered promiscuous mode [ 499.655758][T10182] syzkaller0: entered allmulticast mode [ 499.901988][ T5735] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 500.103351][ T5735] usb 3-1: Using ep0 maxpacket: 32 [ 500.771867][ T5735] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 500.895335][ T5735] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 500.956039][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 500.956069][ T5735] usb 3-1: Product: syz [ 500.956084][ T5735] usb 3-1: Manufacturer: syz [ 500.956099][ T5735] usb 3-1: SerialNumber: syz [ 501.327098][ T5735] usb 3-1: config 0 descriptor?? [ 501.328771][T10178] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 501.371631][ T5735] hub 3-1:0.0: bad descriptor, ignoring hub [ 501.371662][ T5735] hub 3-1:0.0: probe with driver hub failed with error -5 [ 501.409795][T10033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.604970][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 501.835346][T10216] vivid-000: disconnect [ 501.835821][T10216] vivid-000: reconnect [ 502.613335][ T5735] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 502.744486][T10178] usb 3-1: reset high-speed USB device number 47 using dummy_hcd [ 502.837779][T10033] veth0_vlan: entered promiscuous mode [ 502.886638][T10033] veth1_vlan: entered promiscuous mode [ 502.920332][T10210] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 502.957196][T10033] veth0_macvtap: entered promiscuous mode [ 502.959293][T10033] veth1_macvtap: entered promiscuous mode [ 502.963328][ T5735] usb 7-1: Using ep0 maxpacket: 8 [ 502.963821][ T5735] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 502.964667][ T5735] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.970523][ T5735] usb 7-1: config 0 descriptor?? [ 502.973653][ T5735] usb 7-1: probing VID:PID(0424:012C) [ 502.975968][ T5735] usb 7-1: vub300 testing BULK IN EndPoint(0) 81 [ 502.975989][ T5735] usb 7-1: vub300 testing BULK OUT EndPoint(1) 02 [ 502.976007][ T5735] usb 7-1: vub300 testing BULK IN EndPoint(2) 83 [ 502.976024][ T5735] usb 7-1: vub300 testing BULK OUT EndPoint(3) 04 [ 502.976042][ T5735] usb 7-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 503.085359][T10033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.100224][T10033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.130165][T10225] FAULT_INJECTION: forcing a failure. [ 503.130165][T10225] name failslab, interval 1, probability 0, space 0, times 0 [ 503.130220][T10225] CPU: 0 UID: 0 PID: 10225 Comm: syz.3.1129 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.130246][T10225] Tainted: [L]=SOFTLOCKUP [ 503.130253][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 503.130265][T10225] Call Trace: [ 503.130273][T10225] [ 503.130282][T10225] dump_stack_lvl+0x100/0x190 [ 503.130316][T10225] should_fail_ex.cold+0x5/0xa [ 503.130347][T10225] should_failslab+0xc2/0x120 [ 503.130378][T10225] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 503.130405][T10225] ? lock_acquire+0x1d1/0x380 [ 503.130427][T10225] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 503.130452][T10225] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 503.130481][T10225] kstrdup+0x51/0xe0 [ 503.130504][T10225] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 503.130529][T10225] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 503.130560][T10225] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 503.130592][T10225] selinux_socket_post_create+0x368/0x7e0 [ 503.130620][T10225] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 503.130647][T10225] ? raw_sk_init+0x97/0xb0 [ 503.130672][T10225] ? __pfx_raw_sk_init+0x10/0x10 [ 503.130697][T10225] ? inet_create+0x962/0x1060 [ 503.130728][T10225] security_socket_post_create+0xaf/0x270 [ 503.130762][T10225] __sock_create+0x70b/0x860 [ 503.130792][T10225] __sys_socket+0x14d/0x260 [ 503.130820][T10225] ? __pfx___sys_socket+0x10/0x10 [ 503.130857][T10225] __x64_sys_socket+0x72/0xb0 [ 503.130884][T10225] ? lockdep_hardirqs_on+0x7d/0x110 [ 503.130914][T10225] do_syscall_64+0x123/0x790 [ 503.130946][T10225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.130967][T10225] RIP: 0033:0x7f37ed19e1d9 [ 503.130984][T10225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.131003][T10225] RSP: 002b:00007f37edfa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 503.131022][T10225] RAX: ffffffffffffffda RBX: 00007f37ed425fa0 RCX: 00007f37ed19e1d9 [ 503.131037][T10225] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 503.131050][T10225] RBP: 00007f37ed235888 R08: 0000000000000000 R09: 0000000000000000 [ 503.131062][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.131075][T10225] R13: 00007f37ed426038 R14: 00007f37ed425fa0 R15: 00007ffd55a5cc48 [ 503.131103][T10225] [ 503.255796][ T9997] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.255831][ T9997] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.255857][ T9997] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.255882][ T9997] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.375213][ T31] audit: type=1400 audit(1791737360.118:1282): avc: denied { kexec_image_load } for pid=10226 comm="syz.5.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 503.385761][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.385780][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.391796][ T5735] usb 7-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 503.482920][ T3340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.482940][ T3340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.485988][T10231] syzkaller0: entered promiscuous mode [ 503.486005][T10231] syzkaller0: entered allmulticast mode [ 503.724688][T10239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.725023][T10239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.073965][ T3362] rpcbind: server 127.0.0.1 not responding, timed out [ 504.100328][ T203] raw-gadget.1 gadget.2: failed to queue suspend event [ 504.152915][T10244] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 504.168990][T10242] X.509: Couldn't decode AuthKeyIdentifier [ 504.183477][T10178] raw-gadget.1 gadget.2: failed to queue resume event [ 504.206669][ T3362] raw-gadget.1 gadget.2: failed to queue suspend event [ 504.221830][T10178] raw-gadget.1 gadget.2: failed to queue disconnect event [ 504.226619][ T1556] usb 3-1: USB disconnect, device number 47 [ 504.486099][ T5735] vub300 7-1:0.0: probe with driver vub300 failed with error -110 [ 504.543786][ T188] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 504.714550][ T188] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 504.716779][ T188] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 504.716810][ T188] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 504.716833][ T188] usb 8-1: config 0 interface 0 has no altsetting 0 [ 504.718475][ T188] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 504.718499][ T188] usb 8-1: Product: syz [ 504.718512][ T188] usb 8-1: Manufacturer: syz [ 504.718526][ T188] usb 8-1: SerialNumber: syz [ 504.721539][ T188] usb 8-1: config 0 descriptor?? [ 504.796410][ T188] usb 8-1: selecting invalid altsetting 0 [ 504.817457][ T5735] usb 7-1: USB disconnect, device number 6 [ 505.388221][ T5735] usb 8-1: USB disconnect, device number 2 [ 506.140939][T10274] FAULT_INJECTION: forcing a failure. [ 506.140939][T10274] name failslab, interval 1, probability 0, space 0, times 0 [ 506.141003][T10274] CPU: 1 UID: 0 PID: 10274 Comm: syz.7.1140 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.141033][T10274] Tainted: [L]=SOFTLOCKUP [ 506.141041][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 506.141054][T10274] Call Trace: [ 506.141062][T10274] [ 506.141071][T10274] dump_stack_lvl+0x100/0x190 [ 506.141104][T10274] should_fail_ex.cold+0x5/0xa [ 506.141133][T10274] should_failslab+0xc2/0x120 [ 506.141165][T10274] __kmalloc_cache_noprof+0x91/0x6d0 [ 506.141188][T10274] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 506.141222][T10274] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 506.141259][T10274] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 506.141291][T10274] selinux_socket_post_create+0x368/0x7e0 [ 506.141319][T10274] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 506.141346][T10274] ? raw_sk_init+0x97/0xb0 [ 506.141372][T10274] ? __pfx_raw_sk_init+0x10/0x10 [ 506.141399][T10274] ? inet_create+0x962/0x1060 [ 506.141430][T10274] security_socket_post_create+0xaf/0x270 [ 506.141459][T10274] __sock_create+0x70b/0x860 [ 506.141491][T10274] __sys_socket+0x14d/0x260 [ 506.141520][T10274] ? __pfx___sys_socket+0x10/0x10 [ 506.141556][T10274] __x64_sys_socket+0x72/0xb0 [ 506.141582][T10274] ? lockdep_hardirqs_on+0x7d/0x110 [ 506.141612][T10274] do_syscall_64+0x123/0x790 [ 506.141642][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.141663][T10274] RIP: 0033:0x7ff35919e1d9 [ 506.141680][T10274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.141700][T10274] RSP: 002b:00007ff359faf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 506.141720][T10274] RAX: ffffffffffffffda RBX: 00007ff359425fa0 RCX: 00007ff35919e1d9 [ 506.141733][T10274] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 506.141744][T10274] RBP: 00007ff359235888 R08: 0000000000000000 R09: 0000000000000000 [ 506.141756][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.141768][T10274] R13: 00007ff359426038 R14: 00007ff359425fa0 R15: 00007ffd93d04ca8 [ 506.141796][T10274] [ 506.369375][ T1556] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 506.514874][ T1556] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 506.519290][ T1556] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.519324][ T1556] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 506.519427][ T1556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.579887][ T1556] usb 4-1: config 0 descriptor?? [ 506.629486][T10277] kAFS: unable to lookup cell 'syz1' [ 506.643052][ T1556] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 506.643160][ T1556] dvb-usb: bulk message failed: -22 (3/0) [ 506.773840][ T1556] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 506.781387][ T1556] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 506.781523][ T1556] usb 4-1: media controller created [ 506.862827][ T1556] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.248318][ T1556] dvb-usb: bulk message failed: -22 (6/0) [ 507.268418][ T1556] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 507.354211][ T1556] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 507.555414][ T1556] dvb-usb: schedule remote query interval to 150 msecs. [ 507.555439][ T1556] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 507.705616][T10286] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 507.727620][ T5610] dvb-usb: bulk message failed: -22 (1/0) [ 507.727670][ T5610] dvb-usb: error while querying for an remote control event. [ 507.884093][ T5610] dvb-usb: bulk message failed: -22 (1/0) [ 507.900165][ T5610] dvb-usb: error while querying for an remote control event. [ 508.054032][ T5610] dvb-usb: bulk message failed: -22 (1/0) [ 508.054062][ T5610] dvb-usb: error while querying for an remote control event. [ 508.213530][ T5610] dvb-usb: bulk message failed: -22 (1/0) [ 508.213561][ T5610] dvb-usb: error while querying for an remote control event. [ 508.373317][ T5610] dvb-usb: bulk message failed: -22 (1/0) [ 508.373348][ T5610] dvb-usb: error while querying for an remote control event. [ 508.535598][ T5610] dvb-usb: bulk message failed: -22 (1/0) [ 508.535627][ T5610] dvb-usb: error while querying for an remote control event. [ 508.693975][ T5610] dvb-usb: bulk message failed: -22 (1/0) [ 508.694004][ T5610] dvb-usb: error while querying for an remote control event. [ 508.856563][ T5610] dvb-usb: bulk message failed: -22 (1/0) [ 508.856583][ T5610] dvb-usb: error while querying for an remote control event. [ 509.014714][ T5610] dvb-usb: bulk message failed: -22 (1/0) [ 509.014734][ T5610] dvb-usb: error while querying for an remote control event. [ 509.175572][ T5610] dvb-usb: bulk message failed: -22 (1/0) [ 509.175593][ T5610] dvb-usb: error while querying for an remote control event. [ 509.335955][ T5610] dvb-usb: bulk message failed: -22 (1/0) [ 509.335976][ T5610] dvb-usb: error while querying for an remote control event. [ 509.494655][ T5610] dvb-usb: bulk message failed: -22 (1/0) [ 509.494689][ T5610] dvb-usb: error while querying for an remote control event. [ 509.531544][ T1556] usb 4-1: USB disconnect, device number 47 [ 509.574895][T10290] syzkaller0: entered promiscuous mode [ 509.574911][T10290] syzkaller0: entered allmulticast mode [ 509.803354][ T5735] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 509.920066][ T1556] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 509.994534][ T5735] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 510.000369][ T5735] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.000402][ T5735] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 510.000423][ T5735] usb 3-1: config 0 interface 0 has no altsetting 0 [ 510.144431][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 510.144459][ T5735] usb 3-1: Product: syz [ 510.144474][ T5735] usb 3-1: Manufacturer: syz [ 510.144488][ T5735] usb 3-1: SerialNumber: syz [ 510.685122][ T5735] usb 3-1: config 0 descriptor?? [ 511.362390][ T5735] usb 3-1: selecting invalid altsetting 0 [ 511.423079][ T5735] usb 3-1: USB disconnect, device number 48 [ 511.472275][ T9856] udevd[9856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.710140][ T31] audit: type=1400 audit(1791737368.458:1283): avc: denied { create } for pid=10312 comm="syz.7.