last executing test programs: 14m31.061272177s ago: executing program 3 (id=4): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000002000500000000000000000085000000200000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xad) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'virt_wifi0\x00', &(0x7f00000001c0)=@ethtool_coalesce={0xe, 0x5, 0xfff, 0xa5dd, 0x606, 0x2, 0xa4, 0x4, 0x7f, 0x5, 0x0, 0x47, 0x8, 0x1, 0xc2, 0x1, 0xbb, 0x3, 0x5, 0x14, 0x4, 0x8, 0x80000001}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000100)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000300)=@usbdevfs_connect) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) modify_ldt$write(0x1, &(0x7f0000000340)={0x1, 0x20000000, 0x1000, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f00000004c0)=""/219, 0x8000, 0x1000, 0x9}, 0x20) getrlimit(0xf, &(0x7f0000000480)) 14m28.51784599s ago: executing program 3 (id=11): r0 = socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000800)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[], 0x38}}, 0x4000000) sendto$inet(r4, &(0x7f0000000880), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f00000008c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r7, @ANYRESOCT=r6], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000400)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000580)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) write(r0, &(0x7f0000000180)="2400000011005f0414f9f40700090426810000000e0000000000000008000f0001009ece", 0x24) 14m26.394768794s ago: executing program 3 (id=13): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x482, 0x0) r4 = syz_open_pts(r3, 0x40000) r5 = dup3(r4, r3, 0x0) ioctl$TCSETS(r4, 0x5402, 0x0) read$FUSE(r5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f000001a300)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f000001a380)={0x0, 0x3938700}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) r6 = socket(0x28, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f00000192c0)={0x18, {"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", 0x1000}}, 0x1006) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x5, 0x37}) 14m24.809188394s ago: executing program 3 (id=14): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x2}, 0x100) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000003380)={0x2020}, 0x2020) 14m15.575420192s ago: executing program 3 (id=24): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x8) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000002c0)=""/102392, 0x18ff8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0xb5f0, 0x23, 0x83, "00020000000000000000ffff1000"}) r2 = syz_open_pts(0xffffffffffffffff, 0x40000) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) read$FUSE(r3, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f000001a300)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f000001a380)={0x0, 0x3938700}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) r4 = socket(0x28, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000192c0)={0x18, {"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", 0x1000}}, 0x1006) 14m13.802650643s ago: executing program 3 (id=25): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x5, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000180)='./file0\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r2, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) 13m57.736285499s ago: executing program 32 (id=25): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x5, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000180)='./file0\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r2, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) 13m33.739253532s ago: executing program 1 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000019240)='./proc\x00', &(0x7f0000019280)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019300)='./proc/1/root/var/run\x00', 0x1ff) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000019340)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000193c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0) ppoll(&(0x7f0000019400)=[{r4, 0x400}, {r5, 0x100}, {r4, 0x406}, {r4, 0x212}, {r4, 0x1138}, {r5, 0xa80}], 0x6, &(0x7f0000019180)={0x77359400}, &(0x7f0000019540), 0x8) write(r5, &(0x7f0000019580)='1', 0x1) close(0x3) sched_setaffinity(r2, 0x7, &(0x7f0000019440)=0x4) syz_open_procfs(0x0, &(0x7f00000191c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000019200)='fd/3\x00') 13m32.11555002s ago: executing program 1 (id=77): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x10080) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r2}, 0x14) read$FUSE(0xffffffffffffffff, &(0x7f0000004800)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x8, 0x0, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) 13m23.573622648s ago: executing program 1 (id=89): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x2a0040, 0x0) mlock(&(0x7f0000078000/0x1000)=nil, 0x1000) migrate_pages(0x0, 0x5, &(0x7f00000008c0)=0x9, &(0x7f0000000900)=0x272) move_pages(0x0, 0x1, &(0x7f0000000980)=[&(0x7f000009a000/0xb000)=nil], &(0x7f00000009c0), 0x0, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x64ab, 0x10000, 0x1, 0xea}, &(0x7f0000000440)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000780)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000007c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r9 = dup(r4) syz_ublk_setup_queues(r9, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2100, 0x1e5, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x2, 0x240, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x3, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x5c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat(r9, &(0x7f0000000840)='./file0\x00', 0x2800, 0x20) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r10, &(0x7f0000000b80)="0429", 0xffeb, 0x4044020, &(0x7f0000000bc0)={0x2, 0xfffd, @remote}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000474246f9efea00ffff01000000"], 0x10}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000ac0)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000b00)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000b40)=0x4}) r14 = syz_open_dev$sg(&(0x7f0000000a00), 0x0, 0x8040) ioctl$SG_SET_RESERVED_SIZE(r14, 0x2275, &(0x7f0000000a40)=0x8000) 13m20.768454486s ago: executing program 1 (id=94): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x6000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0x0, 0x7, &(0x7f0000000200)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200a7a) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019380)=0x410000002) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019400), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000019440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) mount(&(0x7f00000194c0)=@filename='mtd0\x00', &(0x7f0000019500)='./file0\x00', 0x0, 0x800040, 0x0) chdir(&(0x7f0000019580)='./file0\x00') creat(&(0x7f00000195c0)='./file0\x00', 0x40) mkdirat(r0, &(0x7f0000019600)='./proc\x00', 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000019640)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r4}, 0x18) 13m20.135972636s ago: executing program 1 (id=96): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000600)=""/102392, 0x18ff8) epoll_create1(0x80000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000019600)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c080}, 0x400c081) ioctl(r4, 0x3b8e, 0x0) ioctl(r4, 0x3b89, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m18.960817245s ago: executing program 1 (id=97): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000480)=[{0x20, 0x0, 0xb, 0xfffff034}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) sendmmsg(r4, &(0x7f00000004c0), 0x400000000000159, 0x40840) getsockopt$inet6_opts(r2, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000280)=0xffe1) io_submit(r1, 0x0, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r6 = timerfd_create(0x9, 0x0) syz_usb_connect(0x3, 0xb3, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009020000000e0200000e24010147008100020000", @ANYRES32=r6], 0x0) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000700)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000540)={0x77359400}, 0x0) timer_create(0x2, 0x0, 0x0) syz_usb_connect$uac2(0x1, 0x0, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x494a00, 0x119) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0406618, &(0x7f0000000600)={@desc={0x1, 0x0, @desc4}}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000140)={r0, &(0x7f0000000040)='!#!}]\x00', 0x10000, &(0x7f0000000080)={@_ha_fsid={[0x0, 0xcae5]}, {0xfffa, 0x10, 0x2, 0x7fffffffffffffff}}, 0xffffd6d7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xf}) 13m3.674654533s ago: executing program 33 (id=97): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000480)=[{0x20, 0x0, 0xb, 0xfffff034}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) sendmmsg(r4, &(0x7f00000004c0), 0x400000000000159, 0x40840) getsockopt$inet6_opts(r2, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000280)=0xffe1) io_submit(r1, 0x0, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r6 = timerfd_create(0x9, 0x0) syz_usb_connect(0x3, 0xb3, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009020000000e0200000e24010147008100020000", @ANYRES32=r6], 0x0) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000700)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000540)={0x77359400}, 0x0) timer_create(0x2, 0x0, 0x0) syz_usb_connect$uac2(0x1, 0x0, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x494a00, 0x119) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0406618, &(0x7f0000000600)={@desc={0x1, 0x0, @desc4}}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000140)={r0, &(0x7f0000000040)='!#!