last executing test programs: 11.66639933s ago: executing program 1 (id=2213): syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000001c0)={0x0, 0x0}) 11.546261456s ago: executing program 1 (id=2214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000003c0)="c74424000b3c0000c744240244000000c7442406000000000f011c24c7442400f7360000c744240200700000c7442406000000000f011c24f3420f090f00110f01d18f4818967ca44f05f30f09450f78c040dc847ae32172f9c744240078000000c7442402fc959c45c7442406000000000f011424", 0x75}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8005) fdatasync(r3) fsopen(&(0x7f00000000c0)='befs\x00', 0x0) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) set_mempolicy(0x2, &(0x7f00000001c0)=0x6c76, 0x7) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x4, @loopback, 0xf}], 0x1c) sendto$inet6(r6, &(0x7f0000000040)="00d8", 0x2, 0x44004, &(0x7f0000000140)={0xa, 0x4e24, 0xb, @loopback, 0xc5b}, 0x1c) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 9.221261641s ago: executing program 2 (id=2221): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket(0x26, 0xa, 0x9) sendmsg$TIPC_NL_NODE_GET(r2, 0x0, 0x20004010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600, 0x600}, 0x21) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000001f80)=0x9) 9.19159982s ago: executing program 0 (id=2222): ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}], 0x1}}], 0x1, 0x0) dup3(r0, r1, 0x0) r2 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendto$inet(r4, &(0x7f0000000300)="047ff7f87e78badeea601668276253602f27e9bba9f0167c3babef72a7e5a359383278726d4b72abdbd29215c6217cf9f8d0f986cc7a46d8e560c207b67ab1c9d742a8d85506ba2510fb239f62f212d22564fe35d57fd90740a106262e9e2b7b47f9ffc35758f9266084ca72b5330947257488a7fa6b6d8b2ee676eca59e262424e88ad458590f2db8a64d7a5dced214a402905959fceabfac051bed1307382a028b56efe0c72e562fe919816a6a1fad0a8210bcabb32d075fa2ad5908a1974b9f9b5b5e17d7de10322140b042f08542c9de0bbe23220ac8fd944a10c85bda4911e166d9c4c651fbdf52c3fd9c73dfb82147ed", 0xf3, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {0x2}, 0x4b8}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x3}, 0xb3}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r7 = fsmount(r2, 0x1, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000040)={0xf0, 0x2}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000140)={0x56, r7, 0x0, {0x401, 0x401}, 0x2}, 0x1) 8.874663482s ago: executing program 4 (id=2223): ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}], 0x1}}], 0x1, 0x0) dup3(r0, r1, 0x0) r2 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendto$inet(r4, &(0x7f0000000300)="047ff7f87e78badeea601668276253602f27e9bba9f0167c3babef72a7e5a359383278726d4b72abdbd29215c6217cf9f8d0f986cc7a46d8e560c207b67ab1c9d742a8d85506ba2510fb239f62f212d22564fe35d57fd90740a106262e9e2b7b47f9ffc35758f9266084ca72b5330947257488a7fa6b6d8b2ee676eca59e262424e88ad458590f2db8a64d7a5dced214a402905959fceabfac051bed1307382a028b56efe0c72e562fe919816a6a1fad0a8210bcabb32d075fa2ad5908a1974b9f9b5b5e17d7de10322140b042f08542c9de0bbe23220ac8fd944a10c85bda4911e166d9c4c651fbdf52c3fd9c73dfb82147ed", 0xf3, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {0x2}, 0x4b8}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x3}, 0xb3}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r7 = fsmount(r2, 0x1, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000040)={0xf0, 0x2}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000140)={0x56, r7, 0x0, {0x401, 0x401}, 0x2}, 0x1) 8.144551266s ago: executing program 2 (id=2225): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSNLIST(r2, 0x8010640b, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0xc000003, 0x0, 0x0, 0x1000000, 0x2}, {0xc000003, 0x0, 0x0, 0xa}]}) 7.797643035s ago: executing program 0 (id=2226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0xffff8003}, 0x80, 0x0}, 0x80) 7.755571632s ago: executing program 2 (id=2227): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f00000010c0)=@xdp={0x2c, 0x2, r1, 0x16}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001140)="2582689892de3a333f7b867cfe8cddece52e625aa085740fa64c8a07c458f8b09700dddd222c574a7933909cab832c420a0b36e3a32d0d2326f51bb360cb2d219ab564d4796fad3b555c556ee50e26c7a6c8c62db1dfbfd4a4420e1e16d6b8e2773ece8c5605bd6072ade36b65fbe799564ab2d4b07320056e29fbe859c86f82dc6e0b3fa2e19df04bdd801ed132326de60a6391226589823a448af6c64bc4207f91179d4d052e321d5d9142b27c7689aed22a5d4166e6282b805fbbbef1a568507f137b26b74e61ff4461f4eff44a493092fb7fad6a01874eac1d7404e08e8f3c37060b28592037ba", 0xe9}, {&(0x7f0000001240)="f69b319a8cce88d0b60e2e86115c3dc094658d2ca9ed73e7f3b26bce32d5939e88180103261129d1dd71c76580183fe20e951e167008e4b5991a15cc641e923538247a6b7dce9933b06374104a30c91a4138e8ad5f25134f449dec8596edd447aa93eed492b730f3082324e6b8a0e81864be42656b27f476cfceff693cacfb3e5fda6b67f8c1ac14334762da671577eda1c65a356be732e6e9aef4bc45cbfe9538f0f8ff807cef6bf8c5eabf31bf67e65b2095fc0574715eb8acf70b1d9abff76ca8d0ea2c2e", 0xc6}, {&(0x7f0000001340)="baca8a20e07356da290e5189bee3f79720117115ec50362c281ee81e60327064fb9e1d67ca7806f0265e51617e816e9e07258635d2385b0d012c1f664005b773e6c3da10ef983a16cf61469e85", 0x4d}, {&(0x7f00000013c0)="c3f15626c56645edd6f4ea591280b330eff8fc5a51cb15fab2829c7e9f6f56c15262e56e5d2a302c", 0x28}, {&(0x7f0000001400)="c15863993ba657a173bc3bebde74d82410eda2f38cc7854b02eefd7fd353a4cd21e578dbfd4d0d40fcddd09fd5677c1357fa50c2d1435764623e1de6a441ab2894cd8294fc44dea5b6c7b3bf97588b0367d69fcf418b92dc0df7b12270ce086541a2cbd514f7d11ab2617f5e61651193b5e55068dba5003f1c872e4cf582e83bc5cba2233d78819b4e2bb9d6ce248b48", 0x90}, {&(0x7f00000014c0)="d7830a1a3d38044bd951c2c2659b3c92946bb7267f9a11d5a9ff9babfa5729a0d55101eceafae7e94a392294455bc50fa4d428895fcabfc8fea7d122abb07ede52bda118e037a2314bb78c580f18c9e2d3300eec1dd785812436923e456a6c8da76a7f51f840bb46bb0a44fcb32f7a1e1cc1c3dab1928cd12f11ba7f0ec8c7648bf25cdd110dff8231870f0e64f398bd5901ba4e97a73faf92e461804dba95cd6c8d681b4015907b59b7d66aa22581cc2e3399a8d87ca1212b7b", 0xba}, {&(0x7f0000001580)="3078821baf111043c348fcece412c308d100095032b59bdc0dd712f2", 0x1c}, {&(0x7f00000015c0)="688a54f21073007c680886a929f24f3aa34be5d8598c008bb9e0049f920b37e85363b94172f13ce1bd48496a18b1398c830ad60fed1fe5e48252b0f1ec9facf82e4dce237c425f746c4a99a70d99f79a2c774695989b3cc11daa62ce456ace1f99bacd23c851cb33a6f98ab734a778bc4fd932fc2c0d882c39c1ab", 0x7b}], 0x8}}, {{&(0x7f00000016c0)=@nl=@unspec, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001740)="f44180020927bbad4d557b5ca69ddcf1a2089cb8c3b8c237e169965e31b1e9bc23e6491083cae8de313ddae64fce7fd872b637ed01a53a9800e856adea8562e61df211745c0d849c68d94bd9603a49fe5c86647692e1a6760c3a73e84194d88e81957f1735a7d24d1a4d5319749411bec106b383ffff34da60bc", 0x7a}], 0x1, &(0x7f0000001a00)=[{0x110, 0x115, 0x3, "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"}, {0x10, 0x10a, 0x6}, {0x48, 0x1, 0x5, "1b6fbc5879c15708c132dd55fa1188126bcada4444bce18f192966062cd290f4a300fc50c613a6e080e8ee1334460ff463f9d8"}, {0x48, 0x88, 0x7, "109c8dc4281638f07c83ac76f3ea57ad4fd635ea203b72ca545ce2446abafbafa66d9da6cfe29e228fafcb3cca11bfe6b6cabb598129"}, {0xd8, 0x10b, 0x2, "65784842ddd28ba5860bb4baed6ab2e424c7181cde0e6ab5ac9df96ef26dc9790f69bf470aa78918533f9e878070076ba3c2bd615a2ec5a6c4581a883f65b8033bc66b38474cd4740c190fb58b7f10aa04c55323df84bc1966415df4107e1952671f554b1cd4809b6bcadc8ce40821e280abea61b192b9538d1966bc1a31a4411c0baece9aebe862daacb66217061492a0ad1a7c19cc43bdf05438ae383e17c9e2521deaf94c70c35cf189626644b3594647240662c203034a13a5145a48aa49073c83e8fa11"}, {0xf0, 0x115, 0x6, "d35f9fbdb486987a68c25bd2f58359ba3fed72dc95bc1fd7b84c5acd883f705b2cc752ebe586b280bb13abd43d3b4efdda107461aaf9db280e251ce78fb4cc09003790ec7a51e606cb54d5acc260153d34368ec88e1ca9e6935175a831b9c0d45d74c6b0a84b79f09a25f2ff0ddaa3c851ed56c7e191578a0b02649fd30e9ce37d5a27fb64786795901ff9df6fd577607d8b0bc651d313afb106ee60ef6af5c8448c60ab090281c6b03b16a61b945b0a6de5da0b9e2b1d50c21d4c57ae3f8a9cb093d807618ff5f74ad38ae81e46ad3348e69bfc2f967ac262222dd65ff3"}, {0x30, 0x36, 0x81, "44097d621cc3cc95d6d045b7cc7373f151dd4b77dfb08fd3775ab8037abe067a"}], 0x3a8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001800)="71848eaf4a7d6a4251593db7d901dbb8476583338e6c42ec216a53e8354cc5269c9493c35070940cce746e39b10d69f7d7b1121549eadda58dfbb903b341638978cbc8971a0e64136920af0300e7fe437696e0632d696741fb1b9592466d09a06661bd10cdc059930c47d7f147ad02a321305ec3cad5025bc59c04cdef1deea044dae64a22b99c2796a7ead4bc88c04dab75e0ceb9e3053104d36a53921bd4064ec396162300fecd2b46353a63d2e2a9dda58cbc6642c5621bcc205436040211598915682ff1b2f89b0a7b81ecb0e004c0", 0xd1}], 0x1, &(0x7f0000001dc0)=[{0xf8, 0xff, 0x0, "1382b28cdc6867525ebb6189d2d6c3d0ef352a89b0077486d4d722428b3dc5ae528b67f2ea7d6e4aa328d88293dabdc9f0ae0a20bdccc71360bd5f3c5289289d5dcd42aaccc7e7e8b3891127cd16eb3896d9ccb1efdc6e9a77d18fb76e7fc9b9bfc2d2f7234f4328be3c444aaf409b2daa25e54ac04bf0d44d528646b56b23d79f4a9d441e20d388962f94e7001b45c7291c4b3b9ff85fca9a69076ef1d0cc6fbb28bf09c0128fd3d539ecb11655b4f6e94275f19d465f5fedd2b65e35077ea31c12c354a79a8f8d4179f7b47cb5cc83b5faf84ed070baeb52eb23f227c692eedee40d7c789a"}, {0xd0, 0xf4b66b4a4d99c1ef, 0x3, "cb94210a39f9eae0906f3d04625b4f949c61e7f22006a74a408a3b856e9bd123cb964f9858a771c472c043956c28fef414930c828238f092103768b029a31a33bdf825154f10302ba2928ac4d5b229547f2c12dbe07fb014cc80a6702ec09d31e0735ec5a2f03ba5f65fdbaa56304a7807fc636ea28134943a0debc2e194b9f7a86a4f954951db53bde6c5b652c4bc40f4ff1baa73fa0ac95a169eabc3fe8f6dff8fe6b02077ad8c1675b79ae8cf35680beec5b1dffeef69f3d669"}, {0xe8, 0x10a, 0x4, "1e0afd6d786235a6b4c9971780610d3e88b755c47357f3656136ee7ce692a8a3b7d404f6cf3c958d47c323d5231c5cb55e9d31137e5e32fae36f739491ff156c40436f5ba685bc8fe520b6a96bd9fcf0841ba47cb805e5ef3718d755e90c5cd3efbf8a4f718f0fefc12eedf8d2e5122f6fcb72c23feb8acba78bd0d6bd70b10e3e9f3257735334d07dd91e35ce52ae2ab84022dd9b2e943f569fd93583ec291835f7f6c3f0433840d0c583456226eaa10b588e04b2c0657c2df41b673d26ec1eaaf5bb69112f2d4d1f5a674933d1417fc7c0"}, {0xf0, 0xe5, 0x4, "fe4d262dcbccd2907de75f963fa087de67ffbb6effe4ba76a0bc6c8ae0c566204cf5705c9df83889fd226232bba9bcade4e74ff7413d65abcd89798ba217f99ea9d1850d8dc783d6c7c38b5d9a26642496a98c8b4df26e57fbaebd68cb7d86cc24cbb0de2fbd5108d67ed01644949236d2e599169fece1ca9937e47b924f6e631bf7b5bbf467ad60036e7e4dcbc969438ca58eb1a2f2ca33e39f29b6c4ae63ddb191397aafbbcbed2aa897e9f277fe6a646939a4b357d98ca81598d0911aa090f08eeb3b3b1c760d2fc07f3881ff75b1d312f4911a94fa7f9212cf"}, {0xd0, 0x0, 0x1000, "a8250e3c06f2d1c258d1685218606f482152b0f262b881aa95fa738201b2437eeaba18548e9fd088a59b9b7f06a029917581b88d56f51b4add0fb178df6a63525df7d550a697cc8747b506ed18c7ec8e82dbd9751f19805f0f72a02844f65de8d9a5d852d4a241c3bc9c393f849d7478a44e7450a1d252c04cf3cb11977912a34e55eb17b13e345afb74c8a9e645c2972327e07c3d8fa7ca39eb9c7cb19600f91f53508ca8eee943d4c551e532a2860f5018d873751c085ef68b50c964d4bf"}, {0x70, 0x10f, 0x7, "c12105ce0cafd1372d6e17f28f78338d50851fe3108c53c910c3b9158896008fc70866402547794afcee4acea9100e657301ffed63ffa729ef5d84920a39d213d4194cf8c51e25cee7c441947a450692d6aa8788e7b31e73d992d3d0fde6"}, {0xc8, 0x10b, 0x7, "0f187fe208c976611fc469c7143380d9479208b680c70a03cde00190507107ed90b9b8c6fad567106d364b982d0e499bff6c06d9c8a93df52659e700994f1967f67cec191cc10ac3660a516f05f58cad0b90415931274caf39117b3389440ac275f877a455a7f1e42547df7e4b95458a1338e64b55ae203a93beeffcacc7a9ccdb2fc0e787eca54a5e73fa265dd614a3350d9b812cf49f18db165743164a2e50e89dbabbef062a72ff358b5db8a7b6fe845c"}, {0xd0, 0x0, 0x4, "cff256ec01f43e4b64f6fa1b867dc45aa7d2a87db87b3c169712549b0b02b2a2df2e338ac9191449416e1784a50e94fbb4900c50767fad340c78b06bfb104f3adfc03fc688716264eb9d760678d7d588d5fbac9c57a0ea9017f494dcdb6af339596346a64650a495da50e30e422c0c7b54c039757f44f4828b7a1fcb3eb928cea694ba80be3cfdb8eeb06ec31dc0f6d99d66ea54686df6964d75beb85d89ca0734e2e486ae190301ab8c3740d9c472a474ce9180195a690cc5ffec0aadde"}], 0x678}}, {{&(0x7f0000001940)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @private1, 0x5}}, 0x80, &(0x7f0000003940)=[{&(0x7f0000002440)="b1af5529fb926c35460227d115b763ced35844f72280e087323b1303515b9aa2ef9b32bfc912aa3d8e9d2c35a8cac06c6caf67e1b723c0552bf0591ff609dfebd56687612eaec50a9a56496b23ccd9a5abdda0ab85c739be8e723cac400500f01bf460c6338a4f8a4286eafbeb2d3e0fdf17fad04e45a98ba16f94a1265a07deda575639008d3503cbe3afcfac64b8288e25d19a7a8e2039c1d86ec8910df676c5411081c4079312920dfa9e049a5a5d6b787b780afd0b0677857578563e341a", 0xc0}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="6b612ec0882d61e7f4861c0cf25aeb4b5c4df12d9900ab01467964c0e348e84e3dd50ad40b9f29afe13e092190eb72098c1a96da7150d6b264f497de2a6c4fbef3c4b3668ecab2c088ad2d8df030f0e8029c46f62d8d6e83475c5312fbc6b552a6a183c2b009ce0016b76b293bec155817b93d7b26658c58b031e4bfc654d694c57c669a8bb21b4f097d9b15b01eff2efdb934c37bbbbf1eb613910a4e7bd6fddaef164e024d4ddfc34892862baa7f932c9862213b6cafa78f6422c2c67783c42afb92240807a960c5b2f889a34bee1cb7c67d8533083a314d813253bd54654f9313b8fd0b5e3770d8330da3e4d422cc6f00f193b53a955af9", 0xf9}, {&(0x7f0000003600)="3f690e", 0x3}, {&(0x7f0000003640)="f8cab6331f775a4a7e703330f982a17a5d58eb40da8ccdd5a4b5ed86bfaf02b439c08588af022829f2cf133fcbb22c660c9a75f0e412f0158732c5aaf6dbac07f9dc2f05eb58e06ae7765e71a76b28ded7cbb046d240f19ffd49eda5f73dd7e65404b3ac62aaf20d7341fbb120b82ebfe2922ac43f63ca0ea58542d06718c71ecd4e4ba21781e5ac6922b00a7386c5bca65470716f6a2d195d0ff73386596fe03327e11b2734e2d82345120641be1d4ce1f320bfde26", 0xb6}, {&(0x7f0000003700)="20409a6060ed3e0016fa018728d2050d05efd050426e808fc02910a90757718068f8e5a630c1b379abbf2704fa8a7d0c94873f561b78e1253171b185cf70273ffce005e6292c856a7e1e6aef8236142381636fc18526363139889c6efc1fb1b526cf6c0fb22c0fa6db673013969e02ac257193db057130bb028838ffe679431650c4f6802c65e9879e30cfcb2d2c4283c8b09a4d27225774dd4720d2e28965bda0ca196b13cd569e60f9122ec6c70eacf0a3d9f1538ac814ee045eaea92456ce568a", 0xc2}, {&(0x7f0000003800)="8e3993ed31547320a2d32f3570b5d9f4335df83f9e21557b757c8b938e00c8664a7823341e2332f7185ba64e40e81c89f6b6d660b44f9f6f9136ea1f0bc858e760a10e91fcefc0f4de65defe0c55f377192bba267c865a375ab6c5d35ac5", 0x5e}, {&(0x7f0000003880)="d41a1b724460b284f3873186f714a4e9f676f4677e46bb0d1c875a105d3c310a8e2f277fbf91491802ae6ba75f9813c28ea7a5eacd127ee658d7eaf8e634eb81b85b394131fd33af183b5871be89c679aa95d9e4a1626117d0556a7ad7e36e192a2ec661bfa8d81986e6fb24e7c2ef2c567c3cd9c629c419ed45c332be45fddd1a212b1067972c2c08d6f0d1c39c0d8e2aaf8aa1d49ffb9c6cc499776389f308c3899976b360d6d21626e19655962dc49bd309dd166764362905f4e0669086", 0xbf}], 0x8, &(0x7f00000039c0)=[{0x48, 0xbc486e44f6bdece9, 0x3d, "6bf0442244d47af064249715a494f43725f3704bba890d17fa917c0477e6d12c8087a6423339563c528a0384ea21ce736eba96e77905"}, {0xe0, 0x11, 0x4, "4c2ad265298b8ce1ae8ecce2037e640d5184841d1d570f8fb2299331619a61511b5a7dec814fe65de68bfedb22ef0507bf8651c2a5a2a772f6e483f45ec6ba4929a26c1078844aea3855a53080333e18ef4a79f2555401e878545d40b252c469f35b503e5ca078e68f18005983c6000b10ee7596d49ba7c84860d83d6fa932f3446b330f54a9c87f64b7dde12ea65de076c81c340516bbb56a3dfe4892362d5268fa24c3c611d27599da19e866ead81682fc164c3904d8a84393a6baf2b58f2e8eb2dd700a8148176c049ca3fdbe"}, {0x40, 0x3a, 0x3ff, "334305486ee58bafbc8539bee8bbc01ee84a5a01cad18b0fc03a30648dca5df45d32b95ad6a868a2178e26"}], 0x168}}], 0x4, 0x24008800) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/140, 0x8c}], 0x2, 0xa3, 0x800) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x5}, {0x20, 0x4}}, 0x24, 0x3) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r6) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000ffdbdf250600000008000d008c00000008000e005c0000000800010086"], 0x2c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.313446638s ago: executing program 0 (id=2228): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000005c0), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000003c0)='./file0\x00', r4, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) 7.311084743s ago: executing program 4 (id=2229): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000200)=0x7, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0xc4, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x401}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg0\x00'}]}]}, 0xc4}}, 0x1010) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) 6.295406493s ago: executing program 4 (id=2231): io_setup(0x20004, &(0x7f0000000600)) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000000000)={0x2c, r1, 0x20d, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) r5 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x8008064) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000340)=0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x2, 0x1, 0x0, 0x7}, 0x0) 5.444989541s ago: executing program 1 (id=2233): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000a86f5b7cbcb200000000000000000000000000000200000000000000ffff7fff00000000000900000000000000240cda3215ca5a8185c77100000000000000000000000000000000000000ffffffffffffffff070000000000000000"], 0xb8}}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000000340), 0x0, 0x40444c4) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000000101040000001b4e17c6b155a3ae58bd5f00141a00000200000008000740008b5a29b63fedad2fbf62b700000001240001801400018008000100e000000108000200e00000010c00028005000100000000003400028014000180080001000000000008000200ac1e000114000170bbbd2d2f2bf4460208000200"], 0x74}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 5.427268844s ago: executing program 2 (id=2234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) io_setup(0x13, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r4}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.272432445s ago: executing program 4 (id=2235): clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0xdbf, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) write$sysctl(0xffffffffffffffff, &(0x7f0000000080)='6\x00', 0x2) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x40, 0x8}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) fsync(0xffffffffffffffff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$can_raw(0x1d, 0x3, 0x1) init_module(0x0, 0xa10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) syz_open_dev$sndctrl(0x0, 0x8, 0x80100) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) socket$nl_netfilter(0x10, 0x3, 0xc) 4.843936823s ago: executing program 3 (id=2236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r3 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x70}}, 0x4004040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r9, &(0x7f0000001680)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000480)="2f5734973c1d9e52be7d8a6bb05e800163cd4f545e353ff4151beef896b5c271c54722324eea3fc21a4691c886d59cc910c2c4967421788f68345c81b7b3bbe96c31a515", 0x44}, {&(0x7f0000000580)="4a2d19b461eabe07744efaa44a0eb05ba4430fbfc55d5badeabb4be2db102e23c5ab17535c198291329a11f568dbd46ddcdfeb3d3793fc8e59bcf1008cc4acae4c6f2de55adcd94f4435bd962a3e06040e43ed172be7de24ade3d4e6d41d05d790475d1ef91b40ad2f76c81f3f76d9c75f8369f3184c1a0536eb159f11c89a2335c552234d2eaf36fffc1fa7", 0x8c}, {&(0x7f00000008c0)="70d704640a96ac0678cc50f8ea0ff8bff2d181f736d9bdcf996ddc14caa636767340cccff9d5d71cabe5b78c028c2b271b63f6ef8e5753aca1012bbcaf7d8ffae454b4e68647d53aa6881e9314dc8d", 0x4f}, {&(0x7f0000000940)="12f52e0de7e720406390a82c4e4f4eb4a06b3a9663fd61e547e0751ebe01339f5ec83fb5b7af12c0c210afefaced854da8e7198a43eef8c79728f1d27db3ce9afa0cd80c11", 0x45}, {&(0x7f00000000c0)="d739450e41818f5735613e073bf57c70d7a8efd1eeb98e51490be89525eee7873dae7241d232449a37dc", 0x2a}, {&(0x7f00000009c0)="fed24099b9daf9fe0cf12289eaa5302d4875008bb75480dd9697aed2c1c8a1d21ae967aa4769f07d4df77917dda8f63d767956e6538f3bdaf008cbdd1034ea6a286577b1f494b1b3ba14b86b9d69cfc24abda5efe832bfc63bc3d249a394b3a3eb0eb59d20774ab6888bb4d37965f1b2057d6b428acd14389d5906beffb1af19a22e0902db86d35e0a68c73d231c15ccbdd78f6c495fbe54ba300cd8c69ae266e14cf4b3dceb663837b60d32b10bf301828e8949c95c5a0c81fadd56ae87b6d546f34118f6a8eb0c4b4043cb3253cae9c3ef5b95e67d5008bda8e3b5e9046ec2d4e88f71f96c93f98043a99ec72a", 