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 511.970359][T10325] FAULT_INJECTION: forcing a failure. [ 511.970359][T10325] name failslab, interval 1, probability 0, space 0, times 0 [ 511.970399][T10325] CPU: 1 UID: 0 PID: 10325 Comm: syz.2.1152 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.970430][T10325] Tainted: [L]=SOFTLOCKUP [ 511.970439][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 511.970452][T10325] Call Trace: [ 511.970461][T10325] [ 511.970471][T10325] dump_stack_lvl+0x100/0x190 [ 511.970509][T10325] should_fail_ex.cold+0x5/0xa [ 511.970540][T10325] should_failslab+0xc2/0x120 [ 511.970575][T10325] __kmalloc_cache_noprof+0x91/0x6d0 [ 511.970600][T10325] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 511.970638][T10325] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 511.970666][T10325] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 511.970701][T10325] selinux_socket_post_create+0x368/0x7e0 [ 511.970733][T10325] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 511.970763][T10325] ? raw_sk_init+0x97/0xb0 [ 511.970791][T10325] ? __pfx_raw_sk_init+0x10/0x10 [ 511.970819][T10325] ? inet_create+0x962/0x1060 [ 511.970852][T10325] security_socket_post_create+0xaf/0x270 [ 511.970884][T10325] __sock_create+0x70b/0x860 [ 511.970917][T10325] __sys_socket+0x14d/0x260 [ 511.970946][T10325] ? __pfx___sys_socket+0x10/0x10 [ 511.970983][T10325] __x64_sys_socket+0x72/0xb0 [ 511.971011][T10325] ? lockdep_hardirqs_on+0x7d/0x110 [ 511.971041][T10325] do_syscall_64+0x123/0x790 [ 511.971074][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.971097][T10325] RIP: 0033:0x7f2b8d19e1d9 [ 511.971114][T10325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.971131][T10325] RSP: 002b:00007f2b8e0f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 511.971164][T10325] RAX: ffffffffffffffda RBX: 00007f2b8d425fa0 RCX: 00007f2b8d19e1d9 [ 511.971178][T10325] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 511.971191][T10325] RBP: 00007f2b8d235888 R08: 0000000000000000 R09: 0000000000000000 [ 511.971204][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.971217][T10325] R13: 00007f2b8d426038 R14: 00007f2b8d425fa0 R15: 00007fff835e8678 [ 511.971248][T10325] [ 512.288086][T10329] afs: Unknown parameter 'flocRª³«…K›autocell' [ 515.154978][ T31] audit: type=1400 audit(1791737371.908:1284): avc: denied { append } for pid=10346 comm="syz.2.1157" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 515.155611][T10347] FAULT_INJECTION: forcing a failure. [ 515.155611][T10347] name failslab, interval 1, probability 0, space 0, times 0 [ 515.155641][T10347] CPU: 0 UID: 0 PID: 10347 Comm: syz.2.1157 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.155679][T10347] Tainted: [L]=SOFTLOCKUP [ 515.155686][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 515.155698][T10347] Call Trace: [ 515.155705][T10347] [ 515.155714][T10347] dump_stack_lvl+0x100/0x190 [ 515.155749][T10347] should_fail_ex.cold+0x5/0xa [ 515.155779][T10347] should_failslab+0xc2/0x120 [ 515.155809][T10347] kmem_cache_alloc_noprof+0x92/0x6a0 [ 515.155835][T10347] ? __pfx_map_id_range_down+0x10/0x10 [ 515.155860][T10347] ? security_inode_alloc+0x3b/0x2c0 [ 515.155893][T10347] security_inode_alloc+0x3b/0x2c0 [ 515.155920][T10347] inode_init_always_gfp+0xc6f/0xfb0 [ 515.155954][T10347] alloc_inode+0x8e/0x250 [ 515.155978][T10347] new_inode+0x22/0x1c0 [ 515.156005][T10347] __debugfs_create_file+0xfb/0x500 [ 515.156034][T10347] debugfs_create_file_full+0x41/0x60 [ 515.156062][T10347] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 515.156085][T10347] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 515.156133][T10347] ? lock_acquire+0x1d1/0x380 [ 515.156159][T10347] ? lockdep_init_map_type+0x5c/0x250 [ 515.156188][T10347] ? __pfx_ppp_setup+0x10/0x10 [ 515.156215][T10347] alloc_netdev_mqs+0x314/0x15c0 [ 515.156245][T10347] ppp_ioctl+0x96c/0x27b0 [ 515.156265][T10347] ? __fget_files+0x34/0x3d0 [ 515.156300][T10347] ? __pfx_ppp_ioctl+0x10/0x10 [ 515.156330][T10347] ? selinux_file_ioctl+0xb6/0x290 [ 515.156362][T10347] ? __pfx_ppp_ioctl+0x10/0x10 [ 515.156383][T10347] __x64_sys_ioctl+0x18e/0x210 [ 515.156410][T10347] do_syscall_64+0x123/0x790 [ 515.156443][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.156464][T10347] RIP: 0033:0x7f2b8d19e1d9 [ 515.156483][T10347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.156502][T10347] RSP: 002b:00007f2b8e0f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.156524][T10347] RAX: ffffffffffffffda RBX: 00007f2b8d425fa0 RCX: 00007f2b8d19e1d9 [ 515.156539][T10347] RDX: 0000200000000040 RSI: 00000000c004743e RDI: 0000000000000004 [ 515.156552][T10347] RBP: 00007f2b8e0f9090 R08: 0000000000000000 R09: 0000000000000000 [ 515.156565][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.156578][T10347] R13: 00007f2b8d426038 R14: 00007f2b8d425fa0 R15: 00007fff835e8678 [ 515.156608][T10347] [ 515.162162][T10347] debugfs: out of free dentries, can not create file 'netdev@ffff888022710700' [ 515.891188][T10349] FAULT_INJECTION: forcing a failure. [ 515.891188][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 515.891223][T10349] CPU: 1 UID: 0 PID: 10349 Comm: syz.6.1158 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.891249][T10349] Tainted: [L]=SOFTLOCKUP [ 515.891256][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 515.891268][T10349] Call Trace: [ 515.891275][T10349] [ 515.891283][T10349] dump_stack_lvl+0x100/0x190 [ 515.891318][T10349] should_fail_ex.cold+0x5/0xa [ 515.891347][T10349] should_failslab+0xc2/0x120 [ 515.891377][T10349] kmem_cache_alloc_noprof+0x92/0x6a0 [ 515.891405][T10349] ? op_alloc+0x2b/0x4e0 [ 515.891440][T10349] op_alloc+0x2b/0x4e0 [ 515.891473][T10349] orangefs_get_tree+0xf9/0x1080 [ 515.891504][T10349] ? __pfx_orangefs_get_tree+0x10/0x10 [ 515.891528][T10349] ? rcu_is_watching+0x13/0xc0 [ 515.891556][T10349] ? cap_capable+0x107/0x430 [ 515.891582][T10349] ? bpf_lsm_capable+0x9/0x10 [ 515.891605][T10349] vfs_get_tree+0x92/0x320 [ 515.891627][T10349] vfs_cmd_create+0xd7/0x2a0 [ 515.891652][T10349] __do_sys_fsconfig+0x55a/0xcb0 [ 515.891684][T10349] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 515.891708][T10349] ? fput+0x7c/0x100 [ 515.891751][T10349] do_syscall_64+0x123/0x790 [ 515.891782][T10349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.891803][T10349] RIP: 0033:0x7ff89f79e1d9 [ 515.891819][T10349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.891838][T10349] RSP: 002b:00007ff8a057e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 515.891857][T10349] RAX: ffffffffffffffda RBX: 00007ff89fa25fa0 RCX: 00007ff89f79e1d9 [ 515.891870][T10349] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 515.891881][T10349] RBP: 00007ff89f835888 R08: 0000000000000000 R09: 0000000000000000 [ 515.891893][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.891905][T10349] R13: 00007ff89fa26038 R14: 00007ff89fa25fa0 R15: 00007fff2e0e08d8 [ 515.891931][T10349] [ 515.891939][T10349] op_alloc: kmem_cache_zalloc failed! [ 517.985755][T10364] FAULT_INJECTION: forcing a failure. [ 517.985755][T10364] name failslab, interval 1, probability 0, space 0, times 0 [ 517.985778][T10364] CPU: 0 UID: 0 PID: 10364 Comm: syz.7.1163 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.985794][T10364] Tainted: [L]=SOFTLOCKUP [ 517.985799][T10364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 517.985806][T10364] Call Trace: [ 517.985810][T10364] [ 517.985816][T10364] dump_stack_lvl+0x100/0x190 [ 517.985836][T10364] should_fail_ex.cold+0x5/0xa [ 517.985853][T10364] should_failslab+0xc2/0x120 [ 517.985870][T10364] __kmalloc_cache_noprof+0x91/0x6d0 [ 517.985885][T10364] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 517.985904][T10364] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 517.985921][T10364] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 517.985940][T10364] selinux_socket_post_create+0x368/0x7e0 [ 517.985957][T10364] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 517.985972][T10364] ? raw_sk_init+0x97/0xb0 [ 517.985987][T10364] ? __pfx_raw_sk_init+0x10/0x10 [ 517.986001][T10364] ? inet_create+0x962/0x1060 [ 517.986019][T10364] security_socket_post_create+0xaf/0x270 [ 517.986035][T10364] __sock_create+0x70b/0x860 [ 517.986053][T10364] __sys_socket+0x14d/0x260 [ 517.986074][T10364] ? fput+0x7c/0x100 [ 517.986092][T10364] ? __pfx___sys_socket+0x10/0x10 [ 517.986107][T10364] ? ksys_write+0x1ac/0x250 [ 517.986121][T10364] ? __pfx_ksys_write+0x10/0x10 [ 517.986136][T10364] ? v4l2_ioctl+0x1c5/0x250 [ 517.986153][T10364] __x64_sys_socket+0x72/0xb0 [ 517.986173][T10364] ? lockdep_hardirqs_on+0x7d/0x110 [ 517.986197][T10364] do_syscall_64+0x123/0x790 [ 517.986216][T10364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.986228][T10364] RIP: 0033:0x7ff35919e1d9 [ 517.986239][T10364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.986251][T10364] RSP: 002b:00007ff359faf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 517.986264][T10364] RAX: ffffffffffffffda RBX: 00007ff359425fa0 RCX: 00007ff35919e1d9 [ 517.986272][T10364] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 517.986280][T10364] RBP: 00007ff359235888 R08: 0000000000000000 R09: 0000000000000000 [ 517.986287][T10364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.986295][T10364] R13: 00007ff359426038 R14: 00007ff359425fa0 R15: 00007ffd93d04ca8 [ 517.986311][T10364] [ 518.062634][T10368] FAULT_INJECTION: forcing a failure. [ 518.062634][T10368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.062665][T10368] CPU: 0 UID: 0 PID: 10368 Comm: syz.5.1165 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.062687][T10368] Tainted: [L]=SOFTLOCKUP [ 518.062693][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 518.062703][T10368] Call Trace: [ 518.062709][T10368] [ 518.062716][T10368] dump_stack_lvl+0x100/0x190 [ 518.062744][T10368] should_fail_ex.cold+0x5/0xa [ 518.062769][T10368] _copy_to_user+0x32/0xd0 [ 518.062795][T10368] tomoyo_flush+0x161/0x520 [ 518.062824][T10368] tomoyo_set_group+0x181/0x3d0 [ 518.062843][T10368] tomoyo_print_entry+0x238/0x4880 [ 518.062866][T10368] ? lock_acquire+0x1d1/0x380 [ 518.062886][T10368] ? __pfx_tomoyo_print_entry+0x10/0x10 [ 518.062903][T10368] ? find_held_lock+0x2b/0x80 [ 518.062925][T10368] ? __might_fault+0xc5/0x140 [ 518.062942][T10368] ? __might_fault+0xc5/0x140 [ 518.062970][T10368] tomoyo_read_domain2+0xa3/0x380 [ 518.062991][T10368] tomoyo_read_domain+0x30e/0xe10 [ 518.063015][T10368] tomoyo_read_control+0x29c/0x540 [ 518.063035][T10368] ? __pfx_tomoyo_read+0x10/0x10 [ 518.063051][T10368] vfs_read+0x1e4/0xb40 [ 518.063071][T10368] ? lock_acquire+0x1d1/0x380 [ 518.063089][T10368] ? __fget_files+0x34/0x3d0 [ 518.063110][T10368] ? __pfx_vfs_read+0x10/0x10 [ 518.063128][T10368] ? find_held_lock+0x2b/0x80 [ 518.063151][T10368] ? __fget_files+0x215/0x3d0 [ 518.063182][T10368] ? __fget_files+0x21f/0x3d0 [ 518.063211][T10368] ksys_read+0x12a/0x250 [ 518.063233][T10368] ? __pfx_ksys_read+0x10/0x10 [ 518.063258][T10368] do_syscall_64+0x123/0x790 [ 518.063283][T10368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.063299][T10368] RIP: 0033:0x7f27fa99e1d9 [ 518.063313][T10368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.063327][T10368] RSP: 002b:00007f27fb7b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 518.063343][T10368] RAX: ffffffffffffffda RBX: 00007f27fac25fa0 RCX: 00007f27fa99e1d9 [ 518.063354][T10368] RDX: 0000000000002020 RSI: 0000200000000c40 RDI: 0000000000000003 [ 518.063365][T10368] RBP: 00007f27fb7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 518.063375][T10368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.063384][T10368] R13: 00007f27fac26038 R14: 00007f27fac25fa0 R15: 00007ffd28cc8818 [ 518.063407][T10368] [ 519.185427][ T5735] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 519.322687][T10380] FAULT_INJECTION: forcing a failure. [ 519.322687][T10380] name failslab, interval 1, probability 0, space 0, times 0 [ 519.322716][T10380] CPU: 0 UID: 0 PID: 10380 Comm: syz.7.1166 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.322738][T10380] Tainted: [L]=SOFTLOCKUP [ 519.322745][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 519.322754][T10380] Call Trace: [ 519.322761][T10380] [ 519.322767][T10380] dump_stack_lvl+0x100/0x190 [ 519.322796][T10380] should_fail_ex.cold+0x5/0xa [ 519.322820][T10380] should_failslab+0xc2/0x120 [ 519.322843][T10380] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 519.322865][T10380] ? __d_alloc+0x35/0xa50 [ 519.322885][T10380] __d_alloc+0x35/0xa50 [ 519.322903][T10380] d_alloc_parallel+0x105/0x14c0 [ 519.322927][T10380] ? lock_acquire+0x1d1/0x380 [ 519.322946][T10380] ? __d_lookup+0x73/0x4a0 [ 519.322966][T10380] ? __pfx_d_alloc_parallel+0x10/0x10 [ 519.322985][T10380] ? __d_lookup+0x25c/0x4a0 [ 519.323008][T10380] ? __d_lookup+0x266/0x4a0 [ 519.323036][T10380] lookup_open+0x6bb/0x1990 [ 519.323064][T10380] path_openat+0xa2c/0x2440 [ 519.323090][T10380] ? __pfx_path_openat+0x10/0x10 [ 519.323119][T10380] do_file_open+0x20e/0x430 [ 519.323144][T10380] ? __pfx_do_file_open+0x10/0x10 [ 519.323174][T10380] ? __pfx_kfree_link+0x10/0x10 [ 519.323202][T10380] ? _raw_spin_unlock+0x28/0x50 [ 519.323221][T10380] ? alloc_fd+0x471/0x7a0 [ 519.323251][T10380] do_sys_openat2+0x10f/0x1e0 [ 519.323267][T10380] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.323283][T10380] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 519.323307][T10380] ? __fget_files+0x21f/0x3d0 [ 519.323333][T10380] __x64_sys_openat+0x12d/0x210 [ 519.323349][T10380] ? __pfx___x64_sys_openat+0x10/0x10 [ 519.323364][T10380] ? ksys_write+0x1ac/0x250 [ 519.323392][T10380] do_syscall_64+0x123/0x790 [ 519.323417][T10380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.323433][T10380] RIP: 0033:0x7ff35915ea0e [ 519.323447][T10380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 519.323461][T10380] RSP: 002b:00007ff359faeec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 519.323478][T10380] RAX: ffffffffffffffda RBX: 00007ff359faf6c0 RCX: 00007ff35915ea0e [ 519.323490][T10380] RDX: 0000000000000002 RSI: 00007ff359faef90 RDI: ffffffffffffff9c [ 519.323500][T10380] RBP: 00007ff359faf090 R08: 0000000000000000 R09: 0000000000000000 [ 519.323510][T10380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.323519][T10380] R13: 00007ff359426038 R14: 00007ff359425fa0 R15: 00007ffd93d04ca8 [ 519.323547][T10380] [ 519.343296][ T5735] usb 7-1: Using ep0 maxpacket: 32 [ 519.344636][ T5735] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 519.347090][ T5735] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.347108][ T5735] usb 7-1: Product: syz [ 519.347121][ T5735] usb 7-1: Manufacturer: syz [ 519.347134][ T5735] usb 7-1: SerialNumber: syz [ 519.349246][ T5735] usb 7-1: config 0 descriptor?? [ 519.572071][ T31] audit: type=1400 audit(1791737376.318:1285): avc: denied { write } for pid=10385 comm="syz.7.1172" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 519.585029][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.585391][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.594985][ T5735] airspy 7-1:0.0: usb_control_msg() failed -71 request 09 [ 519.595006][ T5735] airspy 7-1:0.0: Could not detect board [ 519.595073][ T5735] airspy 7-1:0.0: probe with driver airspy failed with error -71 [ 519.608683][ T5735] usb 7-1: USB disconnect, device number 7 [ 519.850854][T10395] FAULT_INJECTION: forcing a failure. [ 519.850854][T10395] name failslab, interval 1, probability 0, space 0, times 0 [ 519.850887][T10395] CPU: 1 UID: 0 PID: 10395 Comm: