last executing test programs: 5m55.972067927s ago: executing program 1 (id=1080): socket$inet6(0xa, 0x1, 0x8010000000000084) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000000c0)) 5m54.43856971s ago: executing program 1 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x4f0a, 0x100007, 0x101, 0x99b9, 0x0, 0x0}) syz_open_procfs$pagemap(r2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000193c0)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0xc055}, 0xc010) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000300)="66baf80cb8666da586ef66bafc0c66b8607e66efc40165146a8eb8010000000f01d9c744240014000000c744240200800000ff2c246726362e440fae3648b809ad0000000000000f23c80f21f835000070000f23f8f364dced66420f381cadac0ae7e566baf80cb8440c3e86ef66bafc0c66edb805000000b93e9100000f01c1", 0x80}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000140)={0x120003, 0x0, {[0x2, 0x1, 0x4e, 0x6, 0xa137, 0x4, 0x2, 0xd6]}}) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x9) flock(0xffffffffffffffff, 0x5) flock(0xffffffffffffffff, 0x1) 5m51.342867257s ago: executing program 1 (id=1093): alarm(0xe) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x408042, 0x42) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@mcast1}, &(0x7f00000000c0)=0x14) r3 = getuid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0xb431}], 0x1, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000140)=0x80000001, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ptrace(0x11, r6) r7 = syz_open_procfs(r6, &(0x7f0000000040)='status\x00') preadv(r7, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x81}], 0x1, 0x7fffffff, 0x1) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES8=r7, @ANYRES64=r1, @ANYRES32=r3, @ANYRES64, @ANYBLOB="3b1a0d10ac397dcc472da594a22041f3dfb2b98c66d9ea589e53b702aec358a06ad22b0ca23c2663d65a67661ecfdd108778dcc54534", @ANYRES16=r2], 0x0) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, r3, &(0x7f0000000180)={0xffffffffffffff83, 0x43a, 0x1}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_DISCSIGNAL(r8, 0x8010550e, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x15) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) 5m49.757077213s ago: executing program 1 (id=1103): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0xf000000) 5m48.577481458s ago: executing program 1 (id=1105): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x82) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402"], 0x258) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000080000000000000000900000018110000", @ANYRES32, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x26080, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x40000000}) r3 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_flags_allowed={0x2, 0x21}, @ioring_restriction_sqe_op={0x1, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1a}, @ioring_restriction_sqe_op={0x1, 0x2}], 0x19) 5m47.503983949s ago: executing program 1 (id=1109): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x501, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001080)={0x0, 0x4}, 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="e40000000201010800000000000000000a0a"], 0xe4}, 0x1, 0x0, 0x0, 0x8014}, 0x8010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) shutdown(r3, 0x1) read(r0, &(0x7f0000000100)=""/135, 0x87) sendto$inet6(r0, &(0x7f00000000c0)='H', 0x4194, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 5m46.326742725s ago: executing program 32 (id=1109): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x501, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001080)={0x0, 0x4}, 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="e40000000201010800000000000000000a0a"], 0xe4}, 0x1, 0x0, 0x0, 0x8014}, 0x8010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) shutdown(r3, 0x1) read(r0, &(0x7f0000000100)=""/135, 0x87) sendto$inet6(r0, &(0x7f00000000c0)='H', 0x4194, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 2m43.83621771s ago: executing program 5 (id=1690): mkdir(&(0x7f00000000c0)='./file1\x00', 0x101) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000380)={0x0, 0x1, 0x2000200000a95c, 0x3, 0x1, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xffffff15}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0) 2m42.578548619s ago: executing program 5 (id=1692): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000000901030000000000110000010000090900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x48080) keyctl$get_persistent(0x16, 0xffffffffffffffff, r6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/53, 0x35}, {&(0x7f00000001c0)=""/53, 0x35}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r8, 0x1}, 0x14}}, 0x0) setregid(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10012}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) 2m38.686317157s ago: executing program 5 (id=1704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) readv(r3, &(0x7f0000000000)=[{0x0}], 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x7, 0x8, 0xa56, 0x3, {{0x5, 0x4, 0x3, 0xb, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @local, @private=0xa010102}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x800000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffd, 0x0, 0x1}, {{@in6=@empty, 0x4d2, 0x33}, 0x0, @in6=@empty, 0x4, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000008000000080000009000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x134, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x7}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9, 0x0, 0x0, 0x3}, {0x8, 0xc}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_TOKEN={0xfffffffffffffcd8, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0xd9}, @IFLA_INET6_TOKEN={0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x2f}, @IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x10}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0xeb}]}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x3ffe}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0x18, 0x0, 0x0, 0x54}]}}]}]}, 0x134}}, 0x0) write(r5, &(0x7f0000005c00), 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r1, &(0x7f0000000740)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0, 0xa00}], 0x2) 2m36.74462929s ago: executing program 5 (id=1716): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a8, 0x11c8, 0xc8, 0x8, 0x11c8, 0x5803, 0x12d8, 0x2e8, 0x2e8, 0x12d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 'veth1_virt_wifi\x00', 'wlan1\x00', {}, {}, 0x16, 0xc, 0x2, 0x4b}, 0x0, 0x1198, 0x11c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5a, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0xff, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x1, 0xe}, {0xffffffffffffffff, 0x0, 0x1}, 0xffffff68, 0x225}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x3d5, 0x1c, 0xffffff95, 'netbios-ns\x00', 'syz1\x00', {0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40) sendto$inet(r0, &(0x7f0000000300)="faab", 0x2, 0x44054, 0x0, 0x0) 2m29.503762407s ago: executing program 5 (id=1732): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x8, 0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004070000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd255985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8c7049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290c7536fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a57482cdb4070de8dd60fd65dacb9ec5003fb1cca05ce1c9f924cc2ec45e8d5adf7c89e3b0b8da35c1aa7fbbee6f839a8f05294a6c02281afb7601252611583408f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x2000, 0x400000000000005, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) 2m29.17305401s ago: executing program 5 (id=1736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0xe5c, 0x80000) socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x7}, &(0x7f00000000c0), 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000003c0)={0x0, 0x0, "ec9fe44d4dbe56a65274d7c727e7e53c1bb714e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028642b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ed7eff0d26ff199ee1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c"}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x80000000) 2m13.888022915s ago: executing program 33 (id=1736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0xe5c, 0x80000) socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x7}, &(0x7f00000000c0), 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000003c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x80000000) 14.807972892s ago: executing program 0 (id=2186): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b3b25fe80000000000000dc8b850f238466cc00007a0000", 0x1d}], 0x1}, 0x20000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f00000020c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0xffffffff, 0x11a504, 0x5f, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49dd, 0x2, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x240, 0x4, "00000000000000000000c2041a02003d00"}) r5 = syz_open_pts(r4, 0x20080) r6 = gettid() ptrace$ARCH_MAP_VDSO_32(0x1e, r6, 0x8, 0x2002) r7 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) 11.662593616s ago: executing program 6 (id=2197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0xfe, 0x4}, 0x2}, 0x18) connect$can_j1939(r3, &(0x7f0000000740)={0x1d, r4, 0x0, {0x0, 0xf0}}, 0x18) sendmmsg(r3, &(0x7f0000004580), 0x654, 0xf9ffff06) 10.748299895s ago: executing program 6 (id=2200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="2f2752ede134aaaaaaaaaaaa88a82e0081004704080045a70014fc680000ff04"], 0x0) (fail_nth: 14) 10.333601948s ago: executing program 6 (id=2203): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) r4 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a8, 0x11c8, 0xc8, 0x8, 0x11c8, 0x5803, 0x12d8, 0x2e8, 0x2e8, 0x12d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 'veth1_virt_wifi\x00', 'wlan1\x00', {}, {}, 0x16, 0xc, 0x2, 0x4b}, 0x0, 0x1198, 0x11c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5a, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0xff, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x1, 0xe}, {0xffffffffffffffff, 0x0, 0x1}, 0xffffff68, 0x225}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x3d5, 0x1c, 0xffffff95, 'netbios-ns\x00', 'syz1\x00', {0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="faab", 0x2, 0x44054, 0x0, 0x0) 9.140125512s ago: executing program 0 (id=2206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x14, 0x38, 0x301, 0x70bd22, 0xfffffffc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, 0x0, 0x25, 0x5, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) write$nbd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="67446698000000000400010004000000947212a0f167e7237c2681ce6166ef9fc95fd12a2ffba644623e48eb3080bd5791acfdb8d4b3373ed1c5b664f345b1d977b1057d972df8c0c59e046846b8"], 0x4e) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="170000000000000000000000000000000000000033f8836a7503773152316a9af769951ec1995835a10851114e69beb4b913c71062a18375a95266f34cdb62548f4edd98d31cd8b82808818c3f34f005c5c6cd6edd31f129e812686938548cd5904ba5f29a3b3120dd2fbcbcff29ec35804a2f719806eac8b662683163e5622932f8ac5ae7d835d5bb5e284b9ba8bae4adc3bad0b97e3ae6f1ec12a9ad77a5503a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x143902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(r3, 0x4, &(0x7f00000000c0)={0x3, 0x5}, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0x48300) r7 = syz_open_dev$rtc(&(0x7f0000000380), 0x0, 0x189040) ioctl$RTC_RD_TIME(r7, 0x4008700c, 0x0) 8.326150269s ago: executing program 0 (id=2207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000005c0)=0x7) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000003c0)={0x28, 0x6, r1, 0x0, &(0x7f0000000340)="039531b4cf27d2c621c3f9afc776d032aac5b38969007b059e38d7c213f1da2c45a41106da4432bb033c0e5760bf3b5dca3c709ddda38a6dfacda76c88a72241c34ae002f2ae038265b7cd555a97141ebe3de60e384d606dba04f6023f58f36cd03cc6b4c6e47e873a43f4b0f2b0ff84d787", 0x72, 0x7fffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="127e281307e90100002845b2f29ec4974a08ffc500000000001200010000000009043f04"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000004b40)=@file={0x1, './file0\x00'}, 0xfffffffffffffd9c) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000049c0)=[{{&(0x7f00000004c0)=@ll, 0x80, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/165, 0xa5}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/160, 0xa0}, {&(0x7f0000001940)=""/227, 0xe3}, {&(0x7f0000000540)=""/121, 0x79}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000000600)=""/59, 0x3b}], 0x7, &(0x7f0000002ac0)=""/211, 0xd3}, 0x3}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000002bc0)=""/214, 0xd6}, {&(0x7f0000002cc0)=""/69, 0x45}, {&(0x7f0000002d40)=""/139, 0x8b}, {&(0x7f0000002e00)=""/106, 0x6a}], 0x4, &(0x7f0000002e80)=""/79, 0x4f}, 0x4}, {{&(0x7f0000002f00)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f0000002f80)=""/238, 0xee}, {&(0x7f0000003080)=""/181, 0xb5}], 0x2, &(0x7f0000003140)=""/4, 0x4}, 0x81}, {{&(0x7f0000003180)=@isdn, 0x80, &(0x7f0000004540)=[{&(0x7f0000003200)=""/107, 0x6b}, {&(0x7f0000003280)=""/173, 0xad}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/110, 0x6e}, {&(0x7f00000043c0)=""/89, 0x59}, {&(0x7f0000004440)=""/251, 0xfb}], 0x6, &(0x7f00000045c0)=""/91, 0x5b}, 0x5}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004640)=""/63, 0x3f}, {&(0x7f0000004680)=""/135, 0x87}, {&(0x7f0000004740)=""/180, 0xb4}], 0x3, &(0x7f0000004840)}, 0x292da51e}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000004880)=""/54, 0x36}], 0x1, &(0x7f0000004900)=""/185, 0xb9}, 0x4}], 0x6, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000010280)='./file0\x00', 0x182) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="06a6e2c37f77dda579de8501923de4b90eb5386a1b92d7d288211ddf8b0ffc7c7268bcda98a3d1815e2158652bfb8508a942be0048121a1a083ba8b4532b33e113a0e0ffc4a8f4f01677e5993a164442dc76fe7568510303bce1e62390c2b99d68f7dca9"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="0000abe0a95c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) 8.193470486s ago: executing program 4 (id=2209): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) futex(&(0x7f000000cffc)=0x3, 0x5, 0x400001, 0x0, 0x0, 0x5000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002400)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, 0xffffffffffffffff, 0xffffe000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4818) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'dt2801\x00', [0x2, 0x4, 0x97, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x4, 0x1, 0x6, 0x2, 0x6, 0x5, 0x1, 0xfffffffe, 0x400041, 0x4f, 0x89, 0x809, 0xf27, 0x6, 0x8008, 0x8, 0x5, 0x9, 0x8, 0x10000, 0xfffffff4]}) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) 6.887080284s ago: executing program 4 (id=2211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x474481, 0x100) sendmmsg$alg(r1, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="5c457d21167e6d433899da3115a2183fc725c289707ea3c11f40bb7dca1641e850273acd2f3b20f17625a511fc392bfc5da462ea085de20401bf6a77e9f5de89bf63b480cac5818ec0405e0481ef334fdc3ceda3d872b1bfa4930c838a7f94da20a7f4a368b9f54de70e2df5932ce4d56f7430b2dacb264aacaaeb4c5bd561d3a2f2ff3e86669f2a7e3df43c94c706ea1701453f8c06ccd20f3e3ad85f71839b285c256eba45a106848b5619ffb466c036135dd26576bf0096feca3b9364d7def2c042f92031c92c8afacbb395f7e5d15d8c9b437b2a2be1e979462865914721", 0xe0}, {&(0x7f0000000680)="f7579da64c9146dc7fa9c1b221e698314deacedc5b9837a35ce04424fbb6455ab203f4f7e62d7c37288dd35d3c96f972070946c046dc4c18391f71a54e84748f4ddada9953f3a8270d68e4b0ef16a39d048eb794ab1262988fa969b3319c9c650ca7e54554a4194e6c58a90349269faa870245ba5e238a61763c0896590c5026d9967243f2b9455c04758690a7a98ad745f1e6b5a6bdd0ad12aba9546547290a79f0577785f93c8dd8fb612294a73ec73a47c0e36dd802c5119fd37dbe7b3f4ae063d24c59eda853a2b2d63066ea47e2ec1f1e265c68526e98ca1c2b6a0c4b4f0a41ca4b7d6601d23da3c75f7977be5fdb15e40c12", 0xf5}, {&(0x7f0000000780)="7142a14d4e49e3611a532c18c33cbe007034876d79aa8d9962b0b64f8725745974343f572d646bae76a7dfc78112554fb27d13ce41ea0aa85b7cc06f485c3340b72a41225851f53fd3eee069b75a35986ffacddbb36083a3695b74797042", 0x5e}], 0x3, &(0x7f000001b0c0)=[@assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x48, 0x40081}], 0x2, 0x20044840) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27a99fdd470f5961}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6.046478928s ago: executing program 6 (id=2215): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0x1) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000180)=0xfffffd31, 0x4) 5.875267429s ago: executing program 4 (id=2216): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x401, @empty}, 0x1c) r1 = syz_io_uring_setup(0x2404, &(0x7f0000000080)={0x0, 0x51dd, 0x2000, 0x1, 0x30a}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x0, 0xf00, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000000)=""/73, 0x49) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, 0x0) r8 = syz_open_procfs(r5, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000340), 0x0, 0x5d, 0x40000003) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0x4, 0x0, r8, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200, 0x0, {0x0, r9}}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36c, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x94, 0x15, 0x72, 0x40, 0x19d2, 0xfff3, 0x58eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35a, 0x2, 0xb, 0xd2, 0x90, 0x2, [{{0x9, 0x4, 0x3, 0x7, 0x7, 0xe6, 0x1a, 0xcf, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "09b65dee4656"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6dbdf46f, 0x180, 0x8, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x8, 0x81, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x400, 0x8}, @mdlm_detail={0xc4, 0x24, 0x13, 0x78, "dc029b49f214260e918d08f7233237a383f627119db2efec30bed695710627e169715456a8008de303ffa16f75f2bf959e34e56f99dbb0da5f4e0297fe3036e2907e8c6b17c82ddb634e2e69acf072d78c8efab9f1d35dac1fcef172acaca66ee3cf4c98123b55d0c987053b70be8481a09546c6a911f910d47ffa183ab32caaf366991deacb2a45f0e6a144b2c7f8b08feb8f835f74bca2302e1ef9b2ca06e9932074def92b16ef61e3f0183cd122bcec2a816439e95fa9883b8be116aecf0b"}, @country_functional={0xc, 0x24, 0x7, 0x3, 0x9, [0x200, 0x6, 0x9]}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x7, 0x6a}]}], [{{0x9, 0x5, 0x42c876b13de30508, 0x10, 0xf6a4a72de8154aa5, 0x4, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb4, 0x1978}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x3, 0x3, 0xf2, [@generic={0x19, 0x31, "3fd8213fe79e9335f5bf96cdd5c81062c9b609c21666b3"}, @generic={0x1f, 0x9, "a8e7ffe9ae6d1cbd4a998a7f16f42d33033f9492d8f48367c923187715"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x201, 0x6, 0x7, 0x8}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x5, 