0xee}, {&(0x7f0000000ac0)="be8c329b3f63f36749f686a68da048e1d754b9e3c47f815f7d71b4eb3ef07af572203b3d04e9aa59b1343248af038bda33314b6e9364ae015b43c5261de124644d8379a0b045c4ea2ad66455143cf3cccf3547e7e054e8893c77f8c36a11c3ba6d9a35471ed2b7b8c857a682c851aee7f8a07ad6bd50c49dcb0a2f689cb0f3511a847dbc5fed237ee80e1ec691b10cb73b6881e19b95ae5bd31f59e24ddf5f50a22a29aa657e23cfe26c2b48b9c81b448927885659577e478cb1030ea058b1004f29097e8221dcab7782dc2c86e310ad6745154c558782", 0xd7}], 0x7, 0x0, 0x0, 0x2004c000}}, {{&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000cc0)="f6eb56e2144c1f1926bae34735e415d95e8dc23ebd066ca7b9fd642606a7bfc55b444f5ba29a6568d2706d06ac2559ce7681de72bd0a492c10819d78f4ac410a55c17a55040a6b917cd4e63d5991a4042e58d6a0d5242c68719fff533c73e24cea3a2ada540ce4ba29b3862d247453fe7f580f96fb07540f411ddfa9db52414cb3f69923e78358ce569ae75b4b9eccf8096fcbdcb8c4cce7addc3b1af7ffebc6bdcf27850e22bc101d7686b626b12f8dccb808c4c7531fbd5b193837874d0a95177c12d9e97910ba151f924119d55598c24343bfb5ec4a80c838a967604afc411d38e8", 0xe3}, {&(0x7f0000000dc0)="cfe2608d24db2ea2f17e951f7d92804afb839bd2424eb8dd18466746e6db20b7584e6818c5993cda8273c65dcda3d7c8280b805ef19955679621cc601050c807cfc802c67e5f045d55477b318a429dba900d54debcad4a7758ad986044cece52f1c67c183f455caa954579179563e47504d725765529e7f858cfc90b30952c08c06bcb6506484ac2196fec331c022f0defa939aa12039ed95f91eef94e82b7364558f9eb7790dd0d9bf1", 0xaa}, {&(0x7f0000000e80)="cc5533f1ec33059c439e11c4e9d92dd4186031647d2c72c766f15b550002b19bf6bb55099d6506ffc32e1f75999e9072755ffc9b3d9013d2008e2dd0d2e6c5630a7a644fcd0adabd5e4c493ef149b5945d4432a9a96eebb691767e118ef329f024f69a8b6b780ee8f8fa87853e5df46f1fbda9f46101bea125bbe425d20e838a6f03a80eb1a6e660514b40e922cc785d1ccde146ab2c5c0a681c31941c05dc0d7896dd53245084ee6250d1425b22dfa8d2629a8203453ad05ba374c9d2d69cf08fddbdfcb5d1e6484101358d8c31d0fa", 0xd0}, {&(0x7f0000000180)="8f2a9108", 0x4}, {&(0x7f0000000380)="fdd1b75c8c4aed9b99b07a68308b", 0xe}, {&(0x7f0000000400)="8875b43c8ebe9c9475", 0x9}, {&(0x7f0000000f80)="b1be28f8a7d513cd6c0c8d006255da96646b3c1e17f0b3ca94d5d7c0c46ec01943f5d44316f342b0cda93d8d99d61c2bc504d9d3a8403b2d8cef03a0103350ec332337821df4f2ae276d7cb30cdc5b70bcad52d07983c980e94a8dd333a668f13609fc1841476114924c2211195685aa06ae916244ce5d1baffe46b3aba9e1fec40faa291552f666b83772dc67507a3af62873c5793c4e215c74e9136324d139287a27a0d8ab", 0xa6}], 0x7, &(0x7f0000000640)=[@rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x40, 0x4040001}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001280)="4cac558f2fbeffc2cd42a031b6924584d0b22eeea401b8d5a728ab7dccc383801777288b0fa462d5ec2681ff0df39a260553e643734b820485ff03f93f6676c888662a2b57bdf7ccb41bbbf592eb541f5e89e3f3bfdb0b2f472fb3f6cad5dd50fa6e8044958a10184b607a901ce1814878e5c573fd53fe4b0473c6c1778d6495080c1f1683dd5b5fb3289239ed4df4804a04226dcef2eaa938305656112f6e449d77101d2df8ca", 0xa7}, {&(0x7f0000001340)="6fea95213ce2bc4f2b5b3f11d24870ad52d8c86491b75408aa2339e07181fe045cc7000c8fa373a9363bc068816585d24600b7201289e38fa14d0e4913ac7a6e29915646c8a7461cf29180a3f8bfc66f5ac1671a97d70295323fde76add8b11b725dc85ffe1ffbda7a1bbb94396fa248cff010e339bcdbf73ca9c41082eb31fd2efdd285220371b7fb26c76ac8fb56a69029ac999da5d335812ca91ec069e18888124da2850f07de570ed3bbdd6c9d436e5bcf684e0e6d910e695585864c5399954885", 0xc3}, {&(0x7f0000001140)="edb8a90085718a3fcdb76b9428c1af41b8ffce6b553f396aee58c4157e7664bbed6cfdd6c0c6752664279ede5bfc0d2557ce74665a3c2b25a60a70dba25de995bd125e0684dd578ba4744c997246", 0x4e}], 0x3, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [r0, r5, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x34, 0x1, 0x1, [r0, r3, r8, r1, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x3, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x7}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.493427178s ago: executing program 1 (id=2237): ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}], 0x1}}], 0x1, 0x0) dup3(r0, r1, 0x0) r2 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendto$inet(r4, &(0x7f0000000300)="047ff7f87e78badeea601668276253602f27e9bba9f0167c3babef72a7e5a359383278726d4b72abdbd29215c6217cf9f8d0f986cc7a46d8e560c207b67ab1c9d742a8d85506ba2510fb239f62f212d22564fe35d57fd90740a106262e9e2b7b47f9ffc35758f9266084ca72b5330947257488a7fa6b6d8b2ee676eca59e262424e88ad458590f2db8a64d7a5dced214a402905959fceabfac051bed1307382a028b56efe0c72e562fe919816a6a1fad0a8210bcabb32d075fa2ad5908a1974b9f9b5b5e17d7de10322140b042f08542c9de0bbe23220ac8fd944a10c85bda4911e166d9c4c651fbdf52c3fd9c73dfb82147ed", 0xf3, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {0x2}, 0x4b8}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x3}, 0xb3}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r7 = fsmount(r2, 0x1, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000040)={0xf0, 0x2}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000140)={0x56, r7, 0x0, {0x401, 0x401}, 0x2}, 0x1) 4.02711652s ago: executing program 3 (id=2238): ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000008d80)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x80001) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty, 0xfffffffc}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x44, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0x3) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x28001, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/vlan/config\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x3fe, 0x0) 3.628104359s ago: executing program 2 (id=2239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x40000108, 0x0, 0x7}]}) 3.62482482s ago: executing program 1 (id=2240): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d000000000001000000000000000141000000"], 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000000c0)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x2) 3.620666508s ago: executing program 4 (id=2241): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x208405, 0x0) socket$inet6(0xa, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r2, &(0x7f0000000000), 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) r8 = syz_open_dev$usbfs(0x0, 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r8, 0x4004550c, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x77359400}}, &(0x7f0000000300)) splice(r6, 0x0, r7, 0x0, 0x39000, 0x0) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0xdc) fcntl$setlease(r10, 0x400, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000011c0)=@multiplanar_fd={0x8000, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x0, 0xc, 0x2, 0x0, 0x0, 0x4, "6bc030eb"}, 0x2, 0x4, {&(0x7f0000000180)=[{0xa7, 0x7fffffff, {r5}, 0x200}, {0x1000, 0xa07, {r7}, 0x200}]}, 0x9, 0x0, r10}) write$qrtrtun(r7, &(0x7f0000000180)="d4d0723d4fd31adbbf12758bc9f7f54582880e2a9a97cbc054c07652dee5962c743130899137531303834b9891ce698c397cf50d00fe40a001d3e7f89ec36480ca81b7f071d2c36f5766dbf198902266057f43b6ff18b0c3fd2d219e9ae96b32", 0x60) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 2.84455201s ago: executing program 2 (id=2242): r0 = socket(0x2d, 0x80002, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000c900850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r3) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a000000021000004000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa4e24ffff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000041f1ff0050001100fc020000000000000000000000000000ac1414aa000000000000000000000001fe8800000000000000000000001b0001ac1414bb00000000000000000000000000020000000000000a000a00a09d099772a12e79b5ce20bb1243f9f8a940619175e7da002f40f5c3e08a65c76cdb0b86be9f3140b389c936d5e23cc709771a784a27ce4de9f199a637e9e2fd0cfe498e992243a8c44fc9847c3bf204b619db8626252f48bc7f62639fcd71"], 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x1f, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xffe4}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$sock(r4, &(0x7f0000000240)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000480)="ada1bade99b18b1deaac61ee7383c6d999836c8ffe32c6190094ae77f9617ce9ad41a3ac12aebf9c3933e7894d9f89af37c930df3865b8aee81fd51860385434ef3b27b58143ef401aaddf07abd974699d88c973fcb4a0", 0x57}, {&(0x7f00000001c0)="cc39490352d54a6d81d4863b04bde4a9b00bcfbf7a911583b07aaac3201251ef03f018090f729a0d8ad39236a5c357ae08893b420f17578cdb2aed", 0x3b}, {&(0x7f0000000680)="bbe68053ffcbdda4fd828904afc2137702489ba828b79b31080c468ee7ab8554d45866e2fa9112d491d6b3395747a83bc87521c6a47e0136b86b6eeef44c8396dabbda4243f60f26fb559d1a2f73fc2e9425f58d564abcd7f7f66eaf6a08bc05d7dc72b8953959326dc4ea9a8f3a81b714e6ade046ede7dd07e7338ded7fd370a46809fd7ea6ef3b8f755b539ab85cd7", 0x90}, {&(0x7f0000000580)="b51e896e57d0e4db37e12fe3c5065c8f3008b3ce3d9f1b8a4c01f4f435b1107dfea8bffbe1f7eddcc8ed84c2def47217b5ad028997657eaf8909d6a2795dc7f77fa2ecaa2eb68cc8fd6a06a00fdc66ee358f4e", 0x53}, {&(0x7f0000000740)="413322c4e16a917aaee399924a26be7fd4f2f4de5ef5ae3ed4bf0971811ac2b402068a55f177e1881ecf80343f1e36911432ad487036babb884d51d9c707cf585010cc228af2f5d907d75e9fb03d3b3635593aaa0b023cba58eea0fcdd5d8224f134d1300a62d430c38d2ce8553f996a5560a1440dfd947f916e731487d0196d07f5", 0x82}, {&(0x7f0000000800)="a5cc63816f2ed89ea8c85294a89a66150d717aa6382bf439bc79160dc6c93f4b067eb1bb4aa54cbed86ec13596028f25baa26b6aa397e8e2e64100409db49d26ea33f0e12ff578e21be3670260b5b46669b922a0d898ba0817a982b1cb767979a1ac8a56608a3974dc221bd20dadbccfefa20d0c3ef0e11ed658705a39dbac2aa2da42c3f03bd519fdb400b2216b877d9052b14fc643d2e67e15faa78a7337ce9f0f", 0xa2}, {&(0x7f00000008c0)="6ae3e6ebb84b7d76033ff5d1ec1d55581883871469a412e9b9e84d2d1a646b931c1053581d5209caba90429c43e5dcf8ef67ae22d749c109ec7050cf59eac2e129e20cf5b50e001c22d9fa9b1ebbb0168cf8c5fa3d1cf35a1064578400dd1a3a972bafb9d926b495dc8521f77924ca636abfeb73399f06cdffe10e51d6e79c6cdcaaf57074e584fcba16c2e1e13a8bfd8e9c5ce4d4c45f4fc6768b544ec761f8fae1a4bade376eef08bc592bc110639ac42ed21588a7519deff0361d7e9fcf811f85a2e51e90b63fb9f54de946159453df3028b06b977725a86519a6", 0xdc}, {&(0x7f00000009c0)="c15d7a4f75a63d4b911a0b90f0a836d2f3f8efa3569cd08afe225f7cb341632e4e6f03cec77502d76f77f7f9ac938173d38a6d6c7e5036fa077fdae16f2eb314d5fa052eb6cbf66c1054bf895c098152a1236a8e8adb5e852b8f9cfad416f1c8", 0x60}], 0x8, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xe60}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3e32}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}], 0x78}, 0x4008811) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 2.818974332s ago: executing program 3 (id=2243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000003c0)="c74424000b3c0000c744240244000000c7442406000000000f011c24c7442400f7360000c744240200700000c7442406000000000f011c24f3420f090f00110f01d18f4818967ca44f05f30f09450f78c040dc847ae32172f9c744240078000000c7442402fc959c45c7442406000000000f011424", 0x75}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8005) fdatasync(r3) fsopen(&(0x7f00000000c0)='befs\x00', 0x0) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) set_mempolicy(0x2, &(0x7f00000001c0)=0x6c76, 0x7) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x4, @loopback, 0xf}], 0x1c) sendto$inet6(r6, &(0x7f0000000040)="00d8", 0x2, 0x44004, &(0x7f0000000140)={0xa, 0x4e24, 0xb, @loopback, 0xc5b}, 0x1c) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.704129631s ago: executing program 1 (id=2244): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x6, 0x3) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000800)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r4, 0xffffffffffffffff}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r12, 0x4138ae84, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) close_range(r2, r9, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 2.693218818s ago: executing program 0 (id=2245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) io_setup(0x13, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.458499403s ago: executing program 0 (id=2246): mknod$loop(0x0, 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 1.150324809s ago: executing program 3 (id=2247): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000a86f5b7cbcb200000000000000000000000000000200000000000000ffff7fff00000000000900000000000000240cda3215ca5a8185c77100000000000000000000000000000000000000ffffffffffffffff070000000000000000"], 0xb8}}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000000340), 0x0, 0x40444c4) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000000101040000001b4e17c6b155a3ae58bd5f00141a00000200000008000740008b5a29b63fedad2fbf62b700000001240001801400018008000100e000000108000200e00000010c00028005000100000000003400028014000180080001000000000008000200ac1e000114000170bbbd2d2f2bf4460208000200"], 0x74}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 421.77206ms ago: executing program 0 (id=2248): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xebed, 0x400, 0x0, 0x378}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000003d00)=[{{&(0x7f00000003c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000940)=[{&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/196, 0xc4}, {&(0x7f0000000a00)=""/185, 0xb9}], 0x5, &(0x7f00000005c0)=""/63, 0x3f}, 0x9419}, {{&(0x7f0000000ac0)=@qipcrtr, 0x80, &(0x7f0000000640)=[{&(0x7f0000000b40)=""/156, 0x9c}], 0x1, &(0x7f0000000c00)=""/12, 0xc}, 0x800}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/87, 0x57}, {&(0x7f0000000cc0)=""/80, 0x50}, {&(0x7f0000000d40)=""/62, 0x3e}, {&(0x7f0000000d80)=""/124, 0x7c}, {&(0x7f0000000e00)=""/115, 0x73}, {&(0x7f0000000e80)=""/138, 0x8a}], 0x6, &(0x7f0000000fc0)=""/186, 0xba}}, {{&(0x7f0000001080)=@nfc, 0x80, &(0x7f0000001540)=[{&(0x7f0000001100)=""/150, 0x96}, {&(0x7f00000011c0)=""/202, 0xca}, {&(0x7f00000012c0)=""/175, 0xaf}, {&(0x7f0000001480)=""/156, 0x9c}], 0x4, &(0x7f00000013c0)=""/142, 0x8e}, 0xfff}, {{&(0x7f0000001580)=@alg, 0x80, &(0x7f0000001840)=[{&(0x7f0000001600)=""/140, 0x8c}, {&(0x7f00000016c0)=""/16, 0x10}, {&(0x7f0000001700)=""/15, 0xf}, {&(0x7f0000001740)=""/40, 0x28}, {&(0x7f0000001780)=""/191, 0xbf}], 0x5, &(0x7f00000018c0)=""/171, 0xab}, 0x4}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001980)=""/56, 0x38}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/42, 0x2a}, {&(0x7f0000001ac0)=""/95, 0x5f}], 0x4}, 0x2}, {{&(0x7f0000001b80)=@isdn, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001c00)=""/160, 0xa0}, {&(0x7f0000001cc0)=""/226, 0xe2}, {&(0x7f0000001dc0)=""/225, 0xe1}, {&(0x7f0000001ec0)=""/174, 0xae}, {&(0x7f0000001f80)=""/206, 0xce}, {&(0x7f0000002080)=""/13, 0xd}, {&(0x7f00000020c0)=""/229, 0xe5}], 0x7, &(0x7f0000002240)=""/30, 0x1e}, 0x3}, {{&(0x7f0000002280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000003380)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/113, 0x71}], 0x2, &(0x7f00000033c0)=""/54, 0x36}, 0xaa}, {{&(0x7f0000003400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003800)=[{&(0x7f0000003480)=""/72, 0x48}, {&(0x7f0000003500)=""/174, 0xae}, {&(0x7f00000035c0)=""/81, 0x51}, {&(0x7f0000003640)=""/215, 0xd7}, {&(0x7f0000003740)=""/132, 0x84}], 0x5, &(0x7f0000003880)=""/186, 0xba}, 0x5}, {{&(0x7f0000003940)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000003c40)=[{&(0x7f00000039c0)=""/47, 0x2f}, {&(0x7f0000003a00)=""/250, 0xfa}, {&(0x7f0000003b00)=""/29, 0x1d}, {&(0x7f0000003b40)=""/230, 0xe6}], 0x4, &(0x7f0000003c80)=""/87, 0x57}, 0x4}], 0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0xfffffffb, 0x1, &(0x7f0000000180)="d30039bc344c23cfc43bf9c64cb29324e0b066304932fa86180964b3db14f67d9d27b11d1ff2f6cfdda27340939919e40dfab148f15eb0a3052c17e4be9a2f11f90df2c924ffdee94b63158e8b44b2a134d8cd0bcd247075b614344c83854ca0a865", 0x10000, 0x0, 0x0, {0x3}}) socket$kcm(0x10, 0x2, 0x0) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\xd2+FG\tX)\x910\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xf3\xa7*O\xe3\xc3L\xd6H\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e34~\xa8\xb8aQtp\xc8r_\x14K\xd35;\x8f_\xe0|Y\x8b'}]}, 0xbf) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefff, 0x1040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0xc3, &(0x7f0000000280)=[0xffffffffffffffff], 0x1}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0xa7ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="7574449588e83461445660f35cdffc1264752a1b8dfc1f0b824f61e7b28e03b43414a65c28a0214a04262821e3562b41df85a6decca664c182123bd0999738b40baac7bb257530976f8bf163ce8bfb63738ee0997bfde7630035d9e9867fb25c7d8f926cc7023b52003036316c97066842b195eb24b512462acbd0", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) 130.94271ms ago: executing program 3 (id=2249): ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0xc000003, 0x0, 0x0, 0x1000000, 0x2}, {0xc000003, 0x0, 0x0, 0xa}]}) 120.82332ms ago: executing program 4 (id=2250): socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="000018"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) splice(r1, 0x0, r3, 0x0, 0xbfd1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}}) llistxattr(&(0x7f0000004780)='./file0\x00', 0x0, 0xfffffffffffffd93) umount2(&(0x7f0000000500)='./file0\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) openat(r3, &(0x7f0000000100)='./file0\x00', 0x50800, 0x6a) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000000c0)={'netdevsim0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) 0s ago: executing program 3 (id=2251): ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}], 0x1}}], 0x1, 0x0) dup3(r0, r1, 0x0) r2 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendto$inet(r4, &(0x7f0000000300)="047ff7f87e78badeea601668276253602f27e9bba9f0167c3babef72a7e5a359383278726d4b72abdbd29215c6217cf9f8d0f986cc7a46d8e560c207b67ab1c9d742a8d85506ba2510fb239f62f212d22564fe35d57fd90740a106262e9e2b7b47f9ffc35758f9266084ca72b5330947257488a7fa6b6d8b2ee676eca59e262424e88ad458590f2db8a64d7a5dced214a402905959fceabfac051bed1307382a028b56efe0c72e562fe919816a6a1fad0a8210bcabb32d075fa2ad5908a1974b9f9b5b5e17d7de10322140b042f08542c9de0bbe23220ac8fd944a10c85bda4911e166d9c4c651fbdf52c3fd9c73dfb82147ed", 0xf3, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {0x2}, 0x4b8}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x3}, 0xb3}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x1, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000040)={0xf0, 0x2}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000140)={0x56, r7, 0x0, {0x401, 0x401}, 0x2}, 0x1) kernel console output (not intermixed with test programs): sing attributes in process `syz.3.1525'. [ 529.271298][T11792] tmpfs: Bad value for 'nr_blocks' [ 529.475429][T11797] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 529.482562][T11797] overlayfs: failed to set xattr on upper [ 529.488304][T11797] overlayfs: ...falling back to redirect_dir=nofollow. [ 529.495226][T11797] overlayfs: ...falling back to uuid=null. [ 530.847443][T11816] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 530.855087][T11816] overlayfs: failed to set xattr on upper [ 530.861022][T11816] overlayfs: ...falling back to redirect_dir=nofollow. [ 530.867921][T11816] overlayfs: ...falling back to uuid=null. [ 531.871395][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'. [ 531.881576][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'. [ 532.282173][T11838] Bluetooth: hci5: Frame reassembly failed (-84) [ 532.390074][ T4485] Bluetooth: hci5: Frame reassembly failed (-84) [ 532.419978][ T4485] Bluetooth: hci5: Frame reassembly failed (-84) [ 534.235161][T11849] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1542'. [ 534.299827][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 536.509345][T11863] random: crng reseeded on system resumption [ 537.947521][T11884] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 537.948501][ T30] audit: type=1400 audit(1767301338.986:568): avc: denied { write } for pid=11883 comm="syz.2.