last executing test programs: 24m18.489530205s ago: executing program 3 (id=729): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x6, 0x5, 0x93, 0x1, 0x0, 0x5f, 0xb, 0x20, 0xa6, 0x2, 0x5, 0x9, 0xfffffffe}, {0xfffffffd, 0xfffa, 0x0, 0x4, 0xfa, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x1, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x80, 0x0, 0x4, 0x1, 0x19, 0xe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0x7f}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x88, r3, 0xc1564882fce2ad39, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) 24m17.400192973s ago: executing program 3 (id=733): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 24m17.000213866s ago: executing program 3 (id=734): r0 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b711001000000001e24050100a000780000c0e00000c0e000009600001516050001"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000940)=[{{&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f0000000780), 0x5730c28fc0895ed4, &(0x7f00000007c0)=""/79, 0x4f}, 0x8}], 0x1, 0x160, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0], 0x0, 0x80}, 0x28) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="12000000030000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) 24m13.402800133s ago: executing program 3 (id=743): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x6, 0x5, 0x93, 0x1, 0x0, 0x5f, 0xb, 0x20, 0xa6, 0x2, 0x5, 0x9, 0xfffffffe}, {0xfffffffd, 0xfffa, 0x0, 0x4, 0xfa, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x1, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x80, 0x0, 0x4, 0x1, 0x19, 0xe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0x7f}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x88, r3, 0xc1564882fce2ad39, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) 24m11.853459696s ago: executing program 3 (id=748): syz_clone(0x4000500, &(0x7f0000000080)="9e13fc89bc5a47204ba81633e817638ff48e5b54d44f979dac1ea9d13e003d717c82773fcd2c51f81064f90659f45b7ca0a8dfc82533f3448766cecc786cb1aea2a7c0694bcd8e882f5ea1ec3454b88509c10ea3bf023ecafa3477cffdc5b2e01825e7d433579aececc77e48292474e54f1eead154bf0cefda2ed94272754024c3c835450e30d6e5d24cba388529377a733bfd0c3e5b7799b05c86e663d3d43bf488ba8a41a1ab52fb80dc9e676c16ea29ab4f326ea9607c823df2cf07d9425d8c5e5eae94e702f9067cb95117d2fe6ed229ae5a88a03e873b12bd6c53a27cc93a807f25d1ffa665b6a9a6b1b52385dc6c81e336c729c951", 0xf8, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="ef6f75f0f98ee147cd2b298fa38f1b34946bb8e5cde021946d213213ff96cabc12e18a68017cdd0b324c2fe5cc50554f4f3dcc544af5092e5edfa5692019d21a4897d0d976aee6a0054cbabc851c1180e3538967cd4939440cd6f049ae7ff9e5d37af87bb5ad23866c6079e08887219a252d6642829aafb959a62bace744e3d4397e9c65846a49ffb0d76ccd317829f0") setresgid(0x0, 0x0, 0x0) r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffc}, 0x2d, 0xfffffffffffffffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 24m10.514043456s ago: executing program 3 (id=753): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x3ff, 0x6, 0xa513, 0xf, "4ebd9cb3368129330fc3f083308bc7dcf800"}) 23m53.957360802s ago: executing program 32 (id=753): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x3ff, 0x6, 0xa513, 0xf, "4ebd9cb3368129330fc3f083308bc7dcf800"}) 23m22.632106828s ago: executing program 2 (id=854): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001140)={0x0, 0x1c, &(0x7f0000001100)=[@in6={0xa, 0x4e24, 0x1, @private0, 0x8}]}, &(0x7f0000000140)=0x10) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) timer_create(0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80", @ANYRES16, @ANYRES32], 0x44}}, 0x2000850) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f00000011c0)={0x260, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "194990b40ec2e8dbc82638da07e27b62df41e319d754fc67b05d42897207d6bdbcd311fc3e961bfaff1daf891ad43a233eea343bb759d487638c8e8e2cf65934c15732c3b3f9eb072a89c58b5ae62f07efa2b385"}, @ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "75417af3760c3aafd5b28db3e1d70b28345e9ee4c45fb91420f0511817e9c6f3ac4f6407a1af8609059365ac02bacb56c600d2a018da0f5f490d1fde846cc6502af67f282b671513f07f335c55e65cfdb6cd03dec5c8c2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4fa3}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x108, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x103, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000040}, 0xd4) 23m20.617822138s ago: executing program 2 (id=856): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) mmap(&(0x7f00001a5000/0x2000)=nil, 0x2000, 0xd, 0x11, 0xffffffffffffffff, 0x3cd6e000) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) userfaultfd(0x801) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000440)={0x0, 0x5961, 0x10000, 0x2, 0x4d}, &(0x7f0000000540), &(0x7f0000000400), &(0x7f0000000500)) socket(0x1d, 0x2, 0x6) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) read$FUSE(r3, &(0x7f0000003e80)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0600000004000000090000000900000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x6, 0x3, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23m16.694265433s ago: executing program 2 (id=866): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001140)={0x0, 0x1c, &(0x7f0000001100)=[@in6={0xa, 0x4e24, 0x1, @private0, 0x8}]}, &(0x7f0000000140)=0x10) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) timer_create(0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80", @ANYRES16, @ANYRES32], 0x44}}, 0x2000850) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f00000011c0)={0x260, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "194990b40ec2e8dbc82638da07e27b62df41e319d754fc67b05d42897207d6bdbcd311fc3e961bfaff1daf891ad43a233eea343bb759d487638c8e8e2cf65934c15732c3b3f9eb072a89c58b5ae62f07efa2b385"}, @ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "75417af3760c3aafd5b28db3e1d70b28345e9ee4c45fb91420f0511817e9c6f3ac4f6407a1af8609059365ac02bacb56c600d2a018da0f5f490d1fde846cc6502af67f282b671513f07f335c55e65cfdb6cd03dec5c8c2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4fa3}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x108, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x103, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000040}, 0xd4) 23m15.246155817s ago: executing program 2 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000007200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 23m13.26741097s ago: executing program 2 (id=873): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) acct(0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) socket(0x15, 0x80005, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x3, 0x0) getpid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002100), 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000002140)={0x0, 0x0, 0x7}) add_key(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xc000, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x4, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0xff, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xfffffff9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303a, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x1, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="6400cd00", @ANYRES16=r6, @ANYBLOB="01000000000200000000060000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000080091000800000006001600020000000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 23m11.88411943s ago: executing program 2 (id=878): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_GET_TSC(0x19, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044040}, 0x4000044) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) openat(0xffffffffffffff9c, 0x0, 0x2, 0x15) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={0x0, 0x80}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) iopl(0xde) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xe, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x5, 0x5) socket(0x8, 0x5, 0x55) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x42000004, 0x0, 0x5c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) unshare(0x6a040000) syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e0400304000010203010902"], 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000080)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0xa2, 0xb, 0x4, 0xc, 0x4, 0x6], 0x1, 0x0, 0x0, [{}]}, 0x88) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x509001, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 23m11.425185444s ago: executing program 33 (id=878): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_GET_TSC(0x19, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044040}, 0x4000044) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) openat(0xffffffffffffff9c, 0x0, 0x2, 0x15) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={0x0, 0x80}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) iopl(0xde) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xe, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x5, 0x5) socket(0x8, 0x5, 0x55) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x42000004, 0x0, 0x5c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) unshare(0x6a040000) syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e0400304000010203010902"], 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000080)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0xa2, 0xb, 0x4, 0xc, 0x4, 0x6], 0x1, 0x0, 0x0, [{}]}, 0x88) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x509001, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 16.16223122s ago: executing program 5 (id=3615): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.0438162s ago: executing program 5 (id=3621): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0xe0, 0x3, 0x8, 0xe3c1, 0x5}, &(0x7f0000000300)={0x6820000000000000, 0x8, 0x7fffffff, 0x9, 0x0, 0x7fffffffffffffff, 0x2, 0x1}, &(0x7f0000000400)={0x2, 0xc, 0x6, 0xe, 0x0, 0x3, 0x9, 0x1}, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f0000000680)={&(0x7f0000000480)={[0x4]}, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000bc0)) write(r3, &(0x7f0000000280)="ffdd", 0x2) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[], 0x0, 0x75, 0x0, 0xffffffff, 0x3}, 0x28) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x1e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000851000000700000085200000010000001812", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000800bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x9, 0xb1, &(0x7f0000000500)=""/177, 0x41100, 0x4, '\x00', r6, @fallback=0x33, r7, 0x8, &(0x7f0000000800)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xc, 0x3da, 0xe}, 0x10, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000980)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xb, "ca96b9", "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"}}, 0x110) r10 = syz_open_dev$video(&(0x7f0000000340), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r10, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) ustat(0x801, &(0x7f0000000300)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) 13.922613541s ago: executing program 5 (id=3628): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) write(r4, &(0x7f0000001640)="8b", 0x1) 11.82341609s ago: executing program 5 (id=3632): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e0800010000000109022700"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f000006a0c0)={0xe000003, 0xf, &(0x7f0000000080)=[0x0, 0xfe83, 0x40, 0x1, 0xe, 0xffff, 0xa, 0x3, 0xfffff183, 0x1, 0x6, 0x5, 0x2, 0x707, 0x8000], 0x30d, 0x7fffffff}) openat(0xffffffffffffff9c, 0x0, 0x10002, 0x0) 9.548138822s ago: executing program 6 (id=3640): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) 8.385828415s ago: executing program 0 (id=3641): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000030000000000000500"/32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004c00)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x9}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2d, 0x259fdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}]}, 0x2c}}, 0x64000) 8.218292354s ago: executing program 6 (id=3642): timer_create(0x0, 0x0, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x20000814) syz_emit_ethernet(0x6e, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6004050, &(0x7f0000000200)={0xa, 0x4e24, 0x36c2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) 7.217835465s ago: executing program 6 (id=3645): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x101, @none}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) msgget$private(0x0, 0x1f3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x2c}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x45) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), 0xffffffffffffffff) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x24, 0x27, 0x5, 0xffffffff}, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000075d4b9b18accd0570164ce442803196a0600000000000000100c65ae19153ebbfa0312dd9c32a480323a9995", @ANYRES16=r8, @ANYBLOB="030300400000fbdbdf250c00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc8c0}, 0x4010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) 6.540064554s ago: executing program 0 (id=3646): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x6e24, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x20000, 0x0, 0x1, 0x2, 0x1}, {{@in=@empty, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0xd, 0x0, 0x7, 0xe}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(0x0, 0x200, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084503, &(0x7f0000000000)=0xfa000003) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000200)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800c0001400000000308000240000000004c000000060a010400000000000000000200020a0900010073797a30000000000900020073797a3000000000200004801c0001800a00010071756575650000000c0002800600014000000000140000001100010000000000000000000200000a"], 0xd4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000203010002000000080001000100000209000200000000000200000008000440000000020800054000006309ce6c000000000000"], 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 6.440148052s ago: executing program 4 (id=3647): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, 0x0) 6.333907334s ago: executing program 1 (id=3648): r0 = openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) 6.037208861s ago: executing program 4 (id=3649): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f00000007c0)="4e6d6f47000000000000000000000000000000000a0000000004000002000000020000000000000000d465da1b63a9ddd7b334c9ca35c000000000bb9ff10b0000000000002000") r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=ANY=[@ANYBLOB="1c0000001a0001000000000400"/28], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x29, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x1000}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="280c00001a000100000000000000000002dc4a"], 0xc28}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 4.82755936s ago: executing program 0 (id=3650): pipe(&(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f0000000400)='net/nfsfs\x00') r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000002c0)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x400000000005, 0x141102) writev(r1, &(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe2$9p(&(0x7f00000001c0), 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) 4.740026867s ago: executing program 1 (id=3651): r0 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x92c9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2}) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x9101, 0x0) 4.429170698s ago: executing program 1 (id=3652): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1b0000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08", 0x1b}], 0x1}, 0x40400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='100000', 0x6) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', 0x882, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5800000053874698f3ac89953a0079c73083df1ce7387cb732e72e0cdd667e001aa61ec3e58c6dc3ec1f6754fedf2d57432ef224f543cb33ba28b8b7182cccf86195689e7b7e6d6e1527b7a516767a8e296ca9a4b23d10d379eb6fb74043bf201692ebde1bc1c038508563fca9b39b23c71913462fb863e272d8000000000000d32ed9b1120018466fe47d8e100956be46a09bf7c2af99809838bdaa5bfbeb5208ea142a3c479682a567825f760c710278ac55c08b5a5995194e508fa8e18f900bfdcacb141a27e2e1e40af13be27ea235a3b1510ce40c15ca482e48e6bde0b5d60727607e3f748c270200f20c377d21a913", @ANYRES16=r4, @ANYBLOB="010027bd7000fe5b84b67745064f965b01006e657464657673696d000000220002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173740013ff830001000000d7913bee5d9e3d3a5a32d7b60be3e9ad86e2849775c3e809e434f0c5804a1e0c69a2430b78bdff54b5ba92e342cb2f72a9b1aa7edf2e95230a6ccc52aada997e308051ec86fdf2cd5b2d21c7ee4a45300ab1663705042273128dcd3a0000006c8b69c2b0dbfb0a93e7f0b7f916dd3fbbb4d63e76b0870087e9a1c40c31b8a7512561c39a6a7032969dc389"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8b4) write(r2, &(0x7f0000000280)='0', 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x4, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) 4.18875216s ago: executing program 0 (id=3653): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0xe0, 0x3, 0x8, 0xe3c1, 0x5}, &(0x7f0000000300)={0x6820000000000000, 0x8, 0x7fffffff, 0x9, 0x0, 0x7fffffffffffffff, 0x2, 0x1}, &(0x7f0000000400)={0x2, 0xc, 0x6, 0xe, 0x0, 0x3, 0x9, 0x1}, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f0000000680)={&(0x7f0000000480)={[0x4]}, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000bc0)) write(r3, &(0x7f0000000280)="ffdd", 0x2) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[], 0x0, 0x75, 0x0, 0xffffffff, 0x3}, 0x28) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x1e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000085100000070000008520000001000000181200", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000800bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x9, 0xb1, &(0x7f0000000500)=""/177, 0x41100, 0x4, '\x00', r6, @fallback=0x33, r7, 0x8, &(0x7f0000000800)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xc, 0x3da, 0xe}, 