syz.5.1173 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.850912][T10395] Tainted: [L]=SOFTLOCKUP [ 519.850919][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 519.850931][T10395] Call Trace: [ 519.850938][T10395] [ 519.850946][T10395] dump_stack_lvl+0x100/0x190 [ 519.850977][T10395] should_fail_ex.cold+0x5/0xa [ 519.851004][T10395] should_failslab+0xc2/0x120 [ 519.851033][T10395] kmem_cache_alloc_noprof+0x92/0x6a0 [ 519.851055][T10395] ? __pfx_map_id_range_down+0x10/0x10 [ 519.851083][T10395] ? rcu_is_watching+0x13/0xc0 [ 519.851109][T10395] ? security_inode_alloc+0x3b/0x2c0 [ 519.851139][T10395] security_inode_alloc+0x3b/0x2c0 [ 519.851163][T10395] inode_init_always_gfp+0xc6f/0xfb0 [ 519.851195][T10395] alloc_inode+0x8e/0x250 [ 519.851216][T10395] sock_alloc+0x44/0x280 [ 519.851236][T10395] ? security_socket_create+0x7f/0x250 [ 519.851260][T10395] __sock_create+0xc2/0x860 [ 519.851289][T10395] __sys_socketpair+0x261/0x5b0 [ 519.851316][T10395] ? __pfx___sys_socketpair+0x10/0x10 [ 519.851345][T10395] ? __pfx_ksys_write+0x10/0x10 [ 519.851373][T10395] __x64_sys_socketpair+0x96/0x100 [ 519.851399][T10395] ? lockdep_hardirqs_on+0x7d/0x110 [ 519.851424][T10395] do_syscall_64+0x123/0x790 [ 519.851454][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.851472][T10395] RIP: 0033:0x7f27fa99e1d9 [ 519.851488][T10395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.851505][T10395] RSP: 002b:00007f27fb7b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 519.851524][T10395] RAX: ffffffffffffffda RBX: 00007f27fac25fa0 RCX: 00007f27fa99e1d9 [ 519.851536][T10395] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 519.851548][T10395] RBP: 00007f27fb7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 519.851559][T10395] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 519.851570][T10395] R13: 00007f27fac26038 R14: 00007f27fac25fa0 R15: 00007ffd28cc8818 [ 519.851596][T10395] [ 519.851617][T10395] socket: no more sockets [ 520.318412][T10407] FAULT_INJECTION: forcing a failure. [ 520.318412][T10407] name failslab, interval 1, probability 0, space 0, times 0 [ 520.318448][T10407] CPU: 1 UID: 0 PID: 10407 Comm: syz.6.1177 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.318478][T10407] Tainted: [L]=SOFTLOCKUP [ 520.318485][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 520.318498][T10407] Call Trace: [ 520.318505][T10407] [ 520.318515][T10407] dump_stack_lvl+0x100/0x190 [ 520.318551][T10407] should_fail_ex.cold+0x5/0xa [ 520.318578][T10407] should_failslab+0xc2/0x120 [ 520.318607][T10407] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 520.318631][T10407] ? lock_acquire+0x1d1/0x380 [ 520.318652][T10407] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 520.318675][T10407] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 520.318703][T10407] kstrdup+0x51/0xe0 [ 520.318726][T10407] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 520.318753][T10407] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 520.318783][T10407] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 520.318816][T10407] selinux_socket_post_create+0x368/0x7e0 [ 520.318846][T10407] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 520.318873][T10407] ? raw_sk_init+0x97/0xb0 [ 520.318898][T10407] ? __pfx_raw_sk_init+0x10/0x10 [ 520.318923][T10407] ? inet_create+0x962/0x1060 [ 520.318953][T10407] security_socket_post_create+0xaf/0x270 [ 520.318981][T10407] __sock_create+0x70b/0x860 [ 520.319014][T10407] __sys_socket+0x14d/0x260 [ 520.319042][T10407] ? __pfx___sys_socket+0x10/0x10 [ 520.319085][T10407] __x64_sys_socket+0x72/0xb0 [ 520.319111][T10407] ? lockdep_hardirqs_on+0x7d/0x110 [ 520.319140][T10407] do_syscall_64+0x123/0x790 [ 520.319171][T10407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.319190][T10407] RIP: 0033:0x7ff89f79e1d9 [ 520.319208][T10407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.319227][T10407] RSP: 002b:00007ff8a057e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 520.319248][T10407] RAX: ffffffffffffffda RBX: 00007ff89fa25fa0 RCX: 00007ff89f79e1d9 [ 520.319261][T10407] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 520.319273][T10407] RBP: 00007ff89f835888 R08: 0000000000000000 R09: 0000000000000000 [ 520.319286][T10407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.319298][T10407] R13: 00007ff89fa26038 R14: 00007ff89fa25fa0 R15: 00007fff2e0e08d8 [ 520.319326][T10407] [ 520.729776][T10414] syzkaller0: entered promiscuous mode [ 520.729804][T10414] syzkaller0: entered allmulticast mode [ 524.445414][ T31] audit: type=1400 audit(1791737381.198:1286): avc: denied { getopt } for pid=10436 comm="syz.6.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 524.573355][ T5610] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 524.595656][ T31] audit: type=1400 audit(1791737381.348:1287): avc: denied { create } for pid=10436 comm="syz.6.1184" name="loop0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 524.597875][T10438] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 524.691983][T10452] FAULT_INJECTION: forcing a failure. [ 524.691983][T10452] name failslab, interval 1, probability 0, space 0, times 0 [ 524.692016][T10452] CPU: 0 UID: 0 PID: 10452 Comm: syz.5.1188 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.692043][T10452] Tainted: [L]=SOFTLOCKUP [ 524.692050][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 524.692061][T10452] Call Trace: [ 524.692068][T10452] [ 524.692077][T10452] dump_stack_lvl+0x100/0x190 [ 524.692120][T10452] should_fail_ex.cold+0x5/0xa [ 524.692149][T10452] should_failslab+0xc2/0x120 [ 524.692176][T10452] __kmalloc_cache_noprof+0x91/0x6d0 [ 524.692197][T10452] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 524.692230][T10452] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 524.692256][T10452] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 524.692287][T10452] selinux_socket_post_create+0x368/0x7e0 [ 524.692315][T10452] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 524.692341][T10452] ? raw_sk_init+0x97/0xb0 [ 524.692366][T10452] ? __pfx_raw_sk_init+0x10/0x10 [ 524.692386][T10452] ? inet_create+0x962/0x1060 [ 524.692412][T10452] security_socket_post_create+0xaf/0x270 [ 524.692435][T10452] __sock_create+0x70b/0x860 [ 524.692462][T10452] __sys_socket+0x14d/0x260 [ 524.692490][T10452] ? __pfx___sys_socket+0x10/0x10 [ 524.692522][T10452] __x64_sys_socket+0x72/0xb0 [ 524.692544][T10452] ? lockdep_hardirqs_on+0x7d/0x110 [ 524.692567][T10452] do_syscall_64+0x123/0x790 [ 524.692587][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.692601][T10452] RIP: 0033:0x7f27fa99e1d9 [ 524.692612][T10452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.692623][T10452] RSP: 002b:00007f27fb7b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 524.692635][T10452] RAX: ffffffffffffffda RBX: 00007f27fac25fa0 RCX: 00007f27fa99e1d9 [ 524.692642][T10452] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 524.692649][T10452] RBP: 00007f27faa35888 R08: 0000000000000000 R09: 0000000000000000 [ 524.692656][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.692662][T10452] R13: 00007f27fac26038 R14: 00007f27fac25fa0 R15: 00007ffd28cc8818 [ 524.692677][T10452] [ 524.738603][ T5610] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 524.757041][ T5610] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 524.757083][ T5610] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 524.757108][ T5610] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 524.757130][ T5610] usb 3-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.757159][ T5610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.783351][T10441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 524.978314][T10456] syzkaller0: entered promiscuous mode [ 524.978336][T10456] syzkaller0: entered allmulticast mode [ 525.018555][ T5610] ims_pcu 3-1:1.0: Incorrect number of endpoints on data interface (1) [ 525.018605][ T5610] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -22 [ 525.083961][ T31] audit: type=1400 audit(1791737381.838:1288): avc: denied { unlink } for pid=9462 comm="syz-executor" name="loop0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 525.146389][T10457] ip_tables: iptables: counters copy to user failed while replacing table [ 525.150354][T10457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.150705][T10457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.757978][T10462] FAULT_INJECTION: forcing a failure. [ 526.757978][T10462] name failslab, interval 1, probability 0, space 0, times 0 [ 526.758015][T10462] CPU: 0 UID: 0 PID: 10462 Comm: syz.7.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.758045][T10462] Tainted: [L]=SOFTLOCKUP [ 526.758054][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 526.758066][T10462] Call Trace: [ 526.758074][T10462] [ 526.758083][T10462] dump_stack_lvl+0x100/0x190 [ 526.758125][T10462] should_fail_ex.cold+0x5/0xa [ 526.758155][T10462] should_failslab+0xc2/0x120 [ 526.758187][T10462] __kmalloc_cache_noprof+0x91/0x6d0 [ 526.758213][T10462] ? fib_net_init+0x1c3/0x460 [ 526.758242][T10462] fib_net_init+0x1c3/0x460 [ 526.758266][T10462] ? __pfx_fib_net_init+0x10/0x10 [ 526.758291][T10462] ? timer_init_key+0x150/0x310 [ 526.758320][T10462] ? devinet_init_net+0x56c/0x8d0 [ 526.758348][T10462] ? __pfx_fib_net_init+0x10/0x10 [ 526.758369][T10462] ops_init+0x1e2/0x5f0 [ 526.758394][T10462] setup_net+0x118/0x3a0 [ 526.758418][T10462] ? __pfx_setup_net+0x10/0x10 [ 526.758449][T10462] copy_net_ns+0x345/0x7a0 [ 526.758476][T10462] create_new_namespaces+0x3ea/0xac0 [ 526.758509][T10462] unshare_nsproxy_namespaces+0xf2/0x220 [ 526.758537][T10462] ksys_unshare+0x4a2/0xb30 [ 526.758564][T10462] ? __pfx_ksys_unshare+0x10/0x10 [ 526.758600][T10462] __x64_sys_unshare+0x31/0x40 [ 526.758623][T10462] do_syscall_64+0x123/0x790 [ 526.758655][T10462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.758676][T10462] RIP: 0033:0x7ff35919e1d9 [ 526.758693][T10462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.758712][T10462] RSP: 002b:00007ff359faf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 526.758732][T10462] RAX: ffffffffffffffda RBX: 00007ff359425fa0 RCX: 00007ff35919e1d9 [ 526.758747][T10462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 526.758760][T10462] RBP: 00007ff359235888 R08: 0000000000000000 R09: 0000000000000000 [ 526.758772][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.758785][T10462] R13: 00007ff359426038 R14: 00007ff359425fa0 R15: 00007ffd93d04ca8 [ 526.758814][T10462] [ 526.781082][ T5734] usb 3-1: USB disconnect, device number 49 [ 527.160144][T10484] afs: Bad value for 'source' [ 527.222791][ T31] audit: type=1400 audit(1791737383.968:1289): avc: denied { mounton } for pid=10481 comm="syz.3.1198" path="/proc/823/task" dev="proc" ino=27576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 528.113598][ T5610] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 528.128899][T10492] FAULT_INJECTION: forcing a failure. [ 528.128899][T10492] name failslab, interval 1, probability 0, space 0, times 0 [ 528.128926][T10492] CPU: 0 UID: 0 PID: 10492 Comm: syz.7.1201 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.128949][T10492] Tainted: [L]=SOFTLOCKUP [ 528.128955][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 528.128966][T10492] Call Trace: [ 528.128972][T10492] [ 528.128980][T10492] dump_stack_lvl+0x100/0x190 [ 528.129014][T10492] should_fail_ex.cold+0x5/0xa [ 528.129041][T10492] should_failslab+0xc2/0x120 [ 528.129068][T10492] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 528.129090][T10492] ? lock_acquire+0x1d1/0x380 [ 528.129109][T10492] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 528.129128][T10492] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 528.129153][T10492] kstrdup+0x51/0xe0 [ 528.129174][T10492] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 528.129195][T10492] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 528.129220][T10492] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 528.129246][T10492] selinux_socket_post_create+0x368/0x7e0 [ 528.129270][T10492] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 528.129292][T10492] ? raw_sk_init+0x97/0xb0 [ 528.129313][T10492] ? __pfx_raw_sk_init+0x10/0x10 [ 528.129333][T10492] ? inet_create+0x962/0x1060 [ 528.129359][T10492] security_socket_post_create+0xaf/0x270 [ 528.129382][T10492] __sock_create+0x70b/0x860 [ 528.129410][T10492] __sys_socket+0x14d/0x260 [ 528.129433][T10492] ? __pfx___sys_socket+0x10/0x10 [ 528.129461][T10492] __x64_sys_socket+0x72/0xb0 [ 528.129482][T10492] ? lockdep_hardirqs_on+0x7d/0x110 [ 528.129505][T10492] do_syscall_64+0x123/0x790 [ 528.129530][T10492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.129547][T10492] RIP: 0033:0x7ff35919e1d9 [ 528.129561][T10492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.129576][T10492] RSP: 002b:00007ff359faf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 528.129593][T10492] RAX: ffffffffffffffda RBX: 00007ff359425fa0 RCX: 00007ff35919e1d9 [ 528.129604][T10492] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 528.129614][T10492] RBP: 00007ff359235888 R08: 0000000000000000 R09: 0000000000000000 [ 528.129624][T10492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.129633][T10492] R13: 00007ff359426038 R14: 00007ff359425fa0 R15: 00007ffd93d04ca8 [ 528.129657][T10492] [ 528.284327][ T5610] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 528.304335][ T5610] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.304364][ T5610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.432614][ T5610] as10x_usb: device has been detected [ 528.433220][ T5610] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 528.474470][ T5610] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 528.512314][T10500] FAULT_INJECTION: forcing a failure. [ 528.512314][T10500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.512350][T10500] CPU: 1 UID: 0 PID: 10500 Comm: syz.2.1202 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.512380][T10500] Tainted: [L]=SOFTLOCKUP [ 528.512388][T10500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 528.512402][T10500] Call Trace: [ 528.512410][T10500] [ 528.512419][T10500] dump_stack_lvl+0x100/0x190 [ 528.512453][T10500] should_fail_ex.cold+0x5/0xa [ 528.512489][T10500] _copy_from_user+0x2e/0xd0 [ 528.512519][T10500] copy_msghdr_from_user+0x9f/0x4c0 [ 528.512548][T10500] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 528.512580][T10500] ? rcu_is_watching+0x13/0xc0 [ 528.512609][T10500] ? ___sys_recvmsg+0x177/0x1a0 [ 528.512632][T10500] ? kfree+0x1e5/0x6d0 [ 