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 537.980713][T11884] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 538.002174][T11884] overlayfs: missing 'lowerdir' [ 538.022465][ T30] audit: type=1400 audit(1767301339.046:569): avc: denied { search } for pid=11881 comm="syz.3.1552" name="/" dev="configfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 538.075205][ T30] audit: type=1400 audit(1767301339.046:570): avc: denied { search } for pid=11881 comm="syz.3.1552" name="/" dev="configfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 538.421082][ T30] audit: type=1400 audit(1767301339.046:571): avc: denied { read open } for pid=11881 comm="syz.3.1552" path="/" dev="configfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 538.568152][ T30] audit: type=1400 audit(1767301339.606:572): avc: denied { read } for pid=11892 comm="syz.1.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 538.650310][T11896] netlink: 'syz.0.1545': attribute type 4 has an invalid length. [ 538.733088][T11897] netlink: 'syz.0.1545': attribute type 4 has an invalid length. [ 539.581523][T11908] can: request_module (can-proto-0) failed. [ 539.750457][ T6982] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 539.910979][ T6982] usb 5-1: Using ep0 maxpacket: 16 [ 539.960317][ T6982] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 539.969407][ T6982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.978466][ T6982] usb 5-1: Product: syz [ 539.999287][T11920] netlink: 'syz.1.1559': attribute type 16 has an invalid length. [ 540.011370][T11920] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1559'. [ 540.070854][ T6982] usb 5-1: Manufacturer: syz [ 540.073162][T11920] tmpfs: Bad value for 'nr_blocks' [ 540.080995][ T6982] usb 5-1: SerialNumber: syz [ 540.196932][ T6982] usb 5-1: config 0 descriptor?? [ 540.280298][ T6982] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 540.439536][T11923] overlayfs: failed to clone upperpath [ 540.683292][ T6982] usb 5-1: clie_3_5_startup: get interface number failed: -71 [ 540.691510][ T6982] visor 5-1:0.0: probe with driver visor failed with error -71 [ 540.716622][ T6982] usb 5-1: USB disconnect, device number 51 [ 540.839829][ T5895] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 541.009789][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 541.019324][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 541.039768][ T5895] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 541.055527][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.071235][ T5895] usb 2-1: config 0 descriptor?? [ 542.263241][ T5895] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 542.692859][T11950] overlayfs: failed to clone lowerpath [ 544.666040][T11966] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 544.673545][T11966] overlayfs: failed to set xattr on upper [ 544.679249][T11966] overlayfs: ...falling back to redirect_dir=nofollow. [ 544.686110][T11966] overlayfs: ...falling back to uuid=null. [ 544.705292][ T6982] usb 2-1: USB disconnect, device number 64 [ 544.806414][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1576'. [ 544.945290][T11972] netlink: 'syz.3.1578': attribute type 16 has an invalid length. [ 544.953214][T11972] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1578'. [ 544.965388][T11972] tmpfs: Bad value for 'nr_blocks' [ 545.169811][ T6982] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 545.202107][T11984] netlink: 'syz.2.1576': attribute type 1 has an invalid length. [ 545.340825][ T6982] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 545.355149][ T6982] usb 2-1: config 0 has no interface number 0 [ 545.405215][ T6982] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 545.566311][ T6982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.583621][ T6982] usb 2-1: Product: syz [ 545.596450][ T6982] usb 2-1: Manufacturer: syz [ 545.606656][ T6982] usb 2-1: SerialNumber: syz [ 545.624097][ T6982] usb 2-1: config 0 descriptor?? [ 545.996311][T11994] xt_hashlimit: overflow, try lower: 3/0 [ 547.605547][ T6982] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.951325][ T6982] usb 2-1: USB disconnect, device number 65 [ 548.102918][ T30] audit: type=1400 audit(1767301349.136:573): avc: denied { read append } for pid=12019 comm="syz.2.1590" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 548.111590][T12024] udevd[12024]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.204489][T12025] FAULT_INJECTION: forcing a failure. [ 548.204489][T12025] name failslab, interval 1, probability 0, space 0, times 0 [ 548.217177][T12025] CPU: 1 UID: 0 PID: 12025 Comm: syz.0.1589 Not tainted syzkaller #0 PREEMPT(full) [ 548.217196][T12025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.217207][T12025] Call Trace: [ 548.217213][T12025] [ 548.217220][T12025] dump_stack_lvl+0x16c/0x1f0 [ 548.217246][T12025] should_fail_ex+0x512/0x640 [ 548.217270][T12025] ? fs_reclaim_acquire+0xae/0x150 [ 548.217295][T12025] should_failslab+0xc2/0x120 [ 548.217317][T12025] __kmalloc_noprof+0xeb/0x910 [ 548.217344][T12025] ? tomoyo_encode2+0x100/0x3e0 [ 548.217371][T12025] ? tomoyo_encode2+0x100/0x3e0 [ 548.217391][T12025] tomoyo_encode2+0x100/0x3e0 [ 548.217416][T12025] tomoyo_encode+0x29/0x50 [ 548.217436][T12025] tomoyo_realpath_from_path+0x18f/0x6e0 [ 548.217466][T12025] tomoyo_path_number_perm+0x245/0x580 [ 548.217485][T12025] ? tomoyo_path_number_perm+0x237/0x580 [ 548.217507][T12025] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 548.217552][T12025] ? find_held_lock+0x2b/0x80 [ 548.217578][T12025] ? hook_file_ioctl_common+0x144/0x410 [ 548.217608][T12025] ? __fget_files+0x20e/0x3c0 [ 548.217636][T12025] security_file_ioctl+0x9b/0x240 [ 548.217660][T12025] __x64_sys_ioctl+0xb7/0x210 [ 548.217681][T12025] do_syscall_64+0xcd/0xf80 [ 548.217704][T12025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.217720][T12025] RIP: 0033:0x7effbed8f749 [ 548.217733][T12025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.217748][T12025] RSP: 002b:00007effbfcc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.217764][T12025] RAX: ffffffffffffffda RBX: 00007effbefe6180 RCX: 00007effbed8f749 [ 548.217775][T12025] RDX: 00002000000000c0 RSI: 000000000000541c RDI: 0000000000000009 [ 548.217784][T12025] RBP: 00007effbfcc5090 R08: 0000000000000000 R09: 0000000000000000 [ 548.217794][T12025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.217803][T12025] R13: 00007effbefe6218 R14: 00007effbefe6180 R15: 00007ffd1be8b3b8 [ 548.217827][T12025] [ 548.420167][T12025] ERROR: Out of memory at tomoyo_realpath_from_path. [ 548.447710][T12015] netlink: 'syz.4.1588': attribute type 16 has an invalid length. [ 548.455572][T12015] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1588'. [ 548.492245][T12015] tmpfs: Bad value for 'nr_blocks' [ 548.682566][T12031] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 548.689554][T12031] overlayfs: failed to set xattr on upper [ 548.695478][T12031] overlayfs: ...falling back to redirect_dir=nofollow. [ 548.702360][T12031] overlayfs: ...falling back to uuid=null. [ 548.847580][T12021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 548.854014][T12021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 548.880299][T12021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 548.886251][T12021] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 549.013992][T12021] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 549.145560][T12021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.174420][T12021] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 549.216317][T12021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.222546][T12021] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 549.268493][T12021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 549.287156][T12021] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 549.659992][ T5895] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 549.871910][ T5895] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 549.880900][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.900451][ T5895] usb 2-1: config 0 has no interface number 0 [ 549.930788][ T5895] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 549.980652][ T5895] usb 2-1: config 0 interface 52 has no altsetting 0 [ 549.997539][ T5895] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 550.006710][ T5895] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 550.016436][ T5895] usb 2-1: Product: syz [ 550.023123][ T5895] usb 2-1: Manufacturer: syz [ 550.031094][ T5895] usb 2-1: SerialNumber: syz [ 550.044955][ T5895] usb 2-1: config 0 descriptor?? [ 550.190932][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 550.325158][ T5895] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input17 [ 550.619934][ T5819] Bluetooth: hci0: command 0x2016 tx timeout [ 550.885850][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 550.929802][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 550.945425][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 550.964525][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.973748][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.986402][T12051] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 550.996813][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 551.174918][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 551.232385][T12064] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 551.239377][T12064] overlayfs: failed to set xattr on upper [ 551.255051][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 551.275734][T12064] overlayfs: ...falling back to redirect_dir=nofollow. [ 551.294187][T12064] overlayfs: ...falling back to uuid=null. [ 551.332295][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 551.493407][ T24] usb 2-1: USB disconnect, device number 66 [ 551.493476][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 551.635586][ T30] audit: type=1800 audit(1767301352.676:574): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1603" name="nullb0" dev="tmpfs" ino=2314 res=0 errno=0 [ 551.879685][ T30] audit: type=1800 audit(1767301352.916:575): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1603" name="nullb0" dev="tmpfs" ino=2314 res=0 errno=0 [ 551.917682][ T30] audit: type=1800 audit(1767301352.926:576): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1603" name="nullb0" dev="tmpfs" ino=2314 res=0 errno=0 [ 551.939941][ T30] audit: type=1800 audit(1767301352.926:577): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1603" name="nullb0" dev="tmpfs" ino=2314 res=0 errno=0 [ 551.962230][ T30] audit: type=1800 audit(1767301352.926:578): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1603" name="nullb0" dev="tmpfs" ino=2314 res=0 errno=0 [ 551.986973][ T30] audit: type=1800 audit(1767301352.926:579): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1603" name="nullb0" dev="tmpfs" ino=2314 res=0 errno=0 [ 551.988765][ T24] usb 5-1: USB disconnect, device number 52 [ 552.017307][ T30] audit: type=1800 audit(1767301352.926:580): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1603" name="nullb0" dev="tmpfs" ino=2314 res=0 errno=0 [ 552.146093][ T30] audit: type=1800 audit(1767301352.926:581): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1603" name="nullb0" dev="tmpfs" ino=2314 res=0 errno=0 [ 552.169024][ T30] audit: type=1800 audit(1767301352.926:582): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1603" name="nullb0" dev="tmpfs" ino=2314 res=0 errno=0 [ 552.689856][ T5819] Bluetooth: hci0: command 0x2016 tx timeout [ 552.719919][ T5978] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 553.009791][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 553.079814][ T5978] usb 2-1: Invalid ep0 maxpacket: 64 [ 553.093298][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 553.106972][T12093] FAULT_INJECTION: forcing a failure. [ 553.106972][T12093] name failslab, interval 1, probability 0, space 0, times 0 [ 553.133201][T12093] CPU: 0 UID: 0 PID: 12093 Comm: syz.4.1608 Not tainted syzkaller #0 PREEMPT(full) [ 553.133223][T12093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.133232][T12093] Call Trace: [ 553.133238][T12093] [ 553.133245][T12093] dump_stack_lvl+0x16c/0x1f0 [ 553.133269][T12093] should_fail_ex+0x512/0x640 [ 553.133294][T12093] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 553.133315][T12093] should_failslab+0xc2/0x120 [ 553.133336][T12093] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 553.133353][T12093] ? __d_lookup+0x25c/0x4a0 [ 553.133372][T12093] ? __d_alloc+0x35/0xa80 [ 553.133392][T12093] ? __d_alloc+0x35/0xa80 [ 553.133404][T12093] __d_alloc+0x35/0xa80 [ 553.133421][T12093] d_alloc+0x4a/0x1e0 [ 553.133438][T12093] lookup_one_qstr_excl+0x175/0x250 [ 553.133459][T12093] start_dirop+0x59/0xb0 [ 553.133480][T12093] simple_start_creating+0xf4/0x100 [ 553.133503][T12093] ? __pfx_simple_start_creating+0x10/0x10 [ 553.133525][T12093] ? do_raw_spin_unlock+0x172/0x230 [ 553.133550][T12093] ? simple_pin_fs+0xa3/0x190 [ 553.133572][T12093] debugfs_start_creating.part.0+0x86/0x1c0 [ 553.133591][T12093] __debugfs_create_file+0xb3/0x530 [ 553.133611][T12093] debugfs_create_file_full+0x41/0x60 [ 553.133631][T12093] ? __pfx_macvlan_setup+0x10/0x10 [ 553.133651][T12093] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 553.133686][T12093] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 553.133734][T12093] ? alloc_netdev_mqs+0xd7/0x1550 [ 553.133754][T12093] ? lockdep_init_map_type+0x5c/0x270 [ 553.133779][T12093] alloc_netdev_mqs+0x314/0x1550 [ 553.133803][T12093] rtnl_create_link+0xc08/0xf60 [ 553.133824][T12093] rtnl_newlink+0xb3b/0x1f50 [ 553.133850][T12093] ? __pfx_rtnl_newlink+0x10/0x10 [ 553.133866][T12093] ? find_held_lock+0x2b/0x80 [ 553.133892][T12093] ? avc_has_perm_noaudit+0x117/0x3b0 [ 553.133923][T12093] ? avc_has_perm_noaudit+0x149/0x3b0 [ 553.133971][T12093] ? find_held_lock+0x2b/0x80 [ 553.133993][T12093] ? __pfx_rtnl_newlink+0x10/0x10 [ 553.134009][T12093] ? __pfx_rtnl_newlink+0x10/0x10 [ 553.134025][T12093] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 553.134044][T12093] ? __pfx_rtnl_newlink+0x10/0x10 [ 553.134062][T12093] rtnetlink_rcv_msg+0x95e/0xe90 [ 553.134088][T12093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 553.134113][T12093] ? ref_tracker_free+0x37c/0x830 [ 553.134141][T12093] netlink_rcv_skb+0x158/0x420 [ 553.134162][T12093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 553.134182][T12093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.134211][T12093] ? netlink_deliver_tap+0x1ae/0xd30 [ 553.134235][T12093] netlink_unicast+0x5aa/0x870 [ 553.134259][T12093] ? __pfx_netlink_unicast+0x10/0x10 [ 553.134288][T12093] netlink_sendmsg+0x8c8/0xdd0 [ 553.134313][T12093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.134343][T12093] ____sys_sendmsg+0xa5d/0xc30 [ 553.134366][T12093] ? copy_msghdr_from_user+0x10a/0x160 [ 553.134382][T12093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.134416][T12093] ___sys_sendmsg+0x134/0x1d0 [ 553.134434][T12093] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.134483][T12093] __sys_sendmsg+0x16d/0x220 [ 553.134501][T12093] ? __pfx___sys_sendmsg+0x10/0x10 [ 553.134536][T12093] do_syscall_64+0xcd/0xf80 [ 553.134558][T12093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.134575][T12093] RIP: 0033:0x7ffae1b8f749 [ 553.134588][T12093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.134604][T12093] RSP: 002b:00007ffae2b13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.134621][T12093] RAX: ffffffffffffffda RBX: 00007ffae1de5fa0 RCX: 00007ffae1b8f749 [ 553.134632][T12093] RDX: 0000000008000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 553.134642][T12093] RBP: 00007ffae2b13090 R08: 0000000000000000 R09: 0000000000000000 [ 553.134652][T12093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.134661][T12093] R13: 00007ffae1de6038 R14: 00007ffae1de5fa0 R15: 00007ffd3ce979c8 [ 553.134686][T12093] [ 553.201361][T12093] team_slave_0: entered promiscuous mode [ 553.439777][ T5978] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 553.440673][T12093] team_slave_1: entered promiscuous mode [ 553.549338][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 553.555363][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 553.559648][T12100] Bluetooth: hci4: command 0x0406 tx timeout [ 553.577304][T12093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 553.609804][ T5978] usb 2-1: Invalid ep0 maxpacket: 64 [ 553.615270][ T5978] usb usb2-port1: attempt power cycle [ 553.959817][ T5978] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 553.980250][ T5978] usb 2-1: Invalid ep0 maxpacket: 64 [ 554.109871][ T5978] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 554.155942][ T5978] usb 2-1: Invalid ep0 maxpacket: 64 [ 554.407605][ T5978] usb usb2-port1: unable to enumerate USB device [ 555.112582][T12100] Bluetooth: hci1: command 0x0406 tx timeout [ 555.659802][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 555.957709][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 555.967471][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 555.983824][T12135] set match dimension is over the limit! [ 555.998749][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.013987][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.029897][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.039058][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.047186][ T24] usb 3-1: Product: syz [ 556.057370][ T24] usb 3-1: Manufacturer: syz [ 556.065351][T12143] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 556.077540][ T24] usb 3-1: SerialNumber: syz [ 556.168878][T12143] FAULT_INJECTION: forcing a failure. [ 556.168878][T12143] name failslab, interval 1, probability 0, space 0, times 0 [ 556.187344][T12143] CPU: 1 UID: 0 PID: 12143 Comm: syz.1.1622 Not tainted syzkaller #0 PREEMPT(full) [ 556.187365][T12143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.187374][T12143] Call Trace: [ 556.187380][T12143] [ 556.187389][T12143] dump_stack_lvl+0x16c/0x1f0 [ 556.187415][T12143] should_fail_ex+0x512/0x640 [ 556.187439][T12143] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 556.187460][T12143] should_failslab+0xc2/0x120 [ 556.187484][T12143] kmem_cache_alloc_node_noprof+0x86/0x800 [ 556.187501][T12143] ? __alloc_skb+0x156/0x410 [ 556.187533][T12143] ? __alloc_skb+0x156/0x410 [ 556.187555][T12143] __alloc_skb+0x156/0x410 [ 556.187577][T12143] ? __alloc_skb+0x35d/0x410 [ 556.187601][T12143] ? __pfx___alloc_skb+0x10/0x10 [ 556.187625][T12143] ? __pfx_bt_err+0x10/0x10 [ 556.187651][T12143] mgmt_cmd_complete+0x4f/0x570 [ 556.187674][T12143] start_service_discovery+0x38b/0xbb0 [ 556.187701][T12143] ? __hci_dev_get+0x16a/0x2c0 [ 556.187719][T12143] ? __pfx_start_service_discovery+0x10/0x10 [ 556.187744][T12143] ? do_raw_read_unlock+0x44/0xe0 [ 556.187768][T12143] ? _raw_read_unlock+0x28/0x50 [ 556.187788][T12143] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 556.187817][T12143] hci_sock_sendmsg+0x1556/0x26b0 [ 556.187843][T12143] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 556.187870][T12143] sock_write_iter+0x566/0x610 [ 556.187893][T12143] ? __pfx_sock_write_iter+0x10/0x10 [ 556.187924][T12143] ? bpf_lsm_file_permission+0x9/0x10 [ 556.187941][T12143] ? security_file_permission+0x71/0x210 [ 556.187966][T12143] ? rw_verify_area+0xcf/0x6c0 [ 556.187987][T12143] vfs_write+0x7d3/0x11d0 [ 556.188009][T12143] ? __pfx_sock_write_iter+0x10/0x10 [ 556.188033][T12143] ? __pfx_vfs_write+0x10/0x10 [ 556.188051][T12143] ? find_held_lock+0x2b/0x80 [ 556.188092][T12143] ksys_write+0x1f8/0x250 [ 556.188114][T12143] ? __pfx_ksys_write+0x10/0x10 [ 556.188142][T12143] do_syscall_64+0xcd/0xf80 [ 556.188166][T12143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.188183][T12143] RIP: 0033:0x7f265a58f749 [ 556.188197][T12143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.188213][T12143] RSP: 002b:00007f265b4a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 556.188229][T12143] RAX: ffffffffffffffda RBX: 00007f265a7e5fa0 RCX: 00007f265a58f749 [ 556.188240][T12143] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 556.188250][T12143] RBP: 00007f265b4a4090 R08: 0000000000000000 R09: 0000000000000000 [ 556.188260][T12143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.188269][T12143] R13: 00007f265a7e6038 R14: 00007f265a7e5fa0 R15: 00007ffde68feaa8 [ 556.188294][T12143] [ 556.454748][ T5895] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 556.600501][T12142] netlink: 'syz.3.1624': attribute type 1 has an invalid length. [ 556.619144][T12142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 556.776937][ T5895] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 556.789250][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 556.798120][ T5895] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 556.808048][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 556.816366][ T5895] usb 5-1: Product: syz [ 556.820745][ T5895] usb 5-1: Manufacturer: syz [ 556.828941][ T5895] usb 5-1: SerialNumber: syz [ 556.836024][ T24] usb 3-1: 0:2 : does not exist [ 557.006789][ T5895] usb 5-1: config 0 descriptor?? [ 557.022316][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1624'. [ 557.063514][T12142] bond2: (slave veth15): Enslaving as an active interface with an up link [ 557.124706][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1624'. [ 557.151253][T12142] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 557.459142][T12142] bond2 (unregistering): (slave veth15): Releasing backup interface [ 557.475197][T12142] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 557.496043][T12142] bond2 (unregistering): Released all slaves [ 557.600389][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'. [ 557.632850][T12158] team_slave_0: entered promiscuous mode [ 557.638513][T12158] team_slave_1: entered promiscuous mode [ 557.645360][T12158] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 557.897150][T12160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1615'. [ 557.909208][T12160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1615'. [ 558.825608][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 558.825658][ T30] audit: type=1400 audit(1767301359.853:640): avc: denied { bind } for pid=12168 comm="syz.3.