0x2, 0x8}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0xb, 0x2, 0x7}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x1, 0x9, 0x4, [@generic={0x9b, 0xc, "87cd0e9d0d3ee7890e6eecf391dfb79c2a24dbd48992072e6a5a692868f352851cf29ad1b0ecf42b2a64d4f9430b856d0ce20c831b55a835e18aa43a316a5ca34e011fe3c7ffc5b737108bc961e7ecbe01667cbffba513fe12a81de924f8415197fca6d456c4cecff99d9b9e5a4c7b202ffc853dd696a557963d9365d887666a938d69d4c229ca2d16e8e56c197ab4006be2d2a34e6f31dc4c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xf5, 0x13, 0xc4, [@generic={0x8c, 0x23, "c2174ef665b610f2aa5a56d2eb849a8d66ebe7668dec6ea088a4967a8e0591174fe04630984b6d05a43e3d6b24d18108ffd01727e59c2bf1d63d9cf95290876b3e150bdc95cee0f66f7d0762e19d7cdda921fc2fe9f927b1577db8e8bba43c151ab5f889376ab066f31adc41936b68e1313f7f5beae1d0f99a6b2e21274993e807ca7a6ccae6cfa968e6"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xf7, 0x9}]}}]}}, {{0x9, 0x4, 0xe3, 0x4, 0x8, 0x19, 0x3c, 0xd6, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x9, 0x1ff, 0x4}, {0x6, 0x24, 0x1a, 0x9, 0x31}}], [{{0x9, 0x5, 0xd, 0x2, 0x10, 0xf7, 0x0, 0x6}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x4, 0x0, 0x8}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0x7, 0xf, 0x1, [@generic={0x19, 0x63, "438d70bbcae483816cbe754045fbf99481a6d8e445225a"}]}}, {{0x9, 0x5, 0xa8b124c967dda587, 0x9, 0x40, 0x3, 0xc3, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x4, 0xa, 0xb}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x53, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x3}, @generic={0x5, 0x6, 'uzu'}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x5, 0xa, 0xdf}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xde, 0x26, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8000}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0xf, 0x5, 0x4, 0x40, 0x3}, 0x17, &(0x7f0000000240)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0xa, 0x61, 0x0, 0x40, 0x8, 0xa5}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0xf, 0x9}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x6e, &(0x7f00000002c0)=@string={0x6e, 0x3, "de83d9289bdee95ce2975c3876e685e35c29d65b382ceadc2b706c9e3e230f3c8fa8ba251bfb3e1b198b2ff6fc408d7ca34694d94ba90140a39cf45deb965ebff3773131a483ea1819ae0a882a56698d5e15823fd3d5e1aff1225a7a2823a6bec2657690ce80030a626d0636"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x827}}]}) 5.027985968s ago: executing program 3 (id=2219): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x206, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x9, 0x0, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r5, 0x1269, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.396290909s ago: executing program 3 (id=2220): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, 0x0) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x15, 0x3, 'rr\x00', 0x19, 0x5, 0x28}, 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='ext4_mark_inode_dirty\x00'}, 0x45) socket$kcm(0xa, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4", 0xcc}, {&(0x7f0000000c40)="6dd950135126d19aaf46a60e", 0xc}], 0x2}, 0x0) 4.390832939s ago: executing program 0 (id=2221): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) futex(&(0x7f000000cffc)=0x3, 0x5, 0x400001, 0x0, 0x0, 0x5000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002400)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, 0xffffffffffffffff, 0xffffe000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4818) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'dt2801\x00', [0x2, 0x4, 0x97, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x4, 0x1, 0x6, 0x2, 0x6, 0x5, 0x1, 0xfffffffe, 0x400041, 0x4f, 0x89, 0x809, 0xf27, 0x6, 0x8008, 0x8, 0x5, 0x9, 0x8, 0x10000, 0xfffffff4]}) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) 4.341573304s ago: executing program 2 (id=2222): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x50240) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x2}, 0x1, 0x2}) 4.292294248s ago: executing program 3 (id=2223): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10, 0xc, 0xd8a7}], 0x10}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e300000000500200000000400050020000000000005002000000000000900"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) 4.072396134s ago: executing program 3 (id=2224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, 0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x47ba, 0x100, 0x5, 0x0, 0x0) 3.853505142s ago: executing program 0 (id=2225): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_eeprom={0xb, 0x7, 0x8000}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x2809}], 0x1, 0x0, 0x0, 0x9c) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20100) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x501202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) dup3(0xffffffffffffffff, r2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100, 0x8000, 0xfc, "7a58beca3900000000000000000000000200"}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e4000000000000001800"], 0x38}}, 0x0) 3.474014406s ago: executing program 6 (id=2226): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000004700)=[{{&(0x7f00000002c0)=@alg, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/25, 0x19}, {&(0x7f00000003c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000c40)=""/52, 0x2e}, {&(0x7f00000005c0)=""/164, 0xa4}], 0x5, &(0x7f0000000340)=""/60, 0x3c}, 0xffffffff}, {{&(0x7f0000000680)=@caif=@dgm, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/63, 0x3f}, {&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f0000000900)=""/251, 0xfb}], 0x3, &(0x7f0000000a40)=""/225, 0xe1}, 0x3}, {{&(0x7f0000000b40)=@vsock, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000bc0), 0x4}, {&(0x7f00000048c0)=""/91, 0x5b}, {&(0x7f0000000c80)=""/71, 0x47}, {&(0x7f0000000d00)=""/64, 0x40}, {&(0x7f0000000d40)=""/20, 0x14}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/90, 0x5a}, {&(0x7f0000001e00)=""/71, 0x47}], 0x8}, 0x1}, {{&(0x7f0000001f00)=@tipc, 0x98, &(0x7f0000003240)=[{&(0x7f0000001f80)=""/21, 0x15}, {&(0x7f0000001fc0)=""/171, 0xab}, {&(0x7f0000002080)=""/252, 0xfc}, {&(0x7f0000000c00)=""/31, 0x10}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/69, 0x45}], 0x6, &(0x7f00000032c0)=""/97, 0x61}, 0x100}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/117, 0x75}, {&(0x7f00000043c0)=""/93, 0x5d}, {&(0x7f0000004440)=""/145, 0x91}], 0x4, &(0x7f0000004540)=""/64, 0x40}, 0x8}, {{&(0x7f0000004580)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000004680)=[{&(0x7f0000004600)=""/66, 0x42}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f00000046c0)}}], 0x7, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000380), 0x101ffff, 0x2) setresgid(0x0, 0xee01, 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file1\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffbffa003e458, 0x100000000000000) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x201, 0x0) 3.104488112s ago: executing program 2 (id=2227): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001040), 0x120600) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x1, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x2, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x6, 0x9, 0x8, 0x12, 0x2, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0xfffffffe, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xfffffffc, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x40006, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0x6, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xffbffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf5, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x40000000, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xb1eb, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x5, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0x1, 0x8, 0x7ff, 0x280, 0x5, 0x0, 0x7, 0x6e79, 0x3, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000004c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000040)=""/191, 0xbf, 0x0, &(0x7f0000000180)=""/222, 0xde}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x579e, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000000)) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 2.782974978s ago: executing program 4 (id=2228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf253800000008000300", @ANYRES32=r3, @ANYBLOB="0c00580001"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 2.693909227s ago: executing program 4 (id=2229): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) syz_open_dev$evdev(&(0x7f0000000400), 0x80, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x1, 0x3, 0x1, 0x3}}, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) ioctl$EVIOCGBITSW(r7, 0x80404525, &(0x7f0000000240)=""/129) 2.632489577s ago: executing program 2 (id=2230): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$BLKPG(r3, 0x40084d05, 0x0) 1.891670763s ago: executing program 2 (id=2231): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="f80000002f00010000000000fcdbdf25e800f280e400180008ac0f00000000001400010000000000000000000000ffffe000000250bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac0800e900ac1414bb"], 0xf8}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, 0x0, 0x20008040) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000540000000000010000e3ff030000000000060a85b4a446972415e9ddc11f23640f65e07000e60500"/74, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64, @ANYRES16=r0], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000440), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x2) (async, rerun: 64) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000440)=0xf) (rerun: 64) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async) socket$inet6(0xa, 0x6, 0xeccc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.826541554s ago: executing program 3 (id=2232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x900, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.720411568s ago: executing program 3 (id=2233): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0xe00, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x8, @local, 0x170}]}, &(0x7f0000000400)=0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 1.71958866s ago: executing program 4 (id=2234): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x3e, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) open(0x0, 0x84242, 0x1df2a23c5997fa5f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000440)={0x1, &(0x7f0000001dc0)=[{@none}]}) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x80, 0x8000, 0xb2}, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xe5a, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.640586416s ago: executing program 2 (id=2235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xb, &(0x7f0000000200)=0x36c4, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000040)=0x9, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0xfffffffffffffe35, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) r4 = socket(0x18, 0x3, 0xfffffffb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES8=0x0, @ANYRES32, @ANYRESOCT=r1, @ANYRES16=r4], 0x270}, 0x1, 0x0, 0x0, 0x8084}, 0x4) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003ec0), 0x47a, 0x40008c5) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f0000000080)) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESHEX=r2, @ANYRESDEC=0x0]) 555.531096ms ago: executing program 0 (id=2236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/hibernate_compression_threads', 0x1, 0x68) write$UHID_INPUT2(r2, &(0x7f0000000bc0), 0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000180)={[{@nr_inodes={'nr_inodes', 0x3d, [0x4d]}}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x141000, 0x0) memfd_secret(0x80000) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600050000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x36315247, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) 437.690126ms ago: executing program 2 (id=2237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x4f0a, 0x100007, 0x101, 0x99b9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc055}, 0xc010) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x120003, 0x0, {[0x2, 0x1, 0x4e, 0x6, 0xa137, 0x4, 0x2, 0xd6]}}) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x9) flock(0xffffffffffffffff, 0x5) flock(0xffffffffffffffff, 0x1) 0s ago: executing program 6 (id=2238): r0 = socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000004000000080000000600008000"], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x8, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/169, 0xa9) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004140)=[{{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000000600)=""/89, 0x59}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000880)=""/164, 0xa4}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/153, 0x99}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000002a00)=""/211, 0xd3}, {&(0x7f0000000740)=""/83, 0x53}, {&(0x7f0000000440)=""/50, 0x32}], 0xa, &(0x7f0000002bc0)=""/106, 0x6a}, 0xb}, {{&(0x7f0000002c40)=@qipcrtr, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000000800)=""/63, 0x3f}], 0x1, &(0x7f0000002d00)=""/166, 0xa6}, 0x6}, {{&(0x7f0000002dc0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002e40)=""/44, 0x2c}, {&(0x7f0000002e80)=""/41, 0x29}, {&(0x7f0000002ec0)=""/198, 0xc6}, {&(0x7f0000002fc0)=""/5, 0x5}, {&(0x7f0000003000)=""/183, 0xb7}], 0x5, &(0x7f0000003140)=""/4096, 0x1000}, 0xfffffff8}], 0x3, 0x120, &(0x7f0000004240)) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x2000a804) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) kernel console output (not intermixed with test programs): vailable UDC or it's busy [ 504.054879][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.065397][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.074177][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.170461][T10826] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 505.100033][T10841] xt_cgroup: path and classid specified [ 505.768164][T10852] fuse: Bad value for 'group_id' [ 505.788748][T10852] fuse: Bad value for 'group_id' [ 505.921610][ T5925] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 506.122151][ T5925] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 506.232670][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.302645][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.606017][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 506.806765][ T5925] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 507.083785][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.153433][ T5925] usb 6-1: config 0 descriptor?? [ 507.391681][T10870] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1256'. [ 508.935917][T10882] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 508.959858][ T5925] hid-picolcd 0003:04D8:F002.000D: item fetching failed at offset 5/7 [ 508.984863][ T5925] hid-picolcd 0003:04D8:F002.000D: device report parse failed [ 509.091616][ T5925] hid-picolcd 0003:04D8:F002.000D: probe with driver hid-picolcd failed with error -22 [ 510.098624][ T24] usb 6-1: USB disconnect, device number 3 [ 511.384301][T10909] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 511.739043][T10917] IPVS: Error connecting to the multicast addr [ 512.599076][T10922] input: syz0 as /devices/virtual/input/input24 [ 513.041060][T10928] netlink: 'syz.4.1271': attribute type 1 has an invalid length. [ 513.217462][T10928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1271'. [ 513.279216][T10931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.295639][T10931] bond2: (slave bond3): making interface the new active one [ 513.854521][T10931] bond2: (slave bond3): Enslaving as an active interface with an up link [ 513.907920][T10935] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 513.925642][T10928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.955483][T10928] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1271'. [ 514.155640][T10952] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1268'. [ 514.878893][ T30] audit: type=1400 audit(1767526510.334:770): avc: denied { map } for pid=10948 comm="syz.5.1279" path="socket:[29510]" dev="sockfs" ino=29510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 515.278093][ T30] audit: type=1400 audit(1767526510.334:771): avc: denied { read } for pid=10948 comm="syz.5.1279" path="socket:[29510]" dev="sockfs" ino=29510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 515.306445][T10961] netlink: 'syz.4.1280': attribute type 1 has an invalid length. [ 515.534176][ T30] audit: type=1400 audit(1767526511.334:772): avc: denied { getopt } for pid=10947 comm="syz.0.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 515.750242][ T30] audit: type=1400 audit(1767526511.614:773): avc: denied { append } for pid=10966 comm="syz.2.1282" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 515.991721][ T30] audit: type=1400 audit(1767526511.634:774): avc: denied { ioctl } for pid=10966 comm="syz.2.1282" path="/dev/usbmon4" dev="devtmpfs" ino=728 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 516.181584][ T5925] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 516.442650][ T5925] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 516.674858][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.762355][ T5925] usb 3-1: Product: syz [ 516.766558][ T5925] usb 3-1: Manufacturer: syz [ 516.771154][ T5925] usb 3-1: SerialNumber: syz [ 516.799216][ T5925] usb 3-1: config 0 descriptor?? [ 517.179014][T10969] fuse: Bad value for 'fd' [ 517.184060][ T5925] hso 3-1:0.0: Not our interface [ 517.189419][ T5925] usb-storage 3-1:0.0: USB Mass Storage device detected [ 518.694049][ T6006] usb 3-1: USB disconnect, device number 41 [ 519.141671][ T6006] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 519.401555][ T6006] usb 3-1: Using ep0 maxpacket: 8 [ 519.421169][ T6006] usb 3-1: unable to get BOS descriptor or descriptor too short [ 519.449724][ T6006] usb 3-1: too many configurations: 167, using maximum allowed: 8 [ 519.659820][ T6006] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 519.671516][ T6006] usb 3-1: can't read configurations, error -61 [ 519.822227][ T6006] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 519.859350][T11026] random: crng reseeded on system resumption [ 519.870713][ T30] audit: type=1400 audit(1767526515.774:775): avc: denied { write } for pid=11027 comm="syz.0.1297" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 520.041555][ T6006] usb 3-1: Using ep0 maxpacket: 8 [ 520.048420][ T30] audit: type=1400 audit(1767526515.834:776): avc: denied { getopt } for pid=11027 comm="syz.0.