}]\x00', 0x10000, &(0x7f0000000080)={@_ha_fsid={[0x0, 0xcae5]}, {0xfffa, 0x10, 0x2, 0x7fffffffffffffff}}, 0xffffd6d7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xf}) 12m58.539241022s ago: executing program 4 (id=119): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./security\x00', &(0x7f0000000300)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./security/ima/policy\x00', 0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000d00)=""/102400, 0x19000) sched_setaffinity(r2, 0x47, &(0x7f0000019d00)=0x7) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000380)='\x00'/66, 0x0, 0x200000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000440)={0x1, 0x1, 0x0, &(0x7f0000000480)='\x00'/85, 0x0, 0x60000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000500)=0xfffffffe) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8) writev(r5, 0x0, 0x0) 12m56.241313673s ago: executing program 4 (id=123): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002058041150000000000001090224000100000000090400000503000000092100000001229403"], 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x9}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x8, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x2000, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x400, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x8000, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x4, 0x9, 0x61d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000001, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x7fff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x6, 0x8000, 0xfffffffe, 0xe, 0x10000000, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x4, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x3d6451f3, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0xc, 0xd, 0x203, 0xa, 0x3, 0x1, 0xd, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x800, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x44, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0xa, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0xffff11ae, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0xa, 0xbe, 0x47, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0x80000e01, 0x7, 0x6430, 0xd, 0xb, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x1000, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0xc, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x1, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0xc, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0xffffffff, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x5, 0xffe, 0x6, 0x3f7, 0x4, 0x4008, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x1}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000032c0)={0x5, 0x0, 0x0, &(0x7f0000003380)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000033c0)=0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="a469b4c5", @ANYRES16=r5, @ANYBLOB="00082cbd7000fcdbdf250100000004000300040003000400030004000300"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 12m44.111237221s ago: executing program 4 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x37d442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0x400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000740)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000780)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f00000008c0)='n', 0x1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000900)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) syz_usb_connect$midi(0x0, 0x59, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000980)=0x4, 0x4) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000000a00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x14) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x38, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0xeb, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1fd, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x0, 0x6, 0x4, 0x7, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x10000005], [0x7, 0x21e, 0x2, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0xdf09, 0x8001, 0xffff, 0x1, 0x297, 0x81, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xc, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc583, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x4, 0x3, 0x6d81, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x4, 0x88, 0x2, 0x3fffffd, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x7, 0x6, 0x63, 0xe47, 0x3, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x7fffffff, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x80409, 0x3, 0x0, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x6, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000580)={{0x77359400}, 0x15}, 0xfe4f) socket(0x10, 0x3, 0x0) 12m39.525875525s ago: executing program 4 (id=148): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) fsopen(&(0x7f00000000c0)='nfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x9, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffff19f7, r1, 0xffffffff00000000}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi1\x00', 0x400400, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000500)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000540)='n\\ 127.0.0.1 2\\0000000\\0l\\calhost', 0x23) 12m36.202841627s ago: executing program 4 (id=152): r0 = socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000019480)='fd/3\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x88000, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000280)={0x30000011}) ioctl$TCSETAW(r4, 0x5453, &(0x7f00000002c0)={0xefa, 0x7, 0x80, 0x40e0, 0xc}) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8140) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000194c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044020, &(0x7f0000019740)={0x2, 0xfffd, @remote}, 0x10) 12m27.124962054s ago: executing program 4 (id=161): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xdb, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r7, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f00000194c0)=0x80000000000003) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000019540)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x121181, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f0000019640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m11.91635979s ago: executing program 34 (id=161): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xdb, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r7, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f00000194c0)=0x80000000000003) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000019540)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x121181, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f0000019640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m49.254138892s ago: executing program 2 (id=639): r0 = syz_open_procfs(0x0, &(0x7f0000002680)='net/igmp6\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4085, 0xff5}], 0x4b, 0x3ab3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x4140, 0x85) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r1], 0x2b) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r5, &(0x7f0000003700)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f000001c700)=ANY=[], 0x2a, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f000001c740), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f000001c780)={0x0, 0x0, 0x7, &(0x7f000001c7c0)={0x16, "9989c68556dd9d6197a0cb7ca9cb879a05000000000000004f9fce1aba72a7ca2d"}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000190000/0x1000)=nil, 0x0, 0x1000000, 0x12, r2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000001c800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) read$nci(r1, &(0x7f000001c840)=""/84, 0x54) 6m45.954077316s ago: executing program 2 (id=646): syz_emit_ethernet(0x2a, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x5, &(0x7f0000000140)=[{0x9, 0x81, 0x2, 0x5}, {0x8, 0xd5, 0xfc, 0xf}, {0x240, 0x4, 0x0, 0x26}, {0x9, 0x8, 0x2, 0x8}, {0x450, 0xd7, 0x3d, 0xfffff001}]}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4024587b, &(0x7f0000001a40)={{r2, &(0x7f0000000440)='/dev/nullb0\x00', 0x4000, &(0x7f0000000480)={@_ha_fsid={[0xffffffc0, 0xe557]}, {0x7f, 0x737, 0x3, 0x261}}, 0x3, 0x0, 0x0}, 0x0, &(0x7f00000019c0)}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_', 0x6) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) close(0x3) 6m40.934015961s ago: executing program 2 (id=652): r0 = socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000019480)='fd/3\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x88000, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000280)={0x30000011}) ioctl$TCSETAW(r4, 0x5453, &(0x7f00000002c0)={0xefa, 0x7, 0x80, 0x40e0, 0xc}) sendmmsg$inet6(r0, &(0x7f0000000000), 0x0, 0x8140) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000194c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044020, &(0x7f0000019740)={0x2, 0xfffd, @remote}, 0x10) 6m38.617970368s ago: executing program 2 (id=655): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='jffs2\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000400)=""/102392, 0x18ff8) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000019400)={0x2020}, 0x2020) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f000001b440)='./mnt/fillfile\x00', 0x42, 0x9f) write(r3, &(0x7f000001b480)="000102", 0x3) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') lseek(r4, 0x2000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ptrace$pokeuser(0x6, r5, 0x388, 0x7fffffff) ptrace$pokeuser(0x6, r5, 0x358, 0x4000000000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x28981ff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 6m35.504661406s ago: executing program 2 (id=659): syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0xee}, 0x40}}}, 0x7) 6m29.946051723s ago: executing program 2 (id=667): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x149000, 0x19a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000e00)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) timer_create(0x0, &(0x7f0000000e40)={0x0, 0x21, 0x2}, &(0x7f0000000e80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000ec0)={0x0, 0x0, 0x10001, 0x5}) setxattr$trusted_overlay_opaque(&(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000f80)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001000)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000001040)=0x400000d2, 0x4) shutdown(r3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000d80)={0x5, 0xffffffffffffffff, 0x8001, 0x7ffb, 0xb, 0x3}) fsync(r0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000680)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000700)="06c3", 0x2}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000200)=0x9, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x5e21, @local}, 0x10) 6m26.663150165s ago: executing program 35 (id=667): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x149000, 0x19a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000e00)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) timer_create(0x0, &(0x7f0000000e40)={0x0, 0x21, 0x2}, &(0x7f0000000e80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000ec0)={0x0, 0x0, 0x10001, 0x5}) setxattr$trusted_overlay_opaque(&(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000f80)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001000)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000001040)=0x400000d2, 0x4) shutdown(r3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000d80)={0x5, 0xffffffffffffffff, 0x8001, 0x7ffb, 0xb, 0x3}) fsync(r0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000680)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000700)="06c3", 0x2}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000200)=0x9, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x5e21, @local}, 0x10) 1m0.833218808s ago: executing program 6 (id=2434): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)='L', 0x1) 57.740303937s ago: executing program 6 (id=2449): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000001300), 