0x10, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000980)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xb, "ca96b9", "c967a1e8cea27ff50b9aa1b037291c7c0b1fc8a3cc6626fa5a060d7a396c00bb1017a5617d49d9abf10b50706f01a7e7e4def2615cf0e0453c6e15c54d03701dc48920c7b14d20f5ff4a350a15f0dfe08f753c1ec38afd1609e0796ede350a7bf290466621f0279876809de8efb3148bd2bcbebb245a74263cf5394da0a408d2d1e8e4289de737c2c5960568c5803d5a3d94718487a29705a4f74e756776ecd90890b6774811148136e430a77ec5bb5cefd80e1522e290c69741c3a39ef86bb3e11da9c6bbb6d37fc0f7e99798b1c026fba0137faf6fe308e8f27dde60cbc98ff12a6f02f0ca0ee3454d085d8dff8ee9bc87bacbfba5ea6148de4d037ae64f3a"}}, 0x110) r10 = syz_open_dev$video(&(0x7f0000000340), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r10, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) ustat(0x801, &(0x7f0000000300)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) 3.875115062s ago: executing program 4 (id=3654): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 3.236129851s ago: executing program 1 (id=3655): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r1}, 0x0, 0x4000, &(0x7f0000000200)={&(0x7f0000000100)={'sha3-224\x00'}}) 3.231644613s ago: executing program 4 (id=3656): execveat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={[&(0x7f0000000280)='\xbb`\xbc\xa8\x92\xbb']}, 0x0, 0x800) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, 0x0, 0x0) io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x94d6, 0x1, 0x8000000, 0x28c}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0xc, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000340)={0x0, 0x5a7a, 0x400, 0x2, 0x2ce}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x2, 0x1f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1887, 0x400, 0x3, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x4, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af2, 0x400, 0x0, 0x20a, 0x0, r3}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r7, '\x00', {0x4, 0xe52, 0x0, 0x0}}, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) getuid() mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) setns(0xc9, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r13, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x1, 0x0, 0x0, {0x8, 0x1, 0x0, 0x2}, 0x0, 0x3ff, 0xc}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x2, 0x1, 0x0, {0xfffffffffffffffa, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xab}}]}, 0x68}}, 0x810) 3.091612398s ago: executing program 1 (id=3657): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000030000000000000500"/32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004c00)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x9}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2d, 0x259fdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}]}, 0x2c}}, 0x64000) 2.596476451s ago: executing program 0 (id=3658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2.552540278s ago: executing program 6 (id=3659): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4010) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x181) close(r7) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_int(r7, 0x29, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0xb0, 0x0, 0x4, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xfffffffb, 0xc, {0x1, 0x9, 0x1, 0x4, 0x5, 0x7ffe, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r6, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x140, 0xe1) 1.060735568s ago: executing program 0 (id=3660): openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0xc00, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r1, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) syz_usb_connect$uac2(0x5, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x7, 0x60, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0x9, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x3, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x301, 0x5d, 0x2, 0x0, 0x8b, 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0xfa, 0x4, "f4"}, @as_header={0x10, 0x24, 0x1, 0x5, 0xc2, 0x3, 0x3, 0x3, 0xd, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xc, 0x1d, {0x8, 0x25, 0x1, 0x83, 0x33, 0x8, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x5, 0xf2, {0x8, 0x25, 0x1, 0x82, 0xc, 0x0, 0x7}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$KVM_CAP_STEAL_TIME(r2, 0x4068aea3, &(0x7f00000001c0)) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) 1.016013177s ago: executing program 6 (id=3661): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x6e24, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x20000, 0x0, 0x1, 0x2, 0x1}, {{@in=@empty, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0xd, 0x0, 0x7, 0xe}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084503, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000200)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800c0001400000000308000240000000004c000000060a010400000000000000000200020a0900010073797a30000000000900020073797a3000000000200004801c0001800a00010071756575650000000c0002800600014000000000140000001100010000000000000000000200000a"], 0xd4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000203010002000000080001000100000209000200000000000200000008000440000000020800054000006309ce6c000000000000"], 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.015680436s ago: executing program 5 (id=3662): r0 = socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)='@', 0x1}], 0x4}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc601000050000ba", 0x1a}], 0x1}, 0x40040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') connect$can_bcm(r0, &(0x7f0000000000), 0x61) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x5, 0x26, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x2, 0x0, 0x0, "196c3df741c82283"}}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r2, &(0x7f0000000400)=""/1, 0x1000) 941.116185ms ago: executing program 4 (id=3663): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() r2 = fsmount(0xffffffffffffffff, 0x0, 0x80) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002142, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet(0x2, 0x2, 0xb24) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x5420, 0x0) 940.045833ms ago: executing program 1 (id=3664): bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x40055}, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_io_uring_submit(0x0, r0, r1, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000580)="24b0ebcd8e68763ce0a559b53c696fc3b44949a55809ad25fe7bd527b4b77c329d0a2795faceb5457e4d8263256428503f99c69fe64808a82a0db6dba698a67e34a505a8491e53573c6471ad5102e79f464ec261c8dbdbfdc57fb509c026727b120d46e1ac8274405d9a86c7a8e4aed2ca07b683848d71d1f793ec1a4c7419d34fa10747148bc808042a1c5e8b945ed7b696fe9392a871dc71849b98a592e1122a5ae872ef53d29dad000e544b3f2be373d051a6689ddb5f1141e1ca15dc638223ef8a7f873a7f4255e6c3dd10c10bb53f1323758ff6112d3506884df29f060afca6", &(0x7f00000004c0)="7d9d4e628957b901a8db2cf1fa92a4ca10ca0eda5062aa3d42471627274e2f4e2dd20a009d1be5b5e22774bf79daea4d21a7c8bb041c2beff52ef86c225d082b6d31d257251bf30ae54a1bc055c8778b9fabb4fd2e2373c141ed52aa9bb4ed893f6f4ae3b2578c58245111fe60f0136239a73c5c947f4a8b6579eec185a68db93c33beafdcbe94f33231d338611e9b301d86bb1f026bd40699cf89458cecd5", 0x9f, 0x10, 0x0, {0x0, 0x0, 0xb032}}) 911.065596ms ago: executing program 5 (id=3665): io_setup(0xfff, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6}]}) timer_create(0x1, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x4000921, 0x12) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9360, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x4010, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)}, 0x40004884) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000000c0)={0x8, 0x74, 0x100000}, 0xfffffffffffffd53) bind$x25(r7, &(0x7f00000001c0), 0x12) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 665.67438ms ago: executing program 4 (id=3666): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 0s ago: executing program 6 (id=3667): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) finit_module(r2, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/error_log\x00', 0x20000, 0x4) pread64(r3, &(0x7f00000000c0)=""/144, 0x90, 0x7d) close_range(r0, r1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000280)={0x7, 0x0, 0x0, 0x5, "0a910c4796510c803dce79c0253474e6e5bab36ede88054fa0cd813f09ca0f53"}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100}}}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x80000000, &(0x7f0000000240)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = accept(r4, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x80) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x400, @private2, 0x3}, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e22, @loopback}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) kernel console output (not intermixed with test programs): system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=248807 res=0 errno=0 [ 1659.292012][ T5704] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1659.329925][ T31] audit: type=1800 audit(1789152030.911:3544): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=248828 res=0 errno=0 [ 1659.330027][ T31] audit: type=1800 audit(1789152030.921:3545): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=248829 res=0 errno=0 [ 1659.330064][ T31] audit: type=1800 audit(1789152030.921:3546): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=248808 res=0 errno=0 [ 1659.330101][ T31] audit: type=1800 audit(1789152030.921:3547): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=248830 res=0 errno=0 [ 1659.376494][ T31] audit: type=1800 audit(1789152030.971:3548): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248851 res=0 errno=0 [ 1659.558902][ T31] audit: type=1800 audit(1789152031.151:3549): pid=19822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3312" name="run" dev="sysfs" ino=1838 res=0 errno=0 [ 1659.624297][T19822] kernel read not supported for file /policy (pid: 19822 comm: syz.0.3312) [ 1660.224064][ T5696] usb 6-1: USB disconnect, device number 91 [ 1660.981997][ T5704] usb 6-1: Service connection timeout for: 256 [ 1660.982021][ T5704] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1660.983606][ T5704] ath9k_htc: Failed to initialize the device [ 1661.009123][ T5696] usb 6-1: ath9k_htc: USB layer deinitialized [ 1661.254561][T19839] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3315'. [ 1661.418184][T19847] overlay: Unknown parameter '/file0' [ 1661.434152][T19847] netlink: 'syz.6.3317': attribute type 1 has an invalid length. [ 1661.434165][T19847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3317'. [ 1661.804755][T19852] FAULT_INJECTION: forcing a failure. [ 1661.804755][T19852] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1661.804798][T19852] CPU: 1 UID: 0 PID: 19852 Comm: syz.5.3319 Tainted: G L syzkaller #0 PREEMPT(full) [ 1661.804831][T19852] Tainted: [L]=SOFTLOCKUP [ 1661.804840][T19852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1661.804854][T19852] Call Trace: [ 1661.804862][T19852] [ 1661.804870][T19852] dump_stack_lvl+0x100/0x190 [ 1661.804907][T19852] should_fail_ex.cold+0x5/0xa [ 1661.804934][T19852] ? prepare_alloc_pages+0x16d/0x5b0 [ 1661.804963][T19852] should_fail_alloc_page+0xeb/0x140 [ 1661.804991][T19852] prepare_alloc_pages+0x1f0/0x5b0 [ 1661.805017][T19852] ? arch_stack_walk+0xa6/0xf0 [ 1661.805046][T19852] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1661.805085][T19852] ? stack_trace_save+0x8e/0xc0 [ 1661.805116][T19852] ? __pfx_stack_trace_save+0x10/0x10 [ 1661.805144][T19852] ? is_bpf_text_address+0x94/0x1a0 [ 1661.805172][T19852] ? stack_depot_save_flags+0x27/0x9f0 [ 1661.805198][T19852] ? __kernel_text_address+0xd/0x30 [ 1661.805232][T19852] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1661.805263][T19852] ? kasan_save_stack+0x30/0x50 [ 1661.805285][T19852] ? __kasan_kmalloc+0xaa/0xb0 [ 1661.805306][T19852] ? snd_pcm_attach_substream+0x436/0xd20 [ 1661.805328][T19852] ? snd_pcm_open_substream+0x90/0x1850 [ 1661.805357][T19852] ? snd_pcm_oss_open+0x715/0x1380 [ 1661.805382][T19852] ? soundcore_open+0x2e3/0x5a0 [ 1661.805404][T19852] ? chrdev_open+0x234/0x6a0 [ 1661.805427][T19852] ? do_dentry_open+0x6ab/0x14d0 [ 1661.805447][T19852] ? vfs_open+0x82/0x3f0 [ 1661.805470][T19852] ? path_openat+0x19fa/0x2440 [ 1661.805493][T19852] ? do_file_open+0x20e/0x430 [ 1661.805515][T19852] ? do_sys_openat2+0x10f/0x1e0 [ 1661.805540][T19852] ? __x64_sys_openat+0x12d/0x210 [ 1661.805566][T19852] ? do_syscall_64+0x123/0x790 [ 1661.805596][T19852] ? __lock_acquire+0x5c0/0x1f40 [ 1661.805633][T19852] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1661.805661][T19852] ? policy_nodemask+0xed/0x4f0 [ 1661.805691][T19852] alloc_pages_mpol+0x201/0x550 [ 1661.805719][T19852] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1661.805744][T19852] ? __split_page_owner+0x1dd/0x340 [ 1661.805783][T19852] ? split_page_memcg+0x1e/0x1a0 [ 1661.805819][T19852] alloc_pages_noprof+0x1a/0x160 [ 1661.805851][T19852] alloc_pages_exact_noprof+0x32/0xf0 [ 1661.805880][T19852] snd_pcm_attach_substream+0x4b0/0xd20 [ 1661.805909][T19852] snd_pcm_open_substream+0x90/0x1850 [ 1661.805943][T19852] ? __kasan_kmalloc+0xaa/0xb0 [ 1661.805968][T19852] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1661.806000][T19852] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1661.806030][T19852] ? snd_pcm_oss_open+0x5c5/0x1380 [ 1661.806061][T19852] snd_pcm_oss_open+0x715/0x1380 [ 1661.806100][T19852] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1661.806130][T19852] ? __pfx_default_wake_function+0x10/0x10 [ 1661.806156][T19852] ? __lock_acquire+0x5c0/0x1f40 [ 1661.806186][T19852] ? do_raw_spin_lock+0x128/0x260 [ 1661.806214][T19852] ? soundcore_open+0x231/0x5a0 [ 1661.806240][T19852] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1661.806267][T19852] soundcore_open+0x2e3/0x5a0 [ 1661.806292][T19852] ? __pfx_soundcore_open+0x10/0x10 [ 1661.806314][T19852] chrdev_open+0x234/0x6a0 [ 1661.806338][T19852] ? __pfx_chrdev_open+0x10/0x10 [ 1661.806364][T19852] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1661.806400][T19852] do_dentry_open+0x6ab/0x14d0 [ 1661.806421][T19852] ? __pfx_chrdev_open+0x10/0x10 [ 1661.806453][T19852] vfs_open+0x82/0x3f0 [ 1661.806484][T19852] path_openat+0x19fa/0x2440 [ 1661.806513][T19852] ? __pfx_path_openat+0x10/0x10 [ 1661.806546][T19852] do_file_open+0x20e/0x430 [ 1661.806572][T19852] ? __pfx_do_file_open+0x10/0x10 [ 1661.806617][T19852] ? _raw_spin_unlock+0x28/0x50 [ 1661.806638][T19852] ? alloc_fd+0x471/0x7a0 [ 1661.806671][T19852] do_sys_openat2+0x10f/0x1e0 [ 1661.806698][T19852] ? __pfx_do_sys_openat2+0x10/0x10 [ 1661.806727][T19852] ? __sanitizer_cov_trace_switch+0x16/0x90 [ 1661.806759][T19852] __x64_sys_openat+0x12d/0x210 [ 1661.806799][T19852] ? __pfx___x64_sys_openat+0x10/0x10 [ 1661.806841][T19852] do_syscall_64+0x123/0x790 [ 1661.806870][T19852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.806892][T19852] RIP: 0033:0x7ff51799e159 [ 1661.806911][T19852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1661.806930][T19852] RSP: 002b:00007ff51882b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1661.806952][T19852] RAX: ffffffffffffffda RBX: 00007ff517c25fa0 RCX: 00007ff51799e159 [ 1661.806968][T19852] RDX: 0000000000009101 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1661.806983][T19852] RBP: 00007ff517a3503b R08: 0000000000000000 R09: 0000000000000000 [ 1661.806997][T19852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1661.807010][T19852] R13: 00007ff517c26038 R14: 00007ff517c25fa0 R15: 00007ffc3aa00c98 [ 1661.807040][T19852] [ 1663.716641][T19863] netlink: 'syz.6.3322': attribute type 1 has an invalid length. [ 1663.716662][T19863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3322'. [ 1664.635644][T19880] overlayfs: failed to clone upperpath [ 1665.589185][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1665.589203][ T31] audit: type=1800 audit(1789152037.181:3552): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1666.113095][ T5760] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1666.541655][ T5760] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1666.552180][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.552237][ T5760] usb 5-1: Product: syz [ 1666.552253][ T5760] usb 5-1: Manufacturer: syz [ 1666.552268][ T5760] usb 5-1: SerialNumber: syz [ 1666.613365][ T31] audit: type=1800 audit(1789152038.211:3553): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248989 res=0 errno=0 [ 1666.647632][ T31] audit: type=1800 audit(1789152038.221:3554): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=249021 res=0 errno=0 [ 1666.669818][ T5760] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1666.680696][ T31] audit: type=1800 audit(1789152038.261:3555): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=248996 res=0 errno=0 [ 1666.680773][ T31] audit: type=1800 audit(1789152038.261:3556): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=248997 res=0 errno=0 [ 1666.706311][ T31] audit: type=1800 audit(1789152038.301:3557): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=249018 res=0 errno=0 [ 1666.728969][ T31] audit: type=1800 audit(1789152038.301:3558): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=249019 res=0 errno=0 [ 1666.751852][ T31] audit: type=1800 audit(1789152038.321:3559): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=248998 res=0 errno=0 [ 1666.751904][ T31] audit: type=1800 audit(1789152038.321:3560): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=249020 res=0 errno=0 [ 1666.852070][ T31] audit: type=1800 audit(1789152038.441:3561): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249041 res=0 errno=0 [ 1667.398817][ T5696] usb 5-1: USB disconnect, device number 10 [ 1667.799970][T19912] overlay: Unknown parameter '/file0' [ 1667.818055][T19912] netlink: 'syz.6.3328': attribute type 1 has an invalid length. [ 1667.818069][T19912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3328'. [ 1667.925961][ T5760] usb 5-1: Service connection timeout for: 256 [ 1667.925977][ T5760] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1667.926291][ T5760] ath9k_htc: Failed to initialize the device [ 1667.926517][ T5696] usb 5-1: ath9k_htc: USB layer deinitialized [ 1668.553949][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.685931][T19925] jffs2: notice: (19925) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1668.896804][T19934] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3341'. [ 1669.944773][T19942] comedi comedi0: dmm32at: I/O port conflict (0x100,16) [ 1670.774400][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 1670.774448][ T31] audit: type=1800 audit(1789152042.361:3569): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1672.056657][ T31] audit: type=1800 audit(1789152043.631:3570): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1672.190854][T19957] FAULT_INJECTION: forcing a failure. [ 1672.190854][T19957] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.190889][T19957] CPU: 1 UID: 0 PID: 19957 Comm: syz.4.3348 Tainted: G L syzkaller #0 PREEMPT(full) [ 1672.190918][T19957] Tainted: [L]=SOFTLOCKUP [ 1672.190925][T19957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1672.190938][T19957] Call Trace: [ 1672.190946][T19957] [ 1672.190955][T19957] dump_stack_lvl+0x100/0x190 [ 1672.190988][T19957] should_fail_ex.cold+0x5/0xa [ 1672.191017][T19957] should_failslab+0xc2/0x120 [ 1672.191042][T19957] __kmalloc_noprof+0xfc/0x840 [ 1672.191061][T19957] ? rcu_is_watching+0x13/0xc0 [ 1672.191087][T19957] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1672.191117][T19957] tomoyo_realpath_from_path+0xb6/0x690 [ 1672.191147][T19957] tomoyo_path_number_perm+0x23c/0x580 [ 1672.191182][T19957] ? tomoyo_path_number_perm+0x22e/0x580 [ 1672.191213][T19957] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1672.191254][T19957] ? __lock_acquire+0x5c0/0x1f40 [ 1672.191291][T19957] ? __fget_files+0x34/0x3d0 [ 1672.191315][T19957] ? find_held_lock+0x2b/0x80 [ 1672.191341][T19957] ? hook_file_ioctl_common+0x140/0x440 [ 1672.191372][T19957] ? __fget_files+0x21f/0x3d0 [ 1672.191400][T19957] security_file_ioctl+0xd3/0x230 [ 1672.191424][T19957] __x64_sys_ioctl+0xb7/0x210 [ 1672.191447][T19957] do_syscall_64+0x123/0x790 [ 1672.191474][T19957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1672.191494][T19957] RIP: 0033:0x7f025b59e159 [ 1672.191510][T19957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.191528][T19957] RSP: 002b:00007f025c3b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1672.191548][T19957] RAX: ffffffffffffffda RBX: 00007f025b825fa0 RCX: 00007f025b59e159 [ 1672.191562][T19957] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 1672.191574][T19957] RBP: 00007f025c3b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1672.191587][T19957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1672.191599][T19957] R13: 00007f025b826038 R14: 00007f025b825fa0 R15: 00007fffb265f428 [ 1672.191628][T19957] [ 1672.218569][T19957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1672.218643][T19957] comedi comedi0: dmm32at: I/O port conflict (0x100,16) [ 1672.246699][ T5704] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1672.385514][ T5704] usb 6-1: device descriptor read/64, error -71 [ 1672.643583][ T5704] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1672.787549][ T5704] usb 6-1: device descriptor read/64, error -71 [ 1672.894914][ T5704] usb usb6-port1: attempt power cycle [ 1673.134506][ T31] audit: type=1800 audit(1789152044.701:3571): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1673.252278][ T5704] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1673.445709][ T5704] usb 6-1: device descriptor read/8, error -71 [ 1674.277296][T19968] overlayfs: failed to clone upperpath [ 1675.121163][ T31] audit: type=1800 audit(1789152046.711:3572): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1676.623458][ T31] audit: type=1800 audit(1789152048.211:3573): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1676.882239][T19982] jffs2: notice: (19982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1676.951709][ T31] audit: type=1400 audit(1789152048.541:3574): avc: denied { write } for pid=19981 comm="syz.4.3358" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1677.211631][ T31] audit: type=1800 audit(1789152048.801:3575): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3360" name="run" dev="sysfs" ino=1838 res=0 errno=0 [ 1677.294753][T19987] kernel read not supported for file /policy (pid: 19987 comm: syz.1.3360) [ 1677.439718][ T31] audit: type=1800 audit(1789152049.031:3576): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1677.658507][T19998] overlayfs: missing 'lowerdir' [ 1677.764841][T19999] netlink: 'syz.4.3362': attribute type 1 has an invalid length. [ 1677.764893][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3362'. [ 1678.013531][T18031] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1678.226955][T18031] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1678.227794][T18031] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1678.388472][T18031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.388537][T18031] usb 6-1: Product: syz [ 1678.388623][T18031] usb 6-1: Manufacturer: syz [ 1678.388663][T18031] usb 6-1: SerialNumber: syz [ 1678.638317][ T31] audit: type=1800 audit(1789152050.231:3577): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249341 res=0 errno=0 [ 1678.757365][ T31] audit: type=1800 audit(1789152050.351:3578): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=249373 res=0 errno=0 [ 1678.791737][ T31] audit: type=1800 audit(1789152050.381:3579): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=249348 res=0 errno=0 [ 1678.833946][ T31] audit: type=1800 audit(1789152050.431:3580): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=249349 res=0 errno=0 [ 1678.875603][T19997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19997 comm=syz.5.3363 [ 1678.897041][ T31] audit: type=1800 audit(1789152050.481:3581): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1678.996761][T18031] usb 6-1: USB disconnect, device number 96 [ 1679.060984][ T31] audit: type=1800 audit(1789152050.651:3582): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=249370 res=0 errno=0 [ 1680.225398][T20010] udevd[20010]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1680.328767][T20002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.343418][T20002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1682.810479][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1682.810497][ T31] audit: type=1800 audit(1789152054.401:3585): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1682.899708][T20040] FAULT_INJECTION: forcing a failure. [ 1682.899708][T20040] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.899742][T20040] CPU: 1 UID: 0 PID: 20040 Comm: syz.0.3372 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.899771][T20040] Tainted: [L]=SOFTLOCKUP [ 1682.899779][T20040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1682.899792][T20040] Call Trace: [ 1682.899800][T20040] [ 1682.899809][T20040] dump_stack_lvl+0x100/0x190 [ 1682.899846][T20040] should_fail_ex.cold+0x5/0xa [ 1682.899876][T20040] should_failslab+0xc2/0x120 [ 1682.899904][T20040] __kmalloc_noprof+0xfc/0x840 [ 1682.899928][T20040] ? tomoyo_encode2+0xfb/0x3c0 [ 1682.899959][T20040] tomoyo_encode2+0xfb/0x3c0 [ 1682.899987][T20040] tomoyo_encode+0x29/0x50 [ 1682.900013][T20040] tomoyo_realpath_from_path+0x18c/0x690 [ 1682.900046][T20040] tomoyo_check_open_permission+0x2af/0x3c0 [ 1682.900082][T20040] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1682.900115][T20040] ? __lock_acquire+0x5c0/0x1f40 [ 1682.900147][T20040] ? hook_file_open+0x248/0x8e0 [ 1682.900195][T20040] ? path_get+0x61/0x80 [ 1682.900226][T20040] tomoyo_file_open+0x6b/0x90 [ 1682.900254][T20040] security_file_open+0xb5/0x1e0 [ 1682.900280][T20040] do_dentry_open+0x588/0x14d0 [ 1682.900311][T20040] vfs_open+0x82/0x3f0 [ 1682.900341][T20040] path_openat+0x19fa/0x2440 [ 1682.900371][T20040] ? __pfx_path_openat+0x10/0x10 [ 1682.900405][T20040] do_file_open+0x20e/0x430 [ 1682.900433][T20040] ? __pfx_do_file_open+0x10/0x10 [ 1682.900479][T20040] ? _raw_spin_unlock+0x28/0x50 [ 1682.900502][T20040] ? alloc_fd+0x471/0x7a0 [ 1682.900543][T20040] do_sys_openat2+0x10f/0x1e0 [ 1682.900572][T20040] ? __pfx_do_sys_openat2+0x10/0x10 [ 1682.900610][T20040] __x64_sys_openat+0x12d/0x210 [ 1682.900640][T20040] ? __pfx___x64_sys_openat+0x10/0x10 [ 1682.900678][T20040] do_syscall_64+0x123/0x790 [ 1682.900706][T20040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.900728][T20040] RIP: 0033:0x7fd9ee79e159 [ 1682.900745][T20040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.900765][T20040] RSP: 002b:00007fd9ef5f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1682.900786][T20040] RAX: ffffffffffffffda RBX: 00007fd9eea25fa0 RCX: 00007fd9ee79e159 [ 1682.900800][T20040] RDX: 0000000000009101 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1682.900821][T20040] RBP: 00007fd9ee83503b R08: 0000000000000000 R09: 0000000000000000 [ 1682.900834][T20040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.900848][T20040] R13: 00007fd9eea26038 R14: 00007fd9eea25fa0 R15: 00007ffea0fef8e8 [ 1682.900879][T20040] [ 1682.900911][T20040] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1684.802275][ T31] audit: type=1800 audit(1789152056.351:3586): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1684.981548][T20055] netlink: 'syz.4.3378': attribute type 4 has an invalid length. [ 1685.072070][ T31] audit: type=1800 audit(1789152056.661:3587): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1685.171470][T20059] comedi comedi0: comedi_parport: I/O base address not correctly aligned [ 1685.298929][ T31] audit: type=1800 audit(1789152056.891:3588): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1687.659339][ T31] audit: type=1800 audit(1789152059.251:3589): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1688.929736][T15169] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1689.057069][ T31] audit: type=1400 audit(1789152060.651:3590): avc: denied { bind } for pid=20089 comm="syz.6.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1689.073316][T15169] usb 6-1: Using ep0 maxpacket: 8 [ 1689.079080][T15169] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1689.079128][T15169] usb 6-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 1689.080045][T15169] usb 6-1: config 2 has an invalid interface number: 232 but max is 0 [ 1689.080070][T15169] usb 6-1: config 2 has no interface number 0 [ 1689.080119][T15169] usb 6-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 1689.080146][T15169] usb 6-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1689.080171][T15169] usb 6-1: config 2 interface 232 has no altsetting 0 [ 1689.082018][T15169] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.082043][T15169] usb 6-1: Product: syz [ 1689.082059][T15169] usb 6-1: Manufacturer: syz [ 1689.082075][T15169] usb 6-1: SerialNumber: syz [ 1689.093296][T20071] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1689.103441][ T31] audit: type=1800 audit(1789152060.691:3591): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249751 res=0 errno=0 [ 1689.120740][ T31] audit: type=1800 audit(1789152060.711:3592): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=249783 res=0 errno=0 [ 1689.121938][ T31] audit: type=1800 audit(1789152060.711:3593): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=249758 res=0 errno=0 [ 1689.128650][ T31] audit: type=1800 audit(1789152060.721:3594): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=249759 res=0 errno=0 [ 1689.238839][ T31] audit: type=1800 audit(1789152060.831:3595): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1689.293794][T20093] jffs2: notice: (20093) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1689.324769][T20091] x_tables: duplicate underflow at hook 1 [ 1689.324884][ T31] audit: type=1400 audit(1789152060.891:3596): avc: denied { write } for pid=20092 comm="syz.4.3392" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1689.394396][ T31] audit: type=1400 audit(1789152060.991:3597): avc: denied { getopt } for pid=20089 comm="syz.6.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1689.411340][T20071] xt_hashlimit: max too large, truncated to 1048576 [ 1689.534187][ T31] audit: type=1800 audit(1789152061.121:3598): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1689.606769][ T31] audit: type=1800 audit(1789152061.201:3599): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=249780 res=0 errno=0 [ 1689.610587][T15169] usb 6-1: USB disconnect, device number 97 [ 1689.711100][T20103] netlink: 'syz.4.3393': attribute type 4 has an invalid length. [ 1690.735631][T20106] kernel read not supported for file /policy (pid: 20106 comm: syz.4.3396) [ 1690.741515][T20011] udevd[20011]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.232/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1690.898269][T20109] dump_vmcs: 86 callbacks suppressed [ 1690.898289][T20109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1690.930098][T20111] netlink: 4228 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1690.930121][T20111] openvswitch: netlink: Flow key attr not present in new flow. [ 1691.067034][T20117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3399'. [ 1691.813280][T20136] jffs2: notice: (20136) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1692.024241][T20142] netlink: 'syz.6.3406': attribute type 4 has an invalid length. [ 1692.363341][T15169] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1692.363577][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1692.493325][T15169] usb 6-1: device descriptor read/64, error -32 [ 1692.733318][T15169] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1692.733555][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1692.863268][T15169] usb 6-1: device descriptor read/64, error -32 [ 1692.995859][T15169] usb usb6-port1: attempt power cycle [ 1693.617693][T20156] overlayfs: missing 'lowerdir' [ 1693.714430][T20157] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 1693.714681][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3412'. [ 1693.961478][T15169] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1694.028526][T15169] usb 6-1: Using ep0 maxpacket: 8 [ 1694.190599][T15169] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1694.190630][T15169] usb 6-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 1695.014636][T15169] usb 6-1: unable to read config index 0 descriptor/all [ 1695.014688][T15169] usb 6-1: can't read configurations, error -71 [ 1695.191688][T20163] jffs2: notice: (20163) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1695.324711][T20172] jffs2: notice: (20172) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1695.375574][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1695.375592][ T31] audit: type=1400 audit(1789152066.971:3606): avc: denied { write } for pid=20171 comm="syz.1.3416" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1695.415544][T20176] netlink: 'syz.5.3418': attribute type 4 has an invalid length. [ 1695.415650][T20176] FAULT_INJECTION: forcing a failure. [ 1695.415650][T20176] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.415679][T20176] CPU: 1 UID: 0 PID: 20176 Comm: syz.5.3418 Tainted: G L syzkaller #0 PREEMPT(full) [ 1695.415703][T20176] Tainted: [L]=SOFTLOCKUP [ 1695.415710][T20176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1695.415723][T20176] Call Trace: [ 1695.415730][T20176] [ 1695.415738][T20176] dump_stack_lvl+0x100/0x190 [ 1695.415767][T20176] should_fail_ex.cold+0x5/0xa [ 1695.415795][T20176] should_failslab+0xc2/0x120 [ 1695.415820][T20176] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1695.415843][T20176] ? __alloc_skb+0x140/0x710 [ 1695.415870][T20176] __alloc_skb+0x140/0x710 [ 1695.415888][T20176] ? __alloc_skb+0x5b7/0x710 [ 1695.415906][T20176] ? __pfx___alloc_skb+0x10/0x10 [ 1695.415926][T20176] ? if_nlmsg_size+0x4b/0xdc0 [ 1695.415956][T20176] rtmsg_ifinfo_build_skb+0x81/0x260 [ 1695.415986][T20176] rtnetlink_event+0x137/0x1f0 [ 1695.416014][T20176] notifier_call_chain+0x99/0x3f0 [ 1695.416047][T20176] call_netdevice_notifiers_info+0xbe/0x110 [ 1695.416075][T20176] netif_set_mtu_ext+0x48b/0x7b0 [ 1695.416099][T20176] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1695.416126][T20176] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 1695.416162][T20176] do_setlink.isra.0+0x7f9/0x3e60 [ 1695.416188][T20176] ? __lock_acquire+0x5c0/0x1f40 [ 1695.416208][T20176] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 1695.416234][T20176] ? __lock_acquire+0x5c0/0x1f40 [ 1695.416256][T20176] ? lock_acquire+0x1d1/0x380 [ 1695.416273][T20176] ? avc_has_perm_noaudit+0x56/0x3b0 [ 1695.416303][T20176] ? lock_acquire+0x1d1/0x380 [ 1695.416321][T20176] ? rtnl_setlink+0x4dd/0xac0 [ 1695.416344][T20176] ? rcu_is_watching+0x13/0xc0 [ 1695.416371][T20176] ? trace_contention_end+0x126/0x160 [ 1695.416392][T20176] ? __mutex_lock+0x26c/0x1bd0 [ 1695.416418][T20176] ? rtnl_setlink+0x4dd/0xac0 [ 1695.416447][T20176] ? __pfx___mutex_lock+0x10/0x10 [ 1695.416472][T20176] ? rcu_is_watching+0x13/0xc0 [ 1695.416496][T20176] ? cap_capable+0x107/0x430 [ 1695.416534][T20176] ? netlink_ns_capable+0xfa/0x130 [ 1695.416568][T20176] rtnl_setlink+0x5fd/0xac0 [ 1695.416596][T20176] ? __pfx_rtnl_setlink+0x10/0x10 [ 1695.416617][T20176] ? __kasan_slab_free+0x5f/0x80 [ 1695.416641][T20176] ? __dev_queue_xmit+0x1bbf/0x4970 [ 1695.416669][T20176] ? netlink_deliver_tap+0xa4d/0xcc0 [ 1695.416696][T20176] ? netlink_unicast+0x62b/0x850 [ 1695.416715][T20176] ? netlink_sendmsg+0x8b0/0xda0 [ 1695.416733][T20176] ? sock_write_iter+0x53a/0x5b0 [ 1695.416806][T20176] ? __lock_acquire+0x5c0/0x1f40 [ 1695.416839][T20176] ? lock_acquire+0x1d1/0x380 [ 1695.416859][T20176] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1695.416884][T20176] ? find_held_lock+0x2b/0x80 [ 1695.416909][T20176] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1695.416932][T20176] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1695.416957][T20176] ? __pfx_rtnl_setlink+0x10/0x10 [ 1695.416982][T20176] rtnetlink_rcv_msg+0x95e/0xe90 [ 1695.417008][T20176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1695.417041][T20176] ? ref_tracker_free+0x37e/0x6c0 [ 1695.417069][T20176] netlink_rcv_skb+0x159/0x420 [ 