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 520.073765][ T6006] usb 3-1: unable to get BOS descriptor or descriptor too short [ 520.082462][ T6006] usb 3-1: too many configurations: 167, using maximum allowed: 8 [ 520.331659][ T6421] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 520.510785][ T6006] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 520.518602][ T6006] usb 3-1: can't read configurations, error -61 [ 520.532973][ T6006] usb usb3-port1: attempt power cycle [ 520.861568][ T6421] usb 6-1: Using ep0 maxpacket: 8 [ 520.869111][ T6421] usb 6-1: unable to get BOS descriptor or descriptor too short [ 520.878302][ T6421] usb 6-1: config 4 interface 0 has no altsetting 0 [ 520.880200][T11038] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 520.890616][ T6421] usb 6-1: string descriptor 0 read error: -22 [ 520.893687][ T6006] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 520.899928][ T6421] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 520.918578][ T6421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.927061][ T30] audit: type=1400 audit(1767526516.834:777): avc: denied { getopt } for pid=11032 comm="syz.4.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 520.950449][ T6006] usb 3-1: Using ep0 maxpacket: 8 [ 520.967443][ T6006] usb 3-1: unable to get BOS descriptor or descriptor too short [ 520.984956][ T6006] usb 3-1: too many configurations: 167, using maximum allowed: 8 [ 521.008933][ T6421] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 521.045613][ T6006] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 521.055908][ T6006] usb 3-1: can't read configurations, error -61 [ 521.063457][ T6421] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 521.138498][ T6421] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 521.821884][T11047] netlink: 'syz.4.1301': attribute type 1 has an invalid length. [ 521.851652][ T6006] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 522.021919][ T6421] usb 6-1: media controller created [ 522.062790][ T6006] usb 3-1: device descriptor read/8, error -71 [ 522.143263][ T6421] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.300989][ T6006] usb usb3-port1: unable to enumerate USB device [ 523.374636][ T6421] usb 6-1: USB disconnect, device number 4 [ 523.566360][T11064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.577313][T11064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.691442][T11069] IPVS: set_ctl: invalid protocol: 46 100.1.1.1:20001 [ 524.570341][T11076] netlink: 'syz.2.1309': attribute type 1 has an invalid length. [ 525.022120][T11080] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 526.584959][T11095] overlayfs: conflicting options: userxattr,redirect_dir=on [ 526.777939][T11099] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 530.761270][T11134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.770097][T11134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.852105][T11136] xt_cgroup: path and classid specified [ 530.951712][ T6006] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 531.121752][ T6006] usb 3-1: Using ep0 maxpacket: 32 [ 531.129139][ T6006] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 531.139500][ T6006] usb 3-1: config 0 has no interface number 0 [ 531.146917][ T6006] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.165753][ T6006] usb 3-1: config 0 interface 85 has no altsetting 0 [ 531.191141][ T6006] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 531.202205][ T6006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.211652][ T6006] usb 3-1: Product: syz [ 531.220153][ T6006] usb 3-1: Manufacturer: syz [ 531.227972][ T6006] usb 3-1: SerialNumber: syz [ 531.239333][ T6006] usb 3-1: config 0 descriptor?? [ 531.875798][ T30] audit: type=1400 audit(1767526527.634:778): avc: denied { write } for pid=11139 comm="syz.3.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 531.990269][T11147] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 532.195019][T11150] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 532.373128][ T6006] appletouch 3-1:0.85: Geyser mode initialized. [ 532.465952][ T6006] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input25 [ 532.593286][ T6006] usb 3-1: USB disconnect, device number 46 [ 532.593383][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 532.623182][ T6006] appletouch 3-1:0.85: input: appletouch disconnected [ 533.082946][T11158] netlink: 'syz.0.1330': attribute type 1 has an invalid length. [ 533.531880][ T30] audit: type=1400 audit(1767526529.444:779): avc: denied { listen } for pid=11155 comm="syz.4.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 533.641661][ T30] audit: type=1400 audit(1767526529.464:780): avc: denied { accept } for pid=11155 comm="syz.4.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 533.662640][ T30] audit: type=1400 audit(1767526529.464:781): avc: denied { write } for pid=11166 comm="syz.2.1332" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 533.687692][ T30] audit: type=1400 audit(1767526529.464:782): avc: denied { open } for pid=11166 comm="syz.2.1332" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 536.127512][T11191] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 536.353567][ T5925] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 536.482336][ T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 536.584124][T11196] FAULT_INJECTION: forcing a failure. [ 536.584124][T11196] name failslab, interval 1, probability 0, space 0, times 0 [ 536.596923][T11196] CPU: 0 UID: 0 PID: 11196 Comm: syz.5.1341 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.596957][T11196] Tainted: [L]=SOFTLOCKUP [ 536.596961][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.596968][T11196] Call Trace: [ 536.596972][T11196] [ 536.596977][T11196] dump_stack_lvl+0x16c/0x1f0 [ 536.596997][T11196] should_fail_ex+0x512/0x640 [ 536.597014][T11196] ? fs_reclaim_acquire+0xae/0x150 [ 536.597032][T11196] should_failslab+0xc2/0x120 [ 536.597047][T11196] __kmalloc_noprof+0xeb/0x910 [ 536.597065][T11196] ? tomoyo_encode2+0x100/0x3e0 [ 536.597083][T11196] ? tomoyo_encode2+0x100/0x3e0 [ 536.597098][T11196] tomoyo_encode2+0x100/0x3e0 [ 536.597114][T11196] tomoyo_encode+0x29/0x50 [ 536.597129][T11196] tomoyo_realpath_from_path+0x18f/0x6e0 [ 536.597149][T11196] tomoyo_path_number_perm+0x245/0x580 [ 536.597162][T11196] ? tomoyo_path_number_perm+0x237/0x580 [ 536.597177][T11196] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 536.597192][T11196] ? find_held_lock+0x2b/0x80 [ 536.597222][T11196] ? find_held_lock+0x2b/0x80 [ 536.597238][T11196] ? hook_file_ioctl_common+0x144/0x410 [ 536.597259][T11196] ? __fget_files+0x20e/0x3c0 [ 536.597278][T11196] security_file_ioctl+0x9b/0x240 [ 536.597295][T11196] __x64_sys_ioctl+0xb7/0x210 [ 536.597309][T11196] do_syscall_64+0xcd/0xf80 [ 536.597330][T11196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.597342][T11196] RIP: 0033:0x7fc5cc58f749 [ 536.597352][T11196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.597363][T11196] RSP: 002b:00007fc5cd3e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.597375][T11196] RAX: ffffffffffffffda RBX: 00007fc5cc7e6090 RCX: 00007fc5cc58f749 [ 536.597383][T11196] RDX: 0000200000000080 RSI: 00000000c008561c RDI: 0000000000000003 [ 536.597390][T11196] RBP: 00007fc5cd3e2090 R08: 0000000000000000 R09: 0000000000000000 [ 536.597396][T11196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.597403][T11196] R13: 00007fc5cc7e6128 R14: 00007fc5cc7e6090 R15: 00007fffa59e7698 [ 536.597419][T11196] [ 536.597449][T11196] ERROR: Out of memory at tomoyo_realpath_from_path. [ 536.995342][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.020972][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.057306][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.073950][ T5925] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.101588][ T24] usb 3-1: device descriptor read/64, error -71 [ 537.108937][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.273782][ T5925] usb 5-1: config 0 descriptor?? [ 537.357091][ T5925] hub 5-1:0.0: USB hub found [ 537.421407][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 537.565138][ T5925] hub 5-1:0.0: 1 port detected [ 537.703417][ T24] usb 3-1: device descriptor read/64, error -71 [ 537.792780][ T5925] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 537.832108][ T5925] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 537.900977][ T24] usb usb3-port1: attempt power cycle [ 538.151660][ T5925] usb 5-1: USB disconnect, device number 33 [ 538.911749][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 538.935520][ T24] usb 3-1: device descriptor read/8, error -71 [ 539.278620][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 539.301800][ T24] usb 3-1: device descriptor read/8, error -71 [ 539.781880][ T24] usb usb3-port1: unable to enumerate USB device [ 539.960871][T11223] tmpfs: Unknown parameter 'usrquotax' [ 539.968310][T11222] FAULT_INJECTION: forcing a failure. [ 539.968310][T11222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.004017][T11222] CPU: 1 UID: 0 PID: 11222 Comm: syz.4.1350 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.004052][T11222] Tainted: [L]=SOFTLOCKUP [ 540.004060][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 540.004071][T11222] Call Trace: [ 540.004084][T11222] [ 540.004091][T11222] dump_stack_lvl+0x16c/0x1f0 [ 540.004120][T11222] should_fail_ex+0x512/0x640 [ 540.004152][T11222] _copy_to_user+0x32/0xd0 [ 540.004185][T11222] simple_read_from_buffer+0xcb/0x170 [ 540.004215][T11222] proc_fail_nth_read+0x197/0x240 [ 540.004238][T11222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.004260][T11222] ? rw_verify_area+0xcf/0x6c0 [ 540.004283][T11222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.004304][T11222] vfs_read+0x1e4/0xcf0 [ 540.004330][T11222] ? __pfx___mutex_lock+0x10/0x10 [ 540.004360][T11222] ? __pfx_vfs_read+0x10/0x10 [ 540.004389][T11222] ? __fget_files+0x20e/0x3c0 [ 540.004427][T11222] ksys_read+0x12a/0x250 [ 540.004451][T11222] ? __pfx_ksys_read+0x10/0x10 [ 540.004484][T11222] do_syscall_64+0xcd/0xf80 [ 540.004514][T11222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.004535][T11222] RIP: 0033:0x7f78d458e15c [ 540.004550][T11222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 540.004568][T11222] RSP: 002b:00007f78d539f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.004587][T11222] RAX: ffffffffffffffda RBX: 00007f78d47e5fa0 RCX: 00007f78d458e15c [ 540.004601][T11222] RDX: 000000000000000f RSI: 00007f78d539f0a0 RDI: 0000000000000002 [ 540.004611][T11222] RBP: 00007f78d539f090 R08: 0000000000000000 R09: 0000000000000000 [ 540.004621][T11222] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 540.004627][T11222] R13: 00007f78d47e6038 R14: 00007f78d47e5fa0 R15: 00007ffcc120e598 [ 540.004644][T11222] [ 540.261572][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 540.441628][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 540.564507][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 540.594115][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.652657][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 540.824091][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 540.954545][T11237] binder: 11234:11237 ioctl c0306201 2000000003c0 returned -22 [ 540.971675][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.014932][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 541.041613][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.124437][T11242] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 541.717735][T11245] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 542.405534][T11247] netlink: 'syz.0.1358': attribute type 1 has an invalid length. [ 542.413355][T11247] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1358'. [ 543.308060][ T24] usb 3-1: usb_control_msg returned -71 [ 543.321402][ T24] usbtmc 3-1:16.0: can't read capabilities [ 543.617205][ T24] usb 3-1: USB disconnect, device number 51 [ 543.836485][T11262] xt_cgroup: path and classid specified [ 544.261638][ T5925] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 544.391574][ T30] audit: type=1400 audit(1767526540.284:783): avc: denied { read } for pid=11276 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 544.416698][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1368'. [ 544.467944][T11287] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1368'. [ 544.504268][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 544.509990][T11289] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1366'. [ 544.512078][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 544.531204][ T5925] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 544.542084][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.550093][ T5925] usb 5-1: Product: syz [ 544.554664][ T5925] usb 5-1: Manufacturer: syz [ 544.559288][ T5925] usb 5-1: SerialNumber: syz [ 544.568427][ T5925] usb 5-1: config 0 descriptor?? [ 544.578595][ T5925] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 544.933864][ T30] audit: type=1400 audit(1767526540.804:784): avc: denied { setattr } for pid=11277 comm="syz.3.1367" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 545.011675][ T5925] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 545.116799][T11233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1353'. [ 545.211592][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 545.498396][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 545.509310][ T5925] usb 3-1: config 4 interface 0 has no altsetting 0 [ 545.704495][ T5925] usb 3-1: string descriptor 0 read error: -22 [ 545.724383][ T5925] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 545.741508][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.777238][ T5925] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 545.812070][ T5925] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 545.833581][ T5925] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 545.840798][ T5925] usb 3-1: media controller created [ 545.903327][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 545.966970][ T6421] usb 5-1: USB disconnect, device number 34 [ 546.072868][T11300] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1370'. [ 546.135239][T11300] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1370'. [ 546.278495][ T5940] raw-gadget.2 gadget.3: failed to queue reset event [ 546.289292][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1374'. [ 546.298693][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1374'. [ 546.381648][ T5940] raw-gadget.2 gadget.3: failed to queue resume event [ 546.391431][ T30] audit: type=1400 audit(1767526542.294:785): avc: denied { setopt } for pid=11290 comm="syz.2.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 546.424228][ T30] audit: type=1400 audit(1767526542.294:786): avc: denied { listen } for pid=11290 comm="syz.2.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 546.454926][T11309] xt_cgroup: path and classid specified [ 546.498053][ T5940] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 546.692060][ T5925] zl10353_read_register: readreg error (reg=127, ret==0) [ 546.700838][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 546.708521][ T5940] raw-gadget.2 gadget.3: failed to queue reset event [ 546.781629][ T5940] raw-gadget.2 gadget.3: failed to queue resume event [ 546.818005][ T5925] usb 3-1: USB disconnect, device number 52 [ 546.841753][ T5940] usb 4-1: device descriptor read/64, error -32 [ 546.953649][ T5940] raw-gadget.2 gadget.3: failed to queue suspend event [ 546.970528][ T5940] raw-gadget.2 gadget.3: failed to queue reset event [ 547.062452][ T5940] raw-gadget.2 gadget.3: failed to queue resume event [ 547.182497][ T5940] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 547.200489][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 547.217970][ T5940] raw-gadget.2 gadget.3: failed to queue reset event [ 547.746279][ T5940] raw-gadget.2 gadget.3: failed to queue resume event [ 548.379082][ T5940] usb 4-1: device descriptor read/64, error -32 [ 548.533421][ T5940] raw-gadget.2 gadget.3: failed to queue suspend event [ 548.721848][ T5940] usb usb4-port1: attempt power cycle [ 548.751586][ T5940] raw-gadget.2 gadget.3: failed to queue disconnect event [ 548.917844][ T5940] raw-gadget.2 gadget.3: failed to queue reset event [ 549.031833][ T5940] raw-gadget.2 gadget.3: failed to queue resume event [ 549.053232][ T5940] raw-gadget.2 gadget.3: failed to queue reset event [ 549.192059][ T30] audit: type=1400 audit(1767526545.094:787): avc: denied { mount } for pid=11338 comm="syz.4.1385" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 550.082928][T11337] syz.0.1384 (11337): drop_caches: 1 [ 550.161733][ T5940] raw-gadget.2 gadget.3: failed to queue resume event [ 550.191577][ T30] audit: type=1400 audit(1767526545.134:788): avc: denied { watch } for pid=11338 comm="syz.4.1385" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 550.217795][ T30] audit: type=1400 audit(1767526545.134:789): avc: denied { watch_sb watch_reads } for pid=11338 comm="syz.4.1385" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 550.244013][ T5940] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 550.281773][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 550.299079][ T5940] usb 4-1: device descriptor read/8, error -32 [ 550.374368][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 550.411721][ T5940] raw-gadget.2 gadget.3: failed to queue suspend event [ 550.422266][ T5940] raw-gadget.2 gadget.3: failed to queue reset event [ 550.548513][ T5940] raw-gadget.2 gadget.3: failed to queue resume event [ 550.592065][T11355] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 550.605819][T11355] audit: out of memory in audit_log_start [ 550.611838][ T5940] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 550.633610][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 550.640761][ T5940] usb 4-1: device descriptor read/8, error -32 [ 550.751629][ T5940] raw-gadget.2 gadget.3: failed to queue suspend event [ 550.759527][ T5940] usb usb4-port1: unable to enumerate USB device [ 550.840438][T11364] xt_cgroup: path and classid specified [ 552.362838][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1396'. [ 553.955260][T11399] mkiss: ax0: crc mode is auto. [ 557.372437][T11445] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1414'. [ 557.414356][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 557.423465][T11445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'. [ 557.865789][T11451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.883672][T11451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.945401][T11438] mmap: syz.2.1413 (11438): VmData 26103808 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 559.222316][T11466] xt_l2tp: v2 sid > 0xffff: 117440512 [ 559.746964][T11471] delete_channel: no stack [ 560.945965][T11484] xt_socket: unknown flags 0x4c [ 561.436097][T11483] Bluetooth: MGMT ver 1.23 [ 562.939684][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.946666][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.616386][ T30] audit: type=1400 audit(1767526559.504:790): avc: denied { read } for pid=11511 comm="syz.2.1436" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 564.013053][T11515] fuseblk: Bad value for 'rootmode' [ 564.032386][ T30] audit: type=1400 audit(1767526559.504:791): avc: denied { open } for pid=11511 comm="syz.2.1436" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 565.636984][T11533] fuse: Unknown parameter '' [ 566.240865][T11543] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 566.249252][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 566.588663][T11549] blktrace: Concurrent blktraces are not allowed on loop8 [ 567.445194][T11540] ALSA: mixer_oss: invalid OSS volume '' [ 568.429074][T11560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'. [ 570.251257][ T30] audit: type=1400 audit(1767526566.154:792): avc: denied { ioctl } for pid=11580 comm="syz.0.1456" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 571.649041][T11608] fuseblk: Bad value for 'rootmode' [ 573.683966][T11632] FAULT_INJECTION: forcing a failure. [ 573.683966][T11632] name failslab, interval 1, probability 0, space 0, times 0 [ 573.713508][T11632] CPU: 0 UID: 0 PID: 11632 Comm: syz.3.1471 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.713546][T11632] Tainted: [L]=SOFTLOCKUP [ 573.713553][T11632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 573.713565][T11632] Call Trace: [ 573.713572][T11632] [ 573.713586][T11632] dump_stack_lvl+0x16c/0x1f0 [ 573.713619][T11632] should_fail_ex+0x512/0x640 [ 573.713649][T11632] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 573.713676][T11632] should_failslab+0xc2/0x120 [ 573.713703][T11632] kmem_cache_alloc_node_noprof+0x86/0x800 [ 573.713725][T11632] ? __alloc_skb+0x156/0x410 [ 573.713762][T11632] ? __alloc_skb+0x156/0x410 [ 573.713790][T11632] __alloc_skb+0x156/0x410 [ 573.713818][T11632] ? __alloc_skb+0x35d/0x410 [ 573.713848][T11632] ? __pfx___alloc_skb+0x10/0x10 [ 573.713879][T11632] ? genl_rcv_msg+0x4d0/0x800 [ 573.713906][T11632] ? genl_rcv_msg+0x4bb/0x800 [ 573.713943][T11632] netlink_ack+0x15d/0xb80 [ 573.713978][T11632] netlink_rcv_skb+0x332/0x420 [ 573.714003][T11632] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.714034][T11632] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.714072][T11632] ? netlink_deliver_tap+0x1ae/0xd30 [ 573.714102][T11632] genl_rcv+0x28/0x40 [ 573.714127][T11632] netlink_unicast+0x5aa/0x870 [ 573.714157][T11632] ? __pfx_netlink_unicast+0x10/0x10 [ 573.714195][T11632] netlink_sendmsg+0x8c8/0xdd0 [ 573.714226][T11632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.714264][T11632] ____sys_sendmsg+0xa5d/0xc30 [ 573.714293][T11632] ? copy_msghdr_from_user+0x10a/0x160 [ 573.714315][T11632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.714358][T11632] ___sys_sendmsg+0x134/0x1d0 [ 573.714381][T11632] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.714442][T11632] __sys_sendmsg+0x16d/0x220 [ 573.714470][T11632] ? __pfx___sys_sendmsg+0x10/0x10 [ 573.714512][T11632] do_syscall_64+0xcd/0xf80 [ 573.714541][T11632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.714564][T11632] RIP: 0033:0x7f1e4718f749 [ 573.714581][T11632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.714600][T11632] RSP: 002b:00007f1e47ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.714620][T11632] RAX: ffffffffffffffda RBX: 00007f1e473e5fa0 RCX: 00007f1e4718f749 [ 573.714634][T11632] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000004 [ 573.714648][T11632] RBP: 00007f1e47ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 573.714660][T11632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.714672][T11632] R13: 00007f1e473e6038 R14: 00007f1e473e5fa0 R15: 00007ffc02b56e58 [ 573.714703][T11632] [ 573.974448][ T6421] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 574.040224][T11635] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 574.276705][ T6421] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 574.290726][ T6421] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.463958][ T6421] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 574.618117][ T6421] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.665389][ T6421] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 574.688930][ T6421] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 574.716214][ T6421] usb 6-1: Product: syz [ 574.727950][ T6421] usb 6-1: Manufacturer: syz [ 574.772729][ T6421] cdc_wdm 6-1:1.0: skipping garbage [ 574.799409][ T6421] cdc_wdm 6-1:1.0: skipping garbage [ 574.820056][ T6421] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 574.880242][T11638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1473'. [ 574.889495][T11638] nbd: must specify a size in bytes for the device [ 574.911572][ T6421] cdc_wdm 6-1:1.0: Unknown control protocol [ 574.966639][ T30] audit: type=1400 audit(1767526570.874:793): avc: denied { write } for pid=11627 comm="syz.5.1469" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 575.033941][ T30] audit: type=1400 audit(1767526570.904:794): avc: denied { ioctl } for pid=11627 comm="syz.5.1469" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xae79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 575.596515][ T24] usb 6-1: USB disconnect, device number 5 [ 577.047640][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1484'. [ 577.150705][T11679] fuseblk: Bad value for 'rootmode' [ 577.156240][T11677] bridge_slave_1: left allmulticast mode [ 577.217425][T11677] bridge_slave_1: left promiscuous mode [ 577.267277][T11681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.290778][T11677] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.414213][T11677] bridge_slave_0: left allmulticast mode [ 577.453836][T11677] bridge_slave_0: left promiscuous mode [ 577.480247][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.645310][T11681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.779288][T11693] loop7: detected capacity change from 0 to 16384 [ 579.375770][T11699] FAULT_INJECTION: forcing a failure. [ 579.375770][T11699] name failslab, interval 1, probability 0, space 0, times 0 [ 579.402309][T11699] CPU: 0 UID: 0 PID: 11699 Comm: syz.4.1491 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.402347][T11699] Tainted: [L]=SOFTLOCKUP [ 579.402354][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.402367][T11699] Call Trace: [ 579.402373][T11699] [ 579.402382][T11699] dump_stack_lvl+0x16c/0x1f0 [ 579.402413][T11699] should_fail_ex+0x512/0x640 [ 579.402444][T11699] ? fs_reclaim_acquire+0xae/0x150 [ 579.402475][T11699] should_failslab+0xc2/0x120 [ 579.402503][T11699] __kmalloc_noprof+0xeb/0x910 [ 579.402537][T11699] ? tomoyo_encode2+0x100/0x3e0 [ 579.402570][T11699] ? tomoyo_encode2+0x100/0x3e0 [ 579.402596][T11699] tomoyo_encode2+0x100/0x3e0 [ 579.402628][T11699] tomoyo_encode+0x29/0x50 [ 579.402654][T11699] tomoyo_realpath_from_path+0x18f/0x6e0 [ 579.402687][T11699] ? tomoyo_profile+0x47/0x60 [ 579.402721][T11699] tomoyo_path_number_perm+0x245/0x580 [ 579.402745][T11699] ? tomoyo_path_number_perm+0x237/0x580 [ 579.402772][T11699] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 579.402800][T11699] ? find_held_lock+0x2b/0x80 [ 579.402858][T11699] ? find_held_lock+0x2b/0x80 [ 579.402887][T11699] ? hook_file_ioctl_common+0x144/0x410 [ 579.402926][T11699] ? __fget_files+0x20e/0x3c0 [ 579.402960][T11699] security_file_ioctl+0x9b/0x240 [ 579.402990][T11699] __x64_sys_ioctl+0xb7/0x210 [ 579.403016][T11699] do_syscall_64+0xcd/0xf80 [ 579.403051][T11699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.403073][T11699] RIP: 0033:0x7f78d458f749 [ 579.403095][T11699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.403114][T11699] RSP: 002b:00007f78d539f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.403135][T11699] RAX: ffffffffffffffda RBX: 00007f78d47e5fa0 RCX: 00007f78d458f749 [ 579.403149][T11699] RDX: 0000200000000300 RSI: 00000000000089e0 RDI: 0000000000000003 [ 579.403163][T11699] RBP: 00007f78d539f090 R08: 0000000000000000 R09: 0000000000000000 [ 579.403180][T11699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.403192][T11699] R13: 00007f78d47e6038 R14: 00007f78d47e5fa0 R15: 00007ffcc120e598 [ 579.403223][T11699] [ 579.712095][T11702] dvmrp0: entered allmulticast mode [ 579.727480][ T30] audit: type=1400 audit(1767526575.634:795): avc: denied { call } for pid=11701 comm="syz.3.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 579.750374][T11695] loop7: detected capacity change from 16384 to 0 [ 579.759133][ C0] I/O error, dev loop7, sector 9472 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 579.770349][ T30] audit: type=1400 audit(1767526575.674:796): avc: denied { transfer } for pid=11701 comm="syz.3.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 579.774471][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 579.799193][T11699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 579.807883][ T30] audit: type=1400 audit(1767526575.714:797): avc: denied { ioctl } for pid=11698 comm="syz.4.1491" path="socket:[34203]" dev="sockfs" ino=34203 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 579.994109][T11706] binder: 11705:11706 ioctl c018620c 200000000340 returned -1 [ 581.872538][ T1212] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 582.361871][ T1212] usb 3-1: Using ep0 maxpacket: 16 [ 582.382448][ T1212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.415494][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.741842][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 582.901650][ T1212] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 582.926570][ T1212] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.996407][ T1212] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 583.020363][ T1212] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 583.051408][ T1212] usb 3-1: Manufacturer: syz [ 583.077910][ T1212] usb 3-1: config 0 descriptor?? [ 583.151361][ T30] audit: type=1400 audit(1767526579.054:798): avc: denied { mounton } for pid=11726 comm="syz.5.1501" path="/57/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 583.154606][T11730] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 583.312547][ T30] audit: type=1400 audit(1767526579.104:799): avc: denied { read } for pid=11726 comm="syz.5.1501" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 583.334462][ T30] audit: type=1400 audit(1767526579.104:800): avc: denied { open } for pid=11726 comm="syz.5.1501" path="/57/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 583.427091][T11736] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 583.442243][ T1212] rc_core: IR keymap rc-hauppauge not found [ 583.455909][ T1212] Registered IR keymap rc-empty [ 583.473805][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.748182][ T920] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 583.778695][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.819562][ T1212] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 583.833114][ T1212] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input27 [ 583.858665][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.884089][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.911653][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.941741][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.971570][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 584.002417][ T920] usb 6-1: Using ep0 maxpacket: 16 [ 584.008866][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 584.373655][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 584.462699][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 584.705238][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 584.762135][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 584.794402][ T1212] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 584.820432][ T1212] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 584.857624][ T1212] usb 3-1: USB disconnect, device number 53 [ 585.343870][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 585.385854][ T920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 585.442266][ T920] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 585.449896][ T920] usb 6-1: can't read configurations, error -71 [ 585.555761][ T30] audit: type=1400 audit(1767526581.464:801): avc: denied { unmount } for pid=10352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 585.981788][T11767] batadv_slave_1: entered promiscuous mode [ 585.994521][T11767] batadv_slave_1: left promiscuous mode [ 586.017089][ T30] audit: type=1400 audit(1767526581.924:802): avc: denied { ioctl } for pid=11766 comm="syz.0.1508" path="socket:[34438]" dev="sockfs" ino=34438 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 587.097522][T11787] netlink: 'syz.2.1507': attribute type 10 has an invalid length. [ 587.097707][ T920] IPVS: starting estimator thread 0... [ 587.141728][T11787] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 587.271558][T11786] IPVS: using max 41 ests per chain, 98400 per kthread [ 587.417033][T11792] IPVS: dh: FWM 3 0x00000003 - no destination available [ 587.545186][T11787] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 587.557980][ T6006] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 587.615418][ T24] IPVS: starting estimator thread 0... [ 587.785946][ T6006] usb 6-1: device descriptor read/64, error -71 [ 587.792380][T11794] IPVS: using max 63 ests per chain, 151200 per kthread [ 587.827559][T11787] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 588.071837][ T6006] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 588.090326][T11800] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 588.160068][T11803] fuse: Bad value for 'fd' [ 588.212053][ T6006] usb 6-1: device descriptor read/64, error -71 [ 588.239522][T11805] xt_cgroup: path and classid specified [ 588.361925][ T6006] usb usb6-port1: attempt power cycle [ 588.734191][ T6006] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 588.770604][ T6006] usb 6-1: device descriptor read/8, error -71 [ 589.004569][ T30] audit: type=1400 audit(34392959.917:803): avc: denied { bind } for pid=11813 comm="syz.0.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 589.032228][ T6006] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 589.089639][ T6006] usb 6-1: device descriptor read/8, error -71 [ 589.301698][ T6006] usb usb6-port1: unable to enumerate USB device [ 589.367273][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 589.376201][T11819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1520'. [ 591.605993][T11852] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 592.322117][T11853] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 592.322164][T11853] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 593.205340][T11872] xt_cgroup: path and classid specified [ 593.641628][ T6006] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 593.803016][ T6006] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 593.830729][ T6006] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.937863][ T6006] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 593.947168][ T6006] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.960193][ T6006] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 593.969538][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 593.977614][ T6006] usb 5-1: Product: syz [ 593.981868][ T6006] usb 5-1: Manufacturer: syz [ 593.990978][ T6006] cdc_wdm 5-1:1.0: skipping garbage [ 593.996293][ T6006] cdc_wdm 5-1:1.0: skipping garbage [ 594.050987][ T3457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.114712][ T6006] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 594.119356][T11880] input: syz0 as /devices/virtual/input/input28 [ 594.120640][ T6006] cdc_wdm 5-1:1.0: Unknown control protocol [ 594.149310][ T3457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.500374][ T30] audit: type=1326 audit(34392965.407:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11874 comm="syz.4.1534" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78d458f749 code=0x0 [ 594.710309][ T3457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.734102][ T3457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.812349][T11893] pim6reg: entered allmulticast mode [ 594.852267][ T30] audit: type=1400 audit(34392965.757:805): avc: denied { mounton } for pid=11892 comm="syz.5.1539" path="/65/file1" dev="autofs" ino=34988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 594.891252][T11895] xt_cgroup: path and classid specified [ 594.986799][ T3457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.056145][ T3457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.540590][ T30] audit: type=1400 audit(34392966.447:806): avc: denied { listen } for pid=11874 comm="syz.4.