0x2000, &(0x7f0000003300)={&(0x7f00000033c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr(&(0x7f0000003440)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x1) syz_fuse_handle_req(r0, &(0x7f00000034c0)="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", 0x2000, &(0x7f00000054c0)={&(0x7f0000005580)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0xf3, 0x4804182, 0x8, 0x7ff, 0x3, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 57.611751981s ago: executing program 6 (id=2451): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) r3 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x141102) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./trace\x00', &(0x7f0000000800)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./trace/set_event\x00', 0x2, 0x0) r4 = memfd_create(&(0x7f0000000900)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000940), 0x4042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000980), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000009c0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000b00)) fcntl$lock(r4, 0x24, &(0x7f0000000c00)={0x0, 0x5, 0x7fffffffffffffff, 0xfffffffd}) 55.070310581s ago: executing program 6 (id=2455): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x179) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000480)='7', 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 54.390357667s ago: executing program 6 (id=2458): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x147) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 54.272777704s ago: executing program 6 (id=2461): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xd, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000d80)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000dc0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r1, 0xf0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x20, 0x0}}, 0x10) 39.182807268s ago: executing program 36 (id=2461): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xd, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000d80)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000dc0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r1, 0xf0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x20, 0x0}}, 0x10) 7.417459507s ago: executing program 9 (id=2649): unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000040)) 7.286174734s ago: executing program 7 (id=2652): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x6) syz_open_dev$video4linux(0x0, 0xff, 0x100082) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap(&(0x7f0000518000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x3a28d000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102368, 0x18fe0) gettid() timer_create(0x0, 0x0, &(0x7f0000019180)=0x0) timer_settime(r4, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000019200)=0x407) syz_open_dev$sndpcmp(&(0x7f0000019240), 0x0, 0x14b000) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000019280)={0x0, 0x0, &(0x7f00000192c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r5 = openat(0xffffffffffffff9c, &(0x7f0000019340)='.\x00', 0x0, 0x0) fchown(r5, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000019380)='.\x00', 0xffffffd3) capset(0x0, &(0x7f0000019400)={0x0, 0x0, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000019440)='./file1\x00', 0x14e174135c0b86de) 6.584259011s ago: executing program 7 (id=2654): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f00000004c0)='\x00'/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f00000005c0)='\x00'/185, 0x0, 0xd000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000680)=0xfffffffe) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x1, 0x4}) 5.949670226s ago: executing program 8 (id=2655): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001280)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0xe, 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB="b70200000e000000b703000000000000850000002b000000b70000000100000095"], &(0x7f0000001440)='GPL\x00', 0x1, 0x1000, &(0x7f0000001480)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002480)={@map=r2, r3, 0x26, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000024c0)={r2, &(0x7f0000002500), &(0x7f0000002540)=@tcp=r0}, 0x20) write(r1, &(0x7f0000002580)='a', 0xfdef) 5.85161804s ago: executing program 0 (id=2657): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) 5.649408155s ago: executing program 8 (id=2659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000d5b000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000200)="670f380b5e6bba420066b8baf90bf366efb859038ec0660f3881468d66b8af2fac8066efbafc0cec0f2281660f383dd0640f01c2660f6cf73664f3a6", 0x3c}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_create_resource$kvm_nested_state(&(0x7f0000000240)=@vmx={0x100, 0x0, 0x2080, {0x8000000, 0xc000, {0x1}, 0x0, 0x2}, {"c42d72eda00fc65ded432f19c9eba8ec7afe460a4fcb127f6a648002639795f726e07308e8a69bf40476b43f2f96165a7aba509c7b52758711f9ce171fd52a6ba8fa33af71db2da27b9eb8fd48195e3bcd6077730017a67d9abadef05197fe9dd2cca8a27f4cd5bd64e4bf49946d55120c7e376a0b932f48aedf9ff86ce91a6acb877f00650983924fec95855fcafe6caf2ed53396e0247d69232902c514d59e75fd2367f34e41339565c67fbb4b506dce85663e60fee3a4db869a8883629ab55ed0c4a81288fb60a932a44f592b4d104abc45f467b00240554b7731eb9087cda5ee40015cd56b43fe9cf8959a777667621aeaf4fc88ac7e5f23d412600ea52e7652520339d1da698729ae2ef484aa1c04dd927400ee3de9ef0b83cef7985f7bc2bc38e0defa476b1b0b32f1964568529253c6591c5984de8d9dfc1ddd57495b051c1650c5ebc4f855712b18542209db3a1b35ee23a2b0d786dd3826744b26a1b04f0a81851122359ccbd0efb14a1818ef917df679d07e9c171ce01a3d34375c135c2e127f10131105e0c3641a6bfaabe624107fb68248aad1686c61a66c58a5248c51809db047c17b988654f590449f2caa38588306d1c74b2b4e58ec28fd8377e1e9edeafc87b04df0567bf90cc2719b4b7941cb93340213677003201027b26fb3d11cffc58de0d96b6d0f653dd89d07da94d22dc87420c64319269737fdada912bce9afc60d089d3e221b497e3f9415c4807ece5ab4903b6065948aa3842a7edc7f863856ee2b0097ace6329d3156e76b9f953f3750b2b2b5d26cc102a986e7a598daa2c9f8f6879b68549749633ca4f2e8e3769f709e5f3e6a25c7d051cd08ad09d6fdeaff9d1bb6f701111d38a09ff65a594c97908d9a1dcd348747413ff96399659d14c58312cb5c10b0538eb11764f8aa64f597250bd3f7e23944d7a3a61ad3815be325c3488965b47b05a825069bff5198442de27b5989d8ebf32e166cd54db7a458c336ab0a75e2c5423b0a01ae4cf5801a443590ede8c26514768ef91b4bdf4b4f2683eea8ecd0cd1f7cd7e044e768fc2443f604026d32243adc4d9b2a4288216ffb0a868cc2d572e7a5cb330f501ce7936ae98e38c7a67de3349d65da6c9306c9bb5dc2dfafbfc0d7b3cee6c4d1e6373b97437777c89876b96bd745276cfb6aaa7b4f4fab4b6ce3376a0ca0d19a95634f47581a5badc8623d78da8ef7f522b55109f7c70d6c5faa72ec55aa9b2209c43ad3eea89f84ef997199fa5dd8d739549403ac99cc0e647aef99d492c0bcb6be21f252200fe83968f9af93ce2eb4be9629eded9636ec4c05421f11bfdb08f7240bbbaca180afdaffa1a65875111d8462bb7ac9ad4b493b22040c1ea8e9ccc78823f5da538b24b216fc9f4f6630c0cc05942c4a155352032e5fbf5db20a9b026193f9f7eb5b0a933d26c5a06432c5851844e6bf8f8a5662c368da09f8d382c58ef2364735d4e4affd706a1cad1cfc3b186e44b8dae5b3c0b24055d0e8de1b38263bcbcec532e3d0cfe8892382b8e0d1acc41c70aee4872dd64e5772b2dafa9ac4dfcb419269d2e2a4e1e5131e5cbb4a5b7157e5963c76f747a1d18e9e0f75c47d69e144572ca2f6022e9c6b322a215a60b266d4865585b78ccbc78065fc6d1670a446b5616b38cf672376807a2b9b5f7fb71879ed89638083cb365385b6122b5d06c74d2b015cb31d561028bfc8b106e124a8d7629981c1f83742464ed06a6a1cf34914e67b80d18263430681414e69db4da707a6af9cd505a4aeb6b35fda25c19db9371e0d368b4805036577868cf6e687574181510f8598e54ccc3c63835eca4626611819634256f17e46de468b271e5229e151abb6aaf2397a6ccaf9127d565da4d4a6c2a718d529ce4feb34be67874cbeba77b102b1f04bc06a676a20ddf6f0ba20731c16ab68b39cf39df4631b09c0e951cd553e44ca49ac18226f79a3dec65ae61d5de3f4db7b3e36680aa27c8d38c7a32407ec63ceb6fd832f03105896f8f6dd4c4eeefc71f7a20da8d2f8d7c0ebf39661add71c07d12f175214c0feaec70f32d59b52c5bdfba6c54a7ad9c77d67fd8f5b986106250aacbac3e1d27540b5135176e7881b3291329f1e2509bffe1fa0e2e0f5e0fac11b38d6c63ef80d8bcea0c7178fe804cfb5377ce4681d704faf8b506d0a5a3bce6816c241807eb001a133f9c2312c0f273f3dc2dd59e8e619440fd4ad625486476210272faa0d144a132d7d6d765dcca69189e19c8bc6171182a8ba27f8c6d57794878159863720fa8044aa1581453fd7b5ec249c2def3921dcaf4aabca7eda1342bc94c71fbaf10e40071f26b2053cb435655a351faa9211227f34cbd01e9535314b27158443c8b759078cd607d7bb4b58d9803c0fd4bd1cb268a5c2d37cc44bc96a54e7a26cbcb68c2c86ff348f7bfdece54e740d5f1c6f06aca66f4c9299668f8a44d4c03e56305eac55bcfd8f6335c276dee5e53b3327a78999a6fc9e15e6fa12979c8c3b7a6344d5024d19c4481d379cb201629e77c5a3478e517a0f6cd00508bc33f6947b7616fcb651cabe7892de90d58bf28660d5aa79959243f2254769858b9248c304da6358f6502d33d6ea8a6891697e13e861f11bd32c094b637155483d4076b088b5cbb9c7c75d840eda7afafe07e57d1da752c2c5fc2506dd25248228871f8bb97f483dc7630f0cd5cc92899ada5346d844372159cadc5cf7752fa12f54479c00f0b6f626f773e8f3bf0380375cd4ebca1576147e3ed9b8c8070cc241ea5ceccaadd7d3dbc1d97ee577e7bc07494abd767da0ddfadc3e785ac5aa0507bdedb03de3caedc90353416d15a5c6f34f773ccc8ff802d05ca8615e1a3246a5e2f63dd12b1e85d6e894f8100d8807ba699464fc6657db37af2535cc194d4eeec7c2604d3ed4d61d29a33fcd6876cb53370cbe11e374a6574fb2d0e4833e9954b65e67c715e8fbef7d1b5e25b67908a4b19c07c1247a4539eb3028f4f122602fcf618c9eb601b93263150e1b18a8d22ca55ee6ff37401b27d222995277f13d3b7f86967fbfda4b84f629342d1c62e65f827006a4fe8f1ceb29b7955337dcb9b845e76791eb71b58fcf28a90389ff103dbb1a5fae8399701e1ebe4860884685d9be93f4e64b5a212aff8319907df3305e6ed9960ea65c227ea640b39227337c8327033ccbb684bf03ade17a2d8f2a053b276880c26063feb99922e8769e60cddc779240f4269685d9d83464adb6f3b382b5b7b35a8494c347a9655943d978ddef5cd5511a8993deda6b3ea133b8ff9bc2fb26dfcf53ea7a4569bc3da65df2ba9f137663ef6f8fca6255df1605a7f91d7e39f2918f6e9f82a2ec1c31451fc910a530ed176b06f97c9352b078462c8ed462916dd85142fe900aac7381de212165062339da5d1633f76df1919a2b3108c7c82d05e66b293870dec8e94e7c97a2ee79a84574e00856866c185d8d7fdea06e223759d0c9830645e1991b8b1b59d13c51b36ca215793c60387ca3cd23db82458dbf3bb19b380d1f1d4f06613eb4001cb77efa931556e424858db2157f25b0ce56d76edb8103d8dd8ae009d9f05c305a5982c46871785789f62c8115a87a1f9829b0635c556a3a14c4b291fc6bb979359ddfa282613257708420284ad02b957f263a1a4ccfbb678dba18e49866debe0758b0ac64c29941b47e98aa2a524c23e509165043f2e77260260ab63d3038ed9e007477c4bdadf3756a37e42c3ecd2783793a94ea7dc2e1312bb9887c92937b7c9b25f2ba1726181bbaaeec40ea55ec759d12e14abdd2bc8b4720c2751e69cb5c7e2695ccfc542528edf9260e05f5a0469f15af07995b4d90719d40527fa13fd03e84c4f786cb3d39a9f7a736a4c42bfde1af9a6cda559564335a15f6441418bec41355bb70758491164784347ea19a5f9e27859f91a573cf4e3c22064d5bdf69133e3e00c7f3b867adb28a0d62ef6c6e1573e272ec0ae975a7b475e19deefff957bca449a7af8c641348cc217a5fe9d8a47775b029bd54d516c5d3ba7204a719a72976e503537b6b3a9c93112890e3f92ec0316fc52598fa4da08121c9b219ff5d9c574469886c4b385b6f63f424eb6f54b728d14851703a1fd0912805b6ab17e04f8baf7310a1bc9c6a5abc35912e3d78c204c10e02a15e8576eb939ddc0f8b881476d0ba4c9c1fe02637c81c17874a9570b8243b9bd6c714092a6b2ece0545768c2d1a0d93d8e1e32216877e0e75a261ab5c153a855b48e51c798657c62932211b89f8820d4c0355c4f541284cdce1ecc9f9c1e4a9e66259009500cb208f1308e49c66a7e82bdfe8abcaa2e5edc901a16c0e0783ce399a01c93ea566332bbd228116f7ec286b21f24b8198bd20338cb8936e3f82b5cfa9b31aa90bd67a7ca1579e0a8b070de2d963