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 559.169995][ T5818] Bluetooth: hci5: command 0x1003 tx timeout [ 559.170135][T12100] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 559.380358][ T30] audit: type=1400 audit(1767301359.853:641): avc: denied { listen } for pid=12168 comm="syz.3.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 559.465310][ T24] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 559.599963][ T24] usb 3-1: USB disconnect, device number 57 [ 559.600708][ T5895] usb 5-1: selecting invalid altsetting 0 [ 559.711351][ T5895] usb 5-1: USB disconnect, device number 53 [ 559.714049][T11597] udevd[11597]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.807014][T12069] udevd[12069]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 560.009776][ T5978] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 560.089794][ T5895] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 560.162857][ T5978] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 560.171942][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.179933][ T5978] usb 2-1: Product: syz [ 560.184072][ T5978] usb 2-1: Manufacturer: syz [ 560.188632][ T5978] usb 2-1: SerialNumber: syz [ 560.194797][ T5978] usb 2-1: config 0 descriptor?? [ 560.243529][ T5895] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 560.252855][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.260886][ T5895] usb 5-1: Product: syz [ 560.265097][ T5895] usb 5-1: Manufacturer: syz [ 560.269659][ T5895] usb 5-1: SerialNumber: syz [ 560.276248][ T5895] usb 5-1: config 0 descriptor?? [ 560.406329][ T24] usb 2-1: USB disconnect, device number 71 [ 560.637720][ T30] audit: type=1800 audit(1767301361.673:642): pid=12185 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1634" name="file1" dev="overlay" ino=10 res=0 errno=0 [ 560.803006][T12196] bridge2: entered promiscuous mode [ 560.808262][T12196] bridge2: entered allmulticast mode [ 561.010127][T12197] tmpfs: Bad value for 'mpol' [ 562.217669][ T5895] usb 5-1: Firmware version (0.0) predates our first public release. [ 562.240030][ T5895] usb 5-1: Please update to version 0.2 or newer [ 562.313142][T12205] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1640'. [ 562.375206][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.424471][ T5895] usb 5-1: USB disconnect, device number 54 [ 563.312137][T12226] overlayfs: failed to resolve './file1': -2 [ 565.056780][T12240] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 565.065599][T12240] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 565.077317][T12240] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 565.709494][T12244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=530 sclass=netlink_route_socket pid=12244 comm=syz.0.1651 [ 565.724197][T12244] overlayfs: missing 'lowerdir' [ 565.762558][ T30] audit: type=1400 audit(1767301366.743:643): avc: denied { write } for pid=12243 comm="syz.0.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 566.102386][T12252] cgroup: Unknown subsys name 'cpuset' [ 568.579921][ T30] audit: type=1400 audit(1767301369.613:644): avc: denied { setattr } for pid=12258 comm="syz.0.1656" name="NETLINK" dev="sockfs" ino=35843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 568.962375][T12271] syzkaller0: entered promiscuous mode [ 568.967825][T12271] syzkaller0: entered allmulticast mode [ 569.015150][ T30] audit: type=1400 audit(1767301370.053:645): avc: denied { bind } for pid=12273 comm="syz.3.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 569.026099][T12273] delete_channel: no stack [ 571.642326][T12298] overlayfs: failed to clone upperpath [ 573.148402][ T30] audit: type=1400 audit(1767301374.183:646): avc: denied { setopt } for pid=12338 comm="syz.1.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 573.278970][T12342] set match dimension is over the limit! [ 573.436698][ T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 574.039887][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 574.050418][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 574.059424][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.094282][ T24] usb 2-1: Product: syz [ 574.098442][ T24] usb 2-1: Manufacturer: syz [ 574.136560][ T24] usb 2-1: SerialNumber: syz [ 574.315127][T12351] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 574.322265][T12351] overlayfs: failed to set xattr on upper [ 574.328003][T12351] overlayfs: ...falling back to redirect_dir=nofollow. [ 574.334898][T12351] overlayfs: ...falling back to uuid=null. [ 574.531479][ T24] usb 2-1: config 0 descriptor?? [ 574.801222][T12356] Failed to initialize the IGMP autojoin socket (err -2) [ 575.690454][ T5978] usb 2-1: USB disconnect, device number 72 [ 576.454771][T12370] overlayfs: missing 'lowerdir' [ 576.930404][T12381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12381 comm=syz.2.1689 [ 577.386648][T12377] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 577.393772][T12377] overlayfs: failed to set xattr on upper [ 577.399464][T12377] overlayfs: ...falling back to redirect_dir=nofollow. [ 577.406491][T12377] overlayfs: ...falling back to uuid=null. [ 577.423427][T12380] 9p: Bad value for 'rfdno' [ 577.625045][ T30] audit: type=1400 audit(1767301378.493:647): avc: denied { create } for pid=12378 comm="syz.0.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 577.835150][T12387] Failed to initialize the IGMP autojoin socket (err -2) [ 578.060849][ T30] audit: type=1326 audit(1767301378.813:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 578.084286][ T30] audit: type=1326 audit(1767301378.813:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 578.107668][ T30] audit: type=1326 audit(1767301378.823:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 578.111462][T12382] tmpfs: Unknown parameter '18446744073709551615' [ 578.247075][ T30] audit: type=1326 audit(1767301378.823:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 578.481818][ T30] audit: type=1326 audit(1767301378.823:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 578.550199][ T30] audit: type=1326 audit(1767301378.823:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 578.730205][ T30] audit: type=1326 audit(1767301378.833:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 578.881984][T12406] FAULT_INJECTION: forcing a failure. [ 578.881984][T12406] name failslab, interval 1, probability 0, space 0, times 0 [ 579.186935][ T30] audit: type=1326 audit(1767301378.833:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 579.251337][T12406] CPU: 1 UID: 0 PID: 12406 Comm: syz.2.1698 Not tainted syzkaller #0 PREEMPT(full) [ 579.251357][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.251366][T12406] Call Trace: [ 579.251372][T12406] [ 579.251378][T12406] dump_stack_lvl+0x16c/0x1f0 [ 579.251402][T12406] should_fail_ex+0x512/0x640 [ 579.251424][T12406] ? fs_reclaim_acquire+0xae/0x150 [ 579.251447][T12406] should_failslab+0xc2/0x120 [ 579.251468][T12406] __kmalloc_noprof+0xeb/0x910 [ 579.251493][T12406] ? tomoyo_encode2+0x100/0x3e0 [ 579.251519][T12406] ? tomoyo_encode2+0x100/0x3e0 [ 579.251539][T12406] tomoyo_encode2+0x100/0x3e0 [ 579.251563][T12406] tomoyo_encode+0x29/0x50 [ 579.251583][T12406] tomoyo_realpath_from_path+0x18f/0x6e0 [ 579.251611][T12406] tomoyo_path_number_perm+0x245/0x580 [ 579.251628][T12406] ? tomoyo_path_number_perm+0x237/0x580 [ 579.251648][T12406] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 579.251667][T12406] ? find_held_lock+0x2b/0x80 [ 579.251709][T12406] ? find_held_lock+0x2b/0x80 [ 579.251732][T12406] ? hook_file_ioctl_common+0x144/0x410 [ 579.251758][T12406] ? __fget_files+0x20e/0x3c0 [ 579.251782][T12406] security_file_ioctl+0x9b/0x240 [ 579.251802][T12406] __x64_sys_ioctl+0xb7/0x210 [ 579.251822][T12406] do_syscall_64+0xcd/0xf80 [ 579.251843][T12406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.251858][T12406] RIP: 0033:0x7ff82a38f749 [ 579.251872][T12406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.251887][T12406] RSP: 002b:00007ff82b28a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.251905][T12406] RAX: ffffffffffffffda RBX: 00007ff82a5e6090 RCX: 00007ff82a38f749 [ 579.251914][T12406] RDX: 0000200000000240 RSI: 00000000c004500a RDI: 0000000000000006 [ 579.251924][T12406] RBP: 00007ff82b28a090 R08: 0000000000000000 R09: 0000000000000000 [ 579.251932][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.251948][T12406] R13: 00007ff82a5e6128 R14: 00007ff82a5e6090 R15: 00007ffd7f039818 [ 579.251971][T12406] [ 579.251991][T12406] ERROR: Out of memory at tomoyo_realpath_from_path. [ 579.588207][ T30] audit: type=1326 audit(1767301378.833:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 579.705693][ T30] audit: type=1326 audit(1767301378.833:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 579.745272][ T30] audit: type=1326 audit(1767301378.843:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 579.794393][ T30] audit: type=1326 audit(1767301378.843:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 579.875715][ T30] audit: type=1326 audit(1767301378.843:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd478f749 code=0x7ffc0000 [ 579.960642][T12415] overlayfs: failed to resolve './file0': -2 [ 583.998113][ T5868] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 584.222023][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 584.245291][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 584.568481][ T5868] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 584.600131][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.621733][ T5868] usb 3-1: Product: syz [ 584.625953][ T5868] usb 3-1: Manufacturer: syz [ 584.647695][ T5868] usb 3-1: SerialNumber: syz [ 584.658396][ T5868] usb 3-1: config 0 descriptor?? [ 584.676146][ T5868] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 586.738502][ T5895] usb 3-1: USB disconnect, device number 58 [ 587.816960][T12507] random: crng reseeded on system resumption [ 588.315451][T12510] syzkaller0: entered promiscuous mode [ 588.369840][T12510] syzkaller0: entered allmulticast mode [ 588.642684][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 588.642704][ T30] audit: type=1400 audit(1767301389.683:672): avc: denied { getopt } for pid=12515 comm="syz.0.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 590.391498][T12537] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 591.011456][ T30] audit: type=1400 audit(1767301392.043:673): avc: denied { mount } for pid=12529 comm="syz.0.1730" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 591.532450][T12554] netlink: 'syz.3.1733': attribute type 16 has an invalid length. [ 591.635492][T12554] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1733'. [ 592.104298][T12550] tmpfs: Bad value for 'nr_blocks' [ 592.966724][ T30] audit: type=1400 audit(1767301394.003:674): avc: denied { write } for pid=12565 comm="syz.2.1739" name="igmp" dev="proc" ino=4026532821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 594.509093][T12592] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 594.541968][T12592] overlayfs: failed to set xattr on upper [ 594.585381][T12592] overlayfs: ...falling back to redirect_dir=nofollow. [ 594.593053][T12592] overlayfs: ...falling back to uuid=null. [ 595.302019][ T30] audit: type=1400 audit(1767301396.333:675): avc: denied { read } for pid=12605 comm="syz.3.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 596.048364][T12607] bond2: entered allmulticast mode [ 596.060459][T12607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.539908][T12628] overlayfs: failed to clone upperpath [ 597.773084][T12632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'. [ 599.153790][T12652] set match dimension is over the limit! [ 599.907781][ T30] audit: type=1400 audit(1767301400.946:676): avc: denied { name_bind } for pid=12653 comm="syz.3.1757" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 601.289255][T12675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1769'. [ 601.816345][T12691] netlink: 'syz.1.1774': attribute type 16 has an invalid length. [ 601.824275][T12691] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1774'. [ 601.915701][T12691] tmpfs: Bad value for 'nr_blocks' [ 602.519808][ T5978] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 602.669290][ T30] audit: type=1400 audit(1767301403.706:677): avc: denied { create } for pid=12708 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 602.689567][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 602.701427][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 602.719774][ T5978] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 602.739610][ T30] audit: type=1400 audit(1767301403.716:678): avc: denied { sys_admin } for pid=12708 comm="syz.1.1781" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 602.760717][ T5978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 602.779304][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 602.792395][ T5978] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=9e.7e [ 602.802428][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.811064][ T5978] usb 5-1: Product: syz [ 602.815475][ T5978] usb 5-1: Manufacturer: syz [ 602.834455][ T5978] usb 5-1: SerialNumber: syz [ 602.842213][ T5978] usb 5-1: config 0 descriptor?? [ 602.859048][ T5978] usbtest 5-1:0.0: couldn't get endpoints, -22 [ 602.865355][ T5978] usbtest 5-1:0.0: probe with driver usbtest failed with error -22 [ 602.940655][T12719] FAULT_INJECTION: forcing a failure. [ 602.940655][T12719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.002840][T12719] CPU: 1 UID: 0 PID: 12719 Comm: syz.2.1782 Not tainted syzkaller #0 PREEMPT(full) [ 603.002863][T12719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.002872][T12719] Call Trace: [ 603.002878][T12719] [ 603.002884][T12719] dump_stack_lvl+0x16c/0x1f0 [ 603.002909][T12719] should_fail_ex+0x512/0x640 [ 603.002938][T12719] _copy_from_user+0x2e/0xd0 [ 603.002963][T12719] kvm_arch_vcpu_ioctl+0x2d42/0x54b0 [ 603.002988][T12719] ? stack_trace_save+0x8e/0xc0 [ 603.003007][T12719] ? __pfx_stack_trace_save+0x10/0x10 [ 603.003026][T12719] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 603.003048][T12719] ? __lock_acquire+0x436/0x2890 [ 603.003070][T12719] ? kasan_save_stack+0x42/0x60 [ 603.003089][T12719] ? kasan_save_stack+0x33/0x60 [ 603.003106][T12719] ? kasan_save_track+0x14/0x30 [ 603.003124][T12719] ? kasan_save_free_info+0x3b/0x60 [ 603.003143][T12719] ? __lock_acquire+0x436/0x2890 [ 603.003172][T12719] ? lock_acquire+0x179/0x330 [ 603.003193][T12719] ? __pfx___might_resched+0x10/0x10 [ 603.003211][T12719] ? rcu_is_watching+0x12/0xc0 [ 603.003228][T12719] ? trace_contention_end+0xdd/0x110 [ 603.003249][T12719] ? __mutex_lock+0x27b/0x1ca0 [ 603.003273][T12719] ? kvm_vcpu_ioctl+0x316/0x16d0 [ 603.003302][T12719] ? __pfx___mutex_lock+0x10/0x10 [ 603.003335][T12719] ? tomoyo_path_number_perm+0x18d/0x580 [ 603.003358][T12719] ? kvm_vcpu_ioctl+0x1293/0x16d0 [ 603.003381][T12719] kvm_vcpu_ioctl+0x1293/0x16d0 [ 603.003408][T12719] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 603.003434][T12719] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 603.003455][T12719] ? do_vfs_ioctl+0x128/0x14f0 [ 603.003476][T12719] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 603.003495][T12719] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 603.003526][T12719] ? hook_file_ioctl_common+0x144/0x410 [ 603.003559][T12719] ? selinux_file_ioctl+0x180/0x270 [ 603.003578][T12719] ? selinux_file_ioctl+0xb4/0x270 [ 603.003607][T12719] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 603.003634][T12719] __x64_sys_ioctl+0x18e/0x210 [ 603.003655][T12719] do_syscall_64+0xcd/0xf80 [ 603.003677][T12719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.003693][T12719] RIP: 0033:0x7ff82a38f749 [ 603.003706][T12719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.003722][T12719] RSP: 002b:00007ff82b2ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.003738][T12719] RAX: ffffffffffffffda RBX: 00007ff82a5e5fa0 RCX: 00007ff82a38f749 [ 603.003749][T12719] RDX: 0000200000000040 RSI: 000000004008ae9c RDI: 0000000000000006 [ 603.003758][T12719] RBP: 00007ff82b2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 603.003768][T12719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.003777][T12719] R13: 00007ff82a5e6038 R14: 00007ff82a5e5fa0 R15: 00007ffd7f039818 [ 603.003802][T12719] [ 603.606094][ T5978] usb 5-1: USB disconnect, device number 55 [ 604.589824][ T5978] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 604.769851][ T5978] usb 2-1: Using ep0 maxpacket: 8 [ 604.779858][ T5978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 604.932227][ T5978] usb 2-1: config 136 has an invalid descriptor of length 7, skipping remainder of the config [ 604.970727][ T5978] usb 2-1: config 136 has 0 interfaces, different from the descriptor's value: 18 [ 605.023875][ T5978] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 605.052591][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.077586][ T5978] usb 2-1: Product: syz [ 605.093274][ T5978] usb 2-1: Manufacturer: syz [ 605.108044][ T5978] usb 2-1: SerialNumber: syz [ 605.409817][ T7003] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 605.637837][ T7003] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 605.685440][ T7003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.774964][ T5978] usb 2-1: USB disconnect, device number 73 [ 605.833609][ T7003] usb 5-1: Product: syz [ 605.857820][ T7003] usb 5-1: Manufacturer: syz [ 605.870502][ T7003] usb 5-1: SerialNumber: syz [ 605.887842][ T7003] usb 5-1: config 0 descriptor?? [ 605.902869][T12772] netlink: 'syz.0.1793': attribute type 13 has an invalid length. [ 605.903697][ T7003] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 606.133355][T12772] team_slave_0: left promiscuous mode [ 606.139113][T12772] team_slave_1: left promiscuous mode [ 606.239317][T12772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.251425][T12772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.306429][ T7003] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 606.432223][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 606.518394][ T5978] usb 5-1: USB disconnect, device number 56 [ 606.581979][ T4485] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.589806][ T24] usb 3-1: device descriptor read/64, error -71 [ 606.593266][ T4485] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.623268][ T4485] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.632897][ T4485] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.812738][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 606.824412][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 606.841186][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 606.979824][ T24] usb 3-1: device descriptor read/64, error -71 [ 607.090582][ T24] usb usb3-port1: attempt power cycle [ 607.798974][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 607.805894][T12809] overlayfs: failed to resolve './file1': -2 [ 607.855995][ T24] usb 3-1: device descriptor read/8, error -71 [ 608.161722][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 608.228698][ T24] usb 3-1: device descriptor read/8, error -71 [ 608.340024][ T24] usb usb3-port1: unable to enumerate USB device [ 608.971465][T12822] fuse: Unknown parameter 'grou00000000000000000000' [ 611.229405][T12846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1815'. [ 611.478274][T12853] overlayfs: failed to resolve './file0': -2 [ 612.566592][T12868] fuse: Unknown parameter 'grou00000000000000000000' [ 612.582884][T12859] comedi: valid board names for 8255 driver are: [ 612.592156][T12859] 8255 [ 612.612684][T12859] comedi: valid board names for vmk80xx driver are: [ 612.619325][T12859] vmk80xx [ 612.624956][T12859] comedi: valid board names for usbduxsigma driver are: [ 612.906953][T12859] usbduxsigma [ 612.910962][T12859] comedi: valid board names for usbduxfast driver are: [ 612.918549][T12859] usbduxfast [ 612.922214][T12859] comedi: valid board names for usbdux driver are: [ 612.983635][T12859] usbdux [ 612.987124][T12859] comedi: valid board names for ni6501 driver are: [ 612.994888][T12859] ni6501 [ 612.997840][T12859] comedi: valid board names for dt9812 driver are: [ 613.010497][T12859] dt9812 [ 613.036757][T12859] comedi: valid board names for ni_labpc_cs driver are: [ 613.039010][T12876] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 613.050736][T12876] overlayfs: failed to set xattr on upper [ 613.056579][T12876] overlayfs: ...falling back to redirect_dir=nofollow. [ 613.063479][T12876] overlayfs: ...falling back to uuid=null. [ 613.069822][T12859] ni_labpc_cs [ 613.079677][T12859] comedi: valid board names for ni_daq_700 driver are: [ 613.087697][T12859] ni_daq_700 [ 613.091079][T12859] comedi: valid board names for labpc_pci driver are: [ 613.101215][T12859] labpc_pci [ 613.110100][T12859] comedi: valid board names for adl_pci9118 driver are: [ 613.119241][T12859] pci9118dg [ 613.133759][T12859] pci9118hg [ 613.138036][T12859] pci9118hr [ 613.150978][T12859] comedi: valid board names for 8255_pci driver are: [ 613.158046][T12859] 8255_pci [ 613.161777][T12859] comedi: valid board names for s526 driver are: [ 613.168237][T12859] s526 [ 613.172237][T12859] comedi: valid board names for multiq3 driver are: [ 613.178846][T12859] multiq3 [ 613.182305][T12859] comedi: valid board names for pcmuio driver are: [ 613.188799][T12859] pcmuio48 [ 613.191978][T12859] pcmuio96 [ 613.195082][T12859] comedi: valid board names for pcmmio driver are: [ 613.202060][T12859] pcmmio [ 613.208077][T12859] comedi: valid board names for pcmda12 driver are: [ 613.215288][T12859] pcmda12 [ 613.218665][T12859] comedi: valid board names for pcmad driver are: [ 613.228064][T12859] pcmad12 [ 613.233386][T12859] pcmad16 [ 613.276513][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 613.284201][T12859] comedi: valid board names for ni_labpc driver are: [ 613.334645][T12859] lab-pc-1200 [ 613.339975][T12100] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 613.450502][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 613.459647][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.468502][T12859] lab-pc-1200ai [ 613.472344][T12859] lab-pc+ [ 613.475359][T12859] comedi: valid board names for atmio16 driver are: [ 613.489622][ T24] usb 5-1: Product: syz [ 613.497814][ T24] usb 5-1: Manufacturer: syz [ 613.513188][T12888] trusted_key: encrypted_key: insufficient parameters specified [ 613.521981][ T24] usb 5-1: SerialNumber: syz [ 613.561557][ T24] usb 5-1: config 0 descriptor?? [ 613.667086][T12859] atmio16 [ 613.670240][T12859] atmio16d [ 613.697209][T12859] comedi: valid board names for ni_at_ao driver are: [ 613.924087][T12859] at-ao-6 [ 613.932578][ T24] usb 5-1: USB disconnect, device number 57 [ 613.959828][T12859] at-ao-10 [ 613.998781][T12859] comedi: valid board names for ni_at_a2150 driver are: [ 614.046477][T12859] ni_at_a2150 [ 614.068577][T12859] comedi: valid board names for adq12b driver are: [ 614.109658][T12859] adq12b [ 614.124172][T12859] comedi: valid board names for mpc624 driver are: [ 614.152645][T12859] mpc624 [ 614.165339][T12875] netlink: 'syz.4.1822': attribute type 1 has an invalid length. [ 614.175458][T12859] comedi: valid board names for c6xdigio driver are: [ 614.204022][T12859] c6xdigio [ 614.223187][T12859] comedi: valid board names for aio_iiro_16 driver are: [ 614.239809][T12875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 614.265452][T12859] aio_iiro_16 [ 614.292648][T12859] comedi: valid board names for aio_aio12_8 driver are: [ 614.316848][T12898] bond2: (slave veth15): Enslaving as an active interface with an up link [ 614.359241][T12859] aio_aio12_8 [ 614.383032][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 614.398106][T12859] aio_ai12_8 [ 614.409914][T12859] aio_ao12_4 [ 614.458232][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1822'. [ 614.491342][T12859] comedi: valid board names for fl512 driver are: [ 614.513821][T12898] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 614.523465][T12859] fl512 [ 614.530780][T12859] comedi: valid board names for dmm32at driver are: [ 614.551285][T12859] dmm32at [ 614.574199][T12859] comedi: valid board names for dt282x driver are: [ 614.602579][T12859] dt2821 [ 614.618918][T12859] dt2821-f [ 614.854257][T12859] dt2821-g [ 614.857399][T12859] dt2823 [ 614.862834][T12859] dt2824-pgh [ 614.867270][T12859] dt2824-pgl [ 614.882719][T12859] dt2825 [ 615.459769][T12859] dt2827 [ 615.462845][T12859] dt2828 [ 615.465840][T12859] dt2829 [ 615.468826][T12859] dt21-ez [ 615.498962][T12859] dt23-ez [ 615.608155][T12859] dt24-ez [ 615.629414][T12859] dt24-ez-pgl [ 615.636835][T12875] bond2 (unregistering): (slave veth15): Releasing backup interface [ 615.656178][T12859] comedi: valid board names for dt2817 driver are: [ 615.671406][T12875] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 615.680499][T12859] dt2817 [ 615.682267][T12875] bond2 (unregistering): Released all slaves [ 615.860802][T12859] comedi: valid board names for dt2815 driver are: [ 616.288073][T12859] dt2815 [ 616.302561][T12859] comedi: valid board names for dt2814 driver are: [ 616.310329][T12859] dt2814 [ 616.317803][T12859] comedi: valid board names for dt2811 driver are: [ 616.325115][T12859] dt2811-pgh [ 616.328446][T12859] dt2811-pgl [ 616.332390][T12859] comedi: valid board names for dt2801 driver are: [ 616.338966][T12859] dt2801 [ 616.342192][T12859] comedi: valid board names for das6402 driver are: [ 616.348818][T12859] das6402-12 [ 617.181499][T12859] das6402-16 [ 617.184781][T12859] comedi: valid board names for das1800 driver are: [ 617.259777][T12859] das-1701st [ 617.272489][T12859] das-1701st-da [ 617.282131][T12918] fuse: Unknown parameter 'grou00000000000000000000' [ 617.309783][ T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 617.326501][T12859] das-1702st [ 617.330334][T12859] das-1702st-da [ 617.333852][T12859] das-1702hr [ 617.337100][T12859] das-1702hr-da [ 617.390938][T12859] das-1701ao [ 617.394218][T12859] das-1702ao [ 617.397482][T12859] das-1801st [ 617.420914][T12859] das-1801st-da [ 617.424444][T12859] das-1802st [ 617.427692][T12859] das-1802st-da [ 617.459780][T12859] das-1802hr [ 617.471830][T12859] das-1802hr-da [ 617.485502][T12859] das-1801hc [ 617.493093][T12859] das-1802hc [ 617.502006][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 617.508633][ T24] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 617.528150][T12859] das-1801ao [ 617.531527][ T24] usb 2-1: config 0 has no interface number 0 [ 617.643005][T12859] das-1802ao [ 617.651414][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 617.669812][T12859] comedi: valid board names for das800 driver are: [ 617.676388][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.684526][ T24] usb 2-1: Product: syz [ 617.688752][T12859] das-800 [ 617.691922][ T24] usb 2-1: Manufacturer: syz [ 617.696603][ T24] usb 2-1: SerialNumber: syz [ 617.781531][T12925] /dev/nullb0: Can't lookup blockdev [ 618.103841][T12859] cio-das800 [ 618.131987][ T24] usb 2-1: config 0 descriptor?? [ 618.143547][T12859] das-801 [ 618.149659][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 618.159761][ T5895] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 618.159929][T12859] cio-das801 [ 618.170693][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 618.170693][ T24] [ 618.177987][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 618.177987][ T24] [ 618.188570][T12859] das-802 [ 618.191647][T12859] cio-das802 [ 618.194957][T12859] cio-das802/16 [ 618.200089][T12859] comedi: valid board names for isa-das08 driver are: [ 618.206890][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 618.223623][T12859] isa-das08 [ 618.227878][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 618.237155][T12859] das08-pgm [ 618.247338][T12859] das08-pgh [ 618.251128][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 618.261363][T12859] das08-pgl [ 618.265641][ T24] usb 2-1: media controller created [ 618.270926][T12859] das08-aoh [ 618.274145][T12859] das08-aol [ 618.277740][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 618.284560][T12859] das08-aom [ 618.292884][T12859] das08/jr-ao [ 618.296296][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 618.305039][T12859] das08jr-16-ao [ 618.308640][T12859] pc104-das08 [ 618.312122][ T24] dvb-usb: MAC address reading failed. [ 618.318746][T12859] das08jr/16 [ 618.328816][T12859] comedi: valid board names for das16m1 driver are: [ 618.329951][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 618.336869][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.391226][ T5895] usb 5-1: config index 0 descriptor too short (expected 61458, got 18) [ 618.406806][ T5895] usb 5-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 618.424794][ T5895] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 618.443368][ T5895] usb 5-1: config 0 has no interface number 0 [ 618.448646][T12859] das16m1 [ 618.467681][ T5895] usb 5-1: too many endpoints for config 0 interface 1 altsetting 118: 194, using maximum allowed: 30 [ 618.472288][T12859] comedi: valid board names for dac02 driver are: [ 618.495547][T12859] dac02 [ 618.509008][ T5895] usb 5-1: config 0 interface 1 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 618.535775][T12859] comedi: valid board names for rti802 driver are: [ 618.540811][ T5895] usb 5-1: config 0 interface 1 has no altsetting 0 [ 618.552150][ T5895] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 618.561384][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.569403][ T5895] usb 5-1: Product: syz [ 618.574057][ T5895] usb 5-1: Manufacturer: syz [ 618.578713][ T5895] usb 5-1: SerialNumber: syz [ 618.589009][ T5895] usb 5-1: config 0 descriptor?? [ 618.657426][T12934] set match dimension is over the limit! [ 618.673248][T12859] rti802 [ 618.676244][T12859] comedi: valid board names for rti800 driver are: [ 618.691714][T12859] rti800 [ 618.705028][T12859] rti815 [ 618.710116][ T24] DVB: Unable to find symbol stb0899_attach() [ 618.717723][T12859] comedi: valid board names for pcm3724 driver are: [ 618.837019][ T5895] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 618.918319][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 618.968083][T12859] pcm3724 [ 618.978461][T12859] comedi: valid board names for pcl818 driver are: [ 618.998539][T12859] pcl818l [ 619.010262][T12859] pcl818h [ 619.018476][T12859] pcl818hd [ 619.026736][T12859] pcl818hg [ 619.038797][T12859] pcl818 [ 619.059762][ T24] rc_core: IR keymap rc-tt-1500 not found [ 619.067591][T12859] pcl718 [ 619.076107][T12859] pcm3718 [ 619.082282][ T24] Registered IR keymap rc-empty [ 619.088211][T12859] comedi: valid board names for pcl816 driver are: [ 619.098061][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 619.108244][T12859] pcl816 [ 619.111273][T12859] pcl814b [ 619.114327][T12859] comedi: valid board names for pcl812 driver are: [ 619.123180][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input19 [ 619.134065][T12859] pcl812 [ 619.136995][T12859] pcl812pg [ 619.258211][T12859] acl8112pg [ 619.263092][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 619.270185][T12859] acl8112dg [ 619.273423][T12859] acl8112hg [ 619.277062][T12859] a821pgl [ 619.280485][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 619.280485][ T24] [ 619.365042][T12945] overlayfs: failed to clone upperpath [ 619.391920][ T7003] dvb-usb: bulk message failed: -22 (4/0) [ 620.027275][ T7003] dvb-usb: error -22 while querying for an remote control event. [ 620.042908][ T5895] gspca_spca1528: reg_w err -110 [ 620.047925][T12859] a821pglnda [ 620.051278][T12859] a821pgh [ 620.054285][T12859] a822pgl [ 620.057288][T12859] a822pgh [ 620.060352][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 620.092343][T12859] a823pgl [ 620.095364][T12859] a823pgh [ 620.120032][ T24] usb 2-1: USB disconnect, device number 74 [ 620.137500][ T5895] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 620.148848][T12859] pcl813 [ 620.155776][T12859] pcl813b [ 620.158775][T12859] acl8113 [ 620.171027][T12859] iso813 [ 620.173942][T12859] acl8216 [ 620.176931][T12859] a826pg [ 620.284596][T12859] comedi: valid board names for pcl730 driver are: [ 620.302923][ T5895] usb 5-1: USB disconnect, device number 58 [ 620.319918][T12859] pcl730 [ 620.339737][T12859] iso730 [ 620.342674][T12859] acl7130 [ 620.357777][T12959] sock: sock_set_timeout: `syz.0.1842' (pid 12959) tries to set negative timeout [ 620.359739][T12859] pcm3730 [ 620.371189][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 620.385807][T12859] pcl725 [ 620.388734][T12859] p8r8dio [ 620.404190][T12859] acl7225b [ 620.407289][T12859] p16r16dio [ 620.424400][T12859] pcl733 [ 620.427322][T12859] pcl734 [ 620.443991][T12859] opmm-1616-xt [ 620.457563][T12859] pearl-mm-p [ 620.466301][T12859] ir104-pbf [ 620.477537][T12859] comedi: valid board names for pcl726 driver are: [ 620.495579][T12859] pcl726 [ 620.504967][T12859] pcl727 [ 620.514305][T12859] pcl728 [ 620.521356][T12859] acl6126 [ 620.530551][T12859] acl6128 [ 620.537674][T12859] comedi: valid board names for pcl724 driver are: [ 620.554502][T12859] pcl724 [ 620.559530][T12859] pcl722 [ 620.565617][T12859] pcl731 [ 620.571898][T12859] acl7122 [ 620.578017][T12859] acl7124 [ 620.585221][T12859] pet48dio [ 620.592488][T12859] pcmio48 [ 620.598616][T12859] onyx-mm-dio [ 620.607289][T12859] comedi: valid board names for pcl711 driver are: [ 620.625523][T12859] pcl711 [ 620.632526][T12859] pcl711b [ 620.637672][T12859] acl8112hg [ 620.644029][T12859] acl8112dg [ 620.648998][T12859] comedi: valid board names for amplc_pc263 driver are: [ 620.658127][T12859] pc263 [ 620.662833][T12859] comedi: valid board names for amplc_pc236 driver are: [ 620.672900][T12859] pc36at [ 620.677955][T12859] comedi: valid board names for amplc_dio200 driver are: [ 620.733971][T12859] pc212e [ 620.739029][T12859] pc214e [ 620.744301][T12859] pc215e [ 620.749029][T12859] pc218e [ 620.755165][T12859] pc272e [ 620.759162][T12859] comedi: valid board names for comedi_parport driver are: [ 620.766985][T12967] fuse: Unknown parameter 'group_i00000000000000000000' [ 620.769904][ T5895] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 620.797997][T12859] comedi_parport [ 620.929844][ T5895] usb 5-1: device descriptor read/64, error -71 [ 620.956377][T12859] comedi: valid board names for comedi_test driver are: [ 620.972762][T12859] comedi_test [ 620.978239][T12859] comedi: valid board names for comedi_bond driver are: [ 621.039818][T12859] comedi_bond [ 621.089904][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1844'. [ 621.122793][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1844'. [ 621.239176][ T5895] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 621.519852][ T5895] usb 5-1: device descriptor read/64, error -71 [ 621.719034][ T5895] usb usb5-port1: attempt power cycle [ 623.073510][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 623.106909][ T5895] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 623.148094][ T5895] usb 5-1: device descriptor read/8, error -71 [ 624.105469][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.323632][T13002] fuse: Unknown parameter 'group_i00000000000000000000' [ 625.179510][T13019] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 625.666186][T13020] 9p: Bad value for 'rfdno' [ 626.240240][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 626.675683][T13029] nbd: must specify an index to disconnect [ 627.500035][ T5868] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 627.508091][T12100] block nbd0: Receive control failed (result -32) [ 627.519323][T13021] block nbd0: shutting down sockets [ 627.729918][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 627.776877][ T5868] usb 2-1: no configurations [ 628.089816][ T5868] usb 2-1: can't read configurations, error -22 [ 628.251522][ T7003] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 628.261629][ T5868] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 628.456626][ T30] audit: type=1400 audit(1767301429.492:679): avc: denied { create } for pid=13046 comm="syz.3.