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 595.601511][ T3457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.760848][ T3457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.646394][ T3457] bridge_slave_1: left allmulticast mode [ 596.665407][ T3457] bridge_slave_1: left promiscuous mode [ 596.737208][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.792325][ T3457] bridge_slave_0: left allmulticast mode [ 596.814698][ T5877] usb 5-1: USB disconnect, device number 35 [ 596.920773][ T3457] bridge_slave_0: left promiscuous mode [ 596.938771][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.262081][T11918] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1546'. [ 598.040487][T11931] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 598.814175][T11943] fuseblk: Bad value for 'rootmode' [ 599.570562][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.600017][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.626333][ T3457] bond0 (unregistering): Released all slaves [ 599.697246][T11955] xt_cgroup: path and classid specified [ 601.173048][T11963] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 601.608396][ T3457] bond1 (unregistering): Released all slaves [ 603.006159][T11980] macsec0: entered allmulticast mode [ 603.941293][T11980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=11980 comm=syz.2.1563 [ 603.959671][T11980] macsec0: left allmulticast mode [ 604.343539][ T3457] hsr_slave_0: left promiscuous mode [ 604.360521][ T3457] hsr_slave_1: left promiscuous mode [ 604.370914][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.385042][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.393786][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.401243][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.724567][ T3457] veth1_macvtap: left promiscuous mode [ 604.731265][ T3457] veth0_macvtap: left promiscuous mode [ 604.737043][ T3457] veth1_vlan: left promiscuous mode [ 604.745891][ T3457] veth0_vlan: left promiscuous mode [ 607.662660][T12022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1572'. [ 607.673504][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 607.754201][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 607.769307][ T24] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 607.838815][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 607.861210][T12027] FAULT_INJECTION: forcing a failure. [ 607.861210][T12027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.874493][T12027] CPU: 0 UID: 0 PID: 12027 Comm: syz.0.1570 Tainted: G L syzkaller #0 PREEMPT(full) [ 607.874528][T12027] Tainted: [L]=SOFTLOCKUP [ 607.874536][T12027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.874549][T12027] Call Trace: [ 607.874557][T12027] [ 607.874565][T12027] dump_stack_lvl+0x16c/0x1f0 [ 607.874598][T12027] should_fail_ex+0x512/0x640 [ 607.874635][T12027] _copy_from_iter+0x2a4/0x16c0 [ 607.874671][T12027] ? __alloc_skb+0x220/0x410 [ 607.874702][T12027] ? __alloc_skb+0x35d/0x410 [ 607.874733][T12027] ? __pfx__copy_from_iter+0x10/0x10 [ 607.874763][T12027] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 607.874791][T12027] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 607.874830][T12027] netlink_sendmsg+0x820/0xdd0 [ 607.874863][T12027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.874902][T12027] ____sys_sendmsg+0xa5d/0xc30 [ 607.874935][T12027] ? copy_msghdr_from_user+0x10a/0x160 [ 607.874958][T12027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.875000][T12027] ___sys_sendmsg+0x134/0x1d0 [ 607.875024][T12027] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.875083][T12027] __sys_sendmsg+0x16d/0x220 [ 607.875107][T12027] ? __pfx___sys_sendmsg+0x10/0x10 [ 607.875149][T12027] do_syscall_64+0xcd/0xf80 [ 607.875180][T12027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.875202][T12027] RIP: 0033:0x7fdc76b8f749 [ 607.875220][T12027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.875241][T12027] RSP: 002b:00007fdc74dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.875262][T12027] RAX: ffffffffffffffda RBX: 00007fdc76de6180 RCX: 00007fdc76b8f749 [ 607.875276][T12027] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 607.875289][T12027] RBP: 00007fdc74dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 607.875307][T12027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.875320][T12027] R13: 00007fdc76de6218 R14: 00007fdc76de6180 R15: 00007ffc0216e738 [ 607.875351][T12027] [ 608.245589][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 608.269092][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 608.293731][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 608.318734][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 608.327305][ T24] usb 5-1: Product: syz [ 608.339952][ T24] usb 5-1: Manufacturer: syz [ 608.345543][ T24] usb 5-1: SerialNumber: syz [ 608.358793][T12031] xt_cgroup: path and classid specified [ 608.364004][ T24] usb 5-1: config 0 descriptor?? [ 608.382898][ T24] usb 5-1: selecting invalid altsetting 0 [ 608.939375][T12002] syz_tun: entered allmulticast mode [ 609.760471][T12041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.791100][T12041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.426174][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 610.635983][ T6006] usb 5-1: USB disconnect, device number 36 [ 610.671649][T12050] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 611.128031][T12054] 0x000000002f70-0x000000020000 : "" [ 611.136228][T12054] ftl_cs: FTL header corrupt! [ 611.804901][T12065] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 611.911570][ T30] audit: type=1400 audit(34392982.797:807): avc: denied { getopt } for pid=12062 comm="syz.4.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 612.541686][ T5925] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 612.614663][T12074] xt_cgroup: path and classid specified [ 612.701573][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 612.724185][ T5925] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 612.744071][ T5925] usb 5-1: config 0 has no interface number 0 [ 612.757035][ T5925] usb 5-1: config 0 interface 184 has no altsetting 0 [ 612.773373][ T5925] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 612.789309][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.799792][ T5925] usb 5-1: Product: syz [ 612.806034][ T5925] usb 5-1: Manufacturer: syz [ 612.811346][ T5925] usb 5-1: SerialNumber: syz [ 612.882514][T12078] 9pnet_fd: p9_fd_create_unix (12078): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 613.470298][ T5925] usb 5-1: config 0 descriptor?? [ 613.576929][ T5925] smsc75xx v1.0.0 [ 614.407016][T12086] block device autoloading is deprecated and will be removed. [ 614.517910][T12085] tipc: Enabling of bearer rejected, failed to enable media [ 615.113854][ T5925] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 615.138867][ T5925] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 615.358970][ T30] audit: type=1400 audit(34392986.267:808): avc: denied { read } for pid=12068 comm="syz.4.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 616.823590][T12105] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 618.544023][T12125] xt_cgroup: path and classid specified [ 619.801842][T12137] nbd0: detected capacity change from 0 to 127 [ 619.810631][ T5819] block nbd0: Receive control failed (result -32) [ 620.242405][ T5925] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 620.257388][ T5925] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110 [ 620.268298][ T5925] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 620.286413][ T5925] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -110 [ 620.307419][ T5925] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -110 [ 621.500036][T12152] FAT-fs (loop7): unable to read boot sector [ 621.508284][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 621.525302][T12152] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 621.533259][T12152] macsec1: entered promiscuous mode [ 621.538721][T12152] macsec1: entered allmulticast mode [ 621.544048][T12152] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 621.930675][ T30] audit: type=1400 audit(34392992.407:809): avc: denied { mounton } for pid=12146 comm="syz.3.1608" path="/358/file0" dev="tmpfs" ino=1921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 622.056788][ T30] audit: type=1400 audit(34392992.967:810): avc: denied { write } for pid=12155 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 624.434204][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.440529][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.947382][ T6421] usb 5-1: USB disconnect, device number 37 [ 625.502350][ T6421] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 625.661689][ T6421] usb 5-1: device descriptor read/64, error -71 [ 625.730114][T12195] team_slave_0: entered promiscuous mode [ 625.736370][T12195] team_slave_1: entered promiscuous mode [ 625.773989][T12195] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 625.872558][T12196] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 625.911569][ T6421] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 626.060803][ T6421] usb 5-1: device descriptor read/64, error -71 [ 626.193088][ T6421] usb usb5-port1: attempt power cycle [ 626.603441][T12210] input: syz0 as /devices/virtual/input/input29 [ 626.631996][ T6421] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 626.678829][ T6421] usb 5-1: device descriptor read/8, error -71 [ 627.021688][ T6421] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 627.040283][T12217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1632'. [ 627.062130][ T6421] usb 5-1: device descriptor read/8, error -71 [ 627.190190][ T6421] usb usb5-port1: unable to enumerate USB device [ 627.413190][T12228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.485282][T12228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.575513][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.602356][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.638667][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.660934][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.712431][T12234] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1636'. [ 630.439624][T12251] fuseblk: Bad value for 'rootmode' [ 631.819239][T12272] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1648'. [ 632.203578][T12278] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 632.259151][T12278] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1651'. [ 632.460408][ T30] audit: type=1400 audit(34393003.367:811): avc: denied { read } for pid=12277 comm="syz.5.1651" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 632.473153][T12281] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 632.585174][T12280] tmpfs: Unknown parameter ' ' [ 632.626576][T12281] block device autoloading is deprecated and will be removed. [ 632.640807][ T30] audit: type=1400 audit(34393003.367:812): avc: denied { open } for pid=12277 comm="syz.5.1651" path="/86/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 632.671933][ T30] audit: type=1400 audit(34393003.497:813): avc: denied { mounton } for pid=12277 comm="syz.5.1651" path="/86/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 632.910578][T12272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.023464][T12272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.069462][T12272] bond0 (unregistering): Released all slaves [ 633.472671][T12283] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 633.861345][T12294] bridge0: entered promiscuous mode [ 633.867577][T12294] bridge0: entered allmulticast mode [ 633.969320][T12302] FAULT_INJECTION: forcing a failure. [ 633.969320][T12302] name failslab, interval 1, probability 0, space 0, times 0 [ 633.985500][T12302] CPU: 1 UID: 0 PID: 12302 Comm: syz.4.1656 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.985534][T12302] Tainted: [L]=SOFTLOCKUP [ 633.985539][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.985549][T12302] Call Trace: [ 633.985560][T12302] [ 633.985571][T12302] dump_stack_lvl+0x16c/0x1f0 [ 633.985604][T12302] should_fail_ex+0x512/0x640 [ 633.985635][T12302] ? __kvmalloc_node_noprof+0x129/0xa40 [ 633.985663][T12302] should_failslab+0xc2/0x120 [ 633.985691][T12302] __kvmalloc_node_noprof+0x14a/0xa40 [ 633.985719][T12302] ? page_pool_create_percpu+0x34e/0xd30 [ 633.985755][T12302] ? page_pool_create_percpu+0x34e/0xd30 [ 633.985782][T12302] page_pool_create_percpu+0x34e/0xd30 [ 633.985816][T12302] bpf_test_run_xdp_live+0x191/0x770 [ 633.985843][T12302] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 633.985871][T12302] ? __pfx___schedule+0x10/0x10 [ 633.985894][T12302] ? find_held_lock+0x2b/0x80 [ 633.985931][T12302] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 633.985978][T12302] ? bpf_dispatcher_xdp+0x800/0x1000 [ 633.986000][T12302] ? bpf_dispatcher_xdp+0x800/0x1000 [ 633.986020][T12302] ? bpf_dispatcher_xdp+0x800/0x1000 [ 633.986037][T12302] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 633.986073][T12302] bpf_prog_test_run_xdp+0xd3d/0x1660 [ 633.986099][T12302] ? __fget_files+0x204/0x3c0 [ 633.986128][T12302] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 633.986153][T12302] ? __might_fault+0x60/0x190 [ 633.986179][T12302] ? fput+0x70/0xf0 [ 633.986197][T12302] ? __bpf_prog_get+0x97/0x2a0 [ 633.986221][T12302] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 633.986244][T12302] __sys_bpf+0x1035/0x4980 [ 633.986278][T12302] ? __pfx___sys_bpf+0x10/0x10 [ 633.986306][T12302] ? find_held_lock+0x2b/0x80 [ 633.986342][T12302] ? find_held_lock+0x2b/0x80 [ 633.986380][T12302] ? __mutex_unlock_slowpath+0x161/0x790 [ 633.986429][T12302] ? fput+0x70/0xf0 [ 633.986447][T12302] ? ksys_write+0x1ac/0x250 [ 633.986472][T12302] ? __pfx_ksys_write+0x10/0x10 [ 633.986507][T12302] __x64_sys_bpf+0x78/0xc0 [ 633.986536][T12302] ? lockdep_hardirqs_on+0x7c/0x110 [ 633.986562][T12302] do_syscall_64+0xcd/0xf80 [ 633.986591][T12302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.986613][T12302] RIP: 0033:0x7f78d458f749 [ 633.986629][T12302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.986649][T12302] RSP: 002b:00007f78d539f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.986670][T12302] RAX: ffffffffffffffda RBX: 00007f78d47e5fa0 RCX: 00007f78d458f749 [ 633.986684][T12302] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 633.986697][T12302] RBP: 00007f78d539f090 R08: 0000000000000000 R09: 0000000000000000 [ 633.986709][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.986722][T12302] R13: 00007f78d47e6038 R14: 00007f78d47e5fa0 R15: 00007ffcc120e598 [ 633.986752][T12302] [ 633.986807][T12302] page_pool_create_percpu() gave up with errno -12 [ 634.419997][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1658'. [ 634.936804][T12319] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 634.943358][T12319] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 634.953258][T12319] vhci_hcd vhci_hcd.0: Device attached [ 634.972940][T12321] vhci_hcd: connection closed [ 634.973510][ T6338] vhci_hcd vhci_hcd.5: stop threads [ 634.983692][ T6338] vhci_hcd vhci_hcd.5: release socket [ 634.993198][ T6338] vhci_hcd vhci_hcd.5: disconnect device [ 635.092485][T12317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.760054][T12317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.083507][ T1212] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 636.205153][T12339] xt_cgroup: path and classid specified [ 636.242552][ T1212] usb 5-1: Using ep0 maxpacket: 8 [ 636.249255][ T1212] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 636.267975][ T1212] usb 5-1: config 0 has no interface number 0 [ 636.360333][ T1212] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 636.374463][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.395381][ T1212] usb 5-1: Product: syz [ 636.411690][ T1212] usb 5-1: Manufacturer: syz [ 636.416321][ T1212] usb 5-1: SerialNumber: syz [ 637.131312][ T1212] usb 5-1: config 0 descriptor?? [ 637.502066][ T1212] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 637.509420][ T1212] uvcvideo 5-1:0.31: No valid video chain found. [ 637.556250][ T1212] usb 5-1: USB disconnect, device number 42 [ 637.630942][T12352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=12352 comm=syz.5.1673 [ 637.672080][T12353] 8021q: VLANs not supported on lo [ 637.678340][T12353] FAULT_INJECTION: forcing a failure. [ 637.678340][T12353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.701854][T12353] CPU: 1 UID: 0 PID: 12353 Comm: syz.0.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.701893][T12353] Tainted: [L]=SOFTLOCKUP [ 637.701900][T12353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 637.701913][T12353] Call Trace: [ 637.701920][T12353] [ 637.701929][T12353] dump_stack_lvl+0x16c/0x1f0 [ 637.701968][T12353] should_fail_ex+0x512/0x640 [ 637.702004][T12353] _copy_from_user+0x2e/0xd0 [ 637.702038][T12353] do_sys_poll+0x1d5/0xdf0 [ 637.702066][T12353] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 637.702092][T12353] ? is_bpf_text_address+0x94/0x1a0 [ 637.702121][T12353] ? __kernel_text_address+0xd/0x40 [ 637.702149][T12353] ? unwind_get_return_address+0x59/0xa0 [ 637.702178][T12353] ? __pfx_do_sys_poll+0x10/0x10 [ 637.702227][T12353] ? find_held_lock+0x2b/0x80 [ 637.702314][T12353] ? __mutex_unlock_slowpath+0x161/0x790 [ 637.702347][T12353] ? set_user_sigmask+0x21b/0x2b0 [ 637.702377][T12353] ? __pfx_set_user_sigmask+0x10/0x10 [ 637.702406][T12353] ? __fget_files+0x20e/0x3c0 [ 637.702440][T12353] __x64_sys_ppoll+0x254/0x2d0 [ 637.702471][T12353] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 637.702499][T12353] ? ksys_write+0x1ac/0x250 [ 637.702526][T12353] ? __pfx_ksys_write+0x10/0x10 [ 637.702561][T12353] do_syscall_64+0xcd/0xf80 [ 637.702591][T12353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.702613][T12353] RIP: 0033:0x7fdc76b8f749 [ 637.702632][T12353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.702653][T12353] RSP: 002b:00007fdc74df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 637.702674][T12353] RAX: ffffffffffffffda RBX: 00007fdc76de6090 RCX: 00007fdc76b8f749 [ 637.702688][T12353] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 637.702702][T12353] RBP: 00007fdc74df6090 R08: 0000000000000000 R09: 0000000000000000 [ 637.702715][T12353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.702728][T12353] R13: 00007fdc76de6128 R14: 00007fdc76de6090 R15: 00007ffc0216e738 [ 637.702759][T12353] [ 638.122569][T12361] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 638.874304][ T1212] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 639.093975][ T1212] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 639.121852][ T1212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.164480][ T1212] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 639.190614][ T1212] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 639.237762][ T1212] usb 6-1: Manufacturer: syz [ 639.251270][ T1212] usb 6-1: config 0 descriptor?? [ 639.351947][ T1212] rc_core: IR keymap rc-hauppauge not found [ 639.411790][ T1212] Registered IR keymap rc-empty [ 639.458223][T12394] FAULT_INJECTION: forcing a failure. [ 639.458223][T12394] name failslab, interval 1, probability 0, space 0, times 0 [ 639.490650][ T1212] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 639.504763][T12394] CPU: 0 UID: 0 PID: 12394 Comm: syz.3.1684 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.504799][T12394] Tainted: [L]=SOFTLOCKUP [ 639.504806][T12394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 639.504828][T12394] Call Trace: [ 639.504835][T12394] [ 639.504842][T12394] dump_stack_lvl+0x16c/0x1f0 [ 639.504874][T12394] should_fail_ex+0x512/0x640 [ 639.504904][T12394] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 639.504930][T12394] should_failslab+0xc2/0x120 [ 639.504957][T12394] kmem_cache_alloc_node_noprof+0x86/0x800 [ 639.504979][T12394] ? __alloc_skb+0x156/0x410 [ 639.505015][T12394] ? __alloc_skb+0x156/0x410 [ 639.505042][T12394] __alloc_skb+0x156/0x410 [ 639.505069][T12394] ? __alloc_skb+0x35d/0x410 [ 639.505098][T12394] ? __pfx___alloc_skb+0x10/0x10 [ 639.505128][T12394] ? genl_rcv_msg+0x4d0/0x800 [ 639.505152][T12394] ? genl_rcv_msg+0x4bb/0x800 [ 639.505187][T12394] netlink_ack+0x15d/0xb80 [ 639.505221][T12394] netlink_rcv_skb+0x332/0x420 [ 639.505246][T12394] ? __pfx_genl_rcv_msg+0x10/0x10 [ 639.505275][T12394] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 639.505312][T12394] ? netlink_deliver_tap+0x1ae/0xd30 [ 639.505340][T12394] genl_rcv+0x28/0x40 [ 639.505364][T12394] netlink_unicast+0x5aa/0x870 [ 639.505394][T12394] ? __pfx_netlink_unicast+0x10/0x10 [ 