c9da52e023d2fef01505f8e9dc31054b4476836d59eb3c7cf229a2e71caf8f26cfb52a9be84b42afc0f8adafa39c30feca57da1c6d5a894ef6398903a0c1f55a481a61549b36d151fa9c5b6ada9e5bd58103c09af39887ee2526c65b4fb61ff62fa13ddfc1c219a2d95768b82dacc32a966368010ab687bf0c3575d22e1141fff935693956527f7f0b77abddefc4049a6b9fa81af98a11c75366743c52a115f6d25c63db443bc745036646ca3f999424183914abf4a85a088195f51509d2d35c800f9af56b662e29b7eb36c1f5789d7d29fd4a4324be0885656495d2c007e291a800e36992310c6dbceef04d828c9f7c0841c6add5def79f0e4edeb50647e6f0384e27ac71da1ac9dc3d9b307add301686cf28aebf8ce63c2f15cdeba144deb8d652d872dac701b05e6515add19257449bb153189ae2a2ff540aa05d3b08b078cbecd13a0545fe00c3a662475875d8bb2e028c66fbb4ddfbc8e0a0aee545d9f868922b517eedc7482094ebecf44a03c078516af0f8c11fb6f91ec0f02579e51e99fa578ded790a3fe8de7dc74369311190223b20e46d32cf0bbaeabc7eab616ef527d43a493703d3cb157577ddb0268ce165fa40ebcfc4dbbbd32193675e79ba5be0562b323e3ecbc0a6d091ebd1e6dd87ec3d68fbb1ddbb56d2f8c999d65bc093b07c58b9c620b4e27b9e1a2e08edfe0b2e57a993c45228f7b570fe9a85e2637249691289b7cac199cf32889b68a1e686381a473b84e2fe6642e4845c5ac5dbe128b41678c12e524a37999b243b45a7f67bb80c9d98e983c756523e19f284a2c6346e734c279a356d938c562ce5bcca22d6c24cb6a69c9c0a4fae702932d9a19681e3af39f9a5f301c0c97ce0eb911e6feb00853dbb69ba71c27b089b8470d275a2ec533c3b71e0aea7ce648d5578af757316c4e776c8007872e21e8938c4792bf276d656b6be2d6b6625c55ada80e372b5c2c8d3d12628fa9271c52dfca7562e1f45bc0204729e32238c4e402a88101ec3e160e1bafe4b003678ffa22dd1e013f02694ba7b30e83302b0e88e9d71c75f3ccb76e3cb8d741a57b7f1bb44ffbf5a6f099ce55a0a558e3e80b0982eaafb9d86f45dbbe4bf4b568fe53c5a6ec522f5202e86ae6aae9ae99c04d9fcf9d7eed92c6cd9d4804793b6e00a5aa206cdeda8d9e54b3daa06a671b8a3d5cbb86f8ce38ce1435243c7a9834c49929d12d6f4194a823326d17078d9a680284d59485f71be2fa23c1f36d409ceab6ac0bfa36770475edb4c3e6cc82087704c9af2c80c84c9bb8735de3ac5ea4f040a6d3dce439c47ae1c0ae5768ca7dbb93a9461f3f27cb858718b34b2870d0b150b0a34d3e9759e0741b59a1946", "660f31bc20a798103d7d22bb6cbcf314b1c72548220a7650cfdaebf9e7297efdbb69d43e61024e100b01ed4a3ba31dbe2e93f00c66ef337614aee69e588990ce94a1e2d0e12555aff46ba936c529afd1e70f11e805dcf4b1279cf9af7ff22720d10d414c4c0f338929378c26056de2669eb058ba6a9f5585259ff4342a0f55fa38628f04d81c0083781090d2fd5ce2b73d5bae1ce1d64c9e6bfb1c056078b6d4e4fb3ef95c2c3392bdb809cfd6bbbe2adc8212352a8825d4a8636a72800ca269d0a606679ae22953fb7336c1341e72c58a3f1e948f41f23d07aed014a85976a530f02908f1195e9364c3a68181db554be26d6d0389745f68926b3028b347d688f5f69b5342d5762344fd1e558b0938ee1aea800432c393ec4c78ee0269138b58a1073fd5be95213b3845a2eb71590c9c87f42d4d6a54792567c2c01ab6a2c9e2180914d37e1cb2fc4ae5d40e99eafb56fc914938fe006a12b2f9de4768e8b6fe1111982206c9be5593e19b44b0b66a27c3fede225f3c35c843a5677459071dcaf43c211f19a66acb68f12d684f81c646b67c624f5f48259c68d31ae6613bdc924f6b05a9b968cba95a4fba685cef5ef22f53c060ef7d5bb9402866a4b972bf9727d659010e57f4ffa929aafe286116fd0cd673f40f73c87591a679dd32ecc2489142aeab771b23368f4b767998f4a2094343c61e223b9b92ba35331f5b285b7e993cb6cd7448a301a5b1a1053181f34149b49a03c38a3352708369e675127a85880cb38d88fc7e1b222ab3b4ecb91795c5ded6837105443d451dbc2e934d124730e9e720c922adeab09c744828c2b7d4ed4ddcfd481c23f3b1e5fe1bca7f6961652e4e6adf9710a88fd4b44b045cfc67c6375aba2d7c1a8d2f7eda826e2fb32590973c4024ae4d41c931f0a31877c54c5ee448870e4d1d7f7a4f8f86f2e0505be8984d4374b4f71a071209e010100dc3a261540a85ad19f24653ff395a83102f00719f0d6f230685f1cc4e6c119cd85d487f90c4a164dc1a9f9d5dd40d7e5c4e5f9cda4c100ff640862178773914a3ffa33f5f9081c4ba8f31ab50d6f24ec98705813d234b56cd594ac30509da19533700ab71e0559a1c4c6510232211d4ebc4e74f1c34e5eddd2ec5a6449d05e8d804c4a7a142ce7a3986caf23f5b0d635f4885eee7c79cd098a801eb9e3e0ae898f5b49eec7194298b3f56e1c52790fe4aadcb88a01fd3bf4068f0d03a8a25026d834ce632812d73845d217ed71e5f8fb49d6e050d18504eb752d2d26a4cdb7bcc3b19bde4a6949dd3b5038a4ba646e159de5673b7c7a4c04967644e5d2871ed364cec32d14b44dfc7a914e65972c8c60f1fd53a835bd44303add4e198b0f0c4abd32dde93ff4aa5eb4a2a5841a7732f67cc9a699fa96a0b30450bcc06ad56d4c512cac2eb3a9436ab5f14a108dab315a7f36ba8e818f84c6e14deeb14acc65040f9dac6e22ca1a6100d82b167be7c9ab07a0e5aad80374a99c575100e4c8327d1f79a5b442ba8ae626fd43f84778ac73069477352195ef2b1c8d1406cd750b06da28c4c0c0902386253de340af966666632316a6b60b9382a31f1f8e6f6a983409462668c64a90611b0eb5ab7b09d9f88f6900073bb7dab8ea688d433c3d87625797c44897e1e948cfd6f8f01fd99edc2fd2401deaec94288835277d27369fdb6472c337000e4c7b4fb4c636a28a7da4f9c7b3b9cb0e35587567dc9315ecec52dd55630f5b0d8eed0322bae6307e0a4ea3b6a691fb8ad98e7b57b1afc5a1f397cc5b1e3f1adf6878aaa949b52f88da62faeab17055fef8c51b3711d8118eac0d94a54c0b36ec6123fb467de256e30d67f406a7ad3524fa72b01dad01d795b54f8f8fa9e1e4ee414653863d3e41ccbe076319475a8543a9feee9914db7bd8c2ec7d3a9a604d4dd1881e27422165e2619377224c9705760d092ac16e33ee513b99e67dda34bc1fad6849041141af8cb954827e47e9a71528734d75730f7bd9875a44c9d31424236b6315999c730412737bfab68640c254fb73d8de80ecd0be532e3779b117372d75581df64179f6272b4ab82d0cd5243c02430a5cc87ed8f2b155e9c82adbcc92467b2a8d554e791ee83639cdb634845ff9041a30595fb3e82acdf04f94f10b456804dea3fc7c1423c7817d33868aa956e40efeff9f2c3c3e6c4f31ce07c63493fb6356599cb904adffadfae85d71b87b2c9bf1395008f1533dca9ac1ffe791df83bf255591c7891a9c22192629948895a1459700469803bf090f241f37faf3d8be6fe038a99276ad33421337c92bffc214c2c60cd88cfddae6612123907f511fe70dd145e7ea2ba7fc334acc18b23830c939bf9a04f619e209d8de28328aa4220b5f60917dba78284c8dfebc0f04aa135e77f0399059f80f194da4bf7756e0e5eb10a1bc2f30833714c6414e207712cab028673d74b0e49e6b2480ee85c31fc4ad1d51bff83378a2eb30cee9cf6693975b30e3a7d0818c00714fde0e164e266da8b8db0320693952c45aa0406d8fedaf6df04a062123b2a40f2bf4406a9698f5d223b3c52631a6b9e36606e587d2d479ec60cb32ecb295e0f0ccf35de7a88f37683fcebc2f9076fb91e1714163fb726b6dff06d70567697ca2687d37554473f11e4bfed0c57620ee1203f9e58f9df9ec9dc996f200bb2122aac7e75f32f00850f6001943ff3f6ffb32ea77d8c0c5a45b82971b8e57bf8fd0e77bc2f4be0da079871ccffcc856c2c7e96cf21572b7de4e10f9e8857ce9933b04c9c8991c4c428b9b6c9f325b063c5992907ff1467cdcedef15e20ff00d91bed0fb342b72ec96c032f92c787f144dade2eda2c8c83ce83837ea92c4bf740cf00d200a91fdf399ff0a70ca702ae4940f7c7bf6644ed8a311e181976bf001278c710bd4615794ad52f78be69b80175aedeeb75901159ed29b48dc707c340f24681fcd2e21c144752ae506fe208165c18e273a9aa9927c08783b7260181bd388a1c9922116427f30da703c930353198b210e2f9c03c20eab57f00d4b8dfd01b49d2d53d201bbc421e54ff42333ab055910c0a5b034d0eb7b24fcf739795ce0829dc5ddbc77c052a5280aa7fcbd45e0ca1c030091fc89369341cf1e2d0684dc05cbd71d7c2a0076808cae01228217f396c68d17f181b51c1e575e617977bf48d122cac3b40060a79cb3ebc05bc9fa2bb58df22bc75cedbb2d5ff9e293317e99064776b115d5536c6ee397a88c108f379c598e0bec0996a806e876faaa5aca12e3bd5d212b7dbb3fce8e32834dc6ac73484c52c249f4d87a6f6d8b6eb95b4c64b5c6027f95eec425537fb89a9c68bfacb20f98dea6fd9854ebc05bd8bedeb21d6642cdf538b0e7b8e9b1310685907145264d0c69d29e96201eaedaba42c42715cd8a5d0260069a5af47d7ba3c271bfa3bb97f3243959d4903e0e561b370ff640f659edc40397ed5022d354bbb36909d3ec247f372f206332ce0317018ef214bf5d7c848037f730fd27a19dbdfee28cb5ba27dfc1030bc7fa532e4644f3333d4916319e64772481cd6d145767b568a72f44141d32ac74d605032f4b075eb3797a0cacf9c510755a8e24a47cc9ef6b884160ffb478c6989d21ba8fdd702e08fa127291135694f855e9339255063d0551066c864ddd1271fa981dbda414833dd43e22193786fdcce17f3a9256b7e7387f8a12a8b3b5486e1bac6d9b6a5b5f5becccaccf3fa370a4e12253f6412648d9b3562ce2bec45987899adacb32c8727591a8d1a758d0cb2a334383162ab155c2eb81f3bc41a60385957cf64d59ec200680d40bdb5521560a9e49bb2315443bc875b7df2d84786d9613e5d86e55c4d3cf3c8285a5b6a05d619fa41d3e4fba04e21bafd06bac1083f9f5ec5527bee94bfbf43142d77ba1c2bedfe9efa3226978ae389659e6d74ea9481ffce26a0b90e1024939cd09e1c9ba6cd78b3d1dc737c4a49443960fad9bb1a9bbfddff3c2a9c064378e0d380d30a2d70f2dae6880fff245fc80e8ffb914d84a1464309203ce8dec4e3239275a01ed8329874c098dffee8d5989bc14450ee3db780edf3484f9e955c185d19959c98a9bda8a8ff543f66bde8379163adb1bad075ce81acaf0eb7112eca7037a03ea3214c758290d4e708f1ee8e9e5247992d5a3a492a10e84e41c92379148063be794c7baf8fcaed7f654dfa332e3a4b9fc1efe6f8a1a16fbc422fdd5ec0a9d12cd29555efda70974eb65550462df820f893ee381be42e7f8927e3bf7e92a3d6e1c172e54fa59c0db815afb9fafc9360bb4fba75f1df835ce59796eff3ee037aaeae686a842d04725bf09eae6255e4c4110ea2daf958e541f5639e953e1c01a8fe582f2a6e3af7da1b19c5d29e1b5ed09004c6ad1624bf4ad84233f9f12c2775420495a1771789809b927250b8246466a0676b3882ca69710dcb368075626a5d965743e69aca35bfe6455619722758602205227bd950a5d7571ff55f0f60a39816013f2e0908a6fd12de0d229593d5157265c2cace505cd21d1be634d1b032cbb676fb712df3507b66c2c9c2c4a39fbbb7445b064189456fa3752319c500223482a90f010b3705b3d44add643f2cec9617c54b2e029b8d9c1e75106fdd60a2862dab3622714d47da95e5569bdeba57bd37191bcab4b37b3bcfb87dbdfab8b1e5761bf99e10a311d7a0a11ef26de5c64b01870fa7c80a1261bf98e367d6bdb04ec9e7289c1bcd3de0e24385589245d6c3b13df78defc0b5e56edad808e6cc9218ecbcf1c44b1157e5e26326bc5e8f9a9c60d78695709eb8438eacb705ec89c381024635e3eb53a7dded57147ab9d65c4419b0f203c499065f5ced88cffa46a82b6a50761456c0d9b5d67b7ebe6d9f5c34e69ba286721229e2e5f1a3f145270875334a985b3f8ee83cd005f07ecf93f482b9f42e7b5f213b9f19fb1ee11fde393c54610203af41dd84d5615d5aab28add3ef521fde82b8e7146be578a8d477cd2b393911c0b0937075a50f649e0d30a73cb387e5804d8135961c5f09cfb05e1d15378394cb597ea1fba01db2b1ec340351a66501f240b213ce1acf7f7cb317b7f31e97dcfe8138a1601715e82995cedda8e2b72043814a4dc608c60203ea351bb784242247338cce6dfa1e94d304792d4d68a631e2a4cf6d3c7d785319aa620a484ac9420ac2741014332d5b1a5ad04dd490a4212e3cd0959d418bec5397bb7e5b9c48db603dbc74227821bf27ea5916382f30fe8c39150ab1f80a756feb95149e397c3c1a9dfb92c47557425c16aa8ea8dd9e821a25a900f507068566e03af08adafddac94694e022e470159109783e5c4276dcdb54551934a4cbc06dbb4fc0c4d52e8128e628b5f9f379080e3baa8c3f91fc04df100d658d908c44364e3ffb5eb3aef913739dfd9b58e521ce735019d459928ad6549eee4470c43778b10e6885fbb6670d2a4665e718f733bfa99fadceb869c5df9a0fd5c0d62784c68a37540a5419da9190c924e2ac5e62e1bd41f352d1a0eed7faafc79d2578db8e8bb65fa46962454286b5a70dde9c6bc0ff71ad0ccf59700a15d5d6d0ac179431d70b1f16bcb8413cfc79b178e0c6e47f986e7e309994d6cb21f2a1e3fd5029a6f47d7103f521f54a9d90fbed151ec6d3ff85317575bf11acb8563e21712c5d2fe5da2c90ef12826e6ecd86ee4d1b813f3c3d7e093bcc009f634df33c0f6c4010d8b1a3a8acb88b329b2d0aefb023892e0c1783a75f77b4f43a0f0b9aeb976a4e354420bf892957436ef9493693800a13c942c2b452e22a"}}) ioctl$KVM_SET_NESTED_STATE_res(r2, 0x4080aebf, r3) 5.566074859s ago: executing program 0 (id=2660): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, 0x0) 4.984370716s ago: executing program 0 (id=2662): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000e40), 0x2) r1 = memfd_create(&(0x7f0000000e80)='y\x105\xfb\xf7u\x83%:\x18-\x1c\xffr\xc2\xb9x\xa4q\xc1W\xcb\xf2\xdf\x8b\x19M\xef\xa8\xef\x06\xf5`\xaf\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\xd0I\x1c\x12O\xfa\xfa\xa6\xfev\x8f\xd6\x01\x97w>\xee\xaa\x11\xcd\xde\xed\xad\xed\x8dQ\a\x93)\xe1u\xaf\xab/\xf9\xd1h\x12\xa3\xc41\x94\xe3\xbe\x11\xa0\xad\x99J\x87\n\xf2\xe1\xe2~\x7f\xae9f\x8a\x01\xad\xaa/X\x19k\x1a\a\xc1\xcd\xcf/U>\xd0\xfa\xe0h\x90\xb3\xd6l\xa5\x01\xc3\xefv\xcbI\xd0\r\xe0\xed\xbc\"\xee\x8e\xba\t-\xb8\xbf946\xb9\x1e\xc9\xd1\xeb\x8f\xdf\"\xfc3\x13\xa8\xfd\xe1BdX\x9f\xe7\xaad\\\"B\x82\x02\x17\x05\xf0\x01O\x9eI\xfa\xa7b[\xe4]\x86\x1f\xe0\xee\x81\xf2\xeaVe\xf0\xb2\n\"e=\xf2\xee$bq\\z\x8d}\xd4?