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 628.521336][ T7003] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=54.c3 [ 628.530751][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 628.538276][ T5868] usb 2-1: no configurations [ 628.547078][ T5868] usb 2-1: can't read configurations, error -22 [ 628.557184][ T7003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.574284][ T5868] usb usb2-port1: attempt power cycle [ 628.601350][ T7003] usb 3-1: config 0 descriptor?? [ 628.640095][ T7003] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 628.676400][T13055] fuse: Unknown parameter 'group_i00000000000000000000' [ 629.329906][ T5868] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 629.620317][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 629.625999][ T5868] usb 2-1: no configurations [ 629.635243][ T5868] usb 2-1: can't read configurations, error -22 [ 629.779781][ T5868] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 630.550278][ T5895] usb 3-1: USB disconnect, device number 63 [ 630.649364][ T5868] usb 2-1: device descriptor read/8, error -71 [ 630.771579][ T5868] usb usb2-port1: unable to enumerate USB device [ 633.223089][T13096] Failed to initialize the IGMP autojoin socket (err -2) [ 633.224805][ T5868] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 633.410047][ T5868] usb 2-1: device descriptor read/64, error -71 [ 633.646096][ T30] audit: type=1400 audit(1767301434.672:680): avc: denied { create } for pid=13098 comm="syz.0.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 633.779819][ T5868] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 633.838201][ T30] audit: type=1400 audit(1767301434.752:681): avc: denied { ioctl } for pid=13098 comm="syz.0.1879" path="socket:[39329]" dev="sockfs" ino=39329 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 634.039858][ T5868] usb 2-1: device descriptor read/64, error -71 [ 634.197619][ T5868] usb usb2-port1: attempt power cycle [ 634.520686][ T30] audit: type=1400 audit(1767301435.222:682): avc: denied { name_bind } for pid=13103 comm="syz.2.1880" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 634.919778][ T5868] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 635.026689][ T5868] usb 2-1: device descriptor read/8, error -71 [ 635.449836][ T5868] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 635.521744][ T5868] usb 2-1: device descriptor read/8, error -71 [ 635.539827][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 635.640477][ T5868] usb usb2-port1: unable to enumerate USB device [ 635.703004][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 635.713304][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.729935][ T5895] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 635.730073][ T24] usb 3-1: Product: syz [ 635.743413][ T24] usb 3-1: Manufacturer: syz [ 635.749961][ T24] usb 3-1: SerialNumber: syz [ 635.982244][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.004743][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.024606][ T5895] usb 5-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 636.034787][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.060349][ T5895] usb 5-1: config 0 descriptor?? [ 636.125062][T13123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1884'. [ 636.389966][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 636.434871][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 636.450716][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 636.466139][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 636.483921][ T5895] nzxt-smart2 0003:1E71:2011.0007: item fetching failed at offset 2/5 [ 636.495682][ T5895] nzxt-smart2 0003:1E71:2011.0007: probe with driver nzxt-smart2 failed with error -22 [ 636.511318][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 636.527011][ T24] usb 3-1: USB disconnect, device number 64 [ 636.559760][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 636.565768][ T10] usb 2-1: no configurations [ 636.570902][ T10] usb 2-1: can't read configurations, error -22 [ 636.698939][ T5895] usb 5-1: USB disconnect, device number 63 [ 636.706349][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 636.869823][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 636.875493][ T10] usb 2-1: no configurations [ 636.880578][ T10] usb 2-1: can't read configurations, error -22 [ 636.886965][ T10] usb usb2-port1: attempt power cycle [ 637.379861][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 637.470119][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 637.502863][T13135] 9p: Bad value for 'rfdno' [ 637.507977][ T10] usb 2-1: no configurations [ 637.516176][ T10] usb 2-1: can't read configurations, error -22 [ 637.611397][T13137] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1889'. [ 637.999809][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 638.277552][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 638.290556][ T10] usb 2-1: no configurations [ 638.302827][ T10] usb 2-1: can't read configurations, error -22 [ 638.318198][ T10] usb usb2-port1: unable to enumerate USB device [ 639.259999][T13157] tipc: Started in network mode [ 639.264930][T13157] tipc: Node identity 4, cluster identity 4711 [ 639.271142][T13157] tipc: Node number set to 4 [ 640.017459][T13170] No control pipe specified [ 640.527887][ T30] audit: type=1400 audit(1767301441.322:683): avc: denied { accept } for pid=13168 comm="syz.1.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 640.642595][T13177] overlayfs: failed to clone upperpath [ 642.686497][T13191] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1903'. [ 642.729779][ T5978] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 643.731209][ T5978] usb 2-1: Using ep0 maxpacket: 8 [ 643.755623][ T5978] usb 2-1: config 0 has an invalid interface number: 144 but max is 0 [ 643.780296][ T5978] usb 2-1: config 0 has no interface number 0 [ 644.318659][ T5978] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=ce.e9 [ 645.145458][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.200280][ T5978] usb 2-1: config 0 descriptor?? [ 645.205704][ T5978] usb 2-1: can't set config #0, error -71 [ 645.220242][ T5978] usb 2-1: USB disconnect, device number 87 [ 645.619509][T13229] tmpfs: Bad value for 'nr_blocks' [ 647.122925][ T30] audit: type=1400 audit(1767301447.252:684): avc: denied { mount } for pid=13239 comm="syz.4.1918" name="/" dev="hugetlbfs" ino=40244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 647.690966][T13244] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 647.697917][T13244] overlayfs: failed to set xattr on upper [ 647.704005][T13244] overlayfs: ...falling back to redirect_dir=nofollow. [ 647.710862][T13244] overlayfs: ...falling back to uuid=null. [ 649.232022][T12100] Bluetooth: hci4: command 0x0406 tx timeout [ 650.088667][ T30] audit: type=1400 audit(1767301451.126:685): avc: denied { sys_module } for pid=13271 comm="syz.2.1927" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 650.211863][T13277] set match dimension is over the limit! [ 650.477346][T13274] tmpfs: Bad value for 'nr_blocks' [ 650.552284][T13279] set match dimension is over the limit! [ 654.521784][T13296] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 654.528719][T13296] overlayfs: failed to set xattr on upper [ 654.536202][T13296] overlayfs: ...falling back to redirect_dir=nofollow. [ 654.544402][T13296] overlayfs: ...falling back to uuid=null. [ 655.719752][T13311] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1934'. [ 657.546695][T13314] tmpfs: Bad value for 'nr_blocks' [ 660.576742][T13345] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 660.583911][T13345] overlayfs: failed to set xattr on upper [ 660.589887][T13345] overlayfs: ...falling back to redirect_dir=nofollow. [ 660.598441][T13345] overlayfs: ...falling back to uuid=null. [ 662.758088][T13362] overlayfs: failed to clone lowerpath [ 663.370514][T13372] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1951'. [ 663.668621][T13382] tmpfs: Bad value for 'nr_blocks' [ 665.190997][T13405] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 665.198083][T13405] overlayfs: failed to set xattr on upper [ 665.203956][T13405] overlayfs: ...falling back to redirect_dir=nofollow. [ 665.210917][T13405] overlayfs: ...falling back to uuid=null. [ 665.839784][ T5978] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 666.052039][ T5978] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.066824][ T5978] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 666.915479][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 666.927585][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 666.959968][ T5978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 667.041742][ T5978] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 667.051027][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 667.072151][ T5978] usb 3-1: Product: syz [ 667.076318][ T5978] usb 3-1: Manufacturer: syz [ 667.121982][ T5978] usb 3-1: SerialNumber: syz [ 667.139578][ T5978] usb 3-1: config 0 descriptor?? [ 667.360400][ T5978] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 667.372714][ T5978] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 667.416032][T13426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1963'. [ 667.561994][ T5978] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 667.629802][ T5978] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 667.806894][ T5978] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 667.830571][ T5978] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 668.549881][T13439] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1965'. [ 668.897550][ T30] audit: type=1400 audit(1767301469.936:686): avc: denied { execute } for pid=13430 comm="syz.4.1967" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 669.233807][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1972'. [ 669.242861][T13446] netlink: 'syz.3.1972': attribute type 1 has an invalid length. [ 669.243765][ T5978] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 669.257742][T13446] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1972'. [ 669.523944][ T5978] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 669.767293][ T5978] usb 3-1: USB disconnect, device number 65 [ 672.027494][T13478] Failed to initialize the IGMP autojoin socket (err -2) [ 672.109721][T13479] vivid-003: disconnect [ 672.118372][T13479] vivid-003: reconnect [ 673.584249][T13485] Failed to initialize the IGMP autojoin socket (err -2) [ 673.665803][T13486] vivid-000: disconnect [ 673.674600][T13486] vivid-000: reconnect [ 673.798600][ T7003] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 675.345748][ T7003] usb 5-1: Using ep0 maxpacket: 32 [ 675.408007][ T7003] usb 5-1: device descriptor read/all, error -71 [ 675.464031][T13493] FAULT_INJECTION: forcing a failure. [ 675.464031][T13493] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 675.549794][T13493] CPU: 0 UID: 0 PID: 13493 Comm: syz.1.1984 Not tainted syzkaller #0 PREEMPT(full) [ 675.549818][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.549827][T13493] Call Trace: [ 675.549833][T13493] [ 675.549840][T13493] dump_stack_lvl+0x16c/0x1f0 [ 675.549872][T13493] should_fail_ex+0x512/0x640 [ 675.549902][T13493] should_fail_alloc_page+0xe7/0x130 [ 675.549927][T13493] prepare_alloc_pages+0x401/0x670 [ 675.549953][T13493] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 675.549976][T13493] ? find_held_lock+0x2b/0x80 [ 675.550002][T13493] ? is_bpf_text_address+0x8a/0x1a0 [ 675.550021][T13493] ? bpf_ksym_find+0x127/0x1c0 [ 675.550043][T13493] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 675.550063][T13493] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 675.550081][T13493] ? __kernel_text_address+0xd/0x40 [ 675.550104][T13493] ? unwind_get_return_address+0x59/0xa0 [ 675.550129][T13493] ? arch_stack_walk+0xa6/0x100 [ 675.550160][T13493] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.550181][T13493] ? policy_nodemask+0xea/0x4e0 [ 675.550206][T13493] alloc_pages_mpol+0x1fb/0x550 [ 675.550229][T13493] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 675.550258][T13493] folio_alloc_mpol_noprof+0x36/0x2f0 [ 675.550284][T13493] vma_alloc_folio_noprof+0xed/0x1e0 [ 675.550309][T13493] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 675.550341][T13493] do_anonymous_page+0xc81/0x2190 [ 675.550376][T13493] __handle_mm_fault+0x1ecf/0x2bb0 [ 675.550405][T13493] ? reacquire_held_locks+0xcd/0x1f0 [ 675.550426][T13493] ? __pfx___handle_mm_fault+0x10/0x10 [ 675.550454][T13493] ? lock_vma_under_rcu+0x176/0x580 [ 675.550500][T13493] handle_mm_fault+0x3fe/0xad0 [ 675.550530][T13493] do_user_addr_fault+0x60c/0x1370 [ 675.550554][T13493] ? rcu_is_watching+0x12/0xc0 [ 675.550573][T13493] exc_page_fault+0x64/0xc0 [ 675.550594][T13493] asm_exc_page_fault+0x26/0x30 [ 675.550610][T13493] RIP: 0033:0x7f265a460616 [ 675.550624][T13493] Code: 00 00 00 00 41 57 31 c0 41 56 49 89 d6 41 55 49 89 f5 48 89 d6 41 54 49 89 fc 48 8d 3d 6c 4e 1b 00 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 4c d9 fe ff 4d 85 f6 0f 84 46 0a 00 [ 675.550640][T13493] RSP: 002b:00007f265b4a1f70 EFLAGS: 00010202 [ 675.550654][T13493] RAX: 0000000000000000 RBX: 00007f265a7e5fa0 RCX: 0000200000000000 [ 675.550664][T13493] RDX: 00002000000002c0 RSI: 00002000000002c0 RDI: 00007f265a615479 [ 675.550674][T13493] RBP: 00007f265b4a4090 R08: 00007f265a44e2f0 R09: 0000000000000000 [ 675.550684][T13493] R10: 0000000000000000 R11: 00002000000002c0 R12: 0000000000000000 [ 675.550693][T13493] R13: 0000000000000024 R14: 00002000000002c0 R15: 00007ffde68feaa8 [ 675.550717][T13493] [ 675.550966][T13493] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 675.699773][ T5868] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 675.995439][ T5868] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 676.004771][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.107028][ T5868] usb 3-1: config 0 descriptor?? [ 676.323000][ T5978] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 676.480143][ T5978] usb 2-1: Using ep0 maxpacket: 16 [ 676.494793][ T5978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 676.514639][ T5978] usb 2-1: config 255 has an invalid interface number: 16 but max is 0 [ 676.523717][ T5978] usb 2-1: config 255 has no interface number 0 [ 676.526612][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.541597][ T5978] usb 2-1: config 255 interface 16 has no altsetting 0 [ 676.545152][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.551643][T13511] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 676.561151][ T5868] ath6kl: Failed to submit usb control message: -71 [ 676.569926][T13511] overlayfs: failed to set xattr on upper [ 676.570238][ T5868] ath6kl: unable to send the bmi data to the device: -71 [ 676.577169][ T5978] usb 2-1: New USB device found, idVendor=08e3, idProduct=0301, bcdDevice=79.8c [ 676.586651][ T5868] ath6kl: Unable to send get target info: -71 [ 676.593295][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.606081][T13511] overlayfs: ...falling back to redirect_dir=nofollow. [ 676.613462][ T5978] usb 2-1: Product: syz [ 676.617698][ T5868] ath6kl: Failed to init ath6kl core: -71 [ 676.618876][ T5868] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 676.639234][T13511] overlayfs: ...falling back to uuid=null. [ 676.743417][ T5978] usb 2-1: Manufacturer: syz [ 676.745568][ T5868] usb 3-1: USB disconnect, device number 66 [ 676.754031][ T5978] usb 2-1: SerialNumber: syz [ 677.001632][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1989'. [ 677.015072][T13514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1989'. [ 677.101450][ T5978] HFC-S_USB 2-1:255.16: probe with driver HFC-S_USB failed with error -5 [ 677.134912][ T5978] usb 2-1: USB disconnect, device number 88 [ 677.937583][T13533] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1993'. [ 678.521408][T13537] Failed to initialize the IGMP autojoin socket (err -2) [ 678.651267][T13545] Failed to initialize the IGMP autojoin socket (err -2) [ 679.772297][T13539] overlayfs: missing 'lowerdir' [ 679.884557][T13550] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 679.891714][T13550] overlayfs: failed to set xattr on upper [ 679.897450][T13550] overlayfs: ...falling back to redirect_dir=nofollow. [ 679.909727][T13550] overlayfs: ...falling back to uuid=null. [ 680.156057][T13558] set match dimension is over the limit! [ 681.124808][T13580] overlayfs: missing 'lowerdir' [ 682.002910][T13591] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2008'. [ 682.731181][T13600] FAULT_INJECTION: forcing a failure. [ 682.731181][T13600] name failslab, interval 1, probability 0, space 0, times 0 [ 682.813693][T13601] set match dimension is over the limit! [ 682.855141][T13600] CPU: 0 UID: 0 PID: 13600 Comm: syz.2.2011 Not tainted syzkaller #0 PREEMPT(full) [ 682.855162][T13600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 682.855172][T13600] Call Trace: [ 682.855177][T13600] [ 682.855182][T13600] dump_stack_lvl+0x16c/0x1f0 [ 682.855201][T13600] should_fail_ex+0x512/0x640 [ 682.855216][T13600] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 682.855229][T13600] should_failslab+0xc2/0x120 [ 682.855247][T13600] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 682.855256][T13600] ? inode_set_ctime_current+0x29a/0x7f0 [ 682.855273][T13600] ? __d_alloc+0x35/0xa80 [ 682.855284][T13600] ? __d_alloc+0x35/0xa80 [ 682.855292][T13600] __d_alloc+0x35/0xa80 [ 682.855299][T13600] ? __ns_ref_active_get+0x54/0x1b0 [ 682.855312][T13600] path_from_stashed+0x427/0x750 [ 682.855331][T13600] open_namespace+0x8c/0x250 [ 682.855347][T13600] ? __pfx_open_namespace+0x10/0x10 [ 682.855366][T13600] ns_ioctl+0x1087/0x1190 [ 682.855381][T13600] ? __pfx_ns_ioctl+0x10/0x10 [ 682.855397][T13600] ? selinux_file_ioctl+0x180/0x270 [ 682.855410][T13600] ? selinux_file_ioctl+0xb4/0x270 [ 682.855424][T13600] ? __pfx_ns_ioctl+0x10/0x10 [ 682.855439][T13600] __x64_sys_ioctl+0x18e/0x210 [ 682.855452][T13600] do_syscall_64+0xcd/0xf80 [ 682.855466][T13600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.855477][T13600] RIP: 0033:0x7ff82a38f749 [ 682.855485][T13600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.855498][T13600] RSP: 002b:00007ff82b2ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.855508][T13600] RAX: ffffffffffffffda RBX: 00007ff82a5e5fa0 RCX: 00007ff82a38f749 [ 682.855515][T13600] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000003 [ 682.855521][T13600] RBP: 00007ff82b2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 682.855526][T13600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.855532][T13600] R13: 00007ff82a5e6038 R14: 00007ff82a5e5fa0 R15: 00007ffd7f039818 [ 682.855546][T13600] [ 683.979494][T13617] overlayfs: failed to clone upperpath [ 684.102047][ T5895] libceph: connect (1)[c::]:6789 error -113 [ 684.109101][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 684.371412][ T5895] libceph: connect (1)[c::]:6789 error -113 [ 684.380111][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 684.450242][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 684.512627][T13628] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2020'. [ 684.619780][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 684.651852][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.702760][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 684.757445][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 684.784606][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.800415][T13618] ceph: No mds server is up or the cluster is laggy [ 684.813034][ T24] usb 2-1: Product: syz [ 684.828714][ T24] usb 2-1: Manufacturer: syz [ 684.833580][ T24] usb 2-1: SerialNumber: syz [ 684.841061][ T24] usb 2-1: config 0 descriptor?? [ 685.252332][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.989532][ T24] usb 2-1: USB disconnect, device number 89 [ 688.656340][T13668] Failed to initialize the IGMP autojoin socket (err -2) [ 688.859800][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 689.679758][ T24] usb 2-1: device descriptor read/64, error -71 [ 689.989967][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 690.269819][ T7003] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 690.277494][ T24] usb 2-1: device descriptor read/64, error -71 [ 690.327622][T13682] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2034'. [ 690.410429][ T24] usb usb2-port1: attempt power cycle [ 690.465076][ T7003] usb 5-1: unable to get BOS descriptor or descriptor too short [ 690.539918][ T7003] usb 5-1: not running at top speed; connect to a high speed hub [ 690.650875][ T7003] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 690.685465][ T7003] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a [ 690.709828][ T7003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.728222][ T7003] usb 5-1: Product: syz [ 690.867434][ T7003] usb 5-1: Manufacturer: syz [ 690.879726][ T7003] usb 5-1: SerialNumber: syz [ 690.979208][ T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 691.020895][ T24] usb 2-1: device descriptor read/8, error -71 [ 691.902757][ T7003] hub 5-1:129.0: bad descriptor, ignoring hub [ 691.908847][ T7003] hub 5-1:129.0: probe with driver hub failed with error -5 [ 691.982323][ T7003] usbsevseg 5-1:129.0: USB 7 Segment device now attached [ 692.058157][ T7003] usb 5-1: USB disconnect, device number 66 [ 692.065014][ T7003] usbsevseg 5-1:129.0: USB 7 Segment now disconnected [ 692.921157][ T30] audit: type=1400 audit(1767301493.968:687): avc: denied { accept } for pid=13696 comm="syz.0.