528.512656][T10500] ___sys_recvmsg+0xdd/0x1a0 [ 528.512682][T10500] ? __pfx____sys_recvmsg+0x10/0x10 [ 528.512708][T10500] ? lock_acquire+0x1d1/0x380 [ 528.512744][T10500] ? __pfx___might_resched+0x10/0x10 [ 528.512771][T10500] do_recvmmsg+0x2f3/0x740 [ 528.512800][T10500] ? __pfx_do_recvmmsg+0x10/0x10 [ 528.512824][T10500] ? __pfx___sched_setaffinity+0x10/0x10 [ 528.512856][T10500] ? do_futex+0x190/0x440 [ 528.512896][T10500] ? __x64_sys_futex+0x34f/0x4d0 [ 528.512928][T10500] __x64_sys_recvmmsg+0x22a/0x280 [ 528.512951][T10500] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 528.512981][T10500] do_syscall_64+0x123/0x790 [ 528.513012][T10500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.513034][T10500] RIP: 0033:0x7f2b8d19e1d9 [ 528.513052][T10500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.513072][T10500] RSP: 002b:00007f2b8e0d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 528.513093][T10500] RAX: ffffffffffffffda RBX: 00007f2b8d426090 RCX: 00007f2b8d19e1d9 [ 528.513107][T10500] RDX: 0000000000010106 RSI: 0000200000000e00 RDI: 0000000000000006 [ 528.513120][T10500] RBP: 00007f2b8d235888 R08: 0000000000000000 R09: 0000000000000000 [ 528.513132][T10500] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 528.513144][T10500] R13: 00007f2b8d426128 R14: 00007f2b8d426090 R15: 00007fff835e8678 [ 528.513170][T10500] [ 529.348813][ T5610] as10x_usb: error during firmware upload part1 [ 529.361158][ T5610] Registered device Abilis Systems DVB-Titan [ 529.405831][ T5610] usb 4-1: USB disconnect, device number 48 [ 530.138662][ T5610] Unregistered device Abilis Systems DVB-Titan [ 530.144262][ T5610] as10x_usb: device has been disconnected [ 530.277638][ T31] audit: type=1400 audit(1791737387.028:1290): avc: denied { mounton } for pid=10519 comm="syz.7.1210" path="/20/file0" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 530.326279][ T31] audit: type=1400 audit(1791737387.078:1291): avc: denied { mount } for pid=10520 comm="syz.3.1209" name="/" dev="autofs" ino=28673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 530.380459][T10529] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 530.380486][T10529] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 530.381429][T10529] vhci_hcd vhci_hcd.0: Device attached [ 530.423456][ T30] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 530.475131][T10530] vhci_hcd: connection closed [ 530.476247][ T1043] vhci_hcd vhci_hcd.6: stop threads [ 530.476269][ T1043] vhci_hcd vhci_hcd.6: release socket [ 530.476285][ T1043] vhci_hcd vhci_hcd.6: disconnect device [ 530.596355][ T30] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 530.597174][ T30] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 530.597214][ T30] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 530.597236][ T30] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.597258][ T30] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 530.597280][ T30] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 530.598068][ T30] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 530.598105][ T30] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 530.598130][ T30] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.598153][ T30] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 530.598173][ T30] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 530.599079][ T30] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 530.599114][ T30] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 530.599137][ T30] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.599158][ T30] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 530.599180][ T30] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 530.646089][ T30] usb 3-1: string descriptor 0 read error: -22 [ 530.646197][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.026317][T10548] synth uevent: /bus/virtio/drivers/virtio_net: unknown uevent action string [ 531.490749][ T30] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 531.661098][ T31] audit: type=1400 audit(1791737388.408:1292): avc: denied { write } for pid=10543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.801985][T10563] afs: Unknown parameter 'flocRª³«…K›autocell' [ 532.871431][ T31] audit: type=1400 audit(1791737389.618:1293): avc: denied { write } for pid=10573 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.910173][T10569] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1218'. [ 533.000786][ T5613] Bluetooth: hci6: link tx timeout [ 533.000805][ T5613] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.042274][T10578] FAULT_INJECTION: forcing a failure. [ 533.042274][T10578] name failslab, interval 1, probability 0, space 0, times 0 [ 533.042306][T10578] CPU: 1 UID: 0 PID: 10578 Comm: syz.7.1220 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.042331][T10578] Tainted: [L]=SOFTLOCKUP [ 533.042338][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 533.042349][T10578] Call Trace: [ 533.042356][T10578] [ 533.042364][T10578] dump_stack_lvl+0x100/0x190 [ 533.042395][T10578] should_fail_ex.cold+0x5/0xa [ 533.042422][T10578] should_failslab+0xc2/0x120 [ 533.042449][T10578] __kmalloc_noprof+0xfc/0x840 [ 533.042472][T10578] ? tomoyo_encode2+0xfb/0x3c0 [ 533.042505][T10578] tomoyo_encode2+0xfb/0x3c0 [ 533.042534][T10578] tomoyo_encode+0x29/0x50 [ 533.042559][T10578] tomoyo_realpath_from_path+0x18c/0x690 [ 533.042592][T10578] tomoyo_check_open_permission+0x2af/0x3c0 [ 533.042618][T10578] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 533.042653][T10578] ? hook_file_open+0x248/0x8e0 [ 533.042691][T10578] ? path_get+0x61/0x80 [ 533.042711][T10578] tomoyo_file_open+0x6b/0x90 [ 533.042732][T10578] security_file_open+0xb5/0x1e0 [ 533.042759][T10578] do_dentry_open+0x588/0x14d0 [ 533.042787][T10578] vfs_open+0x82/0x3f0 [ 533.042817][T10578] path_openat+0x19fa/0x2440 [ 533.042848][T10578] ? __pfx_path_openat+0x10/0x10 [ 533.042879][T10578] do_file_open+0x20e/0x430 [ 533.042906][T10578] ? __pfx_do_file_open+0x10/0x10 [ 533.042954][T10578] ? _raw_spin_unlock+0x28/0x50 [ 533.042975][T10578] ? alloc_fd+0x471/0x7a0 [ 533.043008][T10578] do_sys_openat2+0x10f/0x1e0 [ 533.043025][T10578] ? __pfx_do_sys_openat2+0x10/0x10 [ 533.043041][T10578] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 533.043067][T10578] ? __fget_files+0x21f/0x3d0 [ 533.043096][T10578] __x64_sys_openat+0x12d/0x210 [ 533.043115][T10578] ? __pfx___x64_sys_openat+0x10/0x10 [ 533.043132][T10578] ? ksys_write+0x1ac/0x250 [ 533.043162][T10578] do_syscall_64+0x123/0x790 [ 533.043192][T10578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.043211][T10578] RIP: 0033:0x7ff35919e1d9 [ 533.043227][T10578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.043243][T10578] RSP: 002b:00007ff359faf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.043261][T10578] RAX: ffffffffffffffda RBX: 00007ff359425fa0 RCX: 00007ff35919e1d9 [ 533.043273][T10578] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 533.043284][T10578] RBP: 00007ff359faf090 R08: 0000000000000000 R09: 0000000000000000 [ 533.043294][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.043304][T10578] R13: 00007ff359426038 R14: 00007ff359425fa0 R15: 00007ffd93d04ca8 [ 533.043329][T10578] [ 533.220773][T10578] ERROR: Out of memory at tomoyo_realpath_from_path. [ 533.251167][ T5726] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 533.469612][ T5726] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 533.557940][ T5726] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 533.557964][ T5726] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 533.557980][ T5726] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 533.558017][ T5726] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 533.558038][ T5726] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 533.656134][ T5726] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 533.656162][ T5726] usb 7-1: Product: syz [ 533.656177][ T5726] usb 7-1: Manufacturer: syz [ 533.716159][ T5621] Bluetooth: hci6: link tx timeout [ 533.716792][ T5621] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.811255][ T5621] Bluetooth: hci6: link tx timeout [ 533.811283][ T5621] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 534.060696][ T5726] cdc_wdm 7-1:1.0: skipping garbage [ 534.060716][ T5726] cdc_wdm 7-1:1.0: skipping garbage [ 534.062586][ T5726] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 534.062604][ T5726] cdc_wdm 7-1:1.0: Unknown control protocol [ 534.206999][T10586] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 534.288332][ T188] usb 3-1: USB disconnect, device number 50 [ 534.345885][ T5621] Bluetooth: hci6: link tx timeout [ 534.345904][ T5621] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 534.405048][ T5621] Bluetooth: hci6: link tx timeout [ 534.405066][ T5621] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 534.439934][ T31] audit: type=1400 audit(1791737391.188:1294): avc: denied { lock } for pid=10597 comm="syz.7.1225" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 534.484254][T10600] FAULT_INJECTION: forcing a failure. [ 534.484254][T10600] name failslab, interval 1, probability 0, space 0, times 0 [ 534.484290][T10600] CPU: 1 UID: 0 PID: 10600 Comm: syz.2.1224 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.484318][T10600] Tainted: [L]=SOFTLOCKUP [ 534.484325][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 534.484336][T10600] Call Trace: [ 534.484343][T10600] [ 534.484351][T10600] dump_stack_lvl+0x100/0x190 [ 534.484382][T10600] should_fail_ex.cold+0x5/0xa [ 534.484408][T10600] should_failslab+0xc2/0x120 [ 534.484432][T10600] __kmalloc_cache_noprof+0x91/0x6d0 [ 534.484456][T10600] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 534.484496][T10600] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 534.484526][T10600] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 534.484556][T10600] selinux_socket_post_create+0x368/0x7e0 [ 534.484582][T10600] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 534.484610][T10600] ? raw_sk_init+0x97/0xb0 [ 534.484635][T10600] ? __pfx_raw_sk_init+0x10/0x10 [ 534.484660][T10600] ? inet_create+0x962/0x1060 [ 534.484690][T10600] security_socket_post_create+0xaf/0x270 [ 534.484715][T10600] __sock_create+0x70b/0x860 [ 534.484746][T10600] __sys_socket+0x14d/0x260 [ 534.484769][T10600] ? __pfx___sys_socket+0x10/0x10 [ 534.484802][T10600] __x64_sys_socket+0x72/0xb0 [ 534.484828][T10600] ? lockdep_hardirqs_on+0x7d/0x110 [ 534.484854][T10600] do_syscall_64+0x123/0x790 [ 534.484883][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.484903][T10600] RIP: 0033:0x7f2b8d19e1d9 [ 534.484920][T10600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.484937][T10600] RSP: 002b:00007f2b8e0f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 534.484955][T10600] RAX: ffffffffffffffda RBX: 00007f2b8d425fa0 RCX: 00007f2b8d19e1d9 [ 534.484967][T10600] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 534.484977][T10600] RBP: 00007f2b8d235888 R08: 0000000000000000 R09: 0000000000000000 [ 534.484987][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.484997][T10600] R13: 00007f2b8d426038 R14: 00007f2b8d425fa0 R15: 00007fff835e8678 [ 534.485023][T10600] [ 534.613502][ T31] audit: type=1400 audit(1791737391.368:1295): avc: denied { read } for pid=10601 comm="syz.5.1226" name="/" dev="configfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 534.613549][ T31] audit: type=1400 audit(1791737391.368:1296): avc: denied { open } for pid=10601 comm="syz.5.1226" path="/78/file0" dev="configfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 534.800320][ T5734] usb 7-1: USB disconnect, device number 8 [ 534.852932][ T31] audit: type=1400 audit(1791737391.598:1297): avc: denied { map } for pid=10615 comm="syz.2.1229" path="/dev/video3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 534.926520][ T31] audit: type=1400 audit(1791737391.678:1298): avc: denied { write } for pid=10618 comm="syz.7.1231" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 534.988166][ T31] audit: type=1400 audit(1791737391.738:1299): avc: denied { write } for pid=10590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.023440][ T5621] Bluetooth: hci6: command 0x0406 tx timeout [ 535.053983][ T188] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 535.060816][T10621] FAULT_INJECTION: forcing a failure. [ 535.060816][T10621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.060851][T10621] CPU: 1 UID: 0 PID: 10621 Comm: syz.6.1230 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.060879][T10621] Tainted: [L]=SOFTLOCKUP [ 535.060887][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 535.060899][T10621] Call Trace: [ 535.060906][T10621] [ 535.060915][T10621] dump_stack_lvl+0x100/0x190 [ 535.060950][T10621] should_fail_ex.cold+0x5/0xa [ 535.060978][T10621] _copy_to_user+0x32/0xd0 [ 535.061010][T10621] simple_read_from_buffer+0xcb/0x170 [ 535.061043][T10621] proc_fail_nth_read+0x1af/0x230 [ 535.061079][T10621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.061111][T10621] ? rw_verify_area+0xce/0x6d0 [ 535.061133][T10621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.061163][T10621] vfs_read+0x1e4/0xb40 [ 535.061188][T10621] ? lock_acquire+0x1d1/0x380 [ 535.061211][T10621] ? __fget_files+0x34/0x3d0 [ 535.061239][T10621] ? __pfx_vfs_read+0x10/0x10 [ 535.061260][T10621] ? find_held_lock+0x2b/0x80 [ 535.061291][T10621] ? __fget_files+0x215/0x3d0 [ 535.061324][T10621] ? __fget_files+0x21f/0x3d0 [ 535.061361][T10621] ksys_read+0x12a/0x250 [ 535.061386][T10621] ? __pfx_ksys_read+0x10/0x10 [ 535.061419][T10621] do_syscall_64+0x123/0x790 [ 535.061451][T10621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.061479][T10621] RIP: 0033:0x7ff89f75ea0e [ 535.061496][T10621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 535.061516][T10621] RSP: 002b:00007ff8a057dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 535.061536][T10621] RAX: ffffffffffffffda RBX: 00007ff8a057e6c0 RCX: 00007ff89f75ea0e [ 535.061549][T10621] RDX: 000000000000000f RSI: 00007ff8a057e0a0 RDI: 0000000000000004 [ 535.061562][T10621] RBP: 00007ff8a057e090 R08: 0000000000000000 R09: 0000000000000000 [ 535.061574][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.061586][T10621] R13: 00007ff89fa26038 R14: 00007ff89fa25fa0 R15: 00007fff2e0e08d8 [ 535.061615][T10621] [ 535.062411][T10625] tmpfs: Bad value for 'mpol' [ 535.207272][ T188] usb 4-1: Using ep0 maxpacket: 16 [ 535.208931][ T188] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 535.277215][ T188] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 535.277248][ T188] usb 4-1: config 0 has no interface