639.505430][T12394] netlink_sendmsg+0x8c8/0xdd0 [ 639.505459][T12394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.505493][T12394] ____sys_sendmsg+0xa5d/0xc30 [ 639.505520][T12394] ? copy_msghdr_from_user+0x10a/0x160 [ 639.505541][T12394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.505566][T12394] ___sys_sendmsg+0x134/0x1d0 [ 639.505579][T12394] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.505610][T12394] __sys_sendmsg+0x16d/0x220 [ 639.505622][T12394] ? __pfx___sys_sendmsg+0x10/0x10 [ 639.505644][T12394] do_syscall_64+0xcd/0xf80 [ 639.505661][T12394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.505673][T12394] RIP: 0033:0x7f1e4718f749 [ 639.505683][T12394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.505695][T12394] RSP: 002b:00007f1e47fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.505706][T12394] RAX: ffffffffffffffda RBX: 00007f1e473e6090 RCX: 00007f1e4718f749 [ 639.505714][T12394] RDX: 0000000020000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 639.505721][T12394] RBP: 00007f1e47fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 639.505728][T12394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.505734][T12394] R13: 00007f1e473e6128 R14: 00007f1e473e6090 R15: 00007ffc02b56e58 [ 639.505750][T12394] [ 639.506889][ T1212] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input30 [ 639.941935][ T1212] usb 6-1: USB disconnect, device number 13 [ 640.222509][ T920] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 640.818501][ T920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.834271][ T920] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 640.847802][ T920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.052610][ T920] usb 5-1: config 0 descriptor?? [ 641.416432][T12418] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1691'. [ 642.266970][ T920] ath6kl: Failed to submit usb control message: -110 [ 642.282208][ T920] ath6kl: unable to send the bmi data to the device: -110 [ 642.290484][ T920] ath6kl: Unable to send get target info: -110 [ 642.297653][ T920] ath6kl: Failed to init ath6kl core: -110 [ 642.303825][ T920] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 642.810661][ T920] usb 5-1: USB disconnect, device number 43 [ 642.851796][T12431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.863662][T12431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.616846][T12441] binder: 12440:12441 ioctl c0306201 0 returned -14 [ 645.288048][T12459] fuse: Bad value for 'fd' [ 646.331752][T12468] Bluetooth: hci5: Frame reassembly failed (-84) [ 646.473075][ T3457] Bluetooth: hci5: Frame reassembly failed (-84) [ 646.482000][ T3457] Bluetooth: hci5: Frame reassembly failed (-84) [ 646.859117][T12480] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1704'. [ 646.859222][T12480] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1704'. [ 647.126726][T12493] bridge0: entered promiscuous mode [ 647.162076][T12493] bridge0: entered allmulticast mode [ 648.482362][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 649.274253][T12513] xt_cgroup: path and classid specified [ 652.631196][T12541] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 652.763166][ T30] audit: type=1400 audit(34393023.667:814): avc: denied { setopt } for pid=12540 comm="syz.3.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 652.905842][T12546] syzkaller1: entered promiscuous mode [ 652.911312][T12546] syzkaller1: entered allmulticast mode [ 656.852221][ T30] audit: type=1400 audit(34393027.177:815): avc: denied { append } for pid=12574 comm="syz.4.1737" name="nbd4" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 656.953990][T12579] usb 1-1: USB disconnect, device number 23 [ 657.519883][T12588] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 658.068549][T12590] netlink: 'syz.3.1741': attribute type 1 has an invalid length. [ 658.556914][T12595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1742'. [ 658.579899][ T30] audit: type=1400 audit(34393029.487:816): avc: denied { relabelfrom } for pid=12594 comm="syz.2.1742" name="SMC" dev="sockfs" ino=38700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 658.604824][T12595] SELinux: Context system_u:system_r:kernel_t:s0 is not valid (left unmapped). [ 658.620382][ T30] audit: type=1400 audit(34393029.527:817): avc: denied { relabelto } for pid=12594 comm="syz.2.1742" name="SMC" dev="sockfs" ino=38700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=smc_socket permissive=1 trawcon="system_u:system_r:kernel_t:s0" [ 659.113140][T12605] FAULT_INJECTION: forcing a failure. [ 659.113140][T12605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.127048][T12605] CPU: 1 UID: 0 PID: 12605 Comm: syz.0.1745 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.127084][T12605] Tainted: [L]=SOFTLOCKUP [ 659.127091][T12605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 659.127104][T12605] Call Trace: [ 659.127111][T12605] [ 659.127120][T12605] dump_stack_lvl+0x16c/0x1f0 [ 659.127151][T12605] should_fail_ex+0x512/0x640 [ 659.127187][T12605] _copy_from_user+0x2e/0xd0 [ 659.127219][T12605] __sys_bpf+0x248/0x4980 [ 659.127254][T12605] ? __pfx___sys_bpf+0x10/0x10 [ 659.127281][T12605] ? find_held_lock+0x2b/0x80 [ 659.127317][T12605] ? find_held_lock+0x2b/0x80 [ 659.127356][T12605] ? __mutex_unlock_slowpath+0x161/0x790 [ 659.127403][T12605] ? fput+0x70/0xf0 [ 659.127422][T12605] ? ksys_write+0x1ac/0x250 [ 659.127448][T12605] ? __pfx_ksys_write+0x10/0x10 [ 659.127479][T12605] __x64_sys_bpf+0x78/0xc0 [ 659.127508][T12605] ? lockdep_hardirqs_on+0x7c/0x110 [ 659.127535][T12605] do_syscall_64+0xcd/0xf80 [ 659.127564][T12605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.127587][T12605] RIP: 0033:0x7fdc76b8f749 [ 659.127604][T12605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.127624][T12605] RSP: 002b:00007fdc77954038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 659.127642][T12605] RAX: ffffffffffffffda RBX: 00007fdc76de5fa0 RCX: 00007fdc76b8f749 [ 659.127656][T12605] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 659.127669][T12605] RBP: 00007fdc77954090 R08: 0000000000000000 R09: 0000000000000000 [ 659.127682][T12605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.127695][T12605] R13: 00007fdc76de6038 R14: 00007fdc76de5fa0 R15: 00007ffc0216e738 [ 659.127731][T12605] [ 659.618326][ T30] audit: type=1400 audit(34393030.527:818): avc: denied { map } for pid=12608 comm="syz.0.1746" path="socket:[38727]" dev="sockfs" ino=38727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 659.676913][T12612] overlayfs: unescaped trailing colons in lowerdir mount option. [ 659.895637][T12620] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1749'. [ 660.346635][T12624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.355553][T12624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.477565][ T9654] Bluetooth: hci5: Frame reassembly failed (-84) [ 660.684900][T12632] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.762507][T12632] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 661.978508][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bc3e000: rx timeout, send abort [ 662.129321][ T30] audit: type=1400 audit(34393033.027:819): avc: denied { kexec_image_load } for pid=12654 comm="syz.4.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 662.478603][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bc3ec00: rx timeout, send abort [ 662.487207][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 662.491579][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 662.494033][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bc3e000: abort rx timeout. Force session deactivation [ 662.656875][ T30] audit: type=1326 audit(34393033.567:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.0.1761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc76b8f749 code=0x0 [ 662.742702][T12664] ubi31: attaching mtd0 [ 662.749667][T12664] ubi31: scanning is finished [ 662.756432][T12664] ubi31: empty MTD device detected [ 662.788671][T12666] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1763'. [ 662.959931][T12664] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 662.970081][T12664] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 662.984516][T12664] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 662.991658][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bc3ec00: abort rx timeout. Force session deactivation [ 663.002492][T12664] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 663.009993][T12664] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 663.016987][T12664] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 663.025127][T12664] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3733269626 [ 663.063120][T12664] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 663.335845][T12669] ubi31: background thread "ubi_bgt31d" started, PID 12669 [ 663.974115][T12677] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 664.627715][T12688] netlink: 'syz.3.1767': attribute type 1 has an invalid length. [ 664.635667][T12688] netlink: 480 bytes leftover after parsing attributes in process `syz.3.1767'. [ 665.251980][T12696] overlayfs: failed to clone upperpath [ 666.094043][T12705] overlayfs: missing 'lowerdir' [ 667.520551][ T30] audit: type=1400 audit(34393038.427:821): avc: denied { ioctl } for pid=12703 comm="syz.3.1773" path="socket:[39269]" dev="sockfs" ino=39269 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 668.001867][T12732] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 668.379479][T12739] FAULT_INJECTION: forcing a failure. [ 668.379479][T12739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.392828][T12739] CPU: 0 UID: 0 PID: 12739 Comm: syz.4.1778 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.392862][T12739] Tainted: [L]=SOFTLOCKUP [ 668.392869][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.392881][T12739] Call Trace: [ 668.392888][T12739] [ 668.392896][T12739] dump_stack_lvl+0x16c/0x1f0 [ 668.392926][T12739] should_fail_ex+0x512/0x640 [ 668.392958][T12739] _copy_from_iter+0x2a4/0x16c0 [ 668.392990][T12739] ? __alloc_skb+0x220/0x410 [ 668.393064][T12739] ? __alloc_skb+0x35d/0x410 [ 668.393096][T12739] ? __pfx__copy_from_iter+0x10/0x10 [ 668.393138][T12739] netlink_sendmsg+0x820/0xdd0 [ 668.393168][T12739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.393202][T12739] ____sys_sendmsg+0xa5d/0xc30 [ 668.393227][T12739] ? copy_msghdr_from_user+0x10a/0x160 [ 668.393247][T12739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.393279][T12739] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 668.393307][T12739] ___sys_sendmsg+0x134/0x1d0 [ 668.393329][T12739] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.393380][T12739] __sys_sendmsg+0x16d/0x220 [ 668.393401][T12739] ? __pfx___sys_sendmsg+0x10/0x10 [ 668.393438][T12739] do_syscall_64+0xcd/0xf80 [ 668.393465][T12739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.393485][T12739] RIP: 0033:0x7f78d458f749 [ 668.393503][T12739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.393521][T12739] RSP: 002b:00007f78d537e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.393540][T12739] RAX: ffffffffffffffda RBX: 00007f78d47e6090 RCX: 00007f78d458f749 [ 668.393553][T12739] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 668.393565][T12739] RBP: 00007f78d537e090 R08: 0000000000000000 R09: 0000000000000000 [ 668.393577][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.393589][T12739] R13: 00007f78d47e6128 R14: 00007f78d47e6090 R15: 00007ffcc120e598 [ 668.393615][T12739] [ 668.916789][T12742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.934585][T12742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.109261][T12772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.205155][T12772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.926845][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 672.939146][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 672.950625][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 672.958762][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 672.966711][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 672.979086][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 672.987557][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 672.994998][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 673.005130][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 673.015122][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 673.626532][T12778] fuse: Bad value for 'fd' [ 674.224714][T12790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.237211][T12790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.459051][T12775] chnl_net:caif_netlink_parms(): no params data found [ 674.650800][T12775] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.659364][T12775] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.666985][T12775] bridge_slave_0: entered allmulticast mode [ 674.675520][T12775] bridge_slave_0: entered promiscuous mode [ 674.686406][T12775] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.696483][T12775] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.706481][T12775] bridge_slave_1: entered allmulticast mode [ 674.714724][T12775] bridge_slave_1: entered promiscuous mode [ 674.881246][T12775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.893210][T12775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.014132][T12803] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 675.020668][T12803] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 675.028258][T12803] vhci_hcd vhci_hcd.0: Device attached [ 675.041572][ T5819] Bluetooth: hci5: command tx timeout [ 675.158639][T12775] team0: Port device team_slave_0 added [ 675.198723][T12775] team0: Port device team_slave_1 added [ 675.207660][T12809] vhci_hcd: connection closed [ 675.207816][ T3972] vhci_hcd vhci_hcd.4: stop threads [ 675.219772][ T3972] vhci_hcd vhci_hcd.4: release socket [ 675.226106][ T3972] vhci_hcd vhci_hcd.4: disconnect device [ 675.271583][ T24] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 676.091535][ T24] usb 41-1: enqueue for inactive port 0 [ 676.162407][ T24] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 676.359606][T12775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.441359][T12775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.616634][T12775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.784408][T12775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.839679][T12775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.906148][T12775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.120223][T12775] hsr_slave_0: entered promiscuous mode [ 677.129595][ T5819] Bluetooth: hci5: command tx timeout [ 677.143098][T12775] hsr_slave_1: entered promiscuous mode [ 677.362280][ T6421] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 677.479398][T12775] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 677.497424][T12775] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 677.515873][T12775] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 677.528253][T12775] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 677.551576][ T6421] usb 5-1: Using ep0 maxpacket: 16 [ 677.561596][ T6421] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 677.571024][ T6421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.591177][ T6421] usb 5-1: Product: syz [ 677.609147][ T6421] usb 5-1: Manufacturer: syz [ 677.632422][ T6421] usb 5-1: SerialNumber: syz [ 677.649564][ T6421] usb 5-1: config 0 descriptor?? [ 677.672725][ T6421] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 677.681170][ T6421] usb 5-1: Detected FT4233HP [ 677.752341][T12775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.104415][ T6421] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 678.126407][ T6421] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 678.134896][ T6421] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 678.143830][T12775] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.144987][ T6421] usb 5-1: USB disconnect, device number 44 [ 678.217326][T12847] overlayfs: workdir and upperdir must be separate subtrees [ 678.225614][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.240024][ T3972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.263889][ T6421] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 678.294224][ T6421] ftdi_sio 5-1:0.0: device disconnected [ 678.339910][ T1913] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.347106][ T1913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.501297][T12857] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1811'. [ 678.515398][T12857] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1811'. [ 679.523106][ T5819] Bluetooth: hci5: command tx timeout [ 679.637544][T12864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1813'. [ 679.869094][T12871] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 679.970431][T12775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.907745][T12887] netlink: 'syz.0.1818': attribute type 1 has an invalid length. [ 681.003565][T12775] veth0_vlan: entered promiscuous mode [ 681.024831][T12775] veth1_vlan: entered promiscuous mode [ 681.067965][T12775] veth0_macvtap: entered promiscuous mode [ 681.094924][T12775] veth1_macvtap: entered promiscuous mode [ 681.156713][T12775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.185658][T12775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.225561][ T69] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.241267][ T69] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.274856][ T69] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.303870][ T69] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.607595][ T5819] Bluetooth: hci5: command tx timeout [ 681.894680][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.941786][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.973697][T12900] macvtap1: entered promiscuous mode [ 681.979908][T12900] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 681.988790][T12900] macvtap1: entered allmulticast mode [ 682.063894][T12900] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 682.164633][ T6338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.189386][ T6338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.387813][T12909] tmpfs: Unknown parameter '' [ 682.534213][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.542706][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.019475][T12921] netlink: 'syz.6.1827': attribute type 33 has an invalid length. [ 683.027395][T12921] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1827'. [ 683.160260][T12924] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 683.177720][T12924] cramfs: wrong magic [ 684.223466][T12931] tmpfs: Bad value for 'nr_blocks' [ 684.305189][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1830'. [ 684.865383][T12945] openvswitch: netlink: IP tunnel dst address not specified [ 684.927737][T12946] xt_cgroup: path and classid specified [ 685.605621][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.168357][T12953] veth0_vlan: entered allmulticast mode [ 686.216497][T12953] veth0_vlan: left promiscuous mode [ 686.225149][T12953] veth0_vlan: entered promiscuous mode [ 687.679212][ T50] Bluetooth: hci6: Frame reassembly failed (-84) [ 687.708991][ T50] Bluetooth: hci6: Frame reassembly failed (-84) [ 687.810764][T12963] syz.6.1839 (12963): drop_caches: 2 [ 688.911416][T12999] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 688.946036][T12996] xt_cgroup: path and classid specified [ 689.681979][ T5820] Bluetooth: hci6: command 0x1003 tx timeout [ 689.682452][ T5819] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 691.104946][ T30] audit: type=1400 audit(34393061.997:822): avc: denied { watch } for pid=13028 comm="syz.2.1862" path="anon_inode:[signalfd]" dev="anon_inodefs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 692.682599][T13045] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 692.689970][T13045] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 697.527573][ T30] audit: type=1400 audit(34393068.437:823): avc: denied { setopt } for pid=13127 comm="syz.0.