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 692.942597][ T30] audit: type=1400 audit(1767301493.988:688): avc: denied { write } for pid=13696 comm="syz.0.2038" path="socket:[42313]" dev="sockfs" ino=42313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 693.412147][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 693.543083][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'. [ 694.220479][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 694.424042][ T30] audit: type=1400 audit(1767301495.468:689): avc: denied { append } for pid=13726 comm="syz.0.2049" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 694.507107][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 694.523554][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 694.533870][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.544307][ T24] usb 2-1: Product: syz [ 694.548462][ T24] usb 2-1: Manufacturer: syz [ 694.553118][ T24] usb 2-1: SerialNumber: syz [ 694.569581][ T24] usb 2-1: config 0 descriptor?? [ 694.988134][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 695.142741][T13743] overlayfs: missing 'lowerdir' [ 696.632878][ T24] gspca_sonixj: reg_w1 err -110 [ 696.712666][ T24] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 696.744598][T13761] random: crng reseeded on system resumption [ 697.532601][T13784] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 698.089754][ T5868] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 698.742317][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 698.773780][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 698.807201][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 54370, setting to 8 [ 698.846181][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 698.877022][ T24] usb 2-1: USB disconnect, device number 94 [ 698.914193][ T5868] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 698.957276][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.038695][ T5868] usb 5-1: config 0 descriptor?? [ 699.072681][T13792] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 699.083560][ T5868] metro_usb 5-1:0.0: Metrologic USB to Serial converter detected [ 699.100851][ T5868] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 700.229817][ T24] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 700.397660][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 700.412969][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.425330][ T24] usb 2-1: config 0 has no interface number 0 [ 700.433687][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 700.443621][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.453291][ T24] usb 2-1: Product: syz [ 700.458292][ T24] usb 2-1: Manufacturer: syz [ 700.463007][ T24] usb 2-1: SerialNumber: syz [ 700.480583][ T24] usb 2-1: config 0 descriptor?? [ 700.493261][ T24] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 700.503668][ T24] usb 2-1: selecting invalid altsetting 1 [ 700.519064][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 700.536147][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 700.549210][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 700.563582][T13814] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 700.570609][T13814] overlayfs: failed to set xattr on upper [ 700.576300][T13814] overlayfs: ...falling back to redirect_dir=nofollow. [ 700.583135][T13814] overlayfs: ...falling back to uuid=null. [ 700.590853][ T24] usb 2-1: media controller created [ 700.647218][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 700.923009][T13816] set match dimension is over the limit! [ 701.167307][T13827] Failed to initialize the IGMP autojoin socket (err -2) [ 702.885421][ T24] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 702.902759][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 702.911787][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 703.571324][ T24] usb 2-1: USB disconnect, device number 95 [ 703.603217][T13844] overlayfs: missing 'lowerdir' [ 704.186664][ T5895] usb 5-1: USB disconnect, device number 67 [ 704.368791][T13851] FAULT_INJECTION: forcing a failure. [ 704.368791][T13851] name failslab, interval 1, probability 0, space 0, times 0 [ 704.381430][T13851] CPU: 0 UID: 0 PID: 13851 Comm: syz.2.2078 Not tainted syzkaller #0 PREEMPT(full) [ 704.381443][T13851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 704.381450][T13851] Call Trace: [ 704.381453][T13851] [ 704.381457][T13851] dump_stack_lvl+0x16c/0x1f0 [ 704.381474][T13851] should_fail_ex+0x512/0x640 [ 704.381489][T13851] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 704.381507][T13851] should_failslab+0xc2/0x120 [ 704.381521][T13851] kmem_cache_alloc_noprof+0x83/0x770 [ 704.381532][T13851] ? skb_clone+0x190/0x3f0 [ 704.381546][T13851] ? skb_clone+0x190/0x3f0 [ 704.381554][T13851] skb_clone+0x190/0x3f0 [ 704.381565][T13851] netlink_deliver_tap+0xabd/0xd30 [ 704.381579][T13851] netlink_unicast+0x64c/0x870 [ 704.381594][T13851] ? __pfx_netlink_unicast+0x10/0x10 [ 704.381611][T13851] netlink_sendmsg+0x8c8/0xdd0 [ 704.381626][T13851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.381643][T13851] ____sys_sendmsg+0xa5d/0xc30 [ 704.381656][T13851] ? copy_msghdr_from_user+0x10a/0x160 [ 704.381666][T13851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.381681][T13851] ? __pfx__kstrtoull+0x10/0x10 [ 704.381695][T13851] ___sys_sendmsg+0x134/0x1d0 [ 704.381706][T13851] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.381723][T13851] ? find_held_lock+0x2b/0x80 [ 704.381747][T13851] __sys_sendmmsg+0x200/0x420 [ 704.381759][T13851] ? __pfx___sys_sendmmsg+0x10/0x10 [ 704.381773][T13851] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 704.381793][T13851] ? fput+0x70/0xf0 [ 704.381802][T13851] ? ksys_write+0x1ac/0x250 [ 704.381815][T13851] ? __pfx_ksys_write+0x10/0x10 [ 704.381829][T13851] __x64_sys_sendmmsg+0x9c/0x100 [ 704.381839][T13851] ? lockdep_hardirqs_on+0x7c/0x110 [ 704.381852][T13851] do_syscall_64+0xcd/0xf80 [ 704.381866][T13851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.381877][T13851] RIP: 0033:0x7ff82a38f749 [ 704.381885][T13851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.381895][T13851] RSP: 002b:00007ff82b28a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 704.381905][T13851] RAX: ffffffffffffffda RBX: 00007ff82a5e6090 RCX: 00007ff82a38f749 [ 704.381911][T13851] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000008 [ 704.381918][T13851] RBP: 00007ff82b28a090 R08: 0000000000000000 R09: 0000000000000000 [ 704.381923][T13851] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 704.381929][T13851] R13: 00007ff82a5e6128 R14: 00007ff82a5e6090 R15: 00007ffd7f039818 [ 704.381943][T13851] [ 705.178088][ T5895] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 705.293619][ T5895] metro_usb 5-1:0.0: device disconnected [ 705.467830][T13859] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 705.467830][T13859] The task syz.1.2079 (13859) triggered the difference, watch for misbehavior. [ 707.571811][ T5818] Bluetooth: hci0: command 0x2016 tx timeout [ 707.832794][T13878] Failed to initialize the IGMP autojoin socket (err -2) [ 707.901836][T13879] vivid-003: disconnect [ 707.907503][T13879] vivid-003: reconnect [ 708.598028][T13881] overlayfs: failed to resolve './file0': -2 [ 709.679556][T12100] Bluetooth: hci0: command 0x2016 tx timeout [ 709.980709][T13894] 9p: Bad value for 'wfdno' [ 711.752889][T13916] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 711.759897][T13916] overlayfs: failed to set xattr on upper [ 711.765594][T13916] overlayfs: ...falling back to redirect_dir=nofollow. [ 711.772519][T13916] overlayfs: ...falling back to uuid=null. [ 711.897777][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 712.069845][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 712.076370][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 712.084511][ T24] usb 3-1: config 0 has no interface number 0 [ 712.095175][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 712.106537][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.116325][ T24] usb 3-1: Product: syz [ 712.120774][ T24] usb 3-1: Manufacturer: syz [ 712.125540][ T24] usb 3-1: SerialNumber: syz [ 712.140515][ T24] usb 3-1: config 0 descriptor?? [ 712.148190][ T24] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 712.157250][ T24] usb 3-1: selecting invalid altsetting 1 [ 712.163108][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 712.186700][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 712.198706][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 712.207423][ T24] usb 3-1: media controller created [ 712.242071][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 712.435456][T13925] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2087'. [ 712.503585][ T30] audit: type=1400 audit(1767301513.542:690): avc: denied { ioctl } for pid=13926 comm="syz.3.2099" path="socket:[43404]" dev="sockfs" ino=43404 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 713.068851][T13937] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 713.076125][T13937] overlayfs: failed to set xattr on upper [ 713.081913][T13937] overlayfs: ...falling back to redirect_dir=nofollow. [ 713.088776][T13937] overlayfs: ...falling back to uuid=null. [ 713.400062][ T24] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 713.407420][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 713.532639][T13944] kAFS: unable to lookup cell '(,' [ 714.117533][ T5895] usb 3-1: USB disconnect, device number 67 [ 714.739804][T13953] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2106'. [ 716.292519][T13976] Failed to initialize the IGMP autojoin socket (err -2) [ 716.428131][T13977] vivid-000: disconnect [ 716.433942][T13977] vivid-000: reconnect [ 716.972941][T13979] Failed to initialize the IGMP autojoin socket (err -2) [ 718.002195][T13985] vivid-001: disconnect [ 718.007062][T13985] vivid-001: reconnect [ 719.110853][T13994] overlayfs: failed to clone upperpath [ 720.869256][T14013] kAFS: No cell specified [ 721.101057][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2132'. [ 721.119510][T14023] netlink: 'syz.4.2132': attribute type 1 has an invalid length. [ 721.127600][T14023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2132'. [ 721.661457][ T7003] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 721.841006][ T7003] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 721.849324][ T7003] usb 5-1: config 0 has no interface number 0 [ 721.861500][ T7003] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 721.870619][ T7003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.885359][ T7003] usb 5-1: Product: syz [ 721.889595][ T7003] usb 5-1: Manufacturer: syz [ 721.928044][ T7003] usb 5-1: SerialNumber: syz [ 721.958227][ T7003] usb 5-1: config 0 descriptor?? [ 722.007762][T14042] syzkaller0: entered promiscuous mode [ 722.032010][T14042] syzkaller0: entered allmulticast mode [ 722.059155][T14040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=14040 comm=syz.1.2134 [ 722.156815][T14044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2135'. [ 722.384449][ T7003] usb 5-1: Firmware: major: 230, minor: 61, hardware type: UNKNOWN (237) [ 722.860477][T14058] overlayfs: failed to resolve './file1': -2 [ 722.979221][T14059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2133'. [ 722.989496][T14059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2133'. [ 723.359750][ T5895] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 723.500405][ T5895] usb 2-1: device descriptor read/64, error -71 [ 723.779891][ T5895] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 723.894697][T14070] set match dimension is over the limit! [ 724.100074][ T7003] usb 5-1: failed to fetch extended address, random address set [ 724.128097][ T5895] usb 2-1: device descriptor read/64, error -71 [ 724.128120][ T7003] usb 5-1: atusb_probe: initialization failed, error = -524 [ 724.150179][ T7003] atusb 5-1:0.128: probe with driver atusb failed with error -524 [ 724.249957][ T5895] usb usb2-port1: attempt power cycle [ 724.282186][ T30] audit: type=1400 audit(1767301525.322:691): avc: denied { listen } for pid=14073 comm="syz.2.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 724.639163][ T7003] usb 5-1: USB disconnect, device number 68 [ 724.772223][T14078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=14078 comm=syz.2.2146 [ 724.860549][ T5895] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 724.880927][ T5895] usb 2-1: device descriptor read/8, error -71 [ 724.930590][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2146'. [ 725.122416][ T5895] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 725.279742][ T7003] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 725.291218][ T5895] usb 2-1: device descriptor read/8, error -71 [ 725.429744][ T7003] usb 5-1: Using ep0 maxpacket: 32 [ 725.451681][T14098] tmpfs: Bad value for 'nr_blocks' [ 725.505007][ T7003] usb 5-1: config index 0 descriptor too short (expected 6683, got 27) [ 725.640276][ T5895] usb usb2-port1: unable to enumerate USB device [ 725.679698][ T7003] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 725.709696][ T7003] usb 5-1: config 0 has no interface number 0 [ 725.725939][ T7003] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 725.765633][ T7003] usb 5-1: config 0 interface 85 has no altsetting 0 [ 725.811383][ T7003] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 725.840611][ T7003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.945592][ T7003] usb 5-1: Product: syz [ 725.949972][ T7003] usb 5-1: Manufacturer: syz [ 725.954562][ T7003] usb 5-1: SerialNumber: syz [ 725.977530][ T7003] usb 5-1: config 0 descriptor?? [ 727.253359][T14114] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2153'. [ 727.320039][ T7003] appletouch 5-1:0.85: Geyser mode initialized. [ 727.361046][ T7003] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input21 [ 727.574898][ T7003] usb 5-1: USB disconnect, device number 69 [ 727.580955][ C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 727.712379][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 727.721446][T14119] netlink: 'syz.2.2154': attribute type 5 has an invalid length. [ 727.729191][T14119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2154'. [ 727.768319][T14119] geneve2: entered promiscuous mode [ 727.773642][T14119] geneve2: entered allmulticast mode [ 727.790392][T11962] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 727.825254][ T30] audit: type=1400 audit(1767301528.742:692): avc: denied { watch_sb } for pid=14115 comm="syz.2.2154" path="/417/file0" dev="tmpfs" ino=2505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 727.952044][T11962] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 727.971743][T11962] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 727.973031][ T7003] appletouch 5-1:0.85: input: appletouch disconnected [ 727.997342][T11962] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 728.020380][ T30] audit: type=1400 audit(1767301529.052:693): avc: denied { mounton } for pid=14118 comm="syz.1.2155" path="/406/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 728.951375][ T10] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 729.106089][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.393192][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 729.402707][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.422123][ T10] usb 2-1: config 0 descriptor?? [ 729.488235][T14138] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 729.495226][T14138] overlayfs: failed to set xattr on upper [ 729.500961][T14138] overlayfs: ...falling back to redirect_dir=nofollow. [ 729.507805][T14138] overlayfs: ...falling back to uuid=null. [ 729.639737][ T30] audit: type=1400 audit(1767301530.672:694): avc: denied { associate } for pid=14148 comm="syz.3.2162" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 729.746980][ T30] audit: type=1400 audit(1767301530.782:695): avc: denied { mounton } for pid=14145 comm="syz.3.2162" path="/file0" dev="rootfs" ino=43868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 729.873542][T14128] vlan0: entered promiscuous mode [ 729.953232][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 729.960281][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 729.983242][ T10] usb 2-1: USB disconnect, device number 100 [ 731.379641][T14167] futex_wake_op: syz.3.2170 tries to shift op by -1; fix this program [ 731.508155][T14167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14167 comm=syz.3.2170 [ 731.615314][T14173] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 731.622288][T14173] overlayfs: failed to set xattr on upper [ 731.627986][T14173] overlayfs: ...falling back to redirect_dir=nofollow. [ 731.634848][T14173] overlayfs: ...falling back to uuid=null. [ 731.641157][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 731.724671][ T30] audit: type=1400 audit(1767301532.773:696): avc: denied { accept } for pid=14177 comm="syz.0.