number 0 [ 535.277366][ T188] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 535.277415][ T188] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 535.384340][ T30] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 535.385881][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.385911][ T188] usb 4-1: Product: syz [ 535.385957][ T188] usb 4-1: Manufacturer: syz [ 535.385996][ T188] usb 4-1: SerialNumber: syz [ 535.451581][ T188] usb 4-1: config 0 descriptor?? [ 535.458971][T10614] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 535.459325][T10614] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 535.654091][ T30] usb 8-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 535.698381][ T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.771254][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.771284][ T30] usb 8-1: Product: syz [ 535.771299][ T30] usb 8-1: Manufacturer: syz [ 535.771312][ T30] usb 8-1: SerialNumber: syz [ 535.807278][ T31] audit: type=1400 audit(1791737392.558:1300): avc: denied { write } for pid=10628 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.062483][T10630] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 536.062626][T10630] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 536.162864][ T30] kaweth 8-1:1.0: couldn't find required endpoints [ 536.278907][ T188] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 536.279081][ T188] asix 4-1:0.34: probe with driver asix failed with error -61 [ 536.372319][T10639] afs: Bad value for 'source' [ 536.513359][ T5735] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 537.024601][ T5735] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 537.101065][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.101098][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.101131][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.249165][ T5735] usb 3-1: config 0 descriptor?? [ 537.958413][ T5735] usbhid 3-1:0.0: can't add hid device: -71 [ 537.958516][ T5735] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 538.235249][ T5735] usb 3-1: USB disconnect, device number 51 [ 538.240874][ T30] usb 4-1: USB disconnect, device number 49 [ 538.252655][ T5726] usb 8-1: USB disconnect, device number 3 [ 538.463557][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 538.473284][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.515957][T10665] bridge_slave_1 (unregistering): left allmulticast mode [ 538.515986][T10665] bridge_slave_1 (unregistering): left promiscuous mode [ 538.516061][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.620828][T10670] netlink: 288 bytes leftover after parsing attributes in process `syz.7.1241'. [ 538.668913][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 538.669000][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 538.669072][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 538.669160][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 538.669284][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 538.669355][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 538.669423][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 538.669492][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 539.153328][T10688] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 539.890910][T10695] FAULT_INJECTION: forcing a failure. [ 539.890910][T10695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.890946][T10695] CPU: 0 UID: 0 PID: 10695 Comm: syz.2.1246 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.890973][T10695] Tainted: [L]=SOFTLOCKUP [ 539.890981][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 539.890994][T10695] Call Trace: [ 539.891001][T10695] [ 539.891009][T10695] dump_stack_lvl+0x100/0x190 [ 539.891043][T10695] should_fail_ex.cold+0x5/0xa [ 539.891071][T10695] _copy_from_user+0x2e/0xd0 [ 539.891100][T10695] __sys_bpf+0x2f5/0x4a30 [ 539.891129][T10695] ? __pfx___sys_bpf+0x10/0x10 [ 539.891149][T10695] ? find_held_lock+0x2b/0x80 [ 539.891176][T10695] ? futex_wake+0x4ea/0x5e0 [ 539.891213][T10695] ? rcu_read_lock_any_held+0x6a/0x90 [ 539.891230][T10695] ? find_held_lock+0x2b/0x80 [ 539.891256][T10695] ? ksys_write+0x190/0x250 [ 539.891277][T10695] ? ksys_write+0x190/0x250 [ 539.891314][T10695] ? __x64_sys_futex+0x34f/0x4d0 [ 539.891340][T10695] ? __x64_sys_futex+0x358/0x4d0 [ 539.891367][T10695] ? fput+0x7c/0x100 [ 539.891389][T10695] ? __pfx___x64_sys_futex+0x10/0x10 [ 539.891413][T10695] ? ksys_write+0x1ac/0x250 [ 539.891436][T10695] ? __x64_sys_bpf+0xce/0x140 [ 539.891454][T10695] __x64_sys_bpf+0xce/0x140 [ 539.891475][T10695] ? do_syscall_64+0xae/0x790 [ 539.891502][T10695] do_syscall_64+0x123/0x790 [ 539.891530][T10695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.891549][T10695] RIP: 0033:0x7f2b8d19e1d9 [ 539.891565][T10695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.891582][T10695] RSP: 002b:00007f2b8e0f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 539.891602][T10695] RAX: ffffffffffffffda RBX: 00007f2b8d425fa0 RCX: 00007f2b8d19e1d9 [ 539.891615][T10695] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 539.891627][T10695] RBP: 00007f2b8d235888 R08: 0000000000000000 R09: 0000000000000000 [ 539.891639][T10695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.891650][T10695] R13: 00007f2b8d426038 R14: 00007f2b8d425fa0 R15: 00007fff835e8678 [ 539.891675][T10695] [ 540.143837][T10229] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 540.302045][T10229] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 540.346827][T10229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.464866][T10229] usb 6-1: config 0 descriptor?? [ 540.998603][T10713] FAULT_INJECTION: forcing a failure. [ 540.998603][T10713] name failslab, interval 1, probability 0, space 0, times 0 [ 540.998635][T10713] CPU: 1 UID: 0 PID: 10713 Comm: syz.6.1251 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.998659][T10713] Tainted: [L]=SOFTLOCKUP [ 540.998666][T10713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 540.998677][T10713] Call Trace: [ 540.998684][T10713] [ 540.998692][T10713] dump_stack_lvl+0x100/0x190 [ 540.998726][T10713] should_fail_ex.cold+0x5/0xa [ 540.998751][T10713] should_failslab+0xc2/0x120 [ 540.998778][T10713] __kmalloc_noprof+0xfc/0x840 [ 540.998803][T10713] ? tomoyo_encode2+0xfb/0x3c0 [ 540.998835][T10713] tomoyo_encode2+0xfb/0x3c0 [ 540.998866][T10713] tomoyo_encode+0x29/0x50 [ 540.998892][T10713] tomoyo_realpath_from_path+0x18c/0x690 [ 540.998925][T10713] tomoyo_check_open_permission+0x2af/0x3c0 [ 540.998947][T10713] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 540.998975][T10713] ? hook_file_open+0x248/0x8e0 [ 540.999009][T10713] ? path_get+0x61/0x80 [ 540.999028][T10713] tomoyo_file_open+0x6b/0x90 [ 540.999046][T10713] security_file_open+0xb5/0x1e0 [ 540.999070][T10713] do_dentry_open+0x588/0x14d0 [ 540.999095][T10713] vfs_open+0x82/0x3f0 [ 540.999126][T10713] path_openat+0x19fa/0x2440 [ 540.999155][T10713] ? __pfx_path_openat+0x10/0x10 [ 540.999189][T10713] do_file_open+0x20e/0x430 [ 540.999217][T10713] ? __pfx_do_file_open+0x10/0x10 [ 540.999258][T10713] ? _raw_spin_unlock+0x28/0x50 [ 540.999280][T10713] ? alloc_fd+0x471/0x7a0 [ 540.999313][T10713] do_sys_openat2+0x10f/0x1e0 [ 540.999331][T10713] ? __pfx_do_sys_openat2+0x10/0x10 [ 540.999349][T10713] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 540.999377][T10713] ? __fget_files+0x21f/0x3d0 [ 540.999405][T10713] __x64_sys_openat+0x12d/0x210 [ 540.999430][T10713] ? __pfx___x64_sys_openat+0x10/0x10 [ 540.999447][T10713] ? ksys_write+0x1ac/0x250 [ 540.999477][T10713] do_syscall_64+0x123/0x790 [ 540.999504][T10713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.999523][T10713] RIP: 0033:0x7ff89f79e1d9 [ 540.999539][T10713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.999556][T10713] RSP: 002b:00007ff8a057e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 540.999574][T10713] RAX: ffffffffffffffda RBX: 00007ff89fa25fa0 RCX: 00007ff89f79e1d9 [ 540.999586][T10713] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 540.999597][T10713] RBP: 00007ff8a057e090 R08: 0000000000000000 R09: 0000000000000000 [ 540.999608][T10713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.999619][T10713] R13: 00007ff89fa26038 R14: 00007ff89fa25fa0 R15: 00007fff2e0e08d8 [ 540.999646][T10713] [ 540.999665][T10713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 541.329962][ T31] audit: type=1800 audit(1791737398.078:1301): pid=10719 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1250" name="file1" dev="sda1" ino=2053 res=0 errno=0 [ 541.332486][T10229] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 541.332904][T10229] [drm:udl_init] *ERROR* Selecting channel failed [ 541.414791][T10229] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 541.414817][T10229] [drm] Initialized udl on minor 1 [ 541.421662][T10229] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 541.433345][ T5726] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 541.464940][T10229] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 541.483702][T10229] usb 6-1: USB disconnect, device number 10 [ 541.603123][ T5726] usb 7-1: unable to get BOS descriptor or descriptor too short [ 541.612208][ T5726] usb 7-1: not running at top speed; connect to a high speed hub [ 541.612238][ T5726] usb 7-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 541.632777][ T5726] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.632802][ T5726] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.632820][ T5726] usb 7-1: config 1 has no interface number 0 [ 541.659460][ T5726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.659486][ T5726] usb 7-1: Product: syz [ 541.659500][ T5726] usb 7-1: Manufacturer: syz [ 541.659515][ T5726] usb 7-1: SerialNumber: syz [ 542.088217][ T31] audit: type=1400 audit(1791737398.838:1302): avc: denied { read write } for pid=10736 comm="syz.2.1256" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 542.088572][ T31] audit: type=1400 audit(1791737398.838:1303): avc: denied { open } for pid=10736 comm="syz.2.1256" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 542.092958][ T31] audit: type=1400 audit(1791737398.838:1304): avc: denied { ioctl } for pid=10736 comm="syz.2.1256" path="/dev/input/mice" dev="devtmpfs" ino=915 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 542.237609][ T5726] usb 7-1: USB disconnect, device number 9 [ 542.243305][ T5610] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 542.259861][T10507] udevd[10507]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.404499][ T5610] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 542.409095][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.409128][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.409162][ T5610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.413177][ T5610] usb 4-1: config 0 descriptor?? [ 542.724315][T10748] vivid-000: disconnect [ 542.724942][T10748] vivid-000: reconnect [ 542.886062][ T5610] usbhid 4-1:0.0: can't add hid device: -71 [ 542.886166][ T5610] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 543.255571][ T5610] usb 4-1: USB disconnect, device number 50 [ 543.830203][T10763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=10763 comm=syz.2.1265 [ 543.951213][ T5735] hid-generic 0005:0018:63AA.000A: unknown main item tag 0x0 [ 543.951242][ T5735] hid-generic 0005:0018:63AA.000A: unknown main item tag 0x0 [ 543.975448][ T5735] hid-generic 0005:0018:63AA.000A: hidraw0: BLUETOOTH HID v0.56 Device [syz0] on aa:aa:aa:aa:aa:aa [ 544.311645][ T31] audit: type=1400 audit(1791737400.998:1305): avc: denied { setopt } for pid=10775 comm="syz.5.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 544.648712][T10779] fido_id[10779]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci6/hci6:200/report_descriptor': No such file or directory [ 545.284900][T10787] FAULT_INJECTION: forcing a failure. [ 545.284900][T10787] name failslab, interval 1, probability 0, space 0, times 0 [ 545.284936][T10787] CPU: 0 UID: 0 PID: 10787 Comm: syz.2.1269 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.284964][T10787] Tainted: [L]=SOFTLOCKUP [ 545.284972][T10787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 545.284984][T10787] Call Trace: [ 545.284992][T10787] [ 545.285001][T10787] dump_stack_lvl+0x100/0x190 [ 545.285034][T10787] should_fail_ex.cold+0x5/0xa [ 545.285069][T10787] should_failslab+0xc2/0x120 [ 545.285102][T10787] __kmalloc_noprof+0xfc/0x840 [ 545.285129][T10787] ? ceph_monc_init+0x1a1/0xcd0 [ 545.285167][T10787] ceph_monc_init+0x1a1/0xcd0 [ 545.285201][T10787] ? ceph_messenger_init+0x371/0x5d0 [ 545.285231][T10787] ceph_create_client+0x25e/0x370 [ 545.285255][T10787] ceph_get_tree+0x1a4/0x1fd0 [ 545.285278][T10787] ? bpf_lsm_capable+0x9/0x10 [ 545.285297][T10787] ? security_capable+0x80/0x260 [ 545.285323][T10787] vfs_get_tree+0x92/0x320 [ 545.285344][T10787] vfs_cmd_create+0xd7/0x2a0 [ 545.285369][T10787] __do_sys_fsconfig+0x55a/0xcb0 [ 545.285395][T10787] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 545.285433][T10787] do_syscall_64+0x123/0x790 [ 545.285464][T10787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.285484][T10787] RIP: 0033:0x7f2b8d19e1d9 [ 545.285500][T10787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.285519][T10787] RSP: 002b:00007f2b8e0f9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 545.285538][T10787] RAX: ffffffffffffffda RBX: 00007f2b8d425fa0 RCX: 00007f2b8d19e1d9 [ 545.285550][T10787] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 545.285561][T10787] RBP: 00007f2b8d235888 R08: 0000000000000000 R09: 0000000000000000 [ 545.285572][T10787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.285585][T10787] R13: 00007f2b8d426038 R14: 00007f2b8d425fa0 R15: 00007fff835e8678 [ 545.285612][T10787] [ 545.453317][ T31] audit: type=1400 audit(1791737402.198:1306): avc: denied { bind } for pid=10789 comm="syz.2.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 545.453844][ T31] audit: type=1400 audit(1791737402.208:1307): avc: denied { ioctl } for pid=10789 comm="syz.2.1273" path="socket:[30107]" dev="sockfs" ino=30107 ioctlcmd=0x4b6b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 545.572526][ T31] audit: type=1400 audit(1791737402.318:1308): avc: denied { setopt } for pid=10790 comm="syz.7.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 545.572904][ T31] audit: type=1400 audit(1791737402.318:1309): avc: denied { nlmsg_read } for pid=10790 comm="syz.7.