1695.417090][T20176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1695.417116][T20176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1695.417154][T20176] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1695.417189][T20176] netlink_unicast+0x585/0x850 [ 1695.417214][T20176] ? __pfx_netlink_unicast+0x10/0x10 [ 1695.417244][T20176] netlink_sendmsg+0x8b0/0xda0 [ 1695.417269][T20176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1695.417293][T20176] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1695.417327][T20176] sock_write_iter+0x53a/0x5b0 [ 1695.417353][T20176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1695.417373][T20176] ? __pfx_sock_write_iter+0x10/0x10 [ 1695.417409][T20176] ? __pfx___file_has_perm+0x10/0x10 [ 1695.417436][T20176] ? __lock_acquire+0x5c0/0x1f40 [ 1695.417461][T20176] do_iter_readv_writev+0x6f7/0x930 [ 1695.417492][T20176] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1695.417520][T20176] ? selinux_file_permission+0x8f/0x6d0 [ 1695.417545][T20176] ? bpf_lsm_file_permission+0x9/0x10 [ 1695.417570][T20176] ? security_file_permission+0x76/0x210 [ 1695.417593][T20176] ? rw_verify_area+0xce/0x6d0 [ 1695.417623][T20176] vfs_writev+0x360/0xdd0 [ 1695.417654][T20176] ? __lock_acquire+0x5c0/0x1f40 [ 1695.417678][T20176] ? __pfx_vfs_writev+0x10/0x10 [ 1695.417713][T20176] ? lock_acquire+0x1d1/0x380 [ 1695.417733][T20176] ? __fget_files+0x34/0x3d0 [ 1695.417766][T20176] ? __fget_files+0x21f/0x3d0 [ 1695.417796][T20176] ? do_writev+0x28a/0x340 [ 1695.417813][T20176] do_writev+0x28a/0x340 [ 1695.417832][T20176] ? __pfx_do_writev+0x10/0x10 [ 1695.417858][T20176] do_syscall_64+0x123/0x790 [ 1695.417886][T20176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.417908][T20176] RIP: 0033:0x7ff51799e159 [ 1695.417925][T20176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.417943][T20176] RSP: 002b:00007ff51882b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1695.417962][T20176] RAX: ffffffffffffffda RBX: 00007ff517c25fa0 RCX: 00007ff51799e159 [ 1695.417974][T20176] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1695.417985][T20176] RBP: 00007ff51882b090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.417997][T20176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.418009][T20176] R13: 00007ff517c26038 R14: 00007ff517c25fa0 R15: 00007ffc3aa00c98 [ 1695.418038][T20176] [ 1695.498967][T20174] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3415'. [ 1695.950887][ T31] audit: type=1800 audit(1789152067.541:3607): pid=20185 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3419" name="file1" dev="tmpfs" ino=3251 res=0 errno=0 [ 1696.139104][ T31] audit: type=1800 audit(1789152067.731:3608): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1696.200199][ T31] audit: type=1400 audit(1789152067.791:3609): avc: denied { watch } for pid=20187 comm="syz.5.3421" path="/515/control" dev="tmpfs" ino=3182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1696.348114][T20194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.350941][T20194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.483125][T20204] overlayfs: missing 'workdir' [ 1696.643869][T20204] netlink: 'syz.5.3426': attribute type 1 has an invalid length. [ 1696.643889][T20204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3426'. [ 1696.684547][T20194] xt_hashlimit: max too large, truncated to 1048576 [ 1697.377565][ T31] audit: type=1800 audit(1789152068.971:3610): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1697.656323][T20224] jffs2: notice: (20224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1697.684671][ T31] audit: type=1400 audit(1789152069.281:3611): avc: denied { write } for pid=20223 comm="syz.5.3430" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1697.919768][T15169] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1698.049854][T20232] fuse: fd is not a fuse device [ 1698.078907][T15169] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1698.081463][T15169] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1698.081483][T15169] usb 5-1: can't read configurations, error -71 [ 1698.100396][ T31] audit: type=1400 audit(1789152069.691:3612): avc: denied { listen } for pid=20236 comm="syz.1.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1698.155868][ T31] audit: type=1400 audit(1789152069.751:3613): avc: denied { read } for pid=20236 comm="syz.1.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1698.331597][T20244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.332020][T20244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.356228][T20240] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3434'. [ 1698.417259][T20244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1698.436940][ T31] audit: type=1400 audit(1789152070.031:3614): avc: denied { setattr } for pid=20243 comm="syz.6.3436" name="NETLINK" dev="sockfs" ino=73730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1698.485796][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3435'. [ 1698.970851][ T31] audit: type=1800 audit(1789676358.560:3615): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1700.084606][T18031] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1700.128057][T20284] binder: 20279:20284 ioctl c0306201 0 returned -14 [ 1700.234561][T18955] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1700.258807][T18031] usb 6-1: Using ep0 maxpacket: 8 [ 1700.264926][T18031] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1700.264970][T18031] usb 6-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 1700.265871][T18031] usb 6-1: config 2 has an invalid interface number: 232 but max is 0 [ 1700.265896][T18031] usb 6-1: config 2 has no interface number 0 [ 1700.265952][T18031] usb 6-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 1700.265979][T18031] usb 6-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1700.266004][T18031] usb 6-1: config 2 interface 232 has no altsetting 0 [ 1700.268420][T18031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.268443][T18031] usb 6-1: Product: syz [ 1700.268458][T18031] usb 6-1: Manufacturer: syz [ 1700.268473][T18031] usb 6-1: SerialNumber: syz [ 1700.273744][T20276] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1700.380837][T20263] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1700.416743][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 1700.416755][ T31] audit: type=1800 audit(1789676359.978:3624): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250389 res=0 errno=0 [ 1700.631840][T18955] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1700.854988][T20280] ceph: No mds server is up or the cluster is laggy [ 1701.047048][T20276] xt_hashlimit: max too large, truncated to 1048576 [ 1701.174703][T18955] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1701.971684][ T31] audit: type=1800 audit(1789676361.484:3625): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1702.152151][ T31] audit: type=1800 audit(1789676361.659:3626): pid=20009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=250343 res=0 errno=0 [ 1702.183897][T18031] usb 6-1: USB disconnect, device number 102 [ 1702.200821][ T31] audit: type=1800 audit(1789676361.707:3627): pid=20009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=250344 res=0 errno=0 [ 1702.201862][ T31] audit: type=1800 audit(1789676361.707:3628): pid=20009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=250323 res=0 errno=0 [ 1702.205212][ T31] audit: type=1800 audit(1789676361.717:3629): pid=20009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=250345 res=0 errno=0 [ 1702.275557][T20302] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3452'. [ 1702.276681][T20009] udevd[20009]: setting mode of /dev/bus/usb/006/102 to 020664 failed: No such file or directory [ 1702.276778][T20009] udevd[20009]: setting owner of /dev/bus/usb/006/102 to uid=0, gid=0 failed: No such file or directory [ 1702.323905][ T31] audit: type=1800 audit(1789676361.824:3630): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1702.390442][T20011] udevd[20011]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.232/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1702.619548][ T31] audit: type=1800 audit(1789676362.048:3631): pid=20312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3455" name=08 dev="sda1" ino=2061 res=0 errno=0 [ 1702.632617][T20313] netlink: 'syz.1.3456': attribute type 1 has an invalid length. [ 1702.640495][T20313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3456'. [ 1702.857141][ T31] audit: type=1800 audit(1789676362.350:3632): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1702.977216][T20325] overlayfs: missing 'lowerdir' [ 1703.294549][T18955] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1703.461802][T18955] usb 2-1: Using ep0 maxpacket: 8 [ 1703.476009][T18955] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1703.476298][T18955] usb 2-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=29.5c [ 1703.487879][T18955] usb 2-1: config 7 has an invalid descriptor of length 106, skipping remainder of the config [ 1703.489194][T18955] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 1703.535285][T18955] usb 2-1: string descriptor 0 read error: -22 [ 1703.535977][T18955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.642352][ T31] audit: type=1800 audit(1789676363.052:3633): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250593 res=0 errno=0 [ 1703.863416][T20325] netlink: 'syz.1.3459': attribute type 1 has an invalid length. [ 1703.863446][T20325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3459'. [ 1704.468125][T20336] FAULT_INJECTION: forcing a failure. [ 1704.468125][T20336] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.468222][T20336] CPU: 1 UID: 0 PID: 20336 Comm: syz.0.3463 Tainted: G L syzkaller #0 PREEMPT(full) [ 1704.468254][T20336] Tainted: [L]=SOFTLOCKUP [ 1704.468263][T20336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1704.468278][T20336] Call Trace: [ 1704.468286][T20336] [ 1704.468295][T20336] dump_stack_lvl+0x100/0x190 [ 1704.468331][T20336] should_fail_ex.cold+0x5/0xa [ 1704.468360][T20336] should_failslab+0xc2/0x120 [ 1704.468390][T20336] __kmalloc_cache_noprof+0x91/0x6d0 [ 1704.468423][T20336] ? snd_card_file_add+0x52/0x320 [ 1704.468456][T20336] snd_card_file_add+0x52/0x320 [ 1704.468483][T20336] ? snd_pcm_oss_open+0x181/0x1380 [ 1704.468511][T20336] snd_pcm_oss_open+0x1a8/0x1380 [ 1704.468542][T20336] ? lock_acquire+0x1d1/0x380 [ 1704.468564][T20336] ? avc_has_perm_noaudit+0x56/0x3b0 [ 1704.468594][T20336] ? find_held_lock+0x2b/0x80 [ 1704.468625][T20336] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1704.468662][T20336] ? __lock_acquire+0x5c0/0x1f40 [ 1704.468691][T20336] ? __lock_acquire+0x5c0/0x1f40 [ 1704.468722][T20336] ? do_raw_spin_lock+0x128/0x260 [ 1704.468751][T20336] ? soundcore_open+0x231/0x5a0 [ 1704.468777][T20336] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1704.468805][T20336] soundcore_open+0x2e3/0x5a0 [ 1704.468832][T20336] ? __pfx_soundcore_open+0x10/0x10 [ 1704.468856][T20336] chrdev_open+0x234/0x6a0 [ 1704.468883][T20336] ? __pfx_chrdev_open+0x10/0x10 [ 1704.468909][T20336] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1704.468946][T20336] do_dentry_open+0x6ab/0x14d0 [ 1704.468967][T20336] ? __pfx_chrdev_open+0x10/0x10 [ 1704.468998][T20336] vfs_open+0x82/0x3f0 [ 1704.469028][T20336] path_openat+0x19fa/0x2440 [ 1704.469057][T20336] ? __pfx_path_openat+0x10/0x10 [ 1704.469090][T20336] do_file_open+0x20e/0x430 [ 1704.469118][T20336] ? __pfx_do_file_open+0x10/0x10 [ 1704.469142][T20336] ? lockdep_hardirqs_on+0x7d/0x110 [ 1704.469188][T20336] ? _raw_spin_unlock+0x28/0x50 [ 1704.469210][T20336] ? alloc_fd+0x471/0x7a0 [ 1704.469244][T20336] do_sys_openat2+0x10f/0x1e0 [ 1704.469272][T20336] ? __pfx_do_sys_openat2+0x10/0x10 [ 1704.469304][T20336] ? irqentry_exit+0x24d/0xa10 [ 1704.469328][T20336] ? lockdep_hardirqs_on+0x7d/0x110 [ 1704.469358][T20336] __x64_sys_openat+0x12d/0x210 [ 1704.469386][T20336] ? __pfx___x64_sys_openat+0x10/0x10 [ 1704.469425][T20336] do_syscall_64+0x123/0x790 [ 1704.469455][T20336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.469477][T20336] RIP: 0033:0x7fd9ee79e159 [ 1704.469495][T20336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.469515][T20336] RSP: 002b:00007fd9ef5f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1704.469536][T20336] RAX: ffffffffffffffda RBX: 00007fd9eea25fa0 RCX: 00007fd9ee79e159 [ 1704.469551][T20336] RDX: 0000000000009101 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1704.469565][T20336] RBP: 00007fd9ee83503b R08: 0000000000000000 R09: 0000000000000000 [ 1704.469578][T20336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1704.469591][T20336] R13: 00007fd9eea26038 R14: 00007fd9eea25fa0 R15: 00007ffea0fef8e8 [ 1704.469622][T20336] [ 1705.872574][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1705.872591][ T31] audit: type=1800 audit(1789676365.289:3638): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1706.027524][T18904] usb 2-1: USB disconnect, device number 25 [ 1706.233364][ T31] audit: type=1800 audit(1789676365.642:3639): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250737 res=0 errno=0 [ 1706.275642][ T5713] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1706.330769][T20348] binder: 20343:20348 ioctl c0306201 0 returned -14 [ 1706.567113][T14714] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1706.716601][T20354] FAULT_INJECTION: forcing a failure. [ 1706.716601][T20354] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.716639][T20354] CPU: 1 UID: 0 PID: 20354 Comm: syz.0.3469 Tainted: G L syzkaller #0 PREEMPT(full) [ 1706.716668][T20354] Tainted: [L]=SOFTLOCKUP [ 1706.716676][T20354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1706.716689][T20354] Call Trace: [ 1706.716696][T20354] [ 1706.716705][T20354] dump_stack_lvl+0x100/0x190 [ 1706.716742][T20354] should_fail_ex.cold+0x5/0xa [ 1706.716771][T20354] should_failslab+0xc2/0x120 [ 1706.716798][T20354] __kmalloc_cache_noprof+0x91/0x6d0 [ 1706.716830][T20354] ? snd_card_file_add+0x52/0x320 [ 1706.716864][T20354] snd_card_file_add+0x52/0x320 [ 1706.716895][T20354] snd_pcm_oss_open+0x1a8/0x1380 [ 1706.716927][T20354] ? lock_acquire+0x1d1/0x380 [ 1706.716948][T20354] ? avc_has_perm_noaudit+0x56/0x3b0 [ 1706.716977][T20354] ? find_held_lock+0x2b/0x80 [ 1706.717005][T20354] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1706.717032][T20354] ? __lock_acquire+0x5c0/0x1f40 [ 1706.717058][T20354] ? __lock_acquire+0x5c0/0x1f40 [ 1706.717088][T20354] ? do_raw_spin_lock+0x128/0x260 [ 1706.717116][T20354] ? soundcore_open+0x231/0x5a0 [ 1706.717143][T20354] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1706.717171][T20354] soundcore_open+0x2e3/0x5a0 [ 1706.717199][T20354] ? __pfx_soundcore_open+0x10/0x10 [ 1706.717222][T20354] chrdev_open+0x234/0x6a0 [ 1706.717248][T20354] ? __pfx_chrdev_open+0x10/0x10 [ 1706.717274][T20354] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1706.717309][T20354] do_dentry_open+0x6ab/0x14d0 [ 1706.717329][T20354] ? __pfx_chrdev_open+0x10/0x10 [ 1706.717368][T20354] vfs_open+0x82/0x3f0 [ 1706.717400][T20354] path_openat+0x19fa/0x2440 [ 1706.717430][T20354] ? __pfx_path_openat+0x10/0x10 [ 1706.717463][T20354] do_file_open+0x20e/0x430 [ 1706.717490][T20354] ? __pfx_do_file_open+0x10/0x10 [ 1706.717534][T20354] ? _raw_spin_unlock+0x28/0x50 [ 1706.717559][T20354] ? alloc_fd+0x471/0x7a0 [ 1706.717593][T20354] do_sys_openat2+0x10f/0x1e0 [ 1706.717621][T20354] ? __pfx_do_sys_openat2+0x10/0x10 [ 1706.717659][T20354] __x64_sys_openat+0x12d/0x210 [ 1706.717688][T20354] ? __pfx___x64_sys_openat+0x10/0x10 [ 1706.717727][T20354] do_syscall_64+0x123/0x790 [ 1706.717756][T20354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.717778][T20354] RIP: 0033:0x7fd9ee79e159 [ 1706.717796][T20354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.717817][T20354] RSP: 002b:00007fd9ef5f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1706.717837][T20354] RAX: ffffffffffffffda RBX: 00007fd9eea25fa0 RCX: 00007fd9ee79e159 [ 1706.717851][T20354] RDX: 0000000000009101 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1706.717864][T20354] RBP: 00007fd9ee83503b R08: 0000000000000000 R09: 0000000000000000 [ 1706.717877][T20354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1706.717889][T20354] R13: 00007fd9eea26038 R14: 00007fd9eea25fa0 R15: 00007ffea0fef8e8 [ 1706.717918][T20354] [ 1706.824084][T14714] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1706.976709][T20344] ceph: No mds server is up or the cluster is laggy [ 1707.008572][T14714] usb 2-1: Using ep0 maxpacket: 8 [ 1707.056572][T14714] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1707.056609][T14714] usb 2-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 1707.080113][T14714] usb 2-1: config 2 has an invalid interface number: 232 but max is 0 [ 1707.080142][T14714] usb 2-1: config 2 has no interface number 0 [ 1707.080178][T14714] usb 2-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 1707.080206][T14714] usb 2-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1707.080230][T14714] usb 2-1: config 2 interface 232 has no altsetting 0 [ 1707.082025][T14714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.082050][T14714] usb 2-1: Product: syz [ 1707.082065][T14714] usb 2-1: Manufacturer: syz [ 1707.082081][T14714] usb 2-1: SerialNumber: syz [ 1707.116873][ T31] audit: type=1800 audit(1789676366.504:3640): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250764 res=0 errno=0 [ 1707.147092][ T31] audit: type=1800 audit(1789676366.533:3641): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=250796 res=0 errno=0 [ 1707.157639][T20350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1707.184301][T18955] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1707.203909][ T31] audit: type=1800 audit(1789676366.602:3642): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=250771 res=0 errno=0 [ 1707.212340][ T31] audit: type=1800 audit(1789676366.612:3643): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=250772 res=0 errno=0 [ 1707.458051][ T31] audit: type=1800 audit(1789676366.837:3644): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1707.513530][T20350] xt_hashlimit: max too large, truncated to 1048576 [ 1708.012970][ T31] audit: type=1800 