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 698.102795][ T30] audit: type=1326 audit(34393069.017:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.2.1884" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe394d8f749 code=0x0 [ 698.160235][T13134] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 699.310181][ T30] audit: type=1400 audit(34393070.217:825): avc: denied { connect } for pid=13149 comm="syz.4.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 702.270285][T13184] fuse: Unknown parameter '0xffffffffffffffff' [ 702.505342][T13187] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 703.092477][T13202] xt_cgroup: path and classid specified [ 703.221901][T13205] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.229111][T13205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.236705][T13205] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.243909][T13205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.482314][T13205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 706.653942][T13237] netlink: 'syz.6.1911': attribute type 1 has an invalid length. [ 707.644224][ T30] audit: type=1400 audit(34393078.537:826): avc: denied { mounton } for pid=13254 comm="syz.2.1916" path="/380/file0" dev="tmpfs" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 708.082117][ T1212] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 708.231079][ T1212] usb 7-1: device descriptor read/64, error -71 [ 708.479186][ T1212] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 708.574189][ T30] audit: type=1400 audit(34393079.487:827): avc: denied { cmd } for pid=13269 comm="syz.2.1921" path="socket:[43376]" dev="sockfs" ino=43376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 708.611584][ T1212] usb 7-1: device descriptor read/64, error -71 [ 708.677626][T13271] openvswitch: netlink: IP tunnel dst address not specified [ 708.722112][ T1212] usb usb7-port1: attempt power cycle [ 709.081633][ T1212] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 709.167470][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 709.627032][ T1212] usb 7-1: device descriptor read/8, error -71 [ 709.871559][ T1212] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 709.897245][ T1212] usb 7-1: device descriptor read/8, error -71 [ 710.104263][T13291] bridge1: entered promiscuous mode [ 710.109537][T13291] bridge1: entered allmulticast mode [ 710.953993][ T1212] usb usb7-port1: unable to enumerate USB device [ 711.502893][T13309] xt_cgroup: path and classid specified [ 711.767481][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'. [ 711.863500][ T5925] IPVS: starting estimator thread 0... [ 711.879022][T13310] xt_bpf: check failed: parse error [ 712.522291][T13317] IPVS: using max 63 ests per chain, 151200 per kthread [ 712.790769][T13326] overlayfs: missing 'lowerdir' [ 715.895765][T13345] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1943'. [ 715.905493][T13344] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1943'. [ 716.279945][T13365] netlink: 'syz.6.1944': attribute type 33 has an invalid length. [ 716.287822][T13365] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1944'. [ 716.731764][ T7291] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 717.132785][ T7291] usb 5-1: Using ep0 maxpacket: 32 [ 717.542799][ T7291] usb 5-1: config 2 has an invalid interface number: 45 but max is 0 [ 717.556942][ T7291] usb 5-1: config 2 has no interface number 0 [ 717.611651][ T7291] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 717.656666][ T7291] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 717.697909][ T7291] usb 5-1: string descriptor 0 read error: -71 [ 717.741967][ T7291] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 717.761391][ T7291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.787065][ T7291] usb 5-1: can't set config #2, error -71 [ 718.864287][ T7291] usb 5-1: USB disconnect, device number 45 [ 719.551544][ T30] audit: type=1400 audit(34393090.457:828): avc: denied { create } for pid=13387 comm="syz.0.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 719.646381][ T30] audit: type=1400 audit(34393090.457:829): avc: denied { ioctl } for pid=13387 comm="syz.0.1952" path="socket:[42715]" dev="sockfs" ino=42715 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 719.790284][T13395] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1952'. [ 719.872221][T13397] netlink: 640 bytes leftover after parsing attributes in process `syz.4.1950'. [ 719.881406][T13397] netlink: 640 bytes leftover after parsing attributes in process `syz.4.1950'. [ 720.209996][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'. [ 720.224680][ T30] audit: type=1400 audit(34393090.517:830): avc: denied { write } for pid=13387 comm="syz.0.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 721.628115][T13418] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1958'. [ 721.648739][T13418] netlink: 'syz.2.1958': attribute type 74 has an invalid length. [ 721.745957][ T30] audit: type=1326 audit(34393092.657:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13421 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe394d8f749 code=0x7ffc0000 [ 721.929590][ T30] audit: type=1326 audit(34393092.657:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13421 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe394d8f749 code=0x7ffc0000 [ 722.136923][T13426] netlink: 'syz.0.1961': attribute type 1 has an invalid length. [ 722.170790][ T30] audit: type=1326 audit(34393092.657:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13421 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe394d8f749 code=0x7ffc0000 [ 722.396956][ T30] audit: type=1326 audit(34393092.657:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13421 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe394d8f749 code=0x7ffc0000 [ 722.559855][ T30] audit: type=1326 audit(34393092.657:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13421 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe394d8f749 code=0x7ffc0000 [ 722.644572][ T30] audit: type=1326 audit(34393092.657:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13421 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe394d8f749 code=0x7ffc0000 [ 722.691702][ T30] audit: type=1326 audit(34393092.657:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13421 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe394d8f749 code=0x7ffc0000 [ 723.286981][T13441] FAULT_INJECTION: forcing a failure. [ 723.286981][T13441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.371596][T13441] CPU: 1 UID: 0 PID: 13441 Comm: syz.0.1964 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.371631][T13441] Tainted: [L]=SOFTLOCKUP [ 723.371638][T13441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 723.371652][T13441] Call Trace: [ 723.371658][T13441] [ 723.371667][T13441] dump_stack_lvl+0x16c/0x1f0 [ 723.371699][T13441] should_fail_ex+0x512/0x640 [ 723.371734][T13441] _copy_to_user+0x32/0xd0 [ 723.371767][T13441] cp_new_stat+0x468/0x5a0 [ 723.371798][T13441] ? __pfx_cp_new_stat+0x10/0x10 [ 723.371826][T13441] ? kasan_quarantine_put+0x10a/0x240 [ 723.371867][T13441] ? putname+0xf5/0x1a0 [ 723.371927][T13441] ? putname+0xf5/0x1a0 [ 723.371965][T13441] __do_sys_newfstatat+0xb7/0x120 [ 723.371986][T13441] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 723.372006][T13441] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 723.372053][T13441] ? __pfx_ksys_write+0x10/0x10 [ 723.372086][T13441] do_syscall_64+0xcd/0xf80 [ 723.372114][T13441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.372135][T13441] RIP: 0033:0x7fdc76b8f749 [ 723.372151][T13441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.372169][T13441] RSP: 002b:00007fdc77954038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 723.372189][T13441] RAX: ffffffffffffffda RBX: 00007fdc76de5fa0 RCX: 00007fdc76b8f749 [ 723.372204][T13441] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 723.372217][T13441] RBP: 00007fdc77954090 R08: 0000000000000000 R09: 0000000000000000 [ 723.372230][T13441] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 723.372242][T13441] R13: 00007fdc76de6038 R14: 00007fdc76de5fa0 R15: 00007ffc0216e738 [ 723.372269][T13441] [ 723.684653][T13443] 9pnet_virtio: no channels available for device syz [ 725.260573][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 725.260591][ T30] audit: type=1400 audit(34393096.167:903): avc: denied { ioctl } for pid=13458 comm="syz.0.1969" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 725.305553][T13465] fuseblk: Bad value for 'rootmode' [ 726.212457][T13474] fuse: Bad value for 'group_id' [ 726.261809][T13474] fuse: Bad value for 'group_id' [ 726.265294][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'. [ 726.492129][ T30] audit: type=1326 audit(34393097.407:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4718f749 code=0x7ffc0000 [ 726.589683][T13490] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 726.589683][T13490] Ue[%#s' [ 726.971706][ T30] audit: type=1326 audit(34393097.427:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e4718f749 code=0x7ffc0000 [ 726.995879][ T30] audit: type=1326 audit(34393097.427:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4718f749 code=0x7ffc0000 [ 727.025864][T13492] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 727.035824][ T30] audit: type=1326 audit(34393097.427:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1e4718f749 code=0x7ffc0000 [ 727.097609][ T30] audit: type=1326 audit(34393097.427:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4718f749 code=0x7ffc0000 [ 727.157422][ T30] audit: type=1326 audit(34393097.427:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e4718f749 code=0x7ffc0000 [ 727.286636][ T30] audit: type=1326 audit(34393097.427:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4718f749 code=0x7ffc0000 [ 727.841869][ T30] audit: type=1326 audit(34393097.427:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e4718f749 code=0x7ffc0000 [ 727.879148][ T30] audit: type=1326 audit(34393097.427:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4718f749 code=0x7ffc0000 [ 728.422756][T13506] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 728.442986][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 729.087061][T13514] comedi comedi3: dt2815: I/O port conflict (0x800f27,2) [ 729.242837][T13516] netlink: 840 bytes leftover after parsing attributes in process `syz.3.1986'. [ 729.474192][T13521] fuse: Bad value for 'group_id' [ 729.484847][T13521] fuse: Bad value for 'group_id' [ 729.700204][T13529] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 730.858160][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'. [ 730.888617][T13535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1993'. [ 730.927291][T13540] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1995'. [ 730.941892][T13540] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1995'. [ 730.951032][T13540] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1995'. [ 731.134331][T13545] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 732.246677][T13553] fuse: Bad value for 'group_id' [ 732.252655][T13553] fuse: Bad value for 'group_id' [ 732.758514][T13562] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2001'. [ 733.460378][T13570] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1998'. [ 733.613208][T13571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.671213][T13571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.138866][T13574] Mount JFS Failure: -5 [ 734.338622][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 734.338637][ T30] audit: type=1400 audit(34393105.247:940): avc: denied { mounton } for pid=13573 comm="syz.4.2005" path="/374/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 735.528533][T13587] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 736.616539][T13603] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 736.661573][ T6006] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 737.322283][T13612] xt_cgroup: path and classid specified [ 737.335010][ T6006] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 737.344811][ T6006] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.356699][ T6006] usb 5-1: config 0 has no interface number 0 [ 737.364417][ T6006] usb 5-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 737.399427][ T6006] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 737.410008][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.418195][ T6006] usb 5-1: Product: syz [ 737.425675][ T6006] usb 5-1: Manufacturer: syz [ 737.432639][ T6006] usb 5-1: SerialNumber: syz [ 737.441120][ T6006] usb 5-1: config 0 descriptor?? [ 737.459418][ T6006] plusb 5-1:0.231: probe with driver plusb failed with error -22 [ 737.764903][ T7291] usb 5-1: USB disconnect, device number 46 [ 737.936973][T13620] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2017'. [ 738.038313][T13624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2019'. [ 738.110923][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'. [ 738.771677][ T30] audit: type=1400 audit(34393109.687:941): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 741.020257][T13653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.028863][T13653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.158896][T13681] lo speed is unknown, defaulting to 1000 [ 744.165080][T13681] lo speed is unknown, defaulting to 1000 [ 744.174834][T13681] lo speed is unknown, defaulting to 1000 [ 744.245336][T13681] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 744.441669][T13681] lo speed is unknown, defaulting to 1000 [ 744.461070][T13681] lo speed is unknown, defaulting to 1000 [ 744.476391][T13681] lo speed is unknown, defaulting to 1000 [ 744.493828][T13681] lo speed is unknown, defaulting to 1000 [ 744.500439][T13681] lo speed is unknown, defaulting to 1000 [ 744.524985][T13681] lo speed is unknown, defaulting to 1000 [ 744.848985][T13685] 00000000000001217137627 00000000000000000000000 00000000000000000000005 [ 746.630343][ T30] audit: type=1400 audit(34393117.537:942): avc: denied { read } for pid=13705 comm="syz.6.2040" path="socket:[45416]" dev="sockfs" ino=45416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 746.753274][T13715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.762598][T13715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.772340][T13713] xt_cgroup: path and classid specified [ 747.233152][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.941446][ T30] audit: type=1400 audit(34393122.747:943): avc: denied { shutdown } for pid=13772 comm="syz.6.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 751.992400][T13765] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 752.321534][T13791] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 754.213538][T13802] bridge1: entered promiscuous mode [ 754.218834][T13802] bridge1: entered allmulticast mode [ 756.204406][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 756.252806][T13815] overlayfs: failed to resolve './file1': -2 [ 756.371559][ T24] usb 7-1: device descriptor read/64, error -71 [ 757.377252][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 757.571620][ T24] usb 7-1: device descriptor read/64, error -71 [ 757.587934][T13827] netlink: 'syz.0.2074': attribute type 10 has an invalid length. [ 757.645490][T13827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.770043][ T24] usb usb7-port1: attempt power cycle [ 758.151545][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 758.184783][ T24] usb 7-1: device descriptor read/8, error -71 [ 759.506402][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 759.732014][ T24] usb 7-1: device not accepting address 9, error -71 [ 759.911581][ T24] usb usb7-port1: unable to enumerate USB device [ 760.280895][T13869] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 760.670439][T13872] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2087'. [ 760.695202][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2087'. [ 762.653172][T13907] tmpfs: Bad value for 'mpol' [ 764.330778][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2107'. [ 764.350903][T13939] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 764.529808][T13941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 766.220780][T13945] syz.6.2107 (13945): drop_caches: 2 [ 766.407999][T13972] netlink: 'syz.6.2116': attribute type 1 has an invalid length. [ 766.552716][T13972] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 768.232186][ T30] audit: type=1400 audit(34393139.147:944): avc: denied { create } for pid=13989 comm="syz.3.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 769.106252][T14008] netlink: 'syz.2.2125': attribute type 5 has an invalid length. [ 769.886275][T14013] xt_ecn: cannot match TCP bits for non-tcp packets [ 771.496350][T14028] sp0: Synchronizing with TNC [ 771.558794][ T30] audit: type=1400 audit(34393142.457:945): avc: denied { setattr } for pid=14025 comm="syz.6.2132" path="/dev/mixer" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 772.241956][T14025] [U] [ 775.468367][T14057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.508733][T14057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.665574][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2139'. [ 775.939064][T14057] fuse: Bad value for 'fd' [ 776.218806][T14069] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 777.671314][T14089] xt_cgroup: path and classid specified [ 778.824074][ T30] audit: type=1400 audit(34393149.737:946): avc: denied { connect } for pid=14097 comm="syz.6.