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 731.866736][ T5978] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 731.899728][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 731.909249][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 731.918311][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.926846][ T10] usb 5-1: Product: syz [ 731.928951][T14179] set match dimension is over the limit! [ 731.985388][T14181] netlink: 'syz.2.2177': attribute type 4 has an invalid length. [ 731.993294][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2177'. [ 732.027201][ T5978] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 732.181138][ T10] usb 5-1: Manufacturer: syz [ 732.189870][ T5978] usb 2-1: config 0 has no interface number 0 [ 732.199645][ T10] usb 5-1: SerialNumber: syz [ 732.205876][ T5978] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 732.219938][ T5978] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 732.231595][ T10] usb 5-1: config 0 descriptor?? [ 732.238544][ T10] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 732.245401][ T5978] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x86 has invalid maxpacket 136, setting to 64 [ 732.259224][ T5978] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 732.274543][T14188] overlayfs: failed to resolve './file1': -2 [ 732.284210][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 732.293578][ T5978] usb 2-1: Product: syz [ 732.300879][ T5978] usb 2-1: SerialNumber: syz [ 732.310396][ T5978] usb 2-1: config 0 descriptor?? [ 732.316946][T14169] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 732.338749][ T5978] cm109 2-1:0.8: invalid payload size 64, expected 4 [ 732.361618][ T5978] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input22 [ 732.467432][ T10] usb 5-1: clie_3_5_startup: get config number failed: -32 [ 732.474991][ T10] visor 5-1:0.0: probe with driver visor failed with error -32 [ 732.531804][T14169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.592316][ T10] usb 5-1: USB disconnect, device number 70 [ 732.772225][T14169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.786270][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 732.994864][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 733.001963][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 733.009031][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 733.016239][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 733.023309][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 733.030385][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 733.037444][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 733.044500][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 733.051558][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 733.058613][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 733.066116][ T10] usb 2-1: USB disconnect, device number 101 [ 733.072182][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 733.089884][ T10] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 734.758837][T14214] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 734.765837][T14214] overlayfs: failed to set xattr on upper [ 734.771719][T14214] overlayfs: ...falling back to redirect_dir=nofollow. [ 734.778559][T14214] overlayfs: ...falling back to uuid=null. [ 735.111619][ T30] audit: type=1400 audit(1767301536.143:697): avc: denied { set_context_mgr } for pid=14216 comm="syz.4.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 735.137331][T14223] set match dimension is over the limit! [ 735.180840][T14225] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 735.229886][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 735.245254][T14225] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 735.409900][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 735.430354][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 735.491741][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.563575][ T10] usb 3-1: Product: syz [ 735.606044][ T10] usb 3-1: Manufacturer: syz [ 735.645634][ T10] usb 3-1: SerialNumber: syz [ 736.021208][ T10] usb 3-1: config 0 descriptor?? [ 736.077548][T14231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2192'. [ 736.090295][ T5818] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 736.110656][T14229] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 736.113377][ T30] audit: type=1400 audit(1767301537.148:698): avc: denied { execute } for pid=14230 comm="syz.4.2192" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 736.117316][T14229] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 736.160284][T14229] vhci_hcd vhci_hcd.0: Device attached [ 736.173166][T14233] vhci_hcd: connection closed [ 736.175823][T11962] vhci_hcd vhci_hcd.0: stop threads [ 736.190234][T11962] vhci_hcd vhci_hcd.0: release socket [ 736.202078][T14236] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 736.213143][T11962] vhci_hcd vhci_hcd.0: disconnect device [ 736.233393][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 736.700619][T14247] FAULT_INJECTION: forcing a failure. [ 736.700619][T14247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.713764][T14247] CPU: 1 UID: 0 PID: 14247 Comm: syz.0.2196 Not tainted syzkaller #0 PREEMPT(full) [ 736.713784][T14247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 736.713793][T14247] Call Trace: [ 736.713798][T14247] [ 736.713802][T14247] dump_stack_lvl+0x16c/0x1f0 [ 736.713823][T14247] should_fail_ex+0x512/0x640 [ 736.713851][T14247] _copy_to_user+0x32/0xd0 [ 736.713873][T14247] simple_read_from_buffer+0xcb/0x170 [ 736.713896][T14247] proc_fail_nth_read+0x197/0x240 [ 736.713908][T14247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 736.713919][T14247] ? rw_verify_area+0xcf/0x6c0 [ 736.713930][T14247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 736.713941][T14247] vfs_read+0x1e4/0xcf0 [ 736.713961][T14247] ? __pfx___mutex_lock+0x10/0x10 [ 736.713983][T14247] ? __pfx_vfs_read+0x10/0x10 [ 736.714008][T14247] ? __fget_files+0x20e/0x3c0 [ 736.714035][T14247] ksys_read+0x12a/0x250 [ 736.714048][T14247] ? __pfx_ksys_read+0x10/0x10 [ 736.714061][T14247] ? fput+0x70/0xf0 [ 736.714072][T14247] do_syscall_64+0xcd/0xf80 [ 736.714085][T14247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.714096][T14247] RIP: 0033:0x7effbed8e15c [ 736.714107][T14247] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 736.714122][T14247] RSP: 002b:00007effbfd07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 736.714137][T14247] RAX: ffffffffffffffda RBX: 00007effbefe5fa0 RCX: 00007effbed8e15c [ 736.714147][T14247] RDX: 000000000000000f RSI: 00007effbfd070a0 RDI: 0000000000000004 [ 736.714156][T14247] RBP: 00007effbfd07090 R08: 0000000000000000 R09: 0000000000000000 [ 736.714164][T14247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.714172][T14247] R13: 00007effbefe6038 R14: 00007effbefe5fa0 R15: 00007ffd1be8b3b8 [ 736.714189][T14247] [ 737.746280][T14219] netlink: 'syz.2.2188': attribute type 15 has an invalid length. [ 737.836697][T14219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2188'. [ 737.888389][T14219] netlink: 412 bytes leftover after parsing attributes in process `syz.2.2188'. [ 738.055931][T14259] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 738.063411][T14259] overlayfs: failed to set xattr on upper [ 738.069223][T14259] overlayfs: ...falling back to redirect_dir=nofollow. [ 738.076219][T14259] overlayfs: ...falling back to uuid=null. [ 738.341770][T14264] IPv6: sit1: Disabled Multicast RS [ 738.353718][T14264] sit1: entered allmulticast mode [ 738.385948][ T30] audit: type=1400 audit(1767301539.418:699): avc: denied { read } for pid=14263 comm="syz.1.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 738.438905][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 738.458112][ T10] usb 3-1: USB disconnect, device number 68 [ 738.483772][ T30] audit: type=1326 audit(1767301539.518:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae1b8f749 code=0x7ffc0000 [ 738.507874][ T30] audit: type=1326 audit(1767301539.518:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffae1b8f749 code=0x7ffc0000 [ 738.555220][ T30] audit: type=1326 audit(1767301539.518:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae1b8f749 code=0x7ffc0000 [ 738.579104][ T30] audit: type=1326 audit(1767301539.528:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ffae1b8f749 code=0x7ffc0000 [ 738.605286][ T30] audit: type=1326 audit(1767301539.528:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae1b8f749 code=0x7ffc0000 [ 738.632909][ T30] audit: type=1326 audit(1767301539.528:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffae1b8f749 code=0x7ffc0000 [ 738.698612][ T30] audit: type=1326 audit(1767301539.568:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae1b8f749 code=0x7ffc0000 [ 738.858243][T14276] netlink: 'syz.0.2204': attribute type 16 has an invalid length. [ 739.080164][T14281] bond2: option min_links: invalid value (18446744073709551615) [ 739.088154][T14281] bond2: option min_links: allowed values 0 - 2147483647 [ 739.188070][T14281] bond2 (unregistering): Released all slaves [ 740.245808][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 740.245821][ T30] audit: type=1400 audit(1767301541.278:718): avc: denied { getopt } for pid=14303 comm="syz.3.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 740.574611][T14309] Failed to initialize the IGMP autojoin socket (err -2) [ 740.651399][T14310] vivid-001: disconnect [ 740.659175][T14310] vivid-001: reconnect [ 741.978416][ T5818] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 742.030862][ T5818] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 742.204312][T14319] set match dimension is over the limit! [ 742.428397][T14321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2218'. [ 742.549912][T14325] FAULT_INJECTION: forcing a failure. [ 742.549912][T14325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.587037][T14325] CPU: 0 UID: 0 PID: 14325 Comm: syz.4.2219 Not tainted syzkaller #0 PREEMPT(full) [ 742.587059][T14325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 742.587066][T14325] Call Trace: [ 742.587070][T14325] [ 742.587074][T14325] dump_stack_lvl+0x16c/0x1f0 [ 742.587090][T14325] should_fail_ex+0x512/0x640 [ 742.587109][T14325] _copy_from_user+0x2e/0xd0 [ 742.587124][T14325] copy_msghdr_from_user+0x98/0x160 [ 742.587136][T14325] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 742.587153][T14325] ___sys_sendmsg+0xfe/0x1d0 [ 742.587163][T14325] ? __pfx____sys_sendmsg+0x10/0x10 [ 742.587196][T14325] __sys_sendmsg+0x16d/0x220 [ 742.587207][T14325] ? __pfx___sys_sendmsg+0x10/0x10 [ 742.587226][T14325] do_syscall_64+0xcd/0xf80 [ 742.587240][T14325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.587251][T14325] RIP: 0033:0x7ffae1b8f749 [ 742.587259][T14325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.587269][T14325] RSP: 002b:00007ffae2b13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.587279][T14325] RAX: ffffffffffffffda RBX: 00007ffae1de5fa0 RCX: 00007ffae1b8f749 [ 742.587286][T14325] RDX: 0000000020004000 RSI: 0000200000000340 RDI: 0000000000000003 [ 742.587292][T14325] RBP: 00007ffae2b13090 R08: 0000000000000000 R09: 0000000000000000 [ 742.587297][T14325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.587303][T14325] R13: 00007ffae1de6038 R14: 00007ffae1de5fa0 R15: 00007ffd3ce979c8 [ 742.587316][T14325] [ 745.081583][T14360] tipc: Started in network mode [ 745.086544][T14360] tipc: Node identity 4, cluster identity 4711 [ 745.092801][T14360] tipc: Node number set to 4 [ 746.074137][ T5818] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 746.083296][ T5818] Bluetooth: hci3: Injecting HCI hardware error event [ 746.093061][T12100] Bluetooth: hci3: hardware error 0x00 [ 746.541970][T14383] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2233'. [ 746.693711][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.953244][T14387] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2236'. [ 746.963282][T14387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2236'. [ 747.802461][T14397] set match dimension is over the limit! [ 748.129768][T12100] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 750.175864][T14423] kAFS: unable to lookup cell 'Þ({^ú@' [ 750.319739][ T5868] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 750.926273][T14431] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2247'. [ 751.365867][ T5868] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 751.382235][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.431671][ T5868] usb 3-1: Product: syz [ 751.529325][ T5868] usb 3-1: Manufacturer: syz [ 751.540597][ T5868] usb 3-1: SerialNumber: syz [ 751.560503][ T5868] usb 3-1: config 0 descriptor?? [ 751.856296][T14442] [ 751.858623][T14442] ====================================================== [ 751.865606][T14442] WARNING: possible circular locking dependency detected [ 751.872589][T14442] syzkaller #0 Tainted: G L [ 751.878529][T14442] ------------------------------------------------------ [ 751.885510][T14442] syz.4.2250/14442 is trying to acquire lock: [ 751.891547][T14442] ffff888056517088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 751.900816][T14442] [ 751.900816][T14442] but task is already holding lock: [ 751.908143][T14442] ffff88807ad64868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 751.916366][T14442] [ 751.916366][T14442] which lock already depends on the new lock. [ 751.916366][T14442] [ 751.926734][T14442] [ 751.926734][T14442] the existing dependency chain (in reverse order) is: [ 751.935713][T14442] [ 751.935713][T14442] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 751.943055][T14442] __mutex_lock+0x1aa/0x1ca0 [ 751.948139][T14442] anon_pipe_write+0x15d/0x1bd0 [ 751.953479][T14442] __kernel_write_iter+0x720/0xb10 [ 751.959080][T14442] __kernel_write+0xf5/0x140 [ 751.964158][T14442] autofs_notify_daemon+0x4db/0xd60 [ 751.969847][T14442] autofs_wait+0x10f3/0x1ac0 [ 751.974924][T14442] autofs_mount_wait+0x132/0x3c0 [ 751.980350][T14442] autofs_d_automount+0x4b2/0x960 [ 751.985860][T14442] __traverse_mounts+0x1b9/0x830 [ 751.991287][T14442] step_into_slowpath+0x772/0xf50 [ 751.996800][T14442] path_lookupat+0x627/0xc40 [ 752.001878][T14442] filename_lookup+0x224/0x5f0 [ 752.007133][T14442] kern_path+0x35/0x50 [ 752.011688][T14442] lookup_bdev+0xd8/0x280 [ 752.016509][T14442] resume_store+0x1d6/0x490 [ 752.021502][T14442] kobj_attr_store+0x58/0x80 [ 752.026580][T14442] sysfs_kf_write+0xf2/0x150 [ 752.031659][T14442] kernfs_fop_write_iter+0x3af/0x570 [ 752.037435][T14442] vfs_write+0x7d3/0x11d0 [ 752.042254][T14442] ksys_write+0x12a/0x250 [ 752.047075][T14442] do_syscall_64+0xcd/0xf80 [ 752.052066][T14442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.058445][T14442] [ 752.058445][T14442] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 752.066135][T14442] __mutex_lock+0x1aa/0x1ca0 [ 752.071217][T14442] autofs_notify_daemon+0x4a6/0xd60 [ 752.076918][T14442] autofs_wait+0x10f3/0x1ac0 [ 752.081997][T14442] autofs_mount_wait+0x132/0x3c0 [ 752.087420][T14442] autofs_d_automount+0x4b2/0x960 [ 752.092929][T14442] __traverse_mounts+0x1b9/0x830 [ 752.098358][T14442] step_into_slowpath+0x772/0xf50 [ 752.103869][T14442] path_lookupat+0x627/0xc40 [ 752.108949][T14442] filename_lookup+0x224/0x5f0 [ 752.114200][T14442] kern_path+0x35/0x50 [ 752.118757][T14442] lookup_bdev+0xd8/0x280 [ 752.123577][T14442] resume_store+0x1d6/0x490 [ 752.128570][T14442] kobj_attr_store+0x58/0x80 [ 752.133651][T14442] sysfs_kf_write+0xf2/0x150 [ 752.138729][T14442] kernfs_fop_write_iter+0x3af/0x570 [ 752.144507][T14442] vfs_write+0x7d3/0x11d0 [ 752.149325][T14442] ksys_write+0x12a/0x250 [ 752.154156][T14442] do_syscall_64+0xcd/0xf80 [ 752.159151][T14442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.165529][T14442] [ 752.165529][T14442] -> #0 (&of->mutex){+.+.}-{4:4}: [ 752.172698][T14442] __lock_acquire+0x1669/0x2890 [ 752.178036][T14442] lock_acquire+0x179/0x330 [ 752.183026][T14442] __mutex_lock+0x1aa/0x1ca0 [ 752.188105][T14442] kernfs_fop_write_iter+0x28f/0x570 [ 752.193880][T14442] iter_file_splice_write+0xa24/0x12b0 [ 752.199831][T14442] do_splice+0x1478/0x1fc0 [ 752.204738][T14442] __do_splice+0x32a/0x360 [ 752.209644][T14442] __x64_sys_splice+0x187/0x250 [ 752.214996][T14442] do_syscall_64+0xcd/0xf80 [ 752.219988][T14442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.226367][T14442] [ 752.226367][T14442] other info that might help us debug this: [ 752.226367][T14442] [ 752.236558][T14442] Chain exists of: [ 752.236558][T14442] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 752.236558][T14442] [ 752.248942][T14442] Possible unsafe locking scenario: [ 752.248942][T14442] [ 752.256357][T14442] CPU0 CPU1 [ 752.261686][T14442] ---- ---- [ 752.267016][T14442] lock(&pipe->mutex); [ 752.271137][T14442] lock(&sbi->pipe_mutex); [ 752.278124][T14442] lock(&pipe->mutex); [ 752.284763][T14442] lock(&of->mutex); [ 752.288710][T14442] [ 752.288710][T14442] *** DEADLOCK *** [ 752.288710][T14442] [ 752.296819][T14442] 2 locks held by syz.4.2250/14442: [ 752.301981][T14442] #0: ffff888035ad6420 (sb_writers#8){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 752.310993][T14442] #1: ffff88807ad64868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 752.319650][T14442] [ 752.319650][T14442] stack backtrace: [ 752.325514][T14442] CPU: 0 UID: 0 PID: 14442 Comm: syz.4.2250 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.325529][T14442] Tainted: [L]=SOFTLOCKUP [ 752.325533][T14442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 752.325539][T14442] Call Trace: [ 752.325543][T14442] [ 752.325548][T14442] dump_stack_lvl+0x116/0x1f0 [ 752.325563][T14442] print_circular_bug+0x275/0x340 [ 752.325575][T14442] check_noncircular+0x146/0x160 [ 752.325588][T14442] __lock_acquire+0x1669/0x2890 [ 752.325600][T14442] ? __do_splice+0x32a/0x360 [ 752.325615][T14442] ? do_syscall_64+0xcd/0xf80 [ 752.325628][T14442] lock_acquire+0x179/0x330 [ 752.325639][T14442] ? kernfs_fop_write_iter+0x28f/0x570 [ 752.325655][T14442] ? __pfx___might_resched+0x10/0x10 [ 752.325666][T14442] __mutex_lock+0x1aa/0x1ca0 [ 752.325679][T14442] ? kernfs_fop_write_iter+0x28f/0x570 [ 752.325694][T14442] ? kernfs_fop_write_iter+0x28f/0x570 [ 752.325710][T14442] ? __asan_memcpy+0x3c/0x60 [ 752.325720][T14442] ? _copy_from_iter+0x161/0x16c0 [ 752.325736][T14442] ? __pfx___mutex_lock+0x10/0x10 [ 752.325750][T14442] ? __pfx__copy_from_iter+0x10/0x10 [ 752.325765][T14442] ? trace_kmalloc+0x2b/0xb0 [ 752.325777][T14442] ? __kmalloc_noprof+0x35d/0x910 [ 752.325793][T14442] ? kernfs_fop_write_iter+0x237/0x570 [ 752.325809][T14442] ? kernfs_fop_write_iter+0x28f/0x570 [ 752.325823][T14442] kernfs_fop_write_iter+0x28f/0x570 [ 752.325840][T14442] iter_file_splice_write+0xa24/0x12b0 [ 752.325858][T14442] ? __pfx_iter_file_splice_write+0x10/0x10 [ 752.325874][T14442] ? __pfx_try_to_wake_up+0x10/0x10 [ 752.325893][T14442] ? __pfx_iter_file_splice_write+0x10/0x10 [ 752.325912][T14442] do_splice+0x1478/0x1fc0 [ 752.325926][T14442] ? __lock_acquire+0x436/0x2890 [ 752.325940][T14442] ? __pfx_do_splice+0x10/0x10 [ 752.325954][T14442] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 752.325968][T14442] ? find_held_lock+0x2b/0x80 [ 752.325983][T14442] __do_splice+0x32a/0x360 [ 752.325998][T14442] ? __pfx___do_splice+0x10/0x10 [ 752.326012][T14442] ? __sanitizer_cov_trace_switch+0x40/0x90 [ 752.326026][T14442] __x64_sys_splice+0x187/0x250 [ 752.326041][T14442] do_syscall_64+0xcd/0xf80 [ 752.326054][T14442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.326065][T14442] RIP: 0033:0x7ffae1b8f749 [ 752.326074][T14442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.326084][T14442] RSP: 002b:00007ffae2af2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 752.326094][T14442] RAX: ffffffffffffffda RBX: 00007ffae1de6090 RCX: 00007ffae1b8f749 [ 752.326101][T14442] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 752.326107][T14442] RBP: 00007ffae1c13f91 R08: 000000000000bfd1 R09: 0000000000000000 [ 752.326113][T14442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.326119][T14442] R13: 00007ffae1de6128 R14: 00007ffae1de6090 R15: 00007ffd3ce979c8 [ 752.326129][T14442] [ 752.805148][ T30] audit: type=1400 audit(1767301553.842:719): avc: denied { mounton } for pid=14437 comm="syz.4.2250" path="/399/file0" dev="tmpfs" ino=2365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 752.855580][ T24] usb 3-1: USB disconnect, device number 69 [ 753.042809][T14412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2242'. [ 753.105709][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2242'. [ 753.127764][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2242'.