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 545.572952][T10795] __nla_validate_parse: 25 callbacks suppressed [ 545.572966][T10795] netlink: 220 bytes leftover after parsing attributes in process `syz.7.1272'. [ 545.589496][T10795] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 545.642481][ T31] audit: type=1400 audit(1791737402.388:1310): avc: denied { map } for pid=10792 comm="syz.5.1271" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 546.810226][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 546.810247][ T31] audit: type=1400 audit(1791737403.558:1313): avc: denied { append } for pid=10812 comm="syz.6.1278" name="sg0" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 546.810288][ T31] audit: type=1400 audit(1791737403.558:1314): avc: denied { ioctl } for pid=10812 comm="syz.6.1278" path="/dev/sg0" dev="devtmpfs" ino=848 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 548.870019][ T31] audit: type=1400 audit(1791737405.618:1315): avc: denied { connect } for pid=10813 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 550.218128][T10838] syzkaller0: entered promiscuous mode [ 550.218151][T10838] syzkaller0: entered allmulticast mode [ 550.458352][ T31] audit: type=1400 audit(1791737407.208:1316): avc: denied { shutdown } for pid=10822 comm="syz.7.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 550.510860][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1286'. [ 550.836848][T10850] vivid-000: disconnect [ 550.837443][T10850] vivid-000: reconnect [ 551.345340][ T31] audit: type=1400 audit(1791737408.098:1317): avc: denied { write } for pid=10809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.381346][T10856] fuse: Bad value for 'fd' [ 551.438781][ T31] audit: type=1400 audit(1791737408.188:1318): avc: denied { write } for pid=10858 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.467858][T10859] FAULT_INJECTION: forcing a failure. [ 551.467858][T10859] name failslab, interval 1, probability 0, space 0, times 0 [ 551.467897][T10859] CPU: 1 UID: 0 PID: 10859 Comm: syz.7.1287 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.467928][T10859] Tainted: [L]=SOFTLOCKUP [ 551.467936][T10859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 551.467948][T10859] Call Trace: [ 551.467955][T10859] [ 551.467963][T10859] dump_stack_lvl+0x100/0x190 [ 551.467998][T10859] should_fail_ex.cold+0x5/0xa [ 551.468028][T10859] should_failslab+0xc2/0x120 [ 551.468058][T10859] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 551.468085][T10859] ? sock_alloc_inode+0x26/0x2c0 [ 551.468109][T10859] ? __pfx_sock_alloc_inode+0x10/0x10 [ 551.468133][T10859] sock_alloc_inode+0x26/0x2c0 [ 551.468155][T10859] ? __pfx_sock_alloc_inode+0x10/0x10 [ 551.468177][T10859] alloc_inode+0x68/0x250 [ 551.468198][T10859] sock_alloc+0x44/0x280 [ 551.468216][T10859] ? security_socket_create+0x7f/0x250 [ 551.468241][T10859] __sock_create+0xc2/0x860 [ 551.468271][T10859] __sys_socket+0x14d/0x260 [ 551.468305][T10859] ? fput+0x7c/0x100 [ 551.468332][T10859] ? __pfx___sys_socket+0x10/0x10 [ 551.468353][T10859] ? ksys_write+0x1ac/0x250 [ 551.468373][T10859] ? __pfx_ksys_write+0x10/0x10 [ 551.468401][T10859] __x64_sys_socket+0x72/0xb0 [ 551.468424][T10859] ? lockdep_hardirqs_on+0x7d/0x110 [ 551.468452][T10859] do_syscall_64+0x123/0x790 [ 551.468482][T10859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.468500][T10859] RIP: 0033:0x7ff35919e1d9 [ 551.468518][T10859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.468535][T10859] RSP: 002b:00007ff359faf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 551.468555][T10859] RAX: ffffffffffffffda RBX: 00007ff359425fa0 RCX: 00007ff35919e1d9 [ 551.468568][T10859] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 551.468578][T10859] RBP: 00007ff359235888 R08: 0000000000000000 R09: 0000000000000000 [ 551.468590][T10859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.468600][T10859] R13: 00007ff359426038 R14: 00007ff359425fa0 R15: 00007ffd93d04ca8 [ 551.468627][T10859] [ 551.468646][T10859] socket: no more sockets [ 551.642753][T10870] overlay: Unknown parameter 'obj_type' [ 554.675329][T10886] kAFS: unable to lookup cell 'syz1' [ 554.773853][T10888] FAULT_INJECTION: forcing a failure. [ 554.773853][T10888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.774072][T10888] CPU: 0 UID: 0 PID: 10888 Comm: syz.5.1295 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.774099][T10888] Tainted: [L]=SOFTLOCKUP [ 554.774106][T10888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 554.774116][T10888] Call Trace: [ 554.774123][T10888] [ 554.774131][T10888] dump_stack_lvl+0x100/0x190 [ 554.774163][T10888] should_fail_ex.cold+0x5/0xa [ 554.774191][T10888] _copy_from_user+0x2e/0xd0 [ 554.774219][T10888] bpf_test_init.isra.0+0xaf/0x100 [ 554.774249][T10888] bpf_prog_test_run_skb+0x48e/0x3530 [ 554.774280][T10888] ? lock_acquire+0x1d1/0x380 [ 554.774302][T10888] ? __fget_files+0x34/0x3d0 [ 554.774330][T10888] ? find_held_lock+0x2b/0x80 [ 554.774358][T10888] ? __fget_files+0x1a1/0x3d0 [ 554.774391][T10888] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 554.774421][T10888] ? fput+0x7c/0x100 [ 554.774451][T10888] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 554.774480][T10888] __sys_bpf+0x2265/0x4a30 [ 554.774506][T10888] ? _raw_spin_unlock_irq_enable+0x70/0x90 [ 554.774533][T10888] ? __pfx___sys_bpf+0x10/0x10 [ 554.774552][T10888] ? rcu_is_watching+0x13/0xc0 [ 554.774578][T10888] ? trace_hrtimer_start+0x77/0x220 [ 554.774607][T10888] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 554.774647][T10888] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 554.774670][T10888] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 554.774697][T10888] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 554.774722][T10888] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 554.774747][T10888] ? rcu_is_watching+0x13/0xc0 [ 554.774774][T10888] ? trace_sched_exit_tp+0x120/0x160 [ 554.774816][T10888] ? __pfx___schedule+0x10/0x10 [ 554.774839][T10888] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 554.774869][T10888] ? __x64_sys_bpf+0xce/0x140 [ 554.774888][T10888] __x64_sys_bpf+0xce/0x140 [ 554.774916][T10888] ? do_syscall_64+0xae/0x790 [ 554.774943][T10888] do_syscall_64+0x123/0x790 [ 554.774972][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.774991][T10888] RIP: 0033:0x7f27fa99e1d9 [ 554.775008][T10888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.775025][T10888] RSP: 002b:00007f27fb7b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 554.775044][T10888] RAX: ffffffffffffffda RBX: 00007f27fac25fa0 RCX: 00007f27fa99e1d9 [ 554.775057][T10888] RDX: 0000000000000050 RSI: 0000200000000e00 RDI: 000000000000000a [ 554.775068][T10888] RBP: 00007f27fb7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 554.775079][T10888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.775091][T10888] R13: 00007f27fac26038 R14: 00007f27fac25fa0 R15: 00007ffd28cc8818 [ 554.775117][T10888] [ 555.217295][T10890] FAULT_INJECTION: forcing a failure. [ 555.217295][T10890] name failslab, interval 1, probability 0, space 0, times 0 [ 555.217340][T10890] CPU: 0 UID: 0 PID: 10890 Comm: syz.3.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.217371][T10890] Tainted: [L]=SOFTLOCKUP [ 555.217379][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 555.217393][T10890] Call Trace: [ 555.217400][T10890] [ 555.217412][T10890] dump_stack_lvl+0x100/0x190 [ 555.217445][T10890] should_fail_ex.cold+0x5/0xa [ 555.217475][T10890] should_failslab+0xc2/0x120 [ 555.217506][T10890] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 555.217534][T10890] ? sock_alloc_inode+0x26/0x2c0 [ 555.217561][T10890] ? __pfx_sock_alloc_inode+0x10/0x10 [ 555.217585][T10890] sock_alloc_inode+0x26/0x2c0 [ 555.217608][T10890] ? __pfx_sock_alloc_inode+0x10/0x10 [ 555.217630][T10890] alloc_inode+0x68/0x250 [ 555.217653][T10890] sock_alloc+0x44/0x280 [ 555.217673][T10890] ? security_socket_create+0x7f/0x250 [ 555.217702][T10890] __sock_create+0xc2/0x860 [ 555.217734][T10890] __sys_socket+0x14d/0x260 [ 555.217761][T10890] ? __pfx___sys_socket+0x10/0x10 [ 555.217795][T10890] __x64_sys_socket+0x72/0xb0 [ 555.217821][T10890] ? lockdep_hardirqs_on+0x7d/0x110 [ 555.217848][T10890] do_syscall_64+0x123/0x790 [ 555.217878][T10890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.217898][T10890] RIP: 0033:0x7f37ed19e1d9 [ 555.217921][T10890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.217940][T10890] RSP: 002b:00007f37edfa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 555.217960][T10890] RAX: ffffffffffffffda RBX: 00007f37ed425fa0 RCX: 00007f37ed19e1d9 [ 555.217974][T10890] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 555.217985][T10890] RBP: 00007f37ed235888 R08: 0000000000000000 R09: 0000000000000000 [ 555.217998][T10890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.218010][T10890] R13: 00007f37ed426038 R14: 00007f37ed425fa0 R15: 00007ffd55a5cc48 [ 555.218037][T10890] [ 555.221154][T10890] socket: no more sockets [ 555.819422][T10898] FAULT_INJECTION: forcing a failure. [ 555.819422][T10898] name failslab, interval 1, probability 0, space 0, times 0 [ 555.819459][T10898] CPU: 0 UID: 0 PID: 10898 Comm: syz.5.1298 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.819488][T10898] Tainted: [L]=SOFTLOCKUP [ 555.819496][T10898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 555.819508][T10898] Call Trace: [ 555.819516][T10898] [ 555.819525][T10898] dump_stack_lvl+0x100/0x190 [ 555.819562][T10898] should_fail_ex.cold+0x5/0xa [ 555.819593][T10898] should_failslab+0xc2/0x120 [ 555.819624][T10898] __kmalloc_noprof+0xfc/0x840 [ 555.819650][T10898] ? rcu_is_watching+0x13/0xc0 [ 555.819681][T10898] ? tomoyo_realpath_from_path+0xb6/0x690 [ 555.819725][T10898] tomoyo_realpath_from_path+0xb6/0x690 [ 555.819764][T10898] tomoyo_path_number_perm+0x23c/0x580 [ 555.819791][T10898] ? tomoyo_path_number_perm+0x22e/0x580 [ 555.819821][T10898] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 555.819859][T10898] ? __lock_acquire+0x5c0/0x1f40 [ 555.819903][T10898] ? __fget_files+0x34/0x3d0 [ 555.819935][T10898] ? find_held_lock+0x2b/0x80 [ 555.819965][T10898] ? hook_file_ioctl_common+0x140/0x440 [ 555.819994][T10898] ? __fget_files+0x21f/0x3d0 [ 555.820028][T10898] security_file_ioctl+0xd3/0x230 [ 555.820060][T10898] __x64_sys_ioctl+0xb7/0x210 [ 555.820088][T10898] do_syscall_64+0x123/0x790 [ 555.820122][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.820144][T10898] RIP: 0033:0x7f27fa99e1d9 [ 555.820162][T10898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.820183][T10898] RSP: 002b:00007f27fb7b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.820204][T10898] RAX: ffffffffffffffda RBX: 00007f27fac25fa0 RCX: 00007f27fa99e1d9 [ 555.820218][T10898] RDX: 0000200000000140 RSI: 00000000c0502100 RDI: 0000000000000003 [ 555.820231][T10898] RBP: 00007f27fb7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 555.820243][T10898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.820255][T10898] R13: 00007f27fac26038 R14: 00007f27fac25fa0 R15: 00007ffd28cc8818 [ 555.820285][T10898] [ 555.820305][T10898] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.915575][ T31] audit: type=1400 audit(1791737412.668:1319): avc: denied { write } for pid=10884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.975694][ T31] audit: type=1400 audit(1791737412.718:1320): avc: denied { write } for pid=10907 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.349326][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.349380][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.497812][ T31] audit: type=1400 audit(1791737414.248:1321): avc: denied { create } for pid=10934 comm="syz.2.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 557.500099][ T31] audit: type=1400 audit(1791737414.248:1322): avc: denied { ioctl } for pid=10934 comm="syz.2.1303" path="socket:[29465]" dev="sockfs" ino=29465 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 557.563322][ T5726] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 557.903772][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 557.904922][ T5726] usb 4-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 557.907614][ T5726] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.907647][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 557.907728][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.914435][ T5726] usb 4-1: config 0 descriptor?? [ 557.943486][ T5610] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 558.108217][ T5610] usb 3-1: unable to get BOS descriptor or descriptor too short [ 558.110003][ T5610] usb 3-1: not running at top speed; connect to a high speed hub [ 558.110085][ T5610] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.124130][ T5610] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.124165][ T5610] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.147479][ T5610] usb 3-1: string descriptor 0 read error: -22 [ 558.148065][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.210867][ T5610] usb 3-1: 0:2 : does not exist [ 558.721695][ T31] audit: type=1400 audit(1791737415.458:1323): avc: denied { write } for pid=10934 comm="syz.2.1303" name="usb_gadget" dev="configfs" ino=2734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 558.744088][ T31] audit: type=1400 audit(1791737415.498:1324): avc: denied { write } for pid=10934 comm="syz.2.1303" name="strings" dev="configfs" ino=29486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 558.765268][ T31] audit: type=1400 audit(1791737415.518:1325): avc: denied { write } for pid=10934 comm="syz.2.1303" name="configs" dev="configfs" ino=29485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 558.795535][ T31] audit: type=1400 audit(1791737415.538:1326): avc: denied { write } for pid=10934 comm="syz.2.1303" name="functions" dev="configfs" ino=29484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 559.858204][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 559.874287][ T5726] usbhid 4-1:0.0: can't add hid device: -71 [ 559.874366][ T5726] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 559.886933][ T5726] usb 4-1: USB disconnect, device number 51 [ 560.071705][T10948] afs: Bad value for 'source' [ 560.188660][ T5610] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 560.272046][ T5610] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 560.360848][ T5610] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 561.118435][ T5610] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 561.320093][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1309'. [ 561.830411][ T31] audit: type=1400 audit(1791737418.068:1327): avc: denied { open } for pid=10956 comm="syz.7.1309" path="/dev/ttyr2" dev="devtmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 561.847380][ T5610] usb 3-1: USB disconnect, device number 52 [ 561.945385][T10961] FAULT_INJECTION: forcing a failure. [ 561.945385][T10961] name failslab, interval 1, probability 0, space 0, times 0 [ 561.945417][T10961] CPU: 1 UID: 0 PID: 10961 Comm: syz.2.