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 779.515128][T14115] tmpfs: Bad value for 'mpol' [ 780.157616][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 780.180430][T14112] tipc: Started in network mode [ 780.504176][T14112] tipc: Node identity ac14140f, cluster identity 4711 [ 780.681720][T14112] tipc: New replicast peer: 255.255.255.255 [ 780.911107][T14134] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2157'. [ 782.388170][T14112] tipc: Enabled bearer , priority 1 [ 783.382822][ T6006] tipc: Node number set to 2886997007 [ 784.125506][T14163] xt_cgroup: path and classid specified [ 784.354461][T14166] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2169'. [ 784.725225][T14175] fuseblk: Bad value for 'rootmode' [ 785.420719][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.439045][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.597340][T10627] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 785.622710][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.092656][T10627] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 786.114724][T10627] usb 7-1: can't read configurations, error -71 [ 786.126437][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.004483][T14195] FAULT_INJECTION: forcing a failure. [ 788.004483][T14195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.021580][T14195] CPU: 1 UID: 0 PID: 14195 Comm: syz.6.2177 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.021618][T14195] Tainted: [L]=SOFTLOCKUP [ 788.021625][T14195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 788.021637][T14195] Call Trace: [ 788.021644][T14195] [ 788.021653][T14195] dump_stack_lvl+0x16c/0x1f0 [ 788.021686][T14195] should_fail_ex+0x512/0x640 [ 788.021722][T14195] _copy_from_user+0x2e/0xd0 [ 788.021755][T14195] copy_msghdr_from_user+0x98/0x160 [ 788.021781][T14195] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 788.021818][T14195] ___sys_sendmsg+0xfe/0x1d0 [ 788.021842][T14195] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.021901][T14195] __sys_sendmsg+0x16d/0x220 [ 788.021925][T14195] ? __pfx___sys_sendmsg+0x10/0x10 [ 788.021967][T14195] do_syscall_64+0xcd/0xf80 [ 788.021996][T14195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.022019][T14195] RIP: 0033:0x7fe01218f749 [ 788.022037][T14195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.022057][T14195] RSP: 002b:00007fe012f84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.022077][T14195] RAX: ffffffffffffffda RBX: 00007fe0123e6180 RCX: 00007fe01218f749 [ 788.022091][T14195] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 788.022103][T14195] RBP: 00007fe012f84090 R08: 0000000000000000 R09: 0000000000000000 [ 788.022115][T14195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.022127][T14195] R13: 00007fe0123e6218 R14: 00007fe0123e6180 R15: 00007ffcc2d693c8 [ 788.022157][T14195] [ 788.976890][T14209] overlayfs: failed to clone upperpath [ 789.028205][T14211] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1001 sclass=netlink_xfrm_socket pid=14211 comm=syz.3.2181 [ 789.841625][T10627] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 790.002830][T10627] usb 5-1: Using ep0 maxpacket: 32 [ 790.036092][T10627] usb 5-1: config 0 has too many interfaces: 128, using maximum allowed: 32 [ 790.092405][T10627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.124933][T10627] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 128 [ 790.200898][T10627] usb 5-1: New USB device found, idVendor=07ca, idProduct=a835, bcdDevice=16.2d [ 790.223645][T10627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.377074][T10627] usb 5-1: Product: syz [ 790.381251][T10627] usb 5-1: Manufacturer: syz [ 790.391857][T10627] usb 5-1: SerialNumber: syz [ 791.043630][T10627] usb 5-1: config 0 descriptor?? [ 791.083567][T14237] xt_cgroup: path and classid specified [ 792.729687][ T6071] usb 5-1: USB disconnect, device number 47 [ 792.863853][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2194'. [ 793.606476][T14259] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2196'. [ 793.872852][T14266] netlink: 'syz.6.2200': attribute type 29 has an invalid length. [ 793.880923][T14266] netlink: 'syz.6.2200': attribute type 29 has an invalid length. [ 793.934957][T14266] FAULT_INJECTION: forcing a failure. [ 793.934957][T14266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.008528][T14266] CPU: 1 UID: 0 PID: 14266 Comm: syz.6.2200 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.008563][T14266] Tainted: [L]=SOFTLOCKUP [ 794.008570][T14266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.008582][T14266] Call Trace: [ 794.008589][T14266] [ 794.008597][T14266] dump_stack_lvl+0x16c/0x1f0 [ 794.008627][T14266] should_fail_ex+0x512/0x640 [ 794.008661][T14266] _copy_from_iter+0x2a4/0x16c0 [ 794.008697][T14266] ? _copy_from_iter+0x161/0x16c0 [ 794.008727][T14266] ? __pfx__copy_from_iter+0x10/0x10 [ 794.008760][T14266] ? __pfx__copy_from_iter+0x10/0x10 [ 794.008797][T14266] copy_page_from_iter+0xde/0x180 [ 794.008830][T14266] skb_copy_datagram_from_iter+0x2a0/0x740 [ 794.008873][T14266] tun_get_user+0x1850/0x3cc0 [ 794.008918][T14266] ? __pfx_tun_get_user+0x10/0x10 [ 794.008951][T14266] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 794.008981][T14266] ? find_held_lock+0x2b/0x80 [ 794.009019][T14266] ? tun_get+0x191/0x370 [ 794.009053][T14266] tun_chr_write_iter+0xdc/0x210 [ 794.009086][T14266] vfs_write+0x7d3/0x11d0 [ 794.009114][T14266] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 794.009147][T14266] ? __pfx_vfs_write+0x10/0x10 [ 794.009171][T14266] ? find_held_lock+0x2b/0x80 [ 794.009217][T14266] ksys_write+0x12a/0x250 [ 794.009240][T14266] ? __pfx_ksys_write+0x10/0x10 [ 794.009272][T14266] do_syscall_64+0xcd/0xf80 [ 794.009300][T14266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.009319][T14266] RIP: 0033:0x7fe01218e1ff [ 794.009336][T14266] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 794.009356][T14266] RSP: 002b:00007fe012fc6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 794.009376][T14266] RAX: ffffffffffffffda RBX: 00007fe0123e5fa0 RCX: 00007fe01218e1ff [ 794.009390][T14266] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 00000000000000c8 [ 794.009403][T14266] RBP: 00007fe012fc6090 R08: 0000000000000000 R09: 0000000000000000 [ 794.009416][T14266] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000002 [ 794.009428][T14266] R13: 00007fe0123e6038 R14: 00007fe0123e5fa0 R15: 00007ffcc2d693c8 [ 794.009458][T14266] [ 795.175022][T14278] xt_cgroup: path and classid specified [ 795.391672][ T5819] Bluetooth: hci5: command 0x0406 tx timeout [ 796.524431][T14293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.537419][T14293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.119249][T14300] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 799.163078][T10627] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 799.301610][T10627] usb 5-1: device descriptor read/64, error -71 [ 799.355360][ T30] audit: type=1400 audit(34393170.267:947): avc: denied { create } for pid=14324 comm="syz.2.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 799.611725][T10627] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 799.771762][T10627] usb 5-1: device descriptor read/64, error -71 [ 799.883515][T10627] usb usb5-port1: attempt power cycle [ 800.282392][T10627] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 800.322639][T10627] usb 5-1: device descriptor read/8, error -71 [ 800.572340][T14339] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 800.676807][T10627] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 800.712416][T10627] usb 5-1: device descriptor read/8, error -71 [ 800.821896][T10627] usb usb5-port1: unable to enumerate USB device [ 801.095084][T14348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.104221][T14348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.586957][ T30] audit: type=1400 audit(34393172.487:948): avc: denied { mounton } for pid=14350 comm="syz.6.2226" path="/proc/311/cgroup" dev="proc" ino=46712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 801.831576][ T6071] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 802.061976][ T6071] usb 7-1: Using ep0 maxpacket: 8 [ 802.068355][ T6071] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 802.078969][T14361] fuse: Bad value for 'fd' [ 802.094196][ T6071] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 802.670981][ T6071] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 802.680759][ T6071] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.693264][ T6071] usb 7-1: Product: syz [ 802.703398][ T6071] usb 7-1: Manufacturer: syz [ 802.713959][ T6071] usb 7-1: SerialNumber: syz [ 802.732797][ T6071] usb 7-1: config 0 descriptor?? [ 803.177199][T14376] Invalid source name [ 803.181314][T14376] UBIFS error (pid: 14376): cannot open "./file0", error -22 [ 805.041647][ T31] INFO: task syz.5.1736:12579 blocked for more than 143 seconds. [ 805.163484][ T31] Tainted: G L syzkaller #0 [ 805.184029][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 805.185147][ T6071] usb 7-1: USB disconnect, device number 12 [ 805.226101][ T31] task:syz.5.1736 state:D stack:24552 pid:12579 tgid:12572 ppid:10352 task_flags:0x480140 flags:0x00080002 [ 805.311656][ T31] Call Trace: [ 805.318952][ T31] [ 805.334545][ T31] ? __schedule+0x10b9/0x6150 [ 805.353108][ T31] __schedule+0x1139/0x6150 [ 805.365088][ T31] ? __pfx___schedule+0x10/0x10 [ 805.401109][ T31] ? find_held_lock+0x2b/0x80 [ 805.425029][ T31] ? schedule+0x2d7/0x3a0 [ 805.448417][ T31] schedule+0xe7/0x3a0 [ 805.482129][ T31] schedule_timeout+0x257/0x290 [ 805.517360][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 805.603611][ T31] ? mark_held_locks+0x49/0x80 [ 805.639236][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 805.755790][ T31] __wait_for_common+0x2fc/0x4e0 [ 805.767345][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 805.777886][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 805.783985][ T31] ? __pfx_device_del+0x10/0x10 [ 805.789640][ T31] ? kobject_put+0xaf/0x6f0 [ 805.796226][ T31] i2c_del_adapter+0x640/0x850 [ 805.801858][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 805.807181][ T31] ? __pfx_rpm_resume+0x10/0x10 [ 805.812340][ T31] pvr2_i2c_core_done+0x6d/0xc0 [ 805.817226][ T31] pvr2_hdw_disconnect+0xcb/0x630 [ 805.822322][ T31] pvr2_context_disconnect+0x32/0xc0 [ 805.827642][ T31] pvr_disconnect+0x80/0xf0 [ 805.832277][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 805.837487][ T31] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 805.843242][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 805.906964][ T31] device_remove+0x125/0x170 [ 805.911621][ T31] device_release_driver_internal+0x44b/0x620 [ 805.917699][ T31] bus_remove_device+0x22f/0x450 [ 805.922731][ T31] device_del+0x396/0x9f0 [ 805.927158][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 805.932821][ T31] ? __pfx_device_del+0x10/0x10 [ 805.937730][ T31] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 805.943527][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 805.948561][ T31] usb_disable_device+0x355/0x820 [ 805.953716][ T31] usb_disconnect+0x2e1/0x9e0 [ 805.958409][ T31] hub_quiesce+0x170/0x320 [ 805.965071][ T31] hub_disconnect+0xd5/0x500 [ 805.969665][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 805.974885][ T31] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 805.980506][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 805.986503][ T31] device_remove+0x125/0x170 [ 805.991103][ T31] device_release_driver_internal+0x44b/0x620 [ 805.997463][ T31] usb_driver_release_interface+0x109/0x190 [ 806.003427][ T31] proc_disconnect_claim+0x219/0x3a0 [ 806.008722][ T31] ? __pfx_proc_disconnect_claim+0x10/0x10 [ 806.015115][ T31] ? find_held_lock+0x2b/0x80 [ 806.019795][ T31] usbdev_ioctl+0x16e2/0x4070 [ 806.024812][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 806.029845][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 806.035762][ T31] ? do_vfs_ioctl+0x128/0x14f0 [ 806.040508][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 806.045543][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 806.052671][ T31] ? hook_file_ioctl_common+0x144/0x410 [ 806.058223][ T31] ? selinux_file_ioctl+0x180/0x270 [ 806.063958][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 806.069470][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 806.074795][ T31] __x64_sys_ioctl+0x18e/0x210 [ 806.079573][ T31] do_syscall_64+0xcd/0xf80 [ 806.087301][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.093289][ T31] RIP: 0033:0x7fc5cc58f749 [ 806.097692][ T31] RSP: 002b:00007fc5cd3c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 806.106120][ T31] RAX: ffffffffffffffda RBX: 00007fc5cc7e6180 RCX: 00007fc5cc58f749 [ 806.114380][ T31] RDX: 00002000000003c0 RSI: 000000008108551b RDI: 000000000000000d [ 806.122435][ T31] RBP: 00007fc5cc613f91 R08: 0000000000000000 R09: 0000000000000000 [ 806.130406][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.138408][ T31] R13: 00007fc5cc7e6218 R14: 00007fc5cc7e6180 R15: 00007fffa59e7698 [ 806.146802][ T31] [ 806.149849][ T31] [ 806.149849][ T31] Showing all locks held in the system: [ 806.157629][ T31] 1 lock held by khungtaskd/31: [ 806.191556][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 806.202120][ T31] 3 locks held by kworker/u8:15/4463: [ 806.207505][ T31] 2 locks held by getty/5584: [ 806.212387][ T31] #0: ffff888036a850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 806.222324][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 806.233192][ T31] 5 locks held by syz.5.1736/12579: [ 806.238454][ T31] #0: ffff888029c18198 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x1a8/0x4070 [ 806.248165][ T31] #1: ffff888029c19160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 806.258857][ T31] #2: ffff88807c769198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9e0 [ 806.268439][ T31] #3: ffff888029946160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 806.279537][ T31] #4: ffff888043fcc188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x8a/0x630 [ 806.289989][ T31] 1 lock held by syz.6.2238/14389: [ 806.295627][ T31] #0: ffffffff8e3d4cc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 806.305658][ T31] [ 806.307978][ T31] ============================================= [ 806.307978][ T31] [ 806.320291][ T31] NMI backtrace for cpu 0 [ 806.320316][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 806.320344][ T31] Tainted: [L]=SOFTLOCKUP [ 806.320351][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 806.320362][ T31] Call Trace: [ 806.320369][ T31] [ 806.320376][ T31] dump_stack_lvl+0x116/0x1f0 [ 806.320409][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 806.320444][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 806.320467][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 806.320500][ T31] sys_info+0x133/0x180 [ 806.320527][ T31] watchdog+0xe66/0x1180 [ 806.320553][ T31] ? rcu_is_watching+0x12/0xc0 [ 806.320572][ T31] ? __pfx_watchdog+0x10/0x10 [ 806.320594][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 806.320623][ T31] ? __kthread_parkme+0x19e/0x250 [ 806.320646][ T31] ? __pfx_watchdog+0x10/0x10 [ 806.320669][ T31] kthread+0x3c5/0x780 [ 806.320694][ T31] ? __pfx_kthread+0x10/0x10 [ 806.320720][ T31] ? rcu_is_watching+0x12/0xc0 [ 806.320740][ T31] ? __pfx_kthread+0x10/0x10 [ 806.320766][ T31] ret_from_fork+0x983/0xb10 [ 806.320790][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 806.320816][ T31] ? __switch_to+0x7af/0x10d0 [ 806.320843][ T31] ? __pfx_kthread+0x10/0x10 [ 806.320869][ T31] ret_from_fork_asm+0x1a/0x30 [ 806.320915][ T31] [ 806.320923][ T31] Sending NMI from CPU 0 to CPUs 1: [ 806.462936][ C1] NMI backtrace for cpu 1 [ 806.462954][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.462983][ C1] Tainted: [L]=SOFTLOCKUP [ 806.462990][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 806.463002][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 806.463038][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 806.463061][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 806.463077][ C1] RAX: 0000000003733141 RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 806.463089][ C1] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 806.463102][ C1] RBP: ffffed1003b58498 R08: 0000000000000001 R09: ffffed10170a673d [ 806.463115][ C1] R10: ffff8880b85339eb R11: ffff88801dac2ff0 R12: 0000000000000001 [ 806.463127][ C1] R13: ffff88801dac24c0 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 806.463140][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 806.463158][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.463171][ C1] CR2: 00007fe0123b7198 CR3: 000000002adb3000 CR4: 00000000003526f0 [ 806.463184][ C1] Call Trace: [ 806.463190][ C1] [ 806.463197][ C1] default_idle+0x13/0x20 [ 806.463223][ C1] default_idle_call+0x6c/0xb0 [ 806.463248][ C1] do_idle+0x38d/0x510 [ 806.463280][ C1] ? __pfx_do_idle+0x10/0x10 [ 806.463312][ C1] cpu_startup_entry+0x4f/0x60 [ 806.463341][ C1] start_secondary+0x21d/0x2d0 [ 806.463361][ C1] ? __pfx_start_secondary+0x10/0x10 [ 806.463384][ C1] common_startup_64+0x13e/0x148 [ 806.463418][ C1] [ 806.637456][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 806.644298][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 806.654959][ T31] Tainted: [L]=SOFTLOCKUP [ 806.659265][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 806.669302][ T31] Call Trace: [ 806.672567][ T31] [ 806.675485][ T31] dump_stack_lvl+0x3d/0x1f0 [ 806.680074][ T31] vpanic+0x640/0x6f0 [ 806.684052][ T31] panic+0xca/0xd0 [ 806.687763][ T31] ? __pfx_panic+0x10/0x10 [ 806.692164][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 806.698135][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 806.704288][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 806.710444][ T31] ? watchdog+0xe83/0x1180 [ 806.714848][ T31] ? watchdog+0xe76/0x1180 [ 806.719259][ T31] watchdog+0xe94/0x1180 [ 806.723499][ T31] ? rcu_is_watching+0x12/0xc0 [ 806.728251][ T31] ? __pfx_watchdog+0x10/0x10 [ 806.732914][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 806.738116][ T31] ? __kthread_parkme+0x19e/0x250 [ 806.743126][ T31] ? __pfx_watchdog+0x10/0x10 [ 806.747790][ T31] kthread+0x3c5/0x780 [ 806.751849][ T31] ? __pfx_kthread+0x10/0x10 [ 806.756430][ T31] ? rcu_is_watching+0x12/0xc0 [ 806.761179][ T31] ? __pfx_kthread+0x10/0x10 [ 806.765760][ T31] ret_from_fork+0x983/0xb10 [ 806.770340][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 806.775443][ T31] ? __switch_to+0x7af/0x10d0 [ 806.780113][ T31] ? __pfx_kthread+0x10/0x10 [ 806.784694][ T31] ret_from_fork_asm+0x1a/0x30 [ 806.789469][ T31] [ 806.792766][ T31] Kernel Offset: disabled [ 806.797066][ T31] Rebooting in 86400 seconds..