audit(1789676367.387:3645): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=250793 res=0 errno=0 [ 1708.045465][T14714] usb 2-1: USB disconnect, device number 26 [ 1708.076330][ T31] audit: type=1800 audit(1789676367.445:3646): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=250794 res=0 errno=0 [ 1708.211413][T20011] udevd[20011]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.232/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1708.288154][T20367] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3472'. [ 1708.623943][ T31] audit: type=1800 audit(1789676367.985:3647): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1708.891507][T20379] binder: 20378:20379 ioctl c0445636 200000000000 returned -22 [ 1709.259582][T20389] FAULT_INJECTION: forcing a failure. [ 1709.259582][T20389] name failslab, interval 1, probability 0, space 0, times 0 [ 1709.259605][T20389] CPU: 0 UID: 0 PID: 20389 Comm: syz.4.3478 Tainted: G L syzkaller #0 PREEMPT(full) [ 1709.259622][T20389] Tainted: [L]=SOFTLOCKUP [ 1709.259626][T20389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1709.259634][T20389] Call Trace: [ 1709.259639][T20389] [ 1709.259644][T20389] dump_stack_lvl+0x100/0x190 [ 1709.259664][T20389] should_fail_ex.cold+0x5/0xa [ 1709.259681][T20389] should_failslab+0xc2/0x120 [ 1709.259697][T20389] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1709.259710][T20389] ? do_getname+0x35/0x390 [ 1709.259729][T20389] do_getname+0x35/0x390 [ 1709.259747][T20389] user_path_at+0x26/0x60 [ 1709.259760][T20389] bpf_uprobe_multi_link_attach+0x54d/0x1510 [ 1709.259778][T20389] ? find_held_lock+0x2b/0x80 [ 1709.259801][T20389] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 1709.259818][T20389] ? __fget_files+0x21f/0x3d0 [ 1709.259835][T20389] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1709.259851][T20389] __sys_bpf+0x427a/0x4a30 [ 1709.259867][T20389] ? __pfx___sys_bpf+0x10/0x10 [ 1709.259878][T20389] ? find_held_lock+0x2b/0x80 [ 1709.259892][T20389] ? get_pid_task+0xfc/0x250 [ 1709.259907][T20389] ? get_pid_task+0xfc/0x250 [ 1709.259927][T20389] ? find_held_lock+0x2b/0x80 [ 1709.259946][T20389] ? rcu_read_lock_any_held+0x6a/0x90 [ 1709.259962][T20389] ? find_held_lock+0x2b/0x80 [ 1709.259977][T20389] ? ksys_write+0x190/0x250 [ 1709.259988][T20389] ? ksys_write+0x190/0x250 [ 1709.260000][T20389] ? lock_acquire+0x1d1/0x380 [ 1709.260022][T20389] ? fput+0x7c/0x100 [ 1709.260038][T20389] ? ksys_write+0x1ac/0x250 [ 1709.260051][T20389] ? __x64_sys_bpf+0xce/0x140 [ 1709.260062][T20389] __x64_sys_bpf+0xce/0x140 [ 1709.260074][T20389] ? do_syscall_64+0xae/0x790 [ 1709.260089][T20389] do_syscall_64+0x123/0x790 [ 1709.260105][T20389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.260117][T20389] RIP: 0033:0x7f025b59e159 [ 1709.260127][T20389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1709.260139][T20389] RSP: 002b:00007f025c3b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1709.260151][T20389] RAX: ffffffffffffffda RBX: 00007f025b825fa0 RCX: 00007f025b59e159 [ 1709.260158][T20389] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 1709.260165][T20389] RBP: 00007f025c3b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1709.260173][T20389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1709.260180][T20389] R13: 00007f025b826038 R14: 00007f025b825fa0 R15: 00007fffb265f428 [ 1709.260195][T20389] [ 1709.360678][ T5713] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1709.576834][ T5713] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1709.576881][ T5713] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=b0.82 [ 1709.577962][ T5713] usb 6-1: config 5 has an invalid interface number: 88 but max is 0 [ 1709.577988][ T5713] usb 6-1: config 5 has no interface number 0 [ 1709.578015][ T5713] usb 6-1: config 5 interface 88 has no altsetting 0 [ 1709.610855][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.610873][ T5713] usb 6-1: Product: syz [ 1709.610882][ T5713] usb 6-1: Manufacturer: syz [ 1709.610890][ T5713] usb 6-1: SerialNumber: syz [ 1710.033650][T14714] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1710.152128][T20405] binder: 20392:20405 ioctl c0306201 0 returned -14 [ 1710.216935][T20406] jffs2: notice: (20406) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1710.295628][ T5760] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1710.432272][T20412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1710.767945][T20394] ceph: No mds server is up or the cluster is laggy [ 1710.791394][T20415] xt_hashlimit: max too large, truncated to 1048576 [ 1710.835412][ T5760] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1710.913030][T20421] FAULT_INJECTION: forcing a failure. [ 1710.913030][T20421] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.913065][T20421] CPU: 0 UID: 0 PID: 20421 Comm: syz.0.3485 Tainted: G L syzkaller #0 PREEMPT(full) [ 1710.913093][T20421] Tainted: [L]=SOFTLOCKUP [ 1710.913101][T20421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1710.913113][T20421] Call Trace: [ 1710.913119][T20421] [ 1710.913124][T20421] dump_stack_lvl+0x100/0x190 [ 1710.913145][T20421] should_fail_ex.cold+0x5/0xa [ 1710.913160][T20421] ? __netlink_lookup+0x652/0x900 [ 1710.913188][T20421] should_failslab+0xc2/0x120 [ 1710.913214][T20421] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1710.913236][T20421] ? skb_clone+0x190/0x400 [ 1710.913261][T20421] skb_clone+0x190/0x400 [ 1710.913275][T20421] netlink_deliver_tap+0xaed/0xcc0 [ 1710.913296][T20421] netlink_unicast+0x62b/0x850 [ 1710.913310][T20421] ? __pfx_netlink_unicast+0x10/0x10 [ 1710.913332][T20421] netlink_sendmsg+0x8b0/0xda0 [ 1710.913358][T20421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.913382][T20421] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1710.913412][T20421] ____sys_sendmsg+0xa4d/0xbe0 [ 1710.913427][T20421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.913441][T20421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1710.913460][T20421] ? lock_acquire+0x1d1/0x380 [ 1710.913478][T20421] ? get_pid_task+0x2a/0x250 [ 1710.913505][T20421] ___sys_sendmsg+0x190/0x1e0 [ 1710.913533][T20421] ? __pfx____sys_sendmsg+0x10/0x10 [ 1710.913560][T20421] ? get_pid_task+0x106/0x250 [ 1710.913593][T20421] ? find_held_lock+0x2b/0x80 [ 1710.913644][T20421] __sys_sendmsg+0x160/0x210 [ 1710.913668][T20421] ? __pfx___sys_sendmsg+0x10/0x10 [ 1710.913706][T20421] do_syscall_64+0x123/0x790 [ 1710.913726][T20421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.913739][T20421] RIP: 0033:0x7fd9ee79e159 [ 1710.913749][T20421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.913761][T20421] RSP: 002b:00007fd9ef5d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1710.913781][T20421] RAX: ffffffffffffffda RBX: 00007fd9eea26090 RCX: 00007fd9ee79e159 [ 1710.913795][T20421] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1710.913808][T20421] RBP: 00007fd9ef5d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.913820][T20421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.913831][T20421] R13: 00007fd9eea26128 R14: 00007fd9eea26090 R15: 00007ffea0fef8e8 [ 1710.913853][T20421] [ 1710.956287][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1711.114380][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 1711.114397][ T31] audit: type=1800 audit(1789676370.434:3658): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1711.279373][ T31] audit: type=1800 audit(1789676370.602:3659): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251143 res=0 errno=0 [ 1711.476154][T20384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.476534][T20384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.539290][T20433] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3488'. [ 1711.568688][ T5713] comedi comedi5: Wrong number of endpoints [ 1711.568710][ T5713] dt9812 6-1:5.88: driver 'dt9812' failed to auto-configure device. [ 1711.598296][ T5713] usb 6-1: USB disconnect, device number 103 [ 1711.602585][ T31] audit: type=1800 audit(1789676370.917:3660): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=251001 res=0 errno=0 [ 1711.634597][ T31] audit: type=1800 audit(1789676370.937:3661): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=251002 res=0 errno=0 [ 1711.634646][ T31] audit: type=1800 audit(1789676370.937:3662): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=250981 res=0 errno=0 [ 1711.634684][ T31] audit: type=1800 audit(1789676370.947:3663): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=251003 res=0 errno=0 [ 1711.937716][T20442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.948692][T20442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.971617][T20442] netlink: 'syz.0.3489': attribute type 1 has an invalid length. [ 1711.971698][T20442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1713.953066][ T31] audit: type=1800 audit(1789676373.235:3664): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1714.567819][ T31] audit: type=1800 audit(1789676373.847:3665): pid=20446 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3490" name="run" dev="sysfs" ino=1838 res=0 errno=0 [ 1714.677159][T20446] kernel read not supported for file /policy (pid: 20446 comm: syz.4.3490) [ 1714.884941][T20454] jffs2: notice: (20454) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1714.912128][ T31] audit: type=1400 audit(1789676374.183:3666): avc: denied { write } for pid=20453 comm="syz.5.3494" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1715.119807][T20461] overlay: Unknown parameter '/file0' [ 1715.164857][T20461] netlink: 'syz.6.3495': attribute type 1 has an invalid length. [ 1715.164871][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3495'. [ 1715.886986][T20468] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3499'. [ 1715.887027][T20468] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3499'. [ 1715.933685][ T31] audit: type=1800 audit(1789676375.201:3667): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3499" name="file1" dev="tmpfs" ino=3350 res=0 errno=0 [ 1716.048217][T20470] xt_hashlimit: max too large, truncated to 1048576 [ 1716.068511][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3499'. [ 1716.068532][T20468] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3499'. [ 1716.277290][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1716.277308][ T31] audit: type=1800 audit(1789676375.538:3669): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251217 res=0 errno=0 [ 1716.635828][T20480] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3502'. [ 1717.913305][T20490] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3505'. [ 1718.279944][ T31] audit: type=1800 audit(1789676377.517:3670): pid=20498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3507" name="file1" dev="tmpfs" ino=3279 res=0 errno=0 [ 1718.328802][T20500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.329178][T20500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.338761][ T31] audit: type=1400 audit(1789676377.577:3671): avc: denied { ioctl } for pid=20496 comm="syz.1.3506" path="socket:[74047]" dev="sockfs" ino=74047 ioctlcmd=0x5345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1718.393469][ T5605] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1718.393497][ T5605] CPU: 1 UID: 0 PID: 5605 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1718.393530][ T5605] Tainted: [L]=SOFTLOCKUP [ 1718.393538][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1718.393551][ T5605] Workqueue: hci2 hci_rx_work [ 1718.393577][ T5605] Call Trace: [ 1718.393584][ T5605] [ 1718.393595][ T5605] dump_stack_lvl+0x100/0x190 [ 1718.393631][ T5605] sysfs_warn_dup.cold+0x1c/0x28 [ 1718.393662][ T5605] sysfs_create_dir_ns+0x24b/0x2b0 [ 1718.393689][ T5605] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1718.393713][ T5605] ? find_held_lock+0x2b/0x80 [ 1718.393741][ T5605] ? kobject_add_internal+0x25f/0x930 [ 1718.393769][ T5605] ? kobject_add_internal+0x25f/0x930 [ 1718.393802][ T5605] ? do_raw_spin_unlock+0x145/0x1e0 [ 1718.393829][ T5605] kobject_add_internal+0x2c8/0x930 [ 1718.393867][ T5605] kobject_add+0x16a/0x1e0 [ 1718.393887][ T5605] ? __pfx_kobject_add+0x10/0x10 [ 1718.393906][ T5605] ? class_to_subsys+0x10f/0x150 [ 1718.393940][ T5605] ? kobject_put+0xb9/0x640 [ 1718.393967][ T5605] ? _raw_spin_unlock+0x28/0x50 [ 1718.393996][ T5605] device_add+0x294/0x1970 [ 1718.394022][ T5605] ? __pfx_dev_set_name+0x10/0x10 [ 1718.394051][ T5605] ? __pfx_device_add+0x10/0x10 [ 1718.394077][ T5605] ? mgmt_send_event_skb+0x2fb/0x460 [ 1718.394121][ T5605] hci_conn_add_sysfs+0x1a3/0x260 [ 1718.394149][ T5605] le_conn_complete_evt+0x122f/0x2130 [ 1718.394181][ T5605] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1718.394203][ T5605] ? hci_event_packet+0x186/0xcd0 [ 1718.394233][ T5605] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1718.394258][ T5605] ? skb_pull_data+0x15f/0x1e0 [ 1718.394290][ T5605] hci_le_meta_evt+0x34a/0x5f0 [ 1718.394315][ T5605] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1718.394343][ T5605] hci_event_packet+0x51c/0xcd0 [ 1718.394365][ T5605] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1718.394389][ T5605] ? __pfx_hci_event_packet+0x10/0x10 [ 1718.394420][ T5605] ? hci_rx_work+0x1f0/0xfc0 [ 1718.394446][ T5605] hci_rx_work+0x451/0xfc0 [ 1718.394474][ T5605] process_one_work+0xac7/0x1b10 [ 1718.394517][ T5605] ? __pfx_process_one_work+0x10/0x10 [ 1718.394548][ T5605] ? lock_acquire+0x1d1/0x380 [ 1718.394579][ T5605] ? __pfx_hci_rx_work+0x10/0x10 [ 1718.394605][ T5605] worker_thread+0x5ef/0xe50 [ 1718.394648][ T5605] ? kthread+0x13a/0x450 [ 1718.394674][ T5605] ? __pfx_worker_thread+0x10/0x10 [ 1718.394702][ T5605] kthread+0x373/0x450 [ 1718.394728][ T5605] ? __pfx_kthread+0x10/0x10 [ 1718.394758][ T5605] ret_from_fork+0x730/0xd60 [ 1718.394783][ T5605] ? __pfx_ret_from_fork+0x10/0x10 [ 1718.394808][ T5605] ? __switch_to+0x800/0x10f0 [ 1718.394836][ T5605] ? __pfx_kthread+0x10/0x10 [ 1718.394865][ T5605] ret_from_fork_asm+0x1a/0x30 [ 1718.394904][ T5605] [ 1718.396473][ T5605] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1718.396510][ T5605] Bluetooth: hci2: failed to register connection device [ 1718.803037][T20504] FAULT_INJECTION: forcing a failure. [ 1718.803037][T20504] name fail_usercopy, interval 1, probability 0, space 0, times -1 [ 1718.803064][T20504] CPU: 1 UID: 0 PID: 20504 Comm: syz.5.3511 Tainted: G L syzkaller #0 PREEMPT(full) [ 1718.803082][T20504] Tainted: [L]=SOFTLOCKUP [ 1718.803087][T20504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1718.803096][T20504] Call Trace: [ 1718.803101][T20504] [ 1718.803113][T20504] dump_stack_lvl+0x100/0x190 [ 1718.803138][T20504] should_fail_ex.cold+0x5/0xa [ 1718.803156][T20504] _copy_from_user+0x2e/0xd0 [ 1718.803170][T20504] __do_sys_capset+0x1ec/0x460 [ 1718.803182][T20504] ? __pfx___do_sys_capset+0x10/0x10 [ 1718.803196][T20504] ? __x64_sys_futex+0x358/0x4d0 [ 1718.803214][T20504] ? xfd_validate_state+0x129/0x190 [ 1718.803232][T20504] do_syscall_64+0x123/0x790 [ 1718.803249][T20504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.803261][T20504] RIP: 0033:0x7ff51799e159 [ 1718.803271][T20504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.803282][T20504] RSP: 002b:00007ff51882b028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 1718.803294][T20504] RAX: ffffffffffffffda RBX: 00007ff517c25fa0 RCX: 00007ff51799e159 [ 1718.803302][T20504] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000040 [ 1718.803309][T20504] RBP: 00007ff517a3503b R08: 0000000000000000 R09: 0000000000000000 [ 1718.803316][T20504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1718.803323][T20504] R13: 00007ff517c26038 R14: 00007ff517c25fa0 R15: 00007ffc3aa00c98 [ 1718.803339][T20504] [ 1719.119915][T20506] xt_hashlimit: max too large, truncated to 1048576 [ 1719.383929][ T31] audit: type=1800 audit(1789676378.607:3672): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1719.489964][T20515] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1719.591552][ T31] audit: type=1800 audit(1789676378.815:3673): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251999 res=0 errno=0 [ 1719.640311][ T31] audit: type=1800 audit(1789676378.865:3674): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1719.737085][ T31] audit: type=1800 audit(1789676378.954:3675): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252021 res=0 errno=0 [ 1719.783035][ T31] audit: type=1800 audit(1789676379.004:3676): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252031 res=0 errno=0 [ 1719.995377][T20532] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3517'. [ 1720.152782][ T5713] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1720.293249][ T5713] usb 2-1: device descriptor read/64, error -71 [ 1720.577645][ T5713] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1720.643593][ T31] audit: type=1800 audit(1789676379.856:3677): pid=20540 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3519" name="file1" dev="tmpfs" ino=650 res=0 errno=0 [ 1720.706157][ T5713] usb 2-1: device descriptor read/64, error -71 [ 1720.780196][T20538] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3518'. [ 1720.817389][ T5713] usb usb2-port1: attempt power cycle [ 1720.886301][ T31] audit: type=1800 audit(1789676380.094:3678): pid=20544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3520" name="run" dev="sysfs" ino=1838 res=0 errno=0 [ 1720.935720][T20544] kernel read not supported for file /policy (pid: 20544 comm: syz.0.3520) [ 1721.181312][ T5713] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1721.202109][ T5713] usb 2-1: device descriptor read/8, error -71 [ 1721.452033][ T5713] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1721.473415][ T5713] usb 2-1: device descriptor read/8, error -71 [ 1721.583406][ T5713] usb usb2-port1: unable to enumerate USB device [ 1721.686741][ T31] audit: type=1400 audit(1789676380.898:3679): avc: denied { compute_member } for pid=20547 comm="syz.5.3521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1722.530100][ T5713] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1722.671689][ T5713] usb 6-1: device descriptor read/64, error -71 [ 1722.721522][T20524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1722.936623][ T5713] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1723.064388][ T5713] usb 6-1: device descriptor read/64, error -71 [ 1723.175525][ T5713] usb usb6-port1: attempt power cycle [ 1723.278824][T20561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3526'. [ 1723.306434][ T5704] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1723.471243][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 1723.474749][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1723.474796][ T5704] usb 2-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 1723.491032][ T5704] usb 2-1: config 2 has an invalid interface number: 232 but max is 0 [ 1723.491058][ T5704] usb 2-1: config 2 has no interface number 0 [ 1723.491095][ T5704] usb 2-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 1723.491123][ T5704] usb 2-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1723.491148][ T5704] usb 2-1: config 2 interface 232 has no altsetting 0 [ 1723.518707][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.518734][ T5704] usb 2-1: Product: syz [ 1723.518750][ T5704] usb 2-1: Manufacturer: syz [ 1723.518766][ T5704] usb 2-1: SerialNumber: syz [ 1723.521787][T20559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1723.574374][ T5713] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1723.604149][ T31] audit: type=1800 audit(1789676382.794:3680): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1723.608972][ T31] audit: type=1800 audit(1789676382.794:3681): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252074 res=0 errno=0 [ 1723.653998][ T31] audit: type=1800 audit(1789676382.844:3682): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=252106 res=0 errno=0 [ 1723.654046][ T31] audit: type=1800 audit(1789676382.844:3683): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=252081 res=0 errno=0 [ 1723.655789][ T31] audit: type=1800 audit(1789676382.844:3684): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=252082 res=0 errno=0 [ 1723.720681][ T5713] usb 6-1: device descriptor read/8, error -71 [ 1723.737343][ T31] audit: type=1800 audit(1789676382.923:3685): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252149 res=0 errno=0 [ 1723.939532][T20559] xt_hashlimit: max too large, truncated to 1048576 [ 1723.980970][ T5713] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1724.002114][ T5713] usb 6-1: device descriptor read/8, error -71 [ 1724.122889][ T5713] usb usb6-port1: unable to enumerate USB device [ 1725.065893][ T31] audit: type=1800 audit(1789676384.245:3686): pid=20580 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3529" name="syz6" dev="tmpfs" ino=3388 res=0 errno=0 [ 1725.268378][ T31] audit: type=1800 audit(1789676384.424:3687): pid=20583 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3530" name="file1" dev="tmpfs" ino=668 res=0 errno=0 [ 1725.515083][T20585] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3531'. [ 1725.652121][ T31] audit: type=1800 audit(1789676384.841:3688): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1725.668588][ T5704] usb 2-1: USB disconnect, device number 31 [ 1725.795195][T20011] udevd[20011]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.232/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1725.916898][T20597] tipc: Enabling of bearer rejected, already enabled [ 1725.925122][T20597] netlink: 'syz.0.3533': attribute type 4 has an invalid length. [ 1726.008476][T20597] netlink: 'syz.0.3533': attribute type 4 has an invalid length. [ 1726.279809][T20601] kernel read not supported for file /policy (pid: 20601 comm: syz.0.3534) [ 1728.317304][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1728.317322][ T31] audit: type=1800 audit(1789676387.487:3691): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1728.448016][ T31] audit: type=1400 audit(1789676387.616:3692): avc: denied { mounton } for pid=20608 comm="syz.4.3537" path="/file0" dev="ramfs" ino=74207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1728.635535][T20609] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1728.635561][T20609] overlayfs: failed to set xattr on upper [ 1728.635570][T20609] overlayfs: ...falling back to redirect_dir=nofollow. [ 1728.639824][T20609] overlayfs: ...falling back to uuid=null. [ 1728.639864][T20609] overlayfs: conflicting lowerdir path [ 1728.690641][ T31] audit: type=1400 audit(1789676387.855:3693): avc: denied { read } for pid=20613 comm="syz.5.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1728.742196][ T31] audit: type=1400 audit(1789676387.905:3694): avc: denied { setopt } for pid=20613 comm="syz.5.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1728.768473][ T31] audit: type=1400 audit(1789676387.935:3695): avc: denied { listen } for pid=20613 comm="syz.5.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1728.843950][ T31] audit: type=1800 audit(1789676388.004:3696): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1729.797391][ T5760] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1729.797550][ T31] audit: type=1800 audit(1789676388.960:3697): pid=20629 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3543" name="file1" dev="tmpfs" ino=3316 res=0 errno=0 [ 1729.952940][ T5760] usb 5-1: Using ep0 maxpacket: 8 [ 1729.972690][ T5760] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1729.972736][ T5760] usb 5-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 1729.990441][ T5760] usb 5-1: config 2 has an invalid interface number: 232 but max is 0 [ 1729.990468][ T5760] usb 5-1: config 2 has no interface number 0 [ 1729.990504][ T5760] usb 5-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 1729.990531][ T5760] usb 5-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1729.990555][ T5760] usb 5-1: config 2 interface 232 has no altsetting 0 [ 1730.036116][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.036143][ T5760] usb 5-1: Product: syz [ 1730.036159][ T5760] usb 5-1: Manufacturer: syz [ 1730.036175][ T5760] usb 5-1: SerialNumber: syz [ 1730.041079][T20621] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1730.043580][ T31] audit: type=1800 audit(1789676389.209:3698): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252276 res=0 errno=0 [ 1730.095979][ T31] audit: type=1800 audit(1789676389.239:3699): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=252308 res=0 errno=0 [ 1730.096035][ T31] audit: type=1800 audit(1789676389.248:3700): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=252283 res=0 errno=0 [ 1730.259921][T20621] xt_hashlimit: max too large, truncated to 1048576 [ 1730.400386][ T5760] usb 5-1: USB disconnect, device number 13 [ 1730.426634][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.507574][T20011] udevd[20011]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.232/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1732.444183][T18031] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1732.599741][T18031] usb 5-1: Using ep0 maxpacket: 16 [ 1732.600730][T18031] usb 5-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 1732.601634][T18031] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 1732.601664][T18031] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.601684][T18031] usb 5-1: config 0 has no interface number 0 [ 1732.603561][T18031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.603584][T18031] usb 5-1: Product: syz [ 1732.603599][T18031] usb 5-1: Manufacturer: syz [ 1732.603614][T18031] usb 5-1: SerialNumber: syz [ 1732.616870][T18031] usb 5-1: config 0 descriptor?? [ 1732.621722][T18031] rndis_host 5-1:0.180: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1732.644982][T15169] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1732.796219][T15169] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1732.796261][T15169] usb 6-1: no configurations [ 1732.796275][T15169] usb 6-1: can't read configurations, error -22 [ 1732.856376][T18031] usb 5-1: USB disconnect, device number 14 [ 1732.926308][T15169] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1733.089674][T15169] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1733.089702][T15169] usb 6-1: no configurations [ 1733.089710][T15169] usb 6-1: can't read configurations, error -22 [ 1733.089879][T15169] usb usb6-port1: attempt power cycle [ 1734.222148][T15169] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1734.237298][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 1734.237315][ T31] audit: type=1800 audit(1789676393.382:3715): pid=20676 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3555" name="file1" dev="tmpfs" ino=3428 res=0 errno=0 [ 1734.241612][T15169] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1734.241700][T15169] usb 6-1: no configurations [ 1734.241715][T15169] usb 6-1: can't read configurations, error -22 [ 1734.390967][T15169] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1735.149199][T15169] usb 6-1: device descriptor read/all, error -71 [ 1735.149451][T15169] usb usb6-port1: unable to enumerate USB device [ 1735.282530][ T31] audit: type=1800 audit(1789676394.419:3716): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1735.496688][ T31] audit: type=1800 audit(1789676394.638:3717): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252561 res=0 errno=0 [ 1735.499088][ T31] audit: type=1800 audit(1789676394.638:3718): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=252565 res=0 errno=0 [ 1735.558495][T20685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.562925][T20685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.583461][ T31] audit: type=1400 audit(1789676394.708:3719): avc: denied { listen } for pid=20681 comm="syz.4.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1735.583506][ T31] audit: type=1400 audit(1789676394.708:3720): avc: denied { accept } for pid=20681 comm="syz.4.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1735.603577][ T31] audit: type=1800 audit(1789676394.738:3721): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=252593 res=0 errno=0 [ 1735.615133][ T31] audit: type=1400 audit(1789676394.748:3722): avc: denied { write } for pid=20681 comm="syz.4.3559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=x25_socket permissive=1 [ 1735.693664][T20685] xt_hashlimit: max too large, truncated to 1048576 [ 1735.933285][ T31] audit: type=1800 audit(1789676395.067:3723): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1736.881266][T20705] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3563'. [ 1736.922937][ T31] audit: type=1800 audit(1789676396.054:3724): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1737.311822][T20719] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1737.311868][T20719] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1737.380276][T15169] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1737.381694][T20719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1737.383796][T20719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.391022][T20719] netlink: 'syz.0.3567': attribute type 1 has an invalid length. [ 1737.391047][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3567'. [ 1737.530546][T15169] usb 2-1: Using ep0 maxpacket: 32 [ 1737.532207][T15169] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1737.533131][T15169] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1737.533158][T15169] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1737.533181][T15169] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1737.534963][T15169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.534986][T15169] usb 2-1: Product: syz [ 1737.535002][T15169] usb 2-1: Manufacturer: syz [ 1737.535017][T15169] usb 2-1: SerialNumber: syz [ 1737.601862][T15169] usb 2-1: config 0 descriptor?? [ 1738.938160][T15169] gs_usb 2-1:0.0: Couldn't get device config: (err=-110) [ 1738.938286][T15169] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 1739.908287][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1739.908304][ T31] audit: type=1800 audit(1789676398.916:3734): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=252772 res=0 errno=0 [ 1739.908349][ T31] audit: type=1800 audit(1789676399.026:3735): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1739.922552][ T31] audit: type=1800 audit(1789676399.046:3736): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252793 res=0 errno=0 [ 1740.220403][ T31] audit: type=1400 audit(1789676399.345:3737): avc: denied { write } for pid=20697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1740.298985][ T31] audit: type=1800 audit(1789676399.425:3738): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1740.301788][ T5713] usb 2-1: USB disconnect, device number 32 [ 1740.658119][T20745] netlink: 'syz.1.3573': attribute type 1 has an invalid length. [ 1740.658138][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'. [ 1741.580174][ T31] audit: type=1400 audit(1789676400.712:3739): avc: denied { write } for pid=20743 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1743.962694][T20757] FAULT_INJECTION: forcing a failure. [ 1743.962694][T20757] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.962732][T20757] CPU: 0 UID: 0 PID: 20757 Comm: syz.0.3576 Tainted: G L syzkaller #0 PREEMPT(full) [ 1743.962764][T20757] Tainted: [L]=SOFTLOCKUP [ 1743.962773][T20757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1743.962787][T20757] Call Trace: [ 1743.962795][T20757] [ 1743.962803][T20757] dump_stack_lvl+0x100/0x190 [ 1743.962839][T20757] should_fail_ex.cold+0x5/0xa [ 1743.962871][T20757] should_failslab+0xc2/0x120 [ 1743.962897][T20757] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1743.962924][T20757] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 1743.962964][T20757] krealloc_node_align_noprof+0x321/0x3e0 [ 1743.962993][T20757] snd_pcm_hw_rule_add+0x3b3/0x510 [ 1743.963021][T20757] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 1743.963056][T20757] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 1743.963086][T20757] ? mutex_init_lockdep+0xf1/0x120 [ 1743.963112][T20757] ? snd_pcm_attach_substream+0x287/0xd20 [ 1743.963140][T20757] snd_pcm_open_substream+0x54a/0x1850 [ 1743.963172][T20757] ? __pfx_kasan_disable_current+0x10/0x10 [ 1743.963197][T20757] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1743.963226][T20757] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1743.963256][T20757] ? snd_pcm_oss_open+0x5c5/0x1380 [ 1743.963288][T20757] snd_pcm_oss_open+0x715/0x1380 [ 1743.963326][T20757] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1743.963357][T20757] ? __pfx_default_wake_function+0x10/0x10 [ 1743.963383][T20757] ? __lock_acquire+0x5c0/0x1f40 [ 1743.963414][T20757] ? do_raw_spin_lock+0x128/0x260 [ 1743.963441][T20757] ? soundcore_open+0x231/0x5a0 [ 1743.963468][T20757] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1743.963496][T20757] soundcore_open+0x2e3/0x5a0 [ 1743.963523][T20757] ? __pfx_soundcore_open+0x10/0x10 [ 1743.963547][T20757] chrdev_open+0x234/0x6a0 [ 1743.963573][T20757] ? __pfx_chrdev_open+0x10/0x10 [ 1743.963599][T20757] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1743.963635][T20757] do_dentry_open+0x6ab/0x14d0 [ 1743.963656][T20757] ? __pfx_chrdev_open+0x10/0x10 [ 1743.963687][T20757] vfs_open+0x82/0x3f0 [ 1743.963717][T20757] path_openat+0x19fa/0x2440 [ 1743.963747][T20757] ? __pfx_path_openat+0x10/0x10 [ 1743.963781][T20757] do_file_open+0x20e/0x430 [ 1743.963808][T20757] ? __pfx_do_file_open+0x10/0x10 [ 1743.963855][T20757] ? _raw_spin_unlock+0x28/0x50 [ 1743.963878][T20757] ? alloc_fd+0x471/0x7a0 [ 1743.963912][T20757] do_sys_openat2+0x10f/0x1e0 [ 1743.963944][T20757] ? __pfx_do_sys_openat2+0x10/0x10 [ 1743.963985][T20757] __x64_sys_openat+0x12d/0x210 [ 1743.964016][T20757] ? __pfx___x64_sys_openat+0x10/0x10 [ 1743.964055][T20757] do_syscall_64+0x123/0x790 [ 1743.964084][T20757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.964105][T20757] RIP: 0033:0x7fd9ee79e159 [ 1743.964123][T20757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.964142][T20757] RSP: 002b:00007fd9ef5f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1743.964164][T20757] RAX: ffffffffffffffda RBX: 00007fd9eea25fa0 RCX: 00007fd9ee79e159 [ 1743.964176][T20757] RDX: 0000000000009101 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1743.964189][T20757] RBP: 00007fd9ee83503b R08: 0000000000000000 R09: 0000000000000000 [ 1743.964201][T20757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1743.964212][T20757] R13: 00007fd9eea26038 R14: 00007fd9eea25fa0 R15: 00007ffea0fef8e8 [ 1743.964238][T20757] [ 1744.166595][ T31] audit: type=1800 audit(1789676403.277:3740): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1744.259957][ T31] audit: type=1800 audit(1789676403.377:3741): pid=20759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3577" name="run" dev="sysfs" ino=1838 res=0 errno=0 [ 1744.466681][T20764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3578'. [ 1744.543235][T20766] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3580'. [ 1744.580668][ T31] audit: type=1800 audit(1789676403.697:3742): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1744.617746][T20762] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3580'. [ 1744.623051][T20765] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3580'. [ 1744.774501][T20770] FAULT_INJECTION: forcing a failure. [ 1744.774501][T20770] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1744.774538][T20770] CPU: 1 UID: 0 PID: 20770 Comm: syz.4.3581 Tainted: G L syzkaller #0 PREEMPT(full) [ 1744.774568][T20770] Tainted: [L]=SOFTLOCKUP [ 1744.774576][T20770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1744.774589][T20770] Call Trace: [ 1744.774597][T20770] [ 1744.774605][T20770] dump_stack_lvl+0x100/0x190 [ 1744.774642][T20770] should_fail_ex.cold+0x5/0xa [ 1744.774667][T20770] ? prepare_alloc_pages+0x16d/0x5b0 [ 1744.774697][T20770] should_fail_alloc_page+0xeb/0x140 [ 1744.774725][T20770] prepare_alloc_pages+0x1f0/0x5b0 [ 1744.774750][T20770] ? arch_stack_walk+0xa6/0xf0 [ 1744.774780][T20770] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1744.774819][T20770] ? stack_trace_save+0x8e/0xc0 [ 1744.774854][T20770] ? __pfx_stack_trace_save+0x10/0x10 [ 1744.774891][T20770] ? is_bpf_text_address+0x94/0x1a0 [ 1744.774921][T20770] ? stack_depot_save_flags+0x27/0x9f0 [ 1744.774947][T20770] ? __kernel_text_address+0xd/0x30 [ 1744.774978][T20770] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1744.775005][T20770] ? kasan_save_stack+0x30/0x50 [ 1744.775026][T20770] ? __kasan_kmalloc+0xaa/0xb0 [ 1744.775046][T20770] ? snd_pcm_attach_substream+0x436/0xd20 [ 1744.775068][T20770] ? snd_pcm_open_substream+0x90/0x1850 [ 1744.775097][T20770] ? snd_pcm_oss_open+0x715/0x1380 [ 1744.775125][T20770] ? soundcore_open+0x2e3/0x5a0 [ 1744.775148][T20770] ? chrdev_open+0x234/0x6a0 [ 1744.775170][T20770] ? do_dentry_open+0x6ab/0x14d0 [ 1744.775190][T20770] ? vfs_open+0x82/0x3f0 [ 1744.775213][T20770] ? path_openat+0x19fa/0x2440 [ 1744.775236][T20770] ? do_file_open+0x20e/0x430 [ 1744.775259][T20770] ? do_sys_openat2+0x10f/0x1e0 [ 1744.775283][T20770] ? __x64_sys_openat+0x12d/0x210 [ 1744.775308][T20770] ? do_syscall_64+0x123/0x790 [ 1744.775338][T20770] ? __lock_acquire+0x5c0/0x1f40 [ 1744.775373][T20770] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1744.775399][T20770] ? policy_nodemask+0xed/0x4f0 [ 1744.775428][T20770] alloc_pages_mpol+0x201/0x550 [ 1744.775456][T20770] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1744.775481][T20770] ? __split_page_owner+0x1dd/0x340 [ 1744.775510][T20770] ? split_page_memcg+0x1e/0x1a0 [ 1744.775542][T20770] alloc_pages_noprof+0x1a/0x160 [ 1744.775572][T20770] alloc_pages_exact_noprof+0x32/0xf0 [ 1744.775597][T20770] snd_pcm_attach_substream+0x4b0/0xd20 [ 1744.775625][T20770] snd_pcm_open_substream+0x90/0x1850 [ 1744.775656][T20770] ? __kasan_kmalloc+0xaa/0xb0 [ 1744.775679][T20770] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1744.775709][T20770] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1744.775739][T20770] ? snd_pcm_oss_open+0x5c5/0x1380 [ 1744.775771][T20770] snd_pcm_oss_open+0x715/0x1380 [ 1744.775809][T20770] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1744.775840][T20770] ? __pfx_default_wake_function+0x10/0x10 [ 1744.775867][T20770] ? __lock_acquire+0x5c0/0x1f40 [ 1744.775906][T20770] ? do_raw_spin_lock+0x128/0x260 [ 1744.775935][T20770] ? soundcore_open+0x231/0x5a0 [ 1744.775963][T20770] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1744.775993][T20770] soundcore_open+0x2e3/0x5a0 [ 1744.776021][T20770] ? __pfx_soundcore_open+0x10/0x10 [ 1744.776045][T20770] chrdev_open+0x234/0x6a0 [ 1744.776071][T20770] ? __pfx_chrdev_open+0x10/0x10 [ 1744.776097][T20770] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1744.776133][T20770] do_dentry_open+0x6ab/0x14d0 [ 1744.776155][T20770] ? __pfx_chrdev_open+0x10/0x10 [ 1744.776190][T20770] vfs_open+0x82/0x3f0 [ 1744.776222][T20770] path_openat+0x19fa/0x2440 [ 1744.776254][T20770] ? __pfx_path_openat+0x10/0x10 [ 1744.776289][T20770] do_file_open+0x20e/0x430 [ 1744.776317][T20770] ? __pfx_do_file_open+0x10/0x10 [ 1744.776364][T20770] ? _raw_spin_unlock+0x28/0x50 [ 1744.776386][T20770] ? alloc_fd+0x471/0x7a0 [ 1744.776420][T20770] do_sys_openat2+0x10f/0x1e0 [ 1744.776448][T20770] ? __pfx_do_sys_openat2+0x10/0x10 [ 1744.776487][T20770] __x64_sys_openat+0x12d/0x210 [ 1744.776515][T20770] ? __pfx___x64_sys_openat+0x10/0x10 [ 1744.776553][T20770] do_syscall_64+0x123/0x790 [ 1744.776581][T20770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1744.776604][T20770] RIP: 0033:0x7f025b59e159 [ 1744.776623][T20770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.776642][T20770] RSP: 002b:00007f025c3b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1744.776660][T20770] RAX: ffffffffffffffda RBX: 00007f025b825fa0 RCX: 00007f025b59e159 [ 1744.776672][T20770] RDX: 0000000000009101 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1744.776685][T20770] RBP: 00007f025b63503b R08: 0000000000000000 R09: 0000000000000000 [ 1744.776697][T20770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1744.776709][T20770] R13: 00007f025b826038 R14: 00007f025b825fa0 R15: 00007fffb265f428 [ 1744.776738][T20770] [ 1745.391115][ T31] audit: type=1800 audit(1789676404.505:3743): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1745.639600][T20776] jffs2: notice: (20776) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1745.694019][ T31] audit: type=1400 audit(1789676404.805:3744): avc: denied { write } for pid=20775 comm="syz.5.3584" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1746.669909][ T5704] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1746.820214][ T5704] usb 6-1: Using ep0 maxpacket: 8 [ 1746.827354][ T5704] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1746.827461][ T5704] usb 6-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=29.5c [ 1746.881414][ T5704] usb 6-1: config 7 has an invalid descriptor of length 106, skipping remainder of the config [ 1746.881447][ T5704] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 1747.013484][ T5704] usb 6-1: string descriptor 0 read error: -22 [ 1747.013990][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.393535][T20790] netlink: 'syz.5.3586': attribute type 1 has an invalid length. [ 1747.393550][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3586'. [ 1747.557006][ T31] audit: type=1800 audit(1789676406.672:3745): pid=20794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252869 res=0 errno=0 [ 1747.557055][ T31] audit: type=1800 audit(1789676406.672:3746): pid=20794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=252898 res=0 errno=0 [ 1747.557117][ T31] audit: type=1800 audit(1789676406.672:3747): pid=20794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=252876 res=0 errno=0 [ 1747.557158][ T31] audit: type=1800 audit(1789676406.672:3748): pid=20794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=252877 res=0 errno=0 [ 1747.557196][ T31] audit: type=1800 audit(1789676406.672:3749): pid=20794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=252878 res=0 errno=0 [ 1748.344060][T20797] nbd: must specify a size in bytes for the device [ 1748.584822][ T5713] usb 6-1: USB disconnect, device number 112 [ 1748.603808][ T31] audit: type=1800 audit(1789676407.720:3750): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1749.010042][ T31] audit: type=1804 audit(1789676408.120:3751): pid=20810 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3589" name="/newroot/103/bus" dev="tmpfs" ino=658 res=1 errno=0 [ 1749.635669][T20816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3592'. [ 1750.068131][T20818] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1750.219227][T20822] FAULT_INJECTION: forcing a failure. [ 1750.219227][T20822] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.219252][T20822] CPU: 1 UID: 0 PID: 20822 Comm: syz.5.3593 Tainted: G L syzkaller #0 PREEMPT(full) [ 1750.219270][T20822] Tainted: [L]=SOFTLOCKUP [ 1750.219276][T20822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1750.219284][T20822] Call Trace: [ 1750.219289][T20822] [ 1750.219294][T20822] dump_stack_lvl+0x100/0x190 [ 1750.219316][T20822] should_fail_ex.cold+0x5/0xa [ 1750.219334][T20822] should_failslab+0xc2/0x120 [ 1750.219349][T20822] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1750.219364][T20822] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 1750.219382][T20822] krealloc_node_align_noprof+0x321/0x3e0 [ 1750.219397][T20822] snd_pcm_hw_rule_add+0x3b3/0x510 [ 1750.219411][T20822] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 1750.219430][T20822] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 1750.219447][T20822] ? mutex_init_lockdep+0xf1/0x120 [ 1750.219462][T20822] ? snd_pcm_attach_substream+0x287/0xd20 [ 1750.219477][T20822] snd_pcm_open_substream+0x54a/0x1850 [ 1750.219495][T20822] ? __pfx_kasan_disable_current+0x10/0x10 [ 1750.219509][T20822] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1750.219525][T20822] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1750.219542][T20822] ? snd_pcm_oss_open+0x5c5/0x1380 [ 1750.219560][T20822] snd_pcm_oss_open+0x715/0x1380 [ 1750.219580][T20822] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1750.219597][T20822] ? __pfx_default_wake_function+0x10/0x10 [ 1750.219612][T20822] ? __lock_acquire+0x5c0/0x1f40 [ 1750.219638][T20822] ? do_raw_spin_lock+0x128/0x260 [ 1750.219654][T20822] ? soundcore_open+0x231/0x5a0 [ 1750.219670][T20822] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1750.219686][T20822] soundcore_open+0x2e3/0x5a0 [ 1750.219703][T20822] ? __pfx_soundcore_open+0x10/0x10 [ 1750.219717][T20822] chrdev_open+0x234/0x6a0 [ 1750.219732][T20822] ? __pfx_chrdev_open+0x10/0x10 [ 1750.219749][T20822] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1750.219769][T20822] do_dentry_open+0x6ab/0x14d0 [ 1750.219781][T20822] ? __pfx_chrdev_open+0x10/0x10 [ 1750.219798][T20822] vfs_open+0x82/0x3f0 [ 1750.219814][T20822] path_openat+0x19fa/0x2440 [ 1750.219831][T20822] ? __pfx_path_openat+0x10/0x10 [ 1750.219850][T20822] do_file_open+0x20e/0x430 [ 1750.219865][T20822] ? __pfx_do_file_open+0x10/0x10 [ 1750.219891][T20822] ? _raw_spin_unlock+0x28/0x50 [ 1750.219903][T20822] ? alloc_fd+0x471/0x7a0 [ 1750.219923][T20822] do_sys_openat2+0x10f/0x1e0 [ 1750.219939][T20822] ? __pfx_do_sys_openat2+0x10/0x10 [ 1750.219961][T20822] __x64_sys_openat+0x12d/0x210 [ 1750.219978][T20822] ? __pfx___x64_sys_openat+0x10/0x10 [ 1750.220000][T20822] do_syscall_64+0x123/0x790 [ 1750.220016][T20822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.220029][T20822] RIP: 0033:0x7ff51799e159 [ 1750.220039][T20822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1750.220051][T20822] RSP: 002b:00007ff51882b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1750.220063][T20822] RAX: ffffffffffffffda RBX: 00007ff517c25fa0 RCX: 00007ff51799e159 [ 1750.220071][T20822] RDX: 0000000000009101 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1750.220078][T20822] RBP: 00007ff517a3503b R08: 0000000000000000 R09: 0000000000000000 [ 1750.220086][T20822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1750.220093][T20822] R13: 00007ff517c26038 R14: 00007ff517c25fa0 R15: 00007ffc3aa00c98 [ 1750.220110][T20822] [ 1750.857065][ T31] audit: type=1800 audit(1789676409.968:3752): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253049 res=0 errno=0 [ 1751.508996][T20835] overlayfs: failed to clone upperpath [ 1752.884821][T20844] jffs2: notice: (20844) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1752.934175][ T31] audit: type=1400 audit(1789676412.035:3753): avc: denied { write } for pid=20843 comm="syz.5.3602" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1754.674814][ T31] audit: type=1800 audit(1789676413.774:3754): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1754.898030][T20857] FAULT_INJECTION: forcing a failure. [ 1754.898030][T20857] name fail_usercopy, interval 1, probability 0, space 0, times -1 [ 1754.898064][T20857] CPU: 0 UID: 0 PID: 20857 Comm: syz.1.3607 Tainted: G L syzkaller #0 PREEMPT(full) [ 1754.898089][T20857] Tainted: [L]=SOFTLOCKUP [ 1754.898097][T20857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1754.898111][T20857] Call Trace: [ 1754.898118][T20857] [ 1754.898126][T20857] dump_stack_lvl+0x100/0x190 [ 1754.898163][T20857] should_fail_ex.cold+0x5/0xa [ 1754.898191][T20857] _copy_from_user+0x2e/0xd0 [ 1754.898224][T20857] __do_sys_capset+0x1ec/0x460 [ 1754.898252][T20857] ? __pfx___do_sys_capset+0x10/0x10 [ 1754.898275][T20857] ? __x64_sys_futex+0x358/0x4d0 [ 1754.898306][T20857] ? xfd_validate_state+0x129/0x190 [ 1754.898341][T20857] do_syscall_64+0x123/0x790 [ 1754.898373][T20857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.898394][T20857] RIP: 0033:0x7f8c9539e159 [ 1754.898413][T20857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1754.898432][T20857] RSP: 002b:00007f8c9629f028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 1754.898453][T20857] RAX: ffffffffffffffda RBX: 00007f8c95625fa0 RCX: 00007f8c9539e159 [ 1754.898467][T20857] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000040 [ 1754.898480][T20857] RBP: 00007f8c9543503b R08: 0000000000000000 R09: 0000000000000000 [ 1754.898494][T20857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1754.898508][T20857] R13: 00007f8c95626038 R14: 00007f8c95625fa0 R15: 00007fffc4117e98 [ 1754.898540][T20857] [ 1755.052078][T20859] bridge_slave_0: left allmulticast mode [ 1755.052104][T20859] bridge_slave_0: left promiscuous mode [ 1755.052306][T20859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.127575][T20859] bridge_slave_1: left allmulticast mode [ 1755.127593][T20859] bridge_slave_1: left promiscuous mode [ 1755.127702][T20859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.236732][T20859] bond0: (slave bond_slave_0): Releasing backup interface [ 1755.263881][T20859] bond0: (slave bond_slave_1): Releasing backup interface [ 1755.424828][T20859] team0: Port device team_slave_0 removed [ 1755.442240][T20859] team0: Port device team_slave_1 removed [ 1755.444977][T20859] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1755.912868][T20861] team0: Mode changed to "broadcast" [ 1755.966624][T20863] team0: Port device vlan0 added [ 1756.062832][ T31] audit: type=1800 audit(1789676415.172:3755): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1757.152083][T14714] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1757.302313][T14714] usb 2-1: Using ep0 maxpacket: 8 [ 1757.307251][T14714] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1757.316082][T14714] usb 2-1: config 0 has no interfaces? [ 1757.316103][T14714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.326733][T14714] usb 2-1: config 0 descriptor?? [ 1757.365937][ T31] audit: type=1800 audit(1789676416.471:3756): pid=20794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253090 res=0 errno=0 [ 1757.395713][ T31] audit: type=1800 audit(1789676416.501:3757): pid=20794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=253119 res=0 errno=0 [ 1757.424870][ T31] audit: type=1800 audit(1789676416.531:3758): pid=20794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=253097 res=0 errno=0 [ 1757.427895][ T31] audit: type=1800 audit(1789676416.531:3759): pid=20794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=253098 res=0 errno=0 [ 1757.432149][ T31] audit: type=1800 audit(1789676416.541:3760): pid=20794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=253099 res=0 errno=0 [ 1757.566569][ T5713] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1757.630135][T20890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1757.630516][T20890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1757.668841][T20893] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1757.695172][ T5704] usb 2-1: USB disconnect, device number 33 [ 1757.721298][ T5713] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1757.727902][ T5713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.727929][ T5713] usb 5-1: config 0 has no interfaces? [ 1757.727957][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.766158][ T5713] usb 5-1: config 0 descriptor?? [ 1757.777118][ T31] audit: type=1800 audit(1789676416.881:3761): pid=20802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253163 res=0 errno=0 [ 1757.802503][ T31] audit: type=1800 audit(1789676416.891:3762): pid=20802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=253192 res=0 errno=0 [ 1757.802559][ T31] audit: type=1800 audit(1789676416.891:3763): pid=20802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=253170 res=0 errno=0 [ 1757.802599][ T31] audit: type=1800 audit(1789676416.891:3764): pid=20802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=253171 res=0 errno=0 [ 1758.014866][ T5713] usb 5-1: USB disconnect, device number 15 [ 1758.139237][T20907] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3617'. [ 1758.650607][T20912] syzkaller1: entered allmulticast mode [ 1763.030489][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1763.030506][ T31] audit: type=1800 audit(1789676422.128:3768): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1763.107356][T20947] overlayfs: failed to clone upperpath [ 1763.121308][T20947] netlink: 'syz.6.3633': attribute type 1 has an invalid length. [ 1763.121321][T20947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3633'. [ 1764.106137][ T31] audit: type=1800 audit(1789676423.197:3769): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1764.564426][T20974] Invalid ELF header type: 3 != 1 [ 1764.571896][ T31] audit: type=1400 audit(1789676423.657:3770): avc: denied { module_load } for pid=20966 comm="syz.0.3630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1765.537141][ T31] audit: type=1800 audit(1789676424.637:3771): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1766.058163][T20988] netlink: 'syz.1.3634': attribute type 4 has an invalid length. [ 1766.522001][ T31] audit: type=1400 audit(1789676425.616:3772): avc: denied { watch } for pid=20983 comm="syz.4.3643" path="/113" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1766.522040][ T31] audit: type=1400 audit(1789676425.616:3773): avc: denied { watch_sb watch_reads } for pid=20983 comm="syz.4.3643" path="/113" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1766.963083][ T31] audit: type=1804 audit(1789676426.046:3774): pid=20990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3643" name="/newroot/113/bus" dev="tmpfs" ino=670 res=1 errno=0 [ 1766.963130][ T31] audit: type=1800 audit(1789676426.056:3775): pid=20990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3643" name="bus" dev="tmpfs" ino=670 res=0 errno=0 [ 1767.039788][ T31] audit: type=1804 audit(1789676426.136:3776): pid=20993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.3643" name="/newroot/113/bus" dev="tmpfs" ino=670 res=1 errno=0 [ 1767.280584][ T31] audit: type=1800 audit(1789676426.376:3777): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1767.377155][ T5696] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1767.525598][T21010] netlink: 'syz.0.3646': attribute type 1 has an invalid length. [ 1767.525624][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'. [ 1767.718452][ T5696] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1767.770124][ T5696] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.770153][ T5696] usb 6-1: config 0 has no interfaces? [ 1767.770181][ T5696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.938519][ T5696] usb 6-1: config 0 descriptor?? [ 1768.149888][ T31] audit: type=1800 