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.945445][T10961] Tainted: [L]=SOFTLOCKUP [ 561.945451][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 561.945462][T10961] Call Trace: [ 561.945469][T10961] [ 561.945477][T10961] dump_stack_lvl+0x100/0x190 [ 561.945507][T10961] should_fail_ex.cold+0x5/0xa [ 561.945535][T10961] should_failslab+0xc2/0x120 [ 561.945565][T10961] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 561.945593][T10961] ? sock_alloc_inode+0x26/0x2c0 [ 561.945617][T10961] ? __pfx_sock_alloc_inode+0x10/0x10 [ 561.945641][T10961] sock_alloc_inode+0x26/0x2c0 [ 561.945662][T10961] ? __pfx_sock_alloc_inode+0x10/0x10 [ 561.945683][T10961] alloc_inode+0x68/0x250 [ 561.945705][T10961] sock_alloc+0x44/0x280 [ 561.945724][T10961] ? security_socket_create+0x7f/0x250 [ 561.945751][T10961] __sock_create+0xc2/0x860 [ 561.945780][T10961] __sys_socket+0x14d/0x260 [ 561.945808][T10961] ? __pfx___sys_socket+0x10/0x10 [ 561.945842][T10961] __x64_sys_socket+0x72/0xb0 [ 561.945874][T10961] ? lockdep_hardirqs_on+0x7d/0x110 [ 561.945902][T10961] do_syscall_64+0x123/0x790 [ 561.945933][T10961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.945954][T10961] RIP: 0033:0x7f2b8d19e1d9 [ 561.945971][T10961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.945988][T10961] RSP: 002b:00007f2b8e0f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 561.946007][T10961] RAX: ffffffffffffffda RBX: 00007f2b8d425fa0 RCX: 00007f2b8d19e1d9 [ 561.946018][T10961] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 561.946028][T10961] RBP: 00007f2b8d235888 R08: 0000000000000000 R09: 0000000000000000 [ 561.946040][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.946051][T10961] R13: 00007f2b8d426038 R14: 00007f2b8d425fa0 R15: 00007fff835e8678 [ 561.946077][T10961] [ 561.946088][T10961] socket: no more sockets [ 562.304416][T10965] kAFS: unable to lookup cell 'syz1' [ 563.669125][T10979] syzkaller0: entered promiscuous mode [ 563.669155][T10979] syzkaller0: entered allmulticast mode [ 565.590760][T10983] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 566.551342][T10991] FAULT_INJECTION: forcing a failure. [ 566.551342][T10991] name failslab, interval 1, probability 0, space 0, times 0 [ 566.551435][T10991] CPU: 0 UID: 0 PID: 10991 Comm: syz.2.1317 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.551461][T10991] Tainted: [L]=SOFTLOCKUP [ 566.551469][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 566.551480][T10991] Call Trace: [ 566.551487][T10991] [ 566.551495][T10991] dump_stack_lvl+0x100/0x190 [ 566.551528][T10991] should_fail_ex.cold+0x5/0xa [ 566.551556][T10991] should_failslab+0xc2/0x120 [ 566.551583][T10991] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 566.551609][T10991] ? alloc_vmap_area+0x640/0x2bb0 [ 566.551638][T10991] alloc_vmap_area+0x640/0x2bb0 [ 566.551664][T10991] ? lockdep_hardirqs_on+0x7d/0x110 [ 566.551698][T10991] ? __pfx_alloc_vmap_area+0x10/0x10 [ 566.551731][T10991] __get_vm_area_node+0x1ed/0x350 [ 566.551763][T10991] __vmalloc_node_range_noprof+0x268/0x1420 [ 566.551792][T10991] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 566.551817][T10991] ? trace_sched_exit_tp+0x120/0x160 [ 566.551843][T10991] ? __schedule+0x126b/0x6920 [ 566.551865][T10991] ? __schedule+0x315b/0x6920 [ 566.551893][T10991] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 566.551924][T10991] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 566.551954][T10991] ? __pfx___schedule+0x10/0x10 [ 566.551979][T10991] ? preempt_schedule_irq+0x79/0x90 [ 566.552007][T10991] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 566.552032][T10991] __vmalloc_node_noprof+0xad/0xf0 [ 566.552060][T10991] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 566.552088][T10991] __vmalloc_noprof+0xa3/0x120 [ 566.552116][T10991] ? __pfx___vmalloc_noprof+0x10/0x10 [ 566.552147][T10991] ? security_capable+0x146/0x260 [ 566.552172][T10991] bpf_prog_alloc_no_stats+0x59/0x690 [ 566.552197][T10991] ? security_capable+0x80/0x260 [ 566.552221][T10991] bpf_prog_alloc+0x3b/0x200 [ 566.552244][T10991] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.552266][T10991] bpf_prog_load+0x49e/0x2ab0 [ 566.552306][T10991] ? __pfx_bpf_prog_load+0x10/0x10 [ 566.552333][T10991] ? irqentry_exit+0x24d/0xa10 [ 566.552378][T10991] __sys_bpf+0x1f46/0x4a30 [ 566.552398][T10991] ? irqentry_exit+0x24d/0xa10 [ 566.552430][T10991] ? __pfx___sys_bpf+0x10/0x10 [ 566.552450][T10991] ? find_held_lock+0x2b/0x80 [ 566.552477][T10991] ? get_pid_task+0xfc/0x250 [ 566.552502][T10991] ? get_pid_task+0xfc/0x250 [ 566.552535][T10991] ? find_held_lock+0x2b/0x80 [ 566.552568][T10991] ? rcu_read_lock_any_held+0x6a/0x90 [ 566.552587][T10991] ? find_held_lock+0x2b/0x80 [ 566.552614][T10991] ? ksys_write+0x190/0x250 [ 566.552636][T10991] ? ksys_write+0x190/0x250 [ 566.552658][T10991] ? lock_acquire+0x1d1/0x380 [ 566.552698][T10991] ? fput+0x7c/0x100 [ 566.552725][T10991] ? ksys_write+0x1ac/0x250 [ 566.552750][T10991] ? __x64_sys_bpf+0xce/0x140 [ 566.552770][T10991] __x64_sys_bpf+0xce/0x140 [ 566.552791][T10991] ? do_syscall_64+0xae/0x790 [ 566.552818][T10991] do_syscall_64+0x123/0x790 [ 566.552847][T10991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.552867][T10991] RIP: 0033:0x7f2b8d19e1d9 [ 566.552883][T10991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.552900][T10991] RSP: 002b:00007f2b8e0d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.552919][T10991] RAX: ffffffffffffffda RBX: 00007f2b8d426090 RCX: 00007f2b8d19e1d9 [ 566.552931][T10991] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 566.552942][T10991] RBP: 00007f2b8e0d8090 R08: 0000000000000000 R09: 0000000000000000 [ 566.552953][T10991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.552964][T10991] R13: 00007f2b8d426128 R14: 00007f2b8d426090 R15: 00007fff835e8678 [ 566.552990][T10991] [ 566.553050][T10991] syz.2.1317: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 566.553339][T10991] CPU: 0 UID: 0 PID: 10991 Comm: syz.2.1317 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.553364][T10991] Tainted: [L]=SOFTLOCKUP [ 566.553371][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 566.553381][T10991] Call Trace: [ 566.553387][T10991] [ 566.553394][T10991] dump_stack_lvl+0x100/0x190 [ 566.553422][T10991] warn_alloc.cold+0x9e/0xb2 [ 566.553442][T10991] ? __pfx_warn_alloc+0x10/0x10 [ 566.553462][T10991] ? lockdep_hardirqs_on+0x7d/0x110 [ 566.553489][T10991] ? __get_vm_area_node+0x2f0/0x350 [ 566.553519][T10991] ? __get_vm_area_node+0x22b/0x350 [ 566.553551][T10991] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 566.553577][T10991] ? trace_sched_exit_tp+0x120/0x160 [ 566.553604][T10991] ? __schedule+0x126b/0x6920 [ 566.553625][T10991] ? __schedule+0x315b/0x6920 [ 566.553653][T10991] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 566.553685][T10991] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 566.553714][T10991] ? __pfx___schedule+0x10/0x10 [ 566.553740][T10991] ? preempt_schedule_irq+0x79/0x90 [ 566.553767][T10991] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 566.553791][T10991] __vmalloc_node_noprof+0xad/0xf0 [ 566.553819][T10991] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 566.553847][T10991] __vmalloc_noprof+0xa3/0x120 [ 566.553875][T10991] ? __pfx___vmalloc_noprof+0x10/0x10 [ 566.553907][T10991] ? security_capable+0x146/0x260 [ 566.553932][T10991] bpf_prog_alloc_no_stats+0x59/0x690 [ 566.553957][T10991] ? security_capable+0x80/0x260 [ 566.553981][T10991] bpf_prog_alloc+0x3b/0x200 [ 566.554005][T10991] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.554029][T10991] bpf_prog_load+0x49e/0x2ab0 [ 566.554062][T10991] ? __pfx_bpf_prog_load+0x10/0x10 [ 566.554088][T10991] ? irqentry_exit+0x24d/0xa10 [ 566.554134][T10991] __sys_bpf+0x1f46/0x4a30 [ 566.554154][T10991] ? irqentry_exit+0x24d/0xa10 [ 566.554184][T10991] ? __pfx___sys_bpf+0x10/0x10 [ 566.554205][T10991] ? find_held_lock+0x2b/0x80 [ 566.554231][T10991] ? get_pid_task+0xfc/0x250 [ 566.554256][T10991] ? get_pid_task+0xfc/0x250 [ 566.554295][T10991] ? find_held_lock+0x2b/0x80 [ 566.554328][T10991] ? rcu_read_lock_any_held+0x6a/0x90 [ 566.554346][T10991] ? find_held_lock+0x2b/0x80 [ 566.554372][T10991] ? ksys_write+0x190/0x250 [ 566.554395][T10991] ? ksys_write+0x190/0x250 [ 566.554416][T10991] ? lock_acquire+0x1d1/0x380 [ 566.554455][T10991] ? fput+0x7c/0x100 [ 566.554481][T10991] ? ksys_write+0x1ac/0x250 [ 566.554507][T10991] ? __x64_sys_bpf+0xce/0x140 [ 566.554527][T10991] __x64_sys_bpf+0xce/0x140 [ 566.554548][T10991] ? do_syscall_64+0xae/0x790 [ 566.554575][T10991] do_syscall_64+0x123/0x790 [ 566.554603][T10991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.554622][T10991] RIP: 0033:0x7f2b8d19e1d9 [ 566.554638][T10991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.554654][T10991] RSP: 002b:00007f2b8e0d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.554671][T10991] RAX: ffffffffffffffda RBX: 00007f2b8d426090 RCX: 00007f2b8d19e1d9 [ 566.554684][T10991] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 566.554696][T10991] RBP: 00007f2b8e0d8090 R08: 0000000000000000 R09: 0000000000000000 [ 566.554706][T10991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.554718][T10991] R13: 00007f2b8d426128 R14: 00007f2b8d426090 R15: 00007fff835e8678 [ 566.554743][T10991] [ 566.554774][T10991] Mem-Info: [ 566.554865][T10991] active_anon:68909 inactive_anon:2 isolated_anon:0 [ 566.554865][T10991] active_file:2829 inactive_file:62218 isolated_file:0 [ 566.554865][T10991] unevictable:0 dirty:541 writeback:0 [ 566.554865][T10991] slab_reclaimable:12743 slab_unreclaimable:104489 [ 566.554865][T10991] mapped:56506 shmem:62061 pagetables:1285 [ 566.554865][T10991] sec_pagetables:0 bounce:0 [ 566.554865][T10991] kernel_misc_reclaimable:0 [ 566.554865][T10991] free:1177681 free_pcp:28148 free_cma:0 [ 566.554946][T10991] Node 0 active_anon:275636kB inactive_anon:8kB active_file:11316kB inactive_file:248672kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:226024kB dirty:2156kB writeback:0kB shmem:248244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13204kB pagetables:4980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 566.555030][T10991] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 566.555109][T10991] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 566.555213][T10991] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 566.555372][T10991] Node 0 DMA32 free:784352kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:275636kB inactive_anon:8kB active_file:11316kB inactive_file:248672kB unevictable:0kB writepending:2156kB zspages:0kB present:3129332kB managed:2510924kB mlocked:0kB bounce:0kB free_pcp:82172kB local_pcp:24836kB free_cma:0kB [ 566.555455][T10991] lowmem_reserve[]: 0 0 0 0 0 [ 566.555612][T10991] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 566.555694][T10991] lowmem_reserve[]: 0 0 0 0 0 [ 566.555833][T10991] Node 1 Normal free:3911012kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:30396kB local_pcp:3784kB free_cma:0kB [ 566.555917][T10991] lowmem_reserve[]: 0 0 0 0 0 [ 566.556091][T10991] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 566.556505][T10991] Node 0 DMA32: 2249*4kB (UME) 2417*8kB (UME) 169*16kB (UME) 3695*32kB (UME) 2675*64kB (UME) 1200*128kB (UME) 336*256kB (UM) 84*512kB (UM) 19*1024kB (UME) 5*2048kB (UME) 37*4096kB (UM) = 784348kB [ 566.556962][T10991] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 566.557224][T10991] Node 1 Normal: 8*4kB (UM) 11*8kB (UM) 16*16kB (UM) 9*32kB (UM) 2*64kB (M) 1*128kB (M) 0*256kB 1*512kB (M) 2*1024kB (UM) 0*2048kB 954*4096kB (M) = 3911064kB [ 566.557775][T10991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.557806][T10991] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 566.557838][T10991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.557870][T10991] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 566.557901][T10991] 127130 total pagecache pages [ 566.557924][T10991] 0 pages in swap cache [ 566.557947][T10991] Free swap = 124996kB [ 566.557972][T10991] Total swap = 124996kB [ 566.558017][T10991] 2097051 pages RAM [ 566.558040][T10991] 0 pages HighMem/MovableOnly [ 566.558063][T10991] 437689 pages reserved [ 566.558085][T10991] 0 pages cma reserved [ 567.036369][ T31] audit: type=1400 audit(1791737423.778:1328): avc: denied { read } for pid=10982 comm="syz.3.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 568.679163][T11007] FAULT_INJECTION: forcing a failure. [ 568.679163][T11007] name failslab, interval 1, probability 0, space 0, times 0 [ 568.679202][T11007] CPU: 1 UID: 0 PID: 11007 Comm: syz.3.1321 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.679231][T11007] Tainted: [L]=SOFTLOCKUP [ 568.679239][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 568.679251][T11007] Call Trace: [ 568.679259][T11007] [ 568.679267][T11007] dump_stack_lvl+0x100/0x190 [ 568.679301][T11007] should_fail_ex.cold+0x5/0xa [ 568.679329][T11007] should_failslab+0xc2/0x120 [ 568.679363][T11007] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 568.679393][T11007] ? sock_alloc_inode+0x26/0x2c0 [ 568.679422][T11007] ? __pfx_sock_alloc_inode+0x10/0x10 [ 568.679450][T11007] sock_alloc_inode+0x26/0x2c0 [ 568.679475][T11007] ? __pfx_sock_alloc_inode+0x10/0x10 [ 568.679499][T11007] alloc_inode+0x68/0x250 [ 568.679525][T11007] sock_alloc+0x44/0x280 [ 568.679546][T11007] ? security_socket_create+0x7f/0x250 [ 568.679576][T11007] __sock_create+0xc2/0x860 [ 568.679609][T11007] __sys_socket+0x14d/0x260 [ 568.679639][T11007] ? __pfx___sys_socket+0x10/0x10 [ 568.679676][T11007] __x64_sys_socket+0x72/0xb0 [ 568.679702][T11007] ? lockdep_hardirqs_on+0x7d/0x110 [ 568.679732][T11007] do_syscall_64+0x123/0x790 [ 568.679772][T11007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.679796][T11007] RIP: 0033:0x7f37ed19e1d9 [ 568.679815][T11007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.679838][T11007] RSP: 002b:00007f37edfa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 568.679859][T11007] RAX: ffffffffffffffda RBX: 00007f37ed425fa0 RCX: 00007f37ed19e1d9 [ 568.679874][T11007] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 568.679886][T11007] RBP: 00007f37ed235888 R08: 0000000000000000 R09: 0000000000000000 [ 568.679898][T11007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.679910][T11007] R13: 00007f37ed426038 R14: 00007f37ed425fa0 R15: 00007ffd55a5cc48 [ 568.679943][T11007] [ 568.679963][T11007] socket: no more sockets [ 568.773839][ T188] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 568.937916][ T188] usb 8-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 568.941182][ T188] usb 8-1: config 243 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 568.941210][ T188] usb 8-1: config 243 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 568.975290][ T188] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.975316][ T188] usb 8-1: Product: syz [ 568.975330][ T188] usb 8-1: Manufacturer: syz [ 568.975344][ T188] usb 8-1: SerialNumber: syz [ 568.983075][ T188] ums-sddr09 8-1:243.0: USB Mass Storage device detected [ 569.019151][ T188] ums-sddr09 8-1:243.