\xcf\x94\x1d\'', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000f80)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000001000)=0x7) 4.801616727s ago: executing program 0 (id=2664): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x6) syz_open_dev$video4linux(0x0, 0xff, 0x100082) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap(&(0x7f0000518000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x3a28d000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102368, 0x18fe0) gettid() timer_create(0x0, 0x0, &(0x7f0000019180)=0x0) timer_settime(r4, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000019200)=0x407) syz_open_dev$sndpcmp(&(0x7f0000019240), 0x0, 0x14b000) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000019280)={0x0, 0x0, &(0x7f00000192c0)={&(0x7f0000019300)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r5 = openat(0xffffffffffffff9c, &(0x7f0000019340)='.\x00', 0x0, 0x0) fchown(r5, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000019380)='.\x00', 0xffffffd3) capset(0x0, &(0x7f0000019400)={0x0, 0x0, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000019440)='./file1\x00', 0x14e174135c0b86de) 4.705088283s ago: executing program 8 (id=2665): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000840)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r0, 0x2f}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) 4.127575352s ago: executing program 0 (id=2666): r0 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 3.773494683s ago: executing program 8 (id=2667): openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x20842, 0x0) r0 = open$dir(&(0x7f0000000800)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000c80), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000cc0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000d00)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000e00)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x40}) 3.693921228s ago: executing program 7 (id=2668): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100', 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000310009002abd7000000000000400000004001e"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4000084) 3.317713917s ago: executing program 8 (id=2670): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000280)={0x20, 0xa02da726a9b588c3, 0x2, 'NU'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086d044fc1ffffed00000109022400010000000009040000010300030009210000000122050009058103"], 0x0) 2.819548336s ago: executing program 9 (id=2671): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)='3', 0x1}], 0x1, 0x800, 0x9) setuid(0xee01) 2.551668928s ago: executing program 7 (id=2673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2.448234414s ago: executing program 9 (id=2674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0xfffffffffffffdf4}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x40000000788, 0x0, 0x185, 0x400000002, 0x0, 0xee, 0x7ffffffe, 0x6, 0x1000045, 0xfffc, 0x6, 0xf, 0x9, 0xdda, 0xae], 0x26000, 0x80404}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.174729483s ago: executing program 7 (id=2676): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x6) syz_open_dev$video4linux(0x0, 0xff, 0x100082) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap(&(0x7f0000518000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x3a28d000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102368, 0x18fe0) gettid() timer_create(0x0, 0x0, &(0x7f0000019180)=0x0) timer_settime(r4, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000019200)=0x407) syz_open_dev$sndpcmp(&(0x7f0000019240), 0x0, 0x14b000) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat(0xffffffffffffff9c, &(0x7f0000019340)='.\x00', 0x0, 0x0) fchown(r5, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000019380)='.\x00', 0xffffffd3) capset(0x0, 0x0) 2.142476036s ago: executing program 5 (id=2677): setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = syz_io_uring_setup(0xa95, &(0x7f0000001a80)={0x0, 0x91c1, 0x400, 0x0, 0x16c}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 1.406627092s ago: executing program 7 (id=2678): r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x4, 0x2, {&(0x7f0000000180)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x8, 0x8, "fff30010"}, 0x3, 0x2, {&(0x7f0000000300)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000340)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000003c0)=0x1) 1.126237313s ago: executing program 5 (id=2679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000440)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000500)=0x84) getsockopt$bt_hci(r0, 0x84, 0x83, &(0x7f0000000680)=""/4130, &(0x7f00000016c0)=0x913) 788.134052ms ago: executing program 0 (id=2680): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000240), 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESOCT, @ANYRES32=0x0]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 601.31046ms ago: executing program 5 (id=2681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/18, 0x12}], 0x1, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 430.273905ms ago: executing program 9 (id=2682): pipe2$9p(&(0x7f0000000780), 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x80000001, 0x4) bind$inet6(r1, &(0x7f0000000700)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r0, &(0x7f0000000780), &(0x7f00000007c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r0, &(0x7f0000000840), &(0x7f0000000880)=@udp6=r1, 0x1}, 0x20) 310.925775ms ago: executing program 9 (id=2683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000f80)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000fc0)={0x2, 0x0, [{0x1b, 0x0, 0xfee00d00}, {0x832, 0x0, 0x40000}]}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000011c0)={0x1, 0x0, [{0x839}]}) 235.256316ms ago: executing program 5 (id=2684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000300), &(0x7f0000000380)=@udp=r0}, 0x20) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 131.896146ms ago: executing program 5 (id=2685): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000b00)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000b40)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x50) 99.893292ms ago: executing program 9 (id=2686): mknod$loop(&(0x7f0000001800)='./file0\x00', 0x1, 0x1) mkdir(&(0x7f0000001840)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./config\x00', &(0x7f00000018c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001900)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000001940)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001980)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f00000019c0)='file0', 0x5) 3.571289ms ago: executing program 8 (id=2687): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffff2e, 0xffffffff, 0x8001, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x80000000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4241, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x200000000, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000040)=0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) 0s ago: executing program 5 (id=2688): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240408c1) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): int descriptors, different from the interface descriptor's value: 3 [ 874.507696][ T5724] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.608671][ T10] usb 7-1: usb_control_msg returned -32 [ 874.608710][ T10] usbtmc 7-1:16.0: can't read capabilities [ 874.853187][T13458] FAULT_INJECTION: forcing a failure. [ 874.853187][T13458] name failslab, interval 1, probability 0, space 0, times 0 [ 874.853207][T13458] CPU: 0 UID: 0 PID: 13458 Comm: syz.5.2399 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.853223][T13458] Tainted: [L]=SOFTLOCKUP [ 874.853227][T13458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 874.853233][T13458] Call Trace: [ 874.853237][T13458] [ 874.853242][T13458] dump_stack_lvl+0x100/0x190 [ 874.853263][T13458] should_fail_ex.cold+0x5/0xa [ 874.853279][T13458] should_failslab+0xc2/0x120 [ 874.853293][T13458] kmem_cache_alloc_noprof+0x92/0x6a0 [ 874.853309][T13458] ? d_instantiate+0x8a/0xb0 [ 874.853324][T13458] ? alloc_empty_file+0x5b/0x1c0 [ 874.853341][T13458] alloc_empty_file+0x5b/0x1c0 [ 874.853356][T13458] alloc_file_pseudo+0x17e/0x290 [ 874.853371][T13458] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 874.853385][T13458] ? alloc_fd+0x471/0x7a0 [ 874.853399][T13458] ? do_raw_spin_unlock+0x145/0x1e0 [ 874.853411][T13458] __anon_inode_getfile+0xe8/0x280 [ 874.853425][T13458] anon_inode_getfile_fmode+0x37/0xa0 [ 874.853438][T13458] __do_sys_timerfd_create+0x31b/0x3f0 [ 874.853451][T13458] ? do_syscall_64+0xae/0x7b0 [ 874.853465][T13458] do_syscall_64+0x123/0x7b0 [ 874.853478][T13458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.853489][T13458] RIP: 0033:0x7fcdb33a8f19 [ 874.853498][T13458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.853508][T13458] RSP: 002b:00007fcdb4184028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 874.853518][T13458] RAX: ffffffffffffffda RBX: 00007fcdb3625fa0 RCX: 00007fcdb33a8f19 [ 874.853525][T13458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 874.853531][T13458] RBP: 00007fcdb3437f6d R08: 0000000000000000 R09: 0000000000000000 [ 874.853537][T13458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.853543][T13458] R13: 00007fcdb3626038 R14: 00007fcdb3625fa0 R15: 00007ffce441d878 [ 874.853557][T13458] [ 875.922910][ T5813] usb 7-1: USB disconnect, device number 22 [ 878.409328][T10856] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 878.409501][T10856] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 878.440190][T10856] usb 8-1: USB disconnect, device number 31 [ 878.485372][ T5813] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 878.651948][ T5813] usb 9-1: USB disconnect, device number 16 [ 879.263070][T13498] siw: device registration error -23 [ 879.457723][T13505] FAULT_INJECTION: forcing a failure. [ 879.457723][T13505] name failslab, interval 1, probability 0, space 0, times 0 [ 879.457742][T13505] CPU: 0 UID: 0 PID: 13505 Comm: syz.8.2412 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.457756][T13505] Tainted: [L]=SOFTLOCKUP [ 879.457760][T13505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 879.457766][T13505] Call Trace: [ 879.457770][T13505] [ 879.457775][T13505] dump_stack_lvl+0x100/0x190 [ 879.457797][T13505] should_fail_ex.cold+0x5/0xa [ 879.457814][T13505] should_failslab+0xc2/0x120 [ 879.457828][T13505] __kmalloc_cache_noprof+0x91/0x6d0 [ 879.457845][T13505] ? sysfs_init_fs_context+0xb4/0x780 [ 879.457865][T13505] sysfs_init_fs_context+0xb4/0x780 [ 879.457881][T13505] alloc_fs_context+0x607/0xf40 [ 879.457894][T13505] path_mount+0xf59/0x2850 [ 879.457912][T13505] ? __pfx_path_mount+0x10/0x10 [ 879.457926][T13505] ? lockdep_hardirqs_on+0x7d/0x110 [ 879.457941][T13505] ? putname+0xb1/0x110 [ 