audit(1789676427.235:3778): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1768.434025][ T31] audit: type=1800 audit(1789676427.525:3779): pid=20802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253339 res=0 errno=0 [ 1768.597693][ T31] audit: type=1800 audit(1789676427.695:3780): pid=20802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=253368 res=0 errno=0 [ 1768.740063][ T31] audit: type=1800 audit(1789676427.825:3781): pid=20802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=253346 res=0 errno=0 [ 1768.787759][ T31] audit: type=1800 audit(1789676427.885:3782): pid=20802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=253347 res=0 errno=0 [ 1768.788445][ T31] audit: type=1800 audit(1789676427.885:3783): pid=20802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=253348 res=0 errno=0 [ 1768.981486][T21023] FAULT_INJECTION: forcing a failure. [ 1768.981486][T21023] name fail_usercopy, interval 1, probability 0, space 0, times -1 [ 1768.981523][T21023] CPU: 1 UID: 0 PID: 21023 Comm: syz.1.3651 Tainted: G L syzkaller #0 PREEMPT(full) [ 1768.981553][T21023] Tainted: [L]=SOFTLOCKUP [ 1768.981561][T21023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1768.981575][T21023] Call Trace: [ 1768.981583][T21023] [ 1768.981592][T21023] dump_stack_lvl+0x100/0x190 [ 1768.981628][T21023] should_fail_ex.cold+0x5/0xa [ 1768.981659][T21023] _copy_from_user+0x2e/0xd0 [ 1768.981682][T21023] __do_sys_capset+0x1ec/0x460 [ 1768.981704][T21023] ? __pfx___do_sys_capset+0x10/0x10 [ 1768.981730][T21023] ? __x64_sys_futex+0x358/0x4d0 [ 1768.981764][T21023] ? xfd_validate_state+0x129/0x190 [ 1768.981797][T21023] do_syscall_64+0x123/0x790 [ 1768.981833][T21023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.981856][T21023] RIP: 0033:0x7f8c9539e159 [ 1768.981875][T21023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1768.981897][T21023] RSP: 002b:00007f8c9629f028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 1768.981918][T21023] RAX: ffffffffffffffda RBX: 00007f8c95625fa0 RCX: 00007f8c9539e159 [ 1768.981933][T21023] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000040 [ 1768.981947][T21023] RBP: 00007f8c9543503b R08: 0000000000000000 R09: 0000000000000000 [ 1768.981962][T21023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1768.981975][T21023] R13: 00007f8c95626038 R14: 00007f8c95625fa0 R15: 00007fffc4117e98 [ 1768.982005][T21023] [ 1769.041021][T21024] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3649'. [ 1769.934880][ T31] audit: type=1800 audit(1789676429.025:3784): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1769.963087][T21034] netlink: 'syz.1.3652': attribute type 13 has an invalid length. [ 1770.467010][ T31] audit: type=1800 audit(1789676429.555:3785): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1770.584099][ T31] audit: type=1800 audit(1789676429.675:3786): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253482 res=0 errno=0 [ 1771.602950][T21057] fuse: fd is not a fuse device [ 1772.636446][ T5760] usb 6-1: USB disconnect, device number 113 [ 1772.702636][T21061] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.3662'. [ 1772.771526][ T31] audit: type=1800 audit(1789676431.854:3787): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1772.829179][T21064] overlayfs: failed to clone upperpath [ 1772.836473][T21064] netlink: 'syz.6.3661': attribute type 1 has an invalid length. [ 1772.836487][T21064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3661'. [ 1772.929691][T21067] tipc: Started in network mode [ 1772.929721][T21067] tipc: Node identity 7f000001, cluster identity 4711 [ 1772.930357][T21067] tipc: Enabled bearer , priority 10 [ 1772.931033][T21067] netlink: 'syz.4.3663': attribute type 4 has an invalid length. [ 1772.936834][T21067] netlink: 'syz.4.3663': attribute type 4 has an invalid length. [ 1773.594770][ T31] audit: type=1800 audit(1789676432.104:3788): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1773.736206][ T31] audit: type=1800 audit(1789676432.824:3789): pid=21071 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3665" name="resume" dev="sysfs" ino=1437 res=0 errno=0 [ 1773.765782][T21071] [ 1773.768125][T21071] ====================================================== [ 1773.775135][T21071] WARNING: possible circular locking dependency detected [ 1773.782155][T21071] syzkaller #0 Tainted: G L [ 1773.788125][T21071] ------------------------------------------------------ [ 1773.795131][T21071] syz.5.3665/21071 is trying to acquire lock: [ 1773.801185][T21071] ffff888055f5e060 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_prefill_and_lock+0x16c/0x580 [ 1773.811107][T21071] [ 1773.811107][T21071] but task is already holding lock: [ 1773.818452][T21071] ffff8880275ad138 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90 [ 1773.828212][T21071] [ 1773.828212][T21071] which lock already depends on the new lock. [ 1773.828212][T21071] [ 1773.838603][T21071] [ 1773.838603][T21071] the existing dependency chain (in reverse order) is: [ 1773.847607][T21071] [ 1773.847607][T21071] -> #4 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1773.855333][T21071] lock_acquire+0x1d1/0x380 [ 1773.860351][T21071] __mutex_lock+0x1a4/0x1bd0 [ 1773.865454][T21071] autofs_notify_daemon+0x4f8/0xd90 [ 1773.871166][T21071] autofs_wait+0x10fd/0x1b50 [ 1773.876265][T21071] autofs_mount_wait+0x132/0x3b0 [ 1773.881711][T21071] autofs_d_automount+0x490/0x950 [ 1773.887244][T21071] __traverse_mounts+0x1b9/0x8a0 [ 1773.892695][T21071] step_into_slowpath+0xb7e/0xf90 [ 1773.898227][T21071] path_lookupat+0x58b/0xc40 [ 1773.903330][T21071] filename_lookup+0x202/0x590 [ 1773.908600][T21071] kern_path+0x37/0x50 [ 1773.913175][T21071] lookup_bdev+0xd8/0x2a0 [ 1773.918011][T21071] resume_store+0x1d6/0x460 [ 1773.923021][T21071] kobj_attr_store+0x58/0x80 [ 1773.928125][T21071] sysfs_kf_write+0xf2/0x150 [ 1773.933224][T21071] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1773.939017][T21071] vfs_write+0x6af/0x1050 [ 1773.943855][T21071] ksys_write+0x12a/0x250 [ 1773.948686][T21071] do_syscall_64+0x123/0x790 [ 1773.953789][T21071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.960532][T21071] [ 1773.960532][T21071] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1773.967722][T21071] lock_acquire+0x1d1/0x380 [ 1773.972730][T21071] __mutex_lock+0x1a4/0x1bd0 [ 1773.977829][T21071] kernfs_fop_read_iter+0x188/0x610 [ 1773.983531][T21071] __kernel_read+0x397/0xad0 [ 1773.988623][T21071] integrity_kernel_read+0x7e/0xb0 [ 1773.994248][T21071] ima_calc_file_hash_tfm+0x25e/0x350 [ 1774.000122][T21071] ima_calc_file_hash+0x1e3/0x380 [ 1774.005649][T21071] ima_collect_measurement+0x94f/0xb30 [ 1774.011607][T21071] process_measurement+0xdfe/0x2350 [ 1774.017325][T21071] ima_file_check+0xc3/0x110 [ 1774.022419][T21071] security_file_post_open+0xc4/0x210 [ 1774.028298][T21071] path_openat+0x5cd/0x2440 [ 1774.033311][T21071] do_file_open+0x20e/0x430 [ 1774.038325][T21071] do_sys_openat2+0x10f/0x1e0 [ 1774.043517][T21071] __x64_sys_openat+0x12d/0x210 [ 1774.048878][T21071] do_syscall_64+0x123/0x790 [ 1774.053986][T21071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.060384][T21071] [ 1774.060384][T21071] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1774.068965][T21071] lock_acquire+0x1d1/0x380 [ 1774.073982][T21071] __mutex_lock+0x1a4/0x1bd0 [ 1774.079080][T21071] process_measurement+0x5ab/0x2350 [ 1774.084787][T21071] ima_file_check+0xc3/0x110 [ 1774.089877][T21071] security_file_post_open+0xc4/0x210 [ 1774.095784][T21071] path_openat+0x5cd/0x2440 [ 1774.100791][T21071] do_file_open+0x20e/0x430 [ 1774.105798][T21071] file_open_name+0x1c3/0x3e0 [ 1774.110978][T21071] filp_open+0x2e/0x50 [ 1774.115552][T21071] kernel_read_file_from_path_initns+0xec/0x240 [ 1774.122295][T21071] _request_firmware+0x733/0x13c0 [ 1774.127822][T21071] request_firmware+0x35/0x50 [ 1774.133000][T21071] reg_reload_regdb+0x85/0x460 [ 1774.138270][T21071] genl_family_rcv_msg_doit+0x214/0x300 [ 1774.144329][T21071] genl_rcv_msg+0x560/0x800 [ 1774.149336][T21071] netlink_rcv_skb+0x159/0x420 [ 1774.154601][T21071] genl_rcv+0x28/0x40 [ 1774.159085][T21071] netlink_unicast+0x585/0x850 [ 1774.164356][T21071] netlink_sendmsg+0x8b0/0xda0 [ 1774.169623][T21071] ____sys_sendmsg+0xa4d/0xbe0 [ 1774.174896][T21071] ___sys_sendmsg+0x190/0x1e0 [ 1774.180079][T21071] __sys_sendmsg+0x160/0x210 [ 1774.185177][T21071] do_syscall_64+0x123/0x790 [ 1774.190273][T21071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.196670][T21071] [ 1774.196670][T21071] -> #1 (cb_lock){++++}-{4:4}: [ 1774.203598][T21071] lock_acquire+0x1d1/0x380 [ 1774.208609][T21071] down_read+0x99/0x4c0 [ 1774.213281][T21071] genl_rcv+0x19/0x40 [ 1774.217766][T21071] netlink_unicast+0x585/0x850 [ 1774.223034][T21071] netlink_sendmsg+0x8b0/0xda0 [ 1774.228300][T21071] sock_sendmsg+0x394/0x410 [ 1774.233316][T21071] splice_to_socket+0xb3c/0x11a0 [ 1774.238763][T21071] do_splice+0x109c/0x1fa0 [ 1774.243696][T21071] __do_splice+0x33b/0x370 [ 1774.248619][T21071] __x64_sys_splice+0x187/0x250 [ 1774.253990][T21071] do_syscall_64+0x123/0x790 [ 1774.259096][T21071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.265498][T21071] [ 1774.265498][T21071] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 1774.272860][T21071] check_prev_add+0xeb/0xe60 [ 1774.277964][T21071] __lock_acquire+0x1528/0x1f40 [ 1774.283316][T21071] lock_acquire+0x1d1/0x380 [ 1774.288323][T21071] __mutex_lock+0x1a4/0x1bd0 [ 1774.293428][T21071] anon_pipe_prefill_and_lock+0x16c/0x580 [ 1774.299655][T21071] anon_pipe_write+0x164/0x1b50 [ 1774.305011][T21071] __kernel_write_iter+0x6bb/0x930 [ 1774.310622][T21071] __kernel_write+0xf6/0x140 [ 1774.315713][T21071] autofs_notify_daemon+0x50d/0xd90 [ 1774.321451][T21071] autofs_wait+0x10fd/0x1b50 [ 1774.326553][T21071] autofs_mount_wait+0x132/0x3b0 [ 1774.331995][T21071] autofs_d_automount+0x490/0x950 [ 1774.337528][T21071] __traverse_mounts+0x1b9/0x8a0 [ 1774.342978][T21071] step_into_slowpath+0xb7e/0xf90 [ 1774.348508][T21071] path_lookupat+0x58b/0xc40 [ 1774.353609][T21071] filename_lookup+0x202/0x590 [ 1774.358875][T21071] kern_path+0x37/0x50 [ 1774.363451][T21071] lookup_bdev+0xd8/0x2a0 [ 1774.368292][T21071] resume_store+0x1d6/0x460 [ 1774.373306][T21071] kobj_attr_store+0x58/0x80 [ 1774.378407][T21071] sysfs_kf_write+0xf2/0x150 [ 1774.383506][T21071] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1774.389295][T21071] vfs_write+0x6af/0x1050 [ 1774.394125][T21071] ksys_write+0x12a/0x250 [ 1774.398959][T21071] do_syscall_64+0x123/0x790 [ 1774.404064][T21071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.410467][T21071] [ 1774.410467][T21071] other info that might help us debug this: [ 1774.410467][T21071] [ 1774.420670][T21071] Chain exists of: [ 1774.420670][T21071] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 1774.420670][T21071] [ 1774.433077][T21071] Possible unsafe locking scenario: [ 1774.433077][T21071] [ 1774.440503][T21071] CPU0 CPU1 [ 1774.445846][T21071] ---- ---- [ 1774.451191][T21071] lock(&sbi->pipe_mutex); [ 1774.455673][T21071] lock(&of->mutex); [ 1774.462153][T21071] lock(&sbi->pipe_mutex); [ 1774.469153][T21071] lock(&pipe->mutex); [ 1774.473297][T21071] [ 1774.473297][T21071] *** DEADLOCK *** [ 1774.473297][T21071] [ 1774.481413][T21071] locks held by syz.5.3665/21071: 5, last CPU#1: [ 1774.487715][T21071] #0: ffff888075baf5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1774.496754][T21071] #1: ffff888037c2c460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1774.505705][T21071] #2: ffff88802b0d9080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1774.515437][T21071] #3: ffff8880206ee5a8 (kn->active#65){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1774.525435][T21071] #4: ffff8880275ad138 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90 [ 1774.535610][T21071] [ 1774.535610][T21071] stack backtrace: [ 1774.541483][T21071] CPU: 1 UID: 0 PID: 21071 Comm: syz.5.3665 Tainted: G L syzkaller #0 PREEMPT(full) [ 1774.552400][T21071] Tainted: [L]=SOFTLOCKUP [ 1774.556700][T21071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1774.566733][T21071] Call Trace: [ 1774.569992][T21071] [ 1774.572905][T21071] dump_stack_lvl+0x100/0x190 [ 1774.577575][T21071] print_circular_bug.cold+0x178/0x1be [ 1774.583026][T21071] check_noncircular+0x146/0x160 [ 1774.587953][T21071] check_prev_add+0xeb/0xe60 [ 1774.592527][T21071] __lock_acquire+0x1528/0x1f40 [ 1774.597365][T21071] lock_acquire+0x1d1/0x380 [ 1774.601850][T21071] ? anon_pipe_prefill_and_lock+0x16c/0x580 [ 1774.607733][T21071] ? __pfx___might_resched+0x10/0x10 [ 1774.613000][T21071] ? __kasan_check_byte+0x13/0x50 [ 1774.618011][T21071] __mutex_lock+0x1a4/0x1bd0 [ 1774.622674][T21071] ? anon_pipe_prefill_and_lock+0x16c/0x580 [ 1774.628556][T21071] ? anon_pipe_prefill_and_lock+0x16c/0x580 [ 1774.634443][T21071] ? is_bpf_text_address+0x8a/0x1a0 [ 1774.639631][T21071] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1774.645780][T21071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1774.651656][T21071] ? __pfx___mutex_lock+0x10/0x10 [ 1774.656667][T21071] ? policy_nodemask+0xed/0x4f0 [ 1774.661507][T21071] ? __bfs+0x150/0x2a0 [ 1774.665566][T21071] ? anon_pipe_prefill_and_lock+0x16c/0x580 [ 1774.671449][T21071] anon_pipe_prefill_and_lock+0x16c/0x580 [ 1774.677155][T21071] ? stack_trace_save+0x8e/0xc0 [ 1774.681997][T21071] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 1774.688227][T21071] ? add_lock_to_list+0x9d/0x1d0 [ 1774.693158][T21071] anon_pipe_write+0x164/0x1b50 [ 1774.697999][T21071] ? __lock_acquire+0xe8b/0x1f40 [ 1774.702931][T21071] ? __pfx_anon_pipe_write+0x10/0x10 [ 1774.708207][T21071] ? lock_acquire+0x1d1/0x380 [ 1774.712865][T21071] ? autofs_notify_daemon+0x4f8/0xd90 [ 1774.718227][T21071] ? __pfx_anon_pipe_write+0x10/0x10 [ 1774.723496][T21071] __kernel_write_iter+0x6bb/0x930 [ 1774.728593][T21071] ? __pfx___kernel_write_iter+0x10/0x10 [ 1774.734215][T21071] ? find_held_lock+0x2b/0x80 [ 1774.738883][T21071] ? autofs_notify_daemon+0x4a0/0xd90 [ 1774.744263][T21071] ? autofs_notify_daemon+0x4a0/0xd90 [ 1774.749626][T21071] __kernel_write+0xf6/0x140 [ 1774.754200][T21071] ? __pfx___kernel_write+0x10/0x10 [ 1774.759382][T21071] ? __pfx_from_kgid_munged+0x10/0x10 [ 1774.764740][T21071] ? path_lookupat+0x58b/0xc40 [ 1774.769486][T21071] autofs_notify_daemon+0x50d/0xd90 [ 1774.774673][T21071] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1774.780409][T21071] ? lockdep_init_map_type+0x5c/0x250 [ 1774.785773][T21071] ? lockdep_init_map_type+0x5c/0x250 [ 1774.791136][T21071] autofs_wait+0x10fd/0x1b50 [ 1774.795736][T21071] ? __pfx_autofs_wait+0x10/0x10 [ 1774.800675][T21071] ? find_held_lock+0x2b/0x80 [ 1774.805353][T21071] ? path_has_submounts+0xcf/0x120 [ 1774.810463][T21071] ? do_raw_spin_unlock+0x145/0x1e0 [ 1774.815656][T21071] ? find_held_lock+0x2b/0x80 [ 1774.820332][T21071] autofs_mount_wait+0x132/0x3b0 [ 1774.825264][T21071] autofs_d_automount+0x490/0x950 [ 1774.830278][T21071] __traverse_mounts+0x1b9/0x8a0 [ 1774.835208][T21071] step_into_slowpath+0xb7e/0xf90 [ 1774.840215][T21071] ? rcu_is_watching+0x13/0xc0 [ 1774.845060][T21071] ? __pfx_step_into_slowpath+0x10/0x10 [ 1774.850586][T21071] ? lookup_slow+0x5b/0x70 [ 1774.854992][T21071] ? lookup_slow+0x5b/0x70 [ 1774.859401][T21071] path_lookupat+0x58b/0xc40 [ 1774.863981][T21071] filename_lookup+0x202/0x590 [ 1774.868739][T21071] ? __pfx_filename_lookup+0x10/0x10 [ 1774.874022][T21071] ? do_getname_kernel+0x5d/0x250 [ 1774.879034][T21071] ? __asan_memcpy+0x3c/0x60 [ 1774.883613][T21071] kern_path+0x37/0x50 [ 1774.887667][T21071] lookup_bdev+0xd8/0x2a0 [ 1774.891986][T21071] ? __pfx_lookup_bdev+0x10/0x10 [ 1774.896925][T21071] ? __asan_memcpy+0x3c/0x60 [ 1774.901497][T21071] resume_store+0x1d6/0x460 [ 1774.905988][T21071] ? __pfx_resume_store+0x10/0x10 [ 1774.911001][T21071] ? lock_acquire+0x1d1/0x380 [ 1774.915663][T21071] ? sysfs_file_kobj+0x21/0x290 [ 1774.920500][T21071] ? find_held_lock+0x2b/0x80 [ 1774.925176][T21071] ? sysfs_file_kobj+0xe4/0x290 [ 1774.930183][T21071] ? sysfs_file_kobj+0xe4/0x290 [ 1774.935018][T21071] ? __pfx_resume_store+0x10/0x10 [ 1774.940031][T21071] kobj_attr_store+0x58/0x80 [ 1774.944613][T21071] ? __pfx_kobj_attr_store+0x10/0x10 [ 1774.949886][T21071] sysfs_kf_write+0xf2/0x150 [ 1774.954462][T21071] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1774.959729][T21071] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1774.964915][T21071] vfs_write+0x6af/0x1050 [ 1774.969227][T21071] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1774.975039][T21071] ? __fget_files+0x34/0x3d0 [ 1774.979613][T21071] ? __pfx_vfs_write+0x10/0x10 [ 1774.984359][T21071] ? find_held_lock+0x2b/0x80 [ 1774.989037][T21071] ksys_write+0x12a/0x250 [ 1774.993356][T21071] ? __pfx_ksys_write+0x10/0x10 [ 1774.998189][T21071] do_syscall_64+0x123/0x790 [ 1775.002766][T21071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.008643][T21071] RIP: 0033:0x7ff51799e159 [ 1775.013046][T21071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.032637][T21071] RSP: 002b:00007ff51882b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1775.041037][T21071] RAX: ffffffffffffffda RBX: 00007ff517c25fa0 RCX: 00007ff51799e159 [ 1775.048994][T21071] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000009 [ 1775.056950][T21071] RBP: 00007ff517a3503b R08: 0000000000000000 R09: 0000000000000000 [ 1775.064903][T21071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1775.072854][T21071] R13: 00007ff517c26038 R14: 00007ff517c25fa0 R15: 00007ffc3aa00c98 [ 1775.080816][T21071] [ 1775.086504][ T5704] tipc: Node number set to 2130706433 [ 1775.131680][ T31] audit: type=1800 audit(1789676434.203:3790): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15376 res=0 errno=0 [ 1775.283196][ T31] audit: type=1400 audit(1789676434.373:3791): avc: denied { relabelfrom } for pid=21070 comm="syz.5.3665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1775.283257][ T31] audit: type=1400 audit(1789676434.373:3792): avc: denied { relabelto } for pid=21070 comm="syz.5.3665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1775.431345][T21071] PM: Image not found (code -6) [ 1775.698805][T21085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.699019][T21085] misc raw-gadget: fail, usb_gadget_register_driver returned -16