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 569.019151][ T188] Please send a copy of this message to and [ 569.071716][ T188] ums-sddr09 8-1:243.0: probe with driver ums-sddr09 failed with error -22 [ 569.438744][ T31] audit: type=1400 audit(1791737426.158:1329): avc: denied { mounton } for pid=11002 comm="syz.7.1311" path="/40/file0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 569.645204][T11017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.645425][T11017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.075820][T11024] kAFS: unable to lookup cell 'syz1' [ 570.944081][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1326'. [ 571.148643][T11037] vivid-000: disconnect [ 571.149650][T11037] vivid-000: reconnect [ 572.379145][ T1556] usb 8-1: USB disconnect, device number 4 [ 573.141389][ T32] INFO: task syz.0.923:9343 blocked for more than 144 seconds. [ 573.141414][ T32] Tainted: G L syzkaller #0 [ 573.141425][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.141432][ T32] task:syz.0.923 state:D stack:26376 pid:9343 tgid:9341 ppid:5619 task_flags:0x400040 flags:0x00080002 [ 573.141484][ T32] Call Trace: [ 573.141491][ T32] [ 573.141503][ T32] __schedule+0x1259/0x6920 [ 573.141530][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 573.141565][ T32] ? __pfx___schedule+0x10/0x10 [ 573.141584][ T32] ? find_held_lock+0x2b/0x80 [ 573.141610][ T32] ? schedule+0x225/0x2c0 [ 573.141653][ T32] schedule+0xdd/0x2c0 [ 573.141680][ T32] schedule_preempt_disabled+0x13/0x30 [ 573.141702][ T32] __mutex_lock+0xccb/0x1bd0 [ 573.141728][ T32] ? write_versions+0x9d/0xba0 [ 573.141750][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 573.141777][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 573.141801][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 573.141826][ T32] ? write_versions+0x9d/0xba0 [ 573.141840][ T32] write_versions+0x9d/0xba0 [ 573.141858][ T32] ? find_held_lock+0x2b/0x80 [ 573.141884][ T32] ? __pfx_write_versions+0x10/0x10 [ 573.141905][ T32] ? __pfx_write_versions+0x10/0x10 [ 573.141925][ T32] ? _copy_from_user+0x59/0xd0 [ 573.141951][ T32] ? __pfx_write_versions+0x10/0x10 [ 573.141966][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 573.141993][ T32] vfs_write+0x2aa/0x1050 [ 573.142017][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 573.142042][ T32] ? lock_acquire+0x1d1/0x380 [ 573.142062][ T32] ? __fget_files+0x34/0x3d0 [ 573.142088][ T32] ? __pfx_vfs_write+0x10/0x10 [ 573.142107][ T32] ? find_held_lock+0x2b/0x80 [ 573.142132][ T32] ? __fget_files+0x215/0x3d0 [ 573.142160][ T32] ? __fget_files+0x21f/0x3d0 [ 573.142192][ T32] ksys_write+0x12a/0x250 [ 573.142213][ T32] ? __pfx_ksys_write+0x10/0x10 [ 573.142241][ T32] do_syscall_64+0x123/0x790 [ 573.142268][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.142288][ T32] RIP: 0033:0x7fa44399e1d9 [ 573.142303][ T32] RSP: 002b:00007fa4447fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 573.142322][ T32] RAX: ffffffffffffffda RBX: 00007fa443c26090 RCX: 00007fa44399e1d9 [ 573.142335][ T32] RDX: 0000000000000003 RSI: 00002000000004c0 RDI: 0000000000000006 [ 573.142346][ T32] RBP: 00007fa443a35888 R08: 0000000000000000 R09: 0000000000000000 [ 573.142357][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.142367][ T32] R13: 00007fa443c26128 R14: 00007fa443c26090 R15: 00007ffd77873ce8 [ 573.142391][ T32] [ 573.142419][ T32] [ 573.142419][ T32] Showing all locks held in the system: [ 573.142430][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 573.142442][ T32] #0: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 573.142500][ T32] locks held by kworker/1:2/1556: 7, on CPU#1: [ 573.142512][ T32] #0: ffff8880246f8d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 573.142561][ T32] #1: ffffc900061a7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 573.142612][ T32] #2: ffff88802b28b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 573.142685][ T32] #3: ffff88807cb8d1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 573.146748][ T32] #4: ffff88801e2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 573.146806][ T32] #5: ffff88801e2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 573.146856][ T32] #6: ffff88801e2c7210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0xa3/0x320 [ 573.146918][ T32] locks held by kworker/u8:11/3340: 3, last CPU#0: [ 573.146933][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 573.146990][ T32] #1: ffffc9000ef47d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 573.147049][ T32] #2: ffff88801d719258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 573.147102][ T32] locks held by udevd/4974: 1, last CPU#1: [ 573.147116][ T32] #0: ffff88801e2c7210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x6e/0xc0 [ 573.147162][ T32] locks held by getty/5358: 2, on CPU#1: [ 573.147176][ T32] #0: ffff88802b5540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 573.147228][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 573.147279][ T32] locks held by syz-executor/5607: 2, on CPU#0: [ 573.147292][ T32] #0: ffff888050bfc0e8 (&type->s_umount_key#85){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 573.147347][ T32] #1: ffffffff90289ca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 573.147405][ T32] locks held by kworker/1:4/5726: 2, last CPU#1: [ 573.147419][ T32] #0: ffff88803522e140 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 573.147479][ T32] #1: ffffc90004707d08 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 573.147540][ T32] locks held by syz-executor/8625: 1, last CPU#0: [ 573.147554][ T32] #0: ffffffff9090b238 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 573.147606][ T32] locks held by kworker/0:0H/8870: 2, last CPU#0: [ 573.147620][ T32] #0: ffff88801d05ad40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 573.147702][ T32] #1: ffffc900048afd08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 573.147761][ T32] locks held by syz.0.923/9342: 3, on CPU#1: [ 573.147776][ T32] #0: ffff888076788ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 573.147820][ T32] #1: ffff88803a1ae460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 573.147873][ T32] #2: ffffffff90289ca0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 573.147917][ T32] locks held by syz.0.923/9343: 3, on CPU#0: [ 573.147931][ T32] #0: ffff8880353210b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 573.147974][ T32] #1: ffff88803a1ae460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 573.148027][ T32] #2: ffffffff90289ca0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 573.148078][ T32] locks held by kworker/u8:13/10758: 3, last CPU#0: [ 573.148092][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 573.529118][ T32] #1: ffffc900055a7d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 573.529299][ T32] #2: ffff8880b823bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 573.529437][ T32] locks held by syz.3.1315/10987: 2, last CPU#1: [ 573.529474][ T32] #0: ffff88802c076460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 573.529617][ T32] #1: ffff88807dcbacc0 (&sb->s_type->i_mutex_key#16){+.+.}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 573.529791][ T32] locks held by udevd/11005: 1, last CPU#1: [ 573.760297][ T32] #0: ffff8880b823bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 573.760467][ T32] locks held by syz.6.1332/11056: 1, on CPU#1: [ 573.760505][ T32] #0: ffff8880795355a0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_getsockopt+0x2c7/0x7160 [ 573.760613][ T32] locks held by syz.6.1332/11058: 1, on CPU#1: [ 573.760675][ T32] #0: ffff8880795355a0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_setsockopt+0x593/0xb370 [ 573.760787][ T32] [ 573.760793][ T32] ============================================= [ 573.760793][ T32] [ 573.760905][ T32] NMI backtrace for cpu 1 [ 573.760920][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 573.760946][ T32] Tainted: [L]=SOFTLOCKUP [ 573.760952][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 573.760963][ T32] Call Trace: [ 573.760971][ T32] [ 573.760978][ T32] dump_stack_lvl+0x100/0x190 [ 573.761008][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 573.761038][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 573.761061][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 573.761087][ T32] sys_info+0x141/0x190 [ 573.761106][ T32] watchdog+0xcb1/0x1030 [ 573.761137][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 573.761168][ T32] ? __pfx_watchdog+0x10/0x10 [ 573.761192][ T32] ? __kthread_parkme+0x18f/0x230 [ 573.761222][ T32] ? kthread+0x13a/0x450 [ 573.761247][ T32] ? __pfx_watchdog+0x10/0x10 [ 573.761268][ T32] kthread+0x373/0x450 [ 573.761293][ T32] ? __pfx_kthread+0x10/0x10 [ 573.761320][ T32] ret_from_fork+0x730/0xd60 [ 573.761343][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 573.761366][ T32] ? __switch_to+0x800/0x10f0 [ 573.761393][ T32] ? __pfx_kthread+0x10/0x10 [ 573.761421][ T32] ret_from_fork_asm+0x1a/0x30 [ 573.761453][ T32] [ 573.761469][ T32] Sending NMI from CPU 1 to CPUs 0: [ 573.761492][ C0] NMI backtrace for cpu 0 [ 573.761506][ C0] CPU: 0 UID: 0 PID: 11053 Comm: syz.6.1332 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.761529][ C0] Tainted: [L]=SOFTLOCKUP [ 573.761535][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 573.761543][ C0] RIP: 0010:__lock_acquire+0x689/0x1f40 [ 573.761562][ C0] Code: f2 c1 c0 06 31 c7 89 f8 29 fe 01 d7 c1 c0 08 31 f0 89 c6 29 c2 44 8d 04 38 c1 c6 10 31 d6 89 f0 29 f7 44 01 c6 c1 c8 0d 31 f8 <44> 89 c7 89 c2 29 c7 01 f0 c1 c2 04 89 c0 31 fa 48 c1 e2 20 48 09 [ 573.761575][ C0] RSP: 0018:ffffc90006da7920 EFLAGS: 00000006 [ 573.761586][ C0] RAX: 000000004ea2f6fc RBX: ffff888022b5d6b0 RCX: 0000000000000000 [ 573.761595][ C0] RDX: 00000000023d587d RSI: 000000009a5ffc21 RDI: 00000000635e1201 [ 573.761605][ C0] RBP: 00000000000008dd R08: 00000000fdc05662 R09: 00000000000008dd [ 573.761614][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888022b5cb00 [ 573.761622][ C0] R13: 0000000000000000 R14: 0000000000000005 R15: 0000000000000003 [ 573.761631][ C0] FS: 00007ff8a057e6c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 573.761646][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.761662][ C0] CR2: 0000200000006000 CR3: 0000000079e5a000 CR4: 00000000003526f0 [ 573.761671][ C0] Call Trace: [ 573.761676][ C0] [ 573.761685][ C0] lock_acquire+0x1d1/0x380 [ 573.761701][ C0] ? snd_rawmidi_kernel_write1+0x3b5/0x7c0 [ 573.761721][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 573.761738][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 573.761753][ C0] ? snd_rawmidi_kernel_write1+0x3b5/0x7c0 [ 573.761771][ C0] snd_rawmidi_kernel_write1+0x3b5/0x7c0 [ 573.761791][ C0] snd_rawmidi_write+0x2dc/0xc60 [ 573.761810][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 573.761826][ C0] ? avc_policy_seqno+0x9/0x20 [ 573.761840][ C0] ? selinux_file_permission+0x8f/0x6d0 [ 573.761860][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 573.761877][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 573.761896][ C0] ? security_file_permission+0x76/0x210 [ 573.761917][ C0] ? rw_verify_area+0xce/0x6d0 [ 573.761932][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 573.761948][ C0] vfs_writev+0x5ed/0xdd0 [ 573.761966][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 573.761983][ C0] ? lock_acquire+0x1d1/0x380 [ 573.761997][ C0] ? __fget_files+0x34/0x3d0 [ 573.762019][ C0] ? __fget_files+0x21f/0x3d0 [ 573.762039][ C0] ? do_writev+0x28a/0x340 [ 573.762053][ C0] do_writev+0x28a/0x340 [ 573.762068][ C0] ? __pfx_do_writev+0x10/0x10 [ 573.762085][ C0] do_syscall_64+0x123/0x790 [ 573.762104][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.762118][ C0] RIP: 0033:0x7ff89f79e1d9 [ 573.762128][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.762140][ C0] RSP: 002b:00007ff8a057e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 573.762153][ C0] RAX: ffffffffffffffda RBX: 00007ff89fa25fa0 RCX: 00007ff89f79e1d9 [ 573.762163][ C0] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000006 [ 573.762172][ C0] RBP: 00007ff89f835888 R08: 0000000000000000 R09: 0000000000000000 [ 573.762181][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.762190][ C0] R13: 00007ff89fa26038 R14: 00007ff89fa25fa0 R15: 00007fff2e0e08d8 [ 573.762204][ C0] [ 573.927715][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 574.502458][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 574.513143][ T32] Tainted: [L]=SOFTLOCKUP [ 574.517463][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 574.527507][ T32] Call Trace: [ 574.530779][ T32] [ 574.533702][ T32] dump_stack_lvl+0x100/0x190 [ 574.538387][ T32] vpanic+0x553/0x970 [ 574.542362][ T32] ? __pfx_vpanic+0x10/0x10 [ 574.546868][ T32] panic+0xd1/0xe0 [ 574.550580][ T32] ? __pfx_panic+0x10/0x10 [ 574.554994][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 574.561144][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 574.567298][ T32] ? watchdog.cold+0x1ec/0x234 [ 574.572059][ T32] watchdog.cold+0x1fd/0x234 [ 574.576649][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 574.582452][ T32] ? __pfx_watchdog+0x10/0x10 [ 574.587127][ T32] ? __kthread_parkme+0x18f/0x230 [ 574.592161][ T32] ? kthread+0x13a/0x450 [ 574.596405][ T32] ? __pfx_watchdog+0x10/0x10 [ 574.601079][ T32] kthread+0x373/0x450 [ 574.605158][ T32] ? __pfx_kthread+0x10/0x10 [ 574.609752][ T32] ret_from_fork+0x730/0xd60 [ 574.614360][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 574.619470][ T32] ? __switch_to+0x800/0x10f0 [ 574.624155][ T32] ? __pfx_kthread+0x10/0x10 [ 574.628747][ T32] ret_from_fork_asm+0x1a/0x30 [ 574.633521][ T32] [ 574.636726][ T32] Kernel Offset: disabled [ 574.641025][ T32] Rebooting in 86400 seconds..