879.457954][T13505] ? kmem_cache_free+0x127/0x6c0 [ 879.457973][T13505] ? __x64_sys_mount+0x293/0x310 [ 879.457988][T13505] __x64_sys_mount+0x293/0x310 [ 879.458004][T13505] ? __pfx___x64_sys_mount+0x10/0x10 [ 879.458026][T13505] do_syscall_64+0x123/0x7b0 [ 879.458040][T13505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.458051][T13505] RIP: 0033:0x7f1976ba8f19 [ 879.458060][T13505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.458070][T13505] RSP: 002b:00007f1977a5f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 879.458080][T13505] RAX: ffffffffffffffda RBX: 00007f1976e25fa0 RCX: 00007f1976ba8f19 [ 879.458087][T13505] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 879.458093][T13505] RBP: 00007f1976c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 879.458099][T13505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.458105][T13505] R13: 00007f1976e26038 R14: 00007f1976e25fa0 R15: 00007fff884fd808 [ 879.458120][T13505] [ 879.816360][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 879.816371][ T31] audit: type=1800 audit(1794288011.609:3715): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2418" name="bus" dev="tmpfs" ino=2295 res=0 errno=-22 [ 879.849226][ T31] audit: type=1804 audit(1794288011.649:3716): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2418" name="/newroot/413/bus" dev="tmpfs" ino=2295 res=1 errno=0 [ 880.740063][T13523] gadgetfs: bound to dummy_udc driver [ 880.947119][T10856] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 881.623921][T13531] siw: device registration error -23 [ 881.687102][T10856] usb 9-1: Using ep0 maxpacket: 8 [ 881.689558][T10856] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 881.691365][T10856] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 881.691388][T10856] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 881.691400][T10856] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 881.691413][T10856] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 881.691425][T10856] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 881.691445][T10856] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.752475][ T31] audit: type=1800 audit(1794288013.559:3717): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220760 res=0 errno=-22 [ 881.806780][ T31] audit: type=1800 audit(1794288013.609:3718): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=220789 res=0 errno=-22 [ 881.806805][ T31] audit: type=1800 audit(1794288013.609:3719): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=220767 res=0 errno=-22 [ 881.806824][ T31] audit: type=1800 audit(1794288013.609:3720): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=220768 res=0 errno=-22 [ 881.880442][ T31] audit: type=1800 audit(1794288013.679:3721): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=220769 res=0 errno=-22 [ 881.921351][ T31] audit: type=1800 audit(1794288013.719:3722): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220809 res=0 errno=-22 [ 882.024103][T10856] usb 9-1: usb_control_msg returned -32 [ 882.024125][T10856] usbtmc 9-1:16.0: can't read capabilities [ 882.033533][ T31] audit: type=1800 audit(1794288013.829:3723): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220826 res=0 errno=-22 [ 882.228775][ T31] audit: type=1400 audit(1794288014.029:3724): avc: denied { mounton } for pid=13543 comm="syz.5.2430" path="/proc/1390/task" dev="proc" ino=41257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 882.459787][T13552] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 882.460838][T10856] usb 9-1: USB disconnect, device number 17 [ 882.657526][T13561] FAULT_INJECTION: forcing a failure. [ 882.657526][T13561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 882.657547][T13561] CPU: 0 UID: 0 PID: 13561 Comm: syz.7.2427 Tainted: G L syzkaller #0 PREEMPT(full) [ 882.657561][T13561] Tainted: [L]=SOFTLOCKUP [ 882.657564][T13561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 882.657570][T13561] Call Trace: [ 882.657574][T13561] [ 882.657578][T13561] dump_stack_lvl+0x100/0x190 [ 882.657599][T13561] should_fail_ex.cold+0x5/0xa [ 882.657616][T13561] should_fail_alloc_page+0xeb/0x140 [ 882.657632][T13561] prepare_alloc_pages+0x1f0/0x5b0 [ 882.657646][T13561] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 882.657662][T13561] ? __pfx_get_page_from_freelist+0x10/0x10 [ 882.657678][T13561] ? rcu_is_watching+0x13/0xc0 [ 882.657691][T13561] ? trace_mm_page_alloc+0x164/0x1c0 [ 882.657704][T13561] ? __alloc_frozen_pages_noprof+0x2f1/0x31e0 [ 882.657721][T13561] ? do_raw_spin_lock+0x128/0x260 [ 882.657731][T13561] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 882.657749][T13561] ? mark_held_locks+0x40/0x70 [ 882.657763][T13561] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 882.657775][T13561] ? lockdep_hardirqs_on+0x7d/0x110 [ 882.657787][T13561] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 882.657802][T13561] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 882.657822][T13561] ? __kasan_slab_alloc+0x89/0x90 [ 882.657833][T13561] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 882.657843][T13561] ? alloc_vmap_area+0x1829/0x2bc0 [ 882.657852][T13561] ? __get_vm_area_node+0x1ed/0x350 [ 882.657862][T13561] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 882.657874][T13561] ? __kvmalloc_node_noprof+0x3da/0x9b0 [ 882.657883][T13561] ? hash_ipmac_create+0x40b/0x1280 [ 882.657896][T13561] ? ip_set_create+0x6c4/0x1510 [ 882.657909][T13561] ? nfnetlink_rcv_msg+0x9d5/0x11e0 [ 882.657920][T13561] ? netlink_rcv_skb+0x159/0x420 [ 882.657933][T13561] ? nfnetlink_rcv+0x1b3/0x440 [ 882.657943][T13561] ? netlink_unicast+0x668/0x950 [ 882.657955][T13561] ? netlink_sendmsg+0x9ac/0x10c0 [ 882.657968][T13561] ? ____sys_sendmsg+0xa99/0xc30 [ 882.657989][T13561] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 882.658009][T13561] ? policy_nodemask+0xed/0x5e0 [ 882.658024][T13561] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 882.658047][T13561] __kasan_populate_vmalloc+0xf0/0x210 [ 882.658061][T13561] alloc_vmap_area+0x963/0x2bc0 [ 882.658076][T13561] ? kasan_save_track+0x14/0x30 [ 882.658087][T13561] ? __kasan_kmalloc+0xaa/0xb0 [ 882.658098][T13561] ? __pfx_alloc_vmap_area+0x10/0x10 [ 882.658109][T13561] ? __get_vm_area_node+0x124/0x350 [ 882.658121][T13561] __get_vm_area_node+0x1ed/0x350 [ 882.658141][T13561] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 882.658154][T13561] ? hash_ipmac_create+0x40b/0x1280 [ 882.658173][T13561] ? hash_ipmac_create+0x40b/0x1280 [ 882.658192][T13561] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 882.658207][T13561] ? rcu_is_watching+0x13/0xc0 [ 882.658224][T13561] __kvmalloc_node_noprof+0x3da/0x9b0 [ 882.658235][T13561] ? hash_ipmac_create+0x40b/0x1280 [ 882.658249][T13561] ? __kmalloc_noprof+0x350/0x840 [ 882.658259][T13561] ? __find_set_type_get+0x78/0x440 [ 882.658274][T13561] ? hash_ipmac_create+0x40b/0x1280 [ 882.658291][T13561] hash_ipmac_create+0x40b/0x1280 [ 882.658308][T13561] ? __pfx_hash_ipmac_create+0x10/0x10 [ 882.658322][T13561] ip_set_create+0x6c4/0x1510 [ 882.658340][T13561] ? __pfx_ip_set_create+0x10/0x10 [ 882.658353][T13561] ? nfnetlink_rcv_msg+0x8ad/0x11e0 [ 882.658373][T13561] ? find_held_lock+0x2b/0x80 [ 882.658389][T13561] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 882.658405][T13561] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 882.658417][T13561] ? __lock_acquire+0x5c0/0x1f40 [ 882.658445][T13561] ? avc_has_perm_noaudit+0x145/0x470 [ 882.658462][T13561] netlink_rcv_skb+0x159/0x420 [ 882.658476][T13561] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 882.658488][T13561] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 882.658509][T13561] ? ns_capable+0xcd/0xf0 [ 882.658522][T13561] nfnetlink_rcv+0x1b3/0x440 [ 882.658533][T13561] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 882.658543][T13561] ? netlink_deliver_tap+0x1ae/0xb50 [ 882.658560][T13561] netlink_unicast+0x668/0x950 [ 882.658575][T13561] ? __pfx_netlink_unicast+0x10/0x10 [ 882.658593][T13561] netlink_sendmsg+0x9ac/0x10c0 [ 882.658610][T13561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.658627][T13561] ? selinux_socket_sendmsg+0x198/0x2f0 [ 882.658644][T13561] ? ____sys_sendmsg+0xa99/0xc30 [ 882.658659][T13561] ____sys_sendmsg+0xa99/0xc30 [ 882.658673][T13561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.658689][T13561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 882.658712][T13561] ___sys_sendmsg+0x190/0x1e0 [ 882.658723][T13561] ? __pfx____sys_sendmsg+0x10/0x10 [ 882.658733][T13561] ? futex_wait+0x11e/0x370 [ 882.658754][T13561] ? find_held_lock+0x2b/0x80 [ 882.658774][T13561] __sys_sendmsg+0x160/0x210 [ 882.658788][T13561] ? __pfx___sys_sendmsg+0x10/0x10 [ 882.658809][T13561] do_syscall_64+0x123/0x7b0 [ 882.658823][T13561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.658834][T13561] RIP: 0033:0x7fa0455a8f19 [ 882.658843][T13561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.658853][T13561] RSP: 002b:00007fa0463a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 882.658864][T13561] RAX: ffffffffffffffda RBX: 00007fa045825fa0 RCX: 00007fa0455a8f19 [ 882.658880][T13561] RDX: 0000000000000040 RSI: 0000200000000380 RDI: 0000000000000004 [ 882.658886][T13561] RBP: 00007fa045637f6d R08: 0000000000000000 R09: 0000000000000000 [ 882.658892][T13561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.658898][T13561] R13: 00007fa045826038 R14: 00007fa045825fa0 R15: 00007ffcbe331ed8 [ 882.658913][T13561] [ 882.663193][T13561] syz.7.2427: vmalloc error: size 4194344, align 0x200000, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 882.663256][T13561] CPU: 0 UID: 0 PID: 13561 Comm: syz.7.2427 Tainted: G L syzkaller #0 PREEMPT(full) [ 882.663271][T13561] Tainted: [L]=SOFTLOCKUP [ 882.663276][T13561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 882.663282][T13561] Call Trace: [ 882.663286][T13561] [ 882.663290][T13561] dump_stack_lvl+0x100/0x190 [ 882.663310][T13561] warn_alloc.cold+0x9e/0xb2 [ 882.663323][T13561] ? __pfx_warn_alloc+0x10/0x10 [ 882.663338][T13561] ? lockdep_hardirqs_on+0x7d/0x110 [ 882.663352][T13561] ? __get_vm_area_node+0x2f0/0x350 [ 882.663367][T13561] ? __get_vm_area_node+0x22b/0x350 [ 882.663380][T13561] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 882.663397][T13561] ? hash_ipmac_create+0x40b/0x1280 [ 882.663415][T13561] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 882.663429][T13561] ? rcu_is_watching+0x13/0xc0 [ 882.663444][T13561] __kvmalloc_node_noprof+0x3da/0x9b0 [ 882.663455][T13561] ? hash_ipmac_create+0x40b/0x1280 [ 882.663467][T13561] ? __kmalloc_noprof+0x350/0x840 [ 882.663477][T13561] ? __find_set_type_get+0x78/0x440 [ 882.663490][T13561] ? hash_ipmac_create+0x40b/0x1280 [ 882.663506][T13561] hash_ipmac_create+0x40b/0x1280 [ 882.663521][T13561] ? __pfx_hash_ipmac_create+0x10/0x10 [ 882.663535][T13561] ip_set_create+0x6c4/0x1510 [ 882.663552][T13561] ? __pfx_ip_set_create+0x10/0x10 [ 882.663566][T13561] ? nfnetlink_rcv_msg+0x8ad/0x11e0 [ 882.663587][T13561] ? find_held_lock+0x2b/0x80 [ 882.663603][T13561] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 882.663618][T13561] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 882.663631][T13561] ? __lock_acquire+0x5c0/0x1f40 [ 882.663657][T13561] ? avc_has_perm_noaudit+0x145/0x470 [ 882.663675][T13561] netlink_rcv_skb+0x159/0x420 [ 882.663689][T13561] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 882.663700][T13561] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 882.663721][T13561] ? ns_capable+0xcd/0xf0 [ 882.663733][T13561] nfnetlink_rcv+0x1b3/0x440 [ 882.663744][T13561] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 882.663755][T13561] ? netlink_deliver_tap+0x1ae/0xb50 [ 882.663770][T13561] netlink_unicast+0x668/0x950 [ 882.663786][T13561] ? __pfx_netlink_unicast+0x10/0x10 [ 882.663804][T13561] netlink_sendmsg+0x9ac/0x10c0 [ 882.663821][T13561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.663838][T13561] ? selinux_socket_sendmsg+0x198/0x2f0 [ 882.663855][T13561] ? ____sys_sendmsg+0xa99/0xc30 [ 882.663870][T13561] ____sys_sendmsg+0xa99/0xc30 [ 882.663884][T13561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.663899][T13561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 882.663921][T13561] ___sys_sendmsg+0x190/0x1e0 [ 882.663932][T13561] ? __pfx____sys_sendmsg+0x10/0x10 [ 882.663942][T13561] ? futex_wait+0x11e/0x370 [ 882.663961][T13561] ? find_held_lock+0x2b/0x80 [ 882.663981][T13561] __sys_sendmsg+0x160/0x210 [ 882.663994][T13561] ? __pfx___sys_sendmsg+0x10/0x10 [ 882.664015][T13561] do_syscall_64+0x123/0x7b0 [ 882.664032][T13561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.664042][T13561] RIP: 0033:0x7fa0455a8f19 [ 882.664051][T13561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.664062][T13561] RSP: 002b:00007fa0463a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 882.664072][T13561] RAX: ffffffffffffffda RBX: 00007fa045825fa0 RCX: 00007fa0455a8f19 [ 882.664079][T13561] RDX: 0000000000000040 RSI: 0000200000000380 RDI: 0000000000000004 [ 882.664086][T13561] RBP: 00007fa045637f6d R08: 0000000000000000 R09: 0000000000000000 [ 882.664092][T13561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.664098][T13561] R13: 00007fa045826038 R14: 00007fa045825fa0 R15: 00007ffcbe331ed8 [ 882.664112][T13561] [ 882.666728][T13561] Mem-Info: [ 882.666735][T13561] active_anon:8768 inactive_anon:13 isolated_anon:0 [ 882.666735][T13561] active_file:23613 inactive_file:39291 isolated_file:0 [ 882.666735][T13561] unevictable:0 dirty:534 writeback:0 [ 882.666735][T13561] slab_reclaimable:13758 slab_unreclaimable:108208 [ 882.666735][T13561] mapped:30894 shmem:550 pagetables:1591 [ 882.666735][T13561] sec_pagetables:0 bounce:0 [ 882.666735][T13561] kernel_misc_reclaimable:0 [ 882.666735][T13561] free:1258429 free_pcp:26897 free_cma:0 [ 882.666762][T13561] Node 0 active_anon:35072kB inactive_anon:52kB active_file:94388kB inactive_file:156968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123524kB dirty:2136kB writeback:0kB shmem:2200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13760kB pagetables:6248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 882.666791][T13561] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 882.666818][T13561] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 882.666847][T13561] lowmem_reserve[]: 0 2447 2449 2449 2449 [ 882.666866][T13561] Node 0 DMA32 free:1072140kB boost:0kB min:33784kB low:42228kB high:50672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35072kB inactive_anon:52kB active_file:94388kB inactive_file:156968kB unevictable:0kB writepending:2136kB zspages:0kB present:3129332kB managed:2506148kB mlocked:0kB bounce:0kB free_pcp:107588kB local_pcp:107588kB free_cma:0kB [ 882.666895][T13561] lowmem_reserve[]: 0 0 1 1 1 [ 882.666911][T13561] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1748kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 882.666937][T13561] lowmem_reserve[]: 0 0 [ 882.748253][ T5724] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 882.796627][T13561] 0 0 0 [ 882.796643][T13561] Node 1 Normal free:3946216kB boost:0kB min:56092kB low:70112kB high:84132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 882.796674][T13561] lowmem_reserve[]: 0 0 0 0 0 [ 882.796692][T13561] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 882.796751][T13561] Node 0 DMA32: 977*4kB (UME) 627*8kB (UME) 1107*16kB (UME) 1825*32kB (UME) 1128*64kB (UME) 432*128kB (UME) 173*256kB (UME) 98*512kB (UME) 47*1024kB (UM) 24*2048kB (ME) 163*4096kB (UM) = 1071916kB [ 882.796836][T13561] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 882.796885][T13561] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 6*16kB (U) 9*32kB (U) 9*64kB (UM) 6*128kB (UM) 6*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3946216kB [ 882.797122][T13561] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 882.797131][T13561] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 882.797145][T13561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 882.797153][T13561] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 882.797160][T13561] 63454 total pagecache pages [ 882.797164][T13561] 6 pages in swap cache [ 882.797167][T13561] Free swap = 124972kB [ 882.797171][T13561] Total swap = 124996kB [ 882.797175][T13561] 2097051 pages RAM [ 882.797178][T13561] 0 pages HighMem/MovableOnly [ 882.797182][T13561] 438461 pages reserved [ 882.797185][T13561] 0 pages cma reserved [ 882.924482][ T5724] usb 7-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 882.925360][ T5724] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 882.925373][ T5724] usb 7-1: config 0 has no interface number 0 [ 882.925390][ T5724] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 883.056850][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.056864][ T5724] usb 7-1: Product: syz [ 883.056871][ T5724] usb 7-1: Manufacturer: syz [ 883.056879][ T5724] usb 7-1: SerialNumber: syz [ 883.162548][ T5724] usb 7-1: config 0 descriptor?? [ 883.852405][ T5724] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 884.390891][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 884.392338][ T5724] usb 7-1: USB disconnect, device number 23 [ 884.434819][ T5724] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 884.539312][ T5905] Bluetooth: hci1: Frame reassembly failed (-84) [ 885.562762][ T31] kauditd_printk_skb: 469 callbacks suppressed [ 885.562773][ T31] audit: type=1800 audit(1794288017.359:4194): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221125 res=0 errno=-22 [ 885.903443][ T5724] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 886.567288][ T5632] Bluetooth: hci1: command 0x1003 tx timeout [ 886.568103][T12688] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 886.751770][ T5724] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 886.804248][ T5724] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.804266][ T5724] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.804277][ T5724] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 886.804298][ T5724] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.984047][ T5724] usb 8-1: config 0 descriptor?? [ 887.026179][ T31] audit: type=1800 audit(1794288018.819:4195): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221152 res=0 errno=-22 [ 887.870836][ T31] audit: type=1800 audit(1794288019.669:4196): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=221181 res=0 errno=-22 [ 887.874398][ T31] audit: type=1800 audit(1794288019.669:4197): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=221159 res=0 errno=-22 [ 887.877699][ T31] audit: type=1800 audit(1794288019.669:4198): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=221160 res=0 errno=-22 [ 887.952580][ T31] audit: type=1800 audit(1794288019.759:4199): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=221161 res=0 errno=-22 [ 888.000505][ T31] audit: type=1800 audit(1794288019.799:4200): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221201 res=0 errno=-22 [ 888.050615][ T31] audit: type=1800 audit(1794288019.859:4201): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15640 res=0 errno=-22 [ 888.080046][ T31] audit: type=1800 audit(1794288019.879:4202): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221219 res=0 errno=-22 [ 888.083088][ T5724] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 888.160269][ T31] audit: type=1800 audit(1794288019.959:4203): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221241 res=0 errno=-22 [ 888.198295][ T5724] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 888.381758][T13618] FAULT_INJECTION: forcing a failure. [ 888.381758][T13618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 888.381792][T13618] CPU: 0 UID: 0 PID: 13618 Comm: syz.6.2455 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.381807][T13618] Tainted: [L]=SOFTLOCKUP [ 888.381811][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 888.381818][T13618] Call Trace: [ 888.381822][T13618] [ 888.381827][T13618] dump_stack_lvl+0x100/0x190 [ 888.381849][T13618] should_fail_ex.cold+0x5/0xa [ 888.381865][T13618] should_fail_alloc_page+0xeb/0x140 [ 888.381880][T13618] prepare_alloc_pages+0x1f0/0x5b0 [ 888.381894][T13618] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 888.381914][T13618] ? lock_acquire+0x1d1/0x380 [ 888.381928][T13618] ? validate_mm+0x3f7/0x780 [ 888.381944][T13618] ? mas_next_slot+0xc05/0x13a0 [ 888.381960][T13618] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 888.381981][T13618] ? mas_find+0x2cb/0x790 [ 888.381996][T13618] ? validate_mm+0x59e/0x780 [ 888.382016][T13618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 888.382034][T13618] ? policy_nodemask+0xed/0x5e0 [ 888.382048][T13618] alloc_pages_mpol+0x201/0x560 [ 888.382062][T13618] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 888.382075][T13618] ? __pfx_vma_link+0x10/0x10 [ 888.382091][T13618] alloc_pages_noprof+0x1a/0x160 [ 888.382106][T13618] pte_alloc_one+0x1c/0x3d0 [ 888.382124][T13618] __pte_alloc+0x6d/0x3e0 [ 888.382140][T13618] ? __pfx___pte_alloc+0x10/0x10 [ 888.382155][T13618] ? __pfx___might_resched+0x10/0x10 [ 888.382169][T13618] ? move_page_tables+0x3f8/0x3f20 [ 888.382185][T13618] ? alloc_new_pud+0x217/0x320 [ 888.382199][T13618] move_page_tables+0x18bd/0x3f20 [ 888.382218][T13618] ? __pfx_copy_vma+0x10/0x10 [ 888.382238][T13618] ? __pfx_move_page_tables+0x10/0x10 [ 888.382261][T13618] ? lock_acquire+0x1d1/0x380 [ 888.382274][T13618] ? __vma_start_write+0x11c/0x280 [ 888.382288][T13618] copy_vma_and_data+0x31d/0x850 [ 888.382304][T13618] ? __pfx_copy_vma_and_data+0x10/0x10 [ 888.382325][T13618] ? __vma_start_write+0x17f/0x280 [ 888.382335][T13618] ? __pfx___vma_start_write+0x10/0x10 [ 888.382349][T13618] move_vma+0x2a0/0x11e0 [ 888.382363][T13618] ? shmem_get_unmapped_area+0x141/0x960 [ 888.382380][T13618] ? __pfx_move_vma+0x10/0x10 [ 888.382393][T13618] ? security_mmap_addr+0x71/0x1e0 [ 888.382405][T13618] ? __get_unmapped_area+0x255/0x3e0 [ 888.382417][T13618] ? vrm_set_new_addr+0x1f5/0x2a0 [ 888.382432][T13618] mremap_to+0x234/0x530 [ 888.382446][T13618] ? __pfx_mremap_to+0x10/0x10 [ 888.382463][T13618] __do_sys_mremap+0xc6b/0x17f0 [ 888.382480][T13618] ? __pfx_futex_wait+0x10/0x10 [ 888.382495][T13618] ? __pfx___do_sys_mremap+0x10/0x10 [ 888.382510][T13618] ? rcu_read_lock_any_held+0x6a/0x90 [ 888.382524][T13618] ? ksys_write+0x190/0x250 [ 888.382538][T13618] ? do_futex+0x190/0x440 [ 888.382551][T13618] ? __pfx_do_futex+0x10/0x10 [ 888.382570][T13618] ? xfd_validate_state+0x129/0x190 [ 888.382589][T13618] do_syscall_64+0x123/0x7b0 [ 888.382603][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.382614][T13618] RIP: 0033:0x7fc1c1ba8f19 [ 888.382623][T13618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.382633][T13618] RSP: 002b:00007fc1c2aac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 888.382643][T13618] RAX: ffffffffffffffda RBX: 00007fc1c1e25fa0 RCX: 00007fc1c1ba8f19 [ 888.382650][T13618] RDX: 0000000000600000 RSI: 0000000000009000 RDI: 0000200000000000 [ 888.382656][T13618] RBP: 00007fc1c1c37f6d R08: 0000200000a00000 R09: 0000000000000000 [ 888.382663][T13618] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 888.382668][T13618] R13: 00007fc1c1e26038 R14: 00007fc1c1e25fa0 R15: 00007ffdee8275a8 [ 888.382683][T13618] [ 889.400526][ C0] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1 [ 889.549913][T13639] FAULT_INJECTION: forcing a failure. [ 889.549913][T13639] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 889.549933][T13639] CPU: 0 UID: 0 PID: 13639 Comm: syz.7.2463 Tainted: G L syzkaller #0 PREEMPT(full) [ 889.549949][T13639] Tainted: [L]=SOFTLOCKUP [ 889.549953][T13639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 889.549959][T13639] Call Trace: [ 889.549964][T13639] [ 889.549969][T13639] dump_stack_lvl+0x100/0x190 [ 889.549989][T13639] should_fail_ex.cold+0x5/0xa [ 889.550006][T13639] _copy_from_user+0x2e/0xd0 [ 889.550022][T13639] copy_msghdr_from_user+0x9f/0x4c0 [ 889.550033][T13639] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 889.550047][T13639] ? rcu_is_watching+0x13/0xc0 [ 889.550058][T13639] ? ___sys_sendmsg+0x19d/0x1e0 [ 889.550067][T13639] ? kfree+0x1e5/0x6d0 [ 889.550084][T13639] ___sys_sendmsg+0x106/0x1e0 [ 889.550096][T13639] ? __pfx____sys_sendmsg+0x10/0x10 [ 889.550118][T13639] ? __fget_files+0x34/0x3d0 [ 889.550137][T13639] ? __pfx___might_resched+0x10/0x10 [ 889.550155][T13639] __sys_sendmmsg+0x20c/0x440 [ 889.550171][T13639] ? __pfx___sys_sendmmsg+0x10/0x10 [ 889.550189][T13639] ? __pfx_do_futex+0x10/0x10 [ 889.550209][T13639] ? xfd_validate_state+0x129/0x190 [ 889.550227][T13639] __x64_sys_sendmmsg+0x9c/0x100 [ 889.550242][T13639] ? lockdep_hardirqs_on+0x7d/0x110 [ 889.550255][T13639] do_syscall_64+0x123/0x7b0 [ 889.550268][T13639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.550279][T13639] RIP: 0033:0x7fa0455a8f19 [ 889.550288][T13639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.550298][T13639] RSP: 002b:00007fa0463a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 889.550308][T13639] RAX: ffffffffffffffda RBX: 00007fa045825fa0 RCX: 00007fa0455a8f19 [ 889.550315][T13639] RDX: 00000000040001b6 RSI: 0000200000000300 RDI: 0000000000000004 [ 889.550321][T13639] RBP: 00007fa045637f6d R08: 0000000000000000 R09: 0000000000000000 [ 889.550327][T13639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.550333][T13639] R13: 00007fa045826038 R14: 00007fa045825fa0 R15: 00007ffcbe331ed8 [ 889.550347][T13639] [ 891.929514][T10856] usb 8-1: USB disconnect, device number 32 [ 891.954776][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 891.954786][ T31] audit: type=1800 audit(1794288023.749:4208): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15640 res=0 errno=-22 [ 892.415987][ T31] audit: type=1800 audit(1794288024.209:4209): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2472" name="bus" dev="tmpfs" ino=3038 res=0 errno=-22 [ 892.416549][ T31] audit: type=1804 audit(1794288024.209:4210): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2472" name="/newroot/550/bus" dev="tmpfs" ino=3038 res=1 errno=0 [ 893.438499][ T1209] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 893.731611][ T31] audit: type=1800 audit(1794288025.529:4211): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221559 res=0 errno=-22 [ 893.754998][ T31] audit: type=1800 audit(1794288025.559:4212): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221569 res=0 errno=-22 [ 893.798184][ T1209] usb 8-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 893.810427][ T1209] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.810450][ T1209] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.810470][ T1209] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.849780][ T31] audit: type=1800 audit(1794288025.649:4213): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221588 res=0 errno=-22 [ 893.882578][ T31] audit: type=1800 audit(1794288025.679:4214): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=221617 res=0 errno=-22 [ 893.882603][ T31] audit: type=1800 audit(1794288025.679:4215): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=221595 res=0 errno=-22 [ 893.883201][ T31] audit: type=1800 audit(1794288025.679:4216): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=221596 res=0 errno=-22 [ 893.959603][ T31] audit: type=1800 audit(1794288025.759:4217): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=221597 res=0 errno=-22 [ 894.849021][T13672] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 895.400466][T13661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 895.431608][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 895.431627][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 895.432258][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 895.433897][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 895.435134][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 895.435532][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 895.480470][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 895.492511][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 895.493582][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 895.507630][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 895.530112][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 895.542862][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 895.564953][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 895.578287][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 895.604480][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 895.615985][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 895.628551][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 895.628889][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 895.629890][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 895.630263][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 895.630966][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 895.631518][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 895.633705][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 895.634798][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 895.635056][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 895.635877][ T1209] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 895.803494][ T1209] ax88179_178a 8-1:1.0 eth13: register 'ax88179_178a' at usb-dummy_hcd.7-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 76:78:d3:d2:75:df [ 895.824356][ T1209] usb 8-1: USB disconnect, device number 33 [ 895.838123][ T1209] ax88179_178a 8-1:1.0 eth13: unregister 'ax88179_178a' usb-dummy_hcd.7-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 898.901249][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 898.901260][ T31] audit: type=1800 audit(1794288030.699:4224): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15640 res=0 errno=-22 [ 899.548080][T13726] SELinux: DCCP has been removed, pid=13726 comm=syz.8.2485 [ 899.548804][T13726] netlink: 'syz.8.2485': attribute type 12 has an invalid length. [ 899.548814][T13726] netlink: 'syz.8.2485': attribute type 29 has an invalid length. [ 899.548820][T13726] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2485'. [ 899.548828][T13726] netlink: 'syz.8.2485': attribute type 1 has an invalid length. [ 899.548834][T13726] netlink: 'syz.8.2485': attribute type 2 has an invalid length. [ 899.548841][T13726] netlink: 11 bytes leftover after parsing attributes in process `syz.8.2485'. [ 899.683549][T13730] fuse: Bad value for 'fd' [ 899.736853][ T31] audit: type=1800 audit(1794288031.529:4225): pid=13732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2496" name="bus" dev="tmpfs" ino=1748 res=0 errno=-22 [ 899.766291][ T31] audit: type=1804 audit(1794288031.569:4226): pid=13732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.2496" name="/newroot/321/bus" dev="tmpfs" ino=1748 res=1 errno=0 [ 899.789220][ T1209] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 900.488301][ T1209] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 900.499098][ T1209] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.499115][ T1209] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.499127][ T1209] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 900.499147][ T1209] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.549761][ T1209] usb 8-1: config 0 descriptor?? [ 900.563215][ T31] audit: type=1800 audit(1794288032.359:4227): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221873 res=0 errno=-22 [ 900.593353][ T31] audit: type=1800 audit(1794288032.389:4228): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=221902 res=0 errno=-22 [ 900.593379][ T31] audit: type=1800 audit(1794288032.389:4229): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=221880 res=0 errno=-22 [ 900.593397][ T31] audit: type=1800 audit(1794288032.389:4230): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=221881 res=0 errno=-22 [ 900.666851][ T31] audit: type=1800 audit(1794288032.469:4231): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=221882 res=0 errno=-22 [ 900.726808][ T31] audit: type=1800 audit(1794288032.519:4232): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221922 res=0 errno=-22 [ 900.986771][ T31] audit: type=1800 audit(1794288032.779:4233): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221940 res=0 errno=-22 [ 901.038892][ T1209] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 902.033793][T13755] siw: device registration error -23 [ 902.126543][ T1209] usb 8-1: USB disconnect, device number 34 [ 903.867988][T13767] siw: device registration error -23 [ 904.283895][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 904.283907][ T31] audit: type=1326 audit(1794288036.079:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13774 comm="syz.5.2513" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb33a8f19 code=0x7fc00000 [ 904.330303][ T31] audit: type=1326 audit(1794288036.129:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13774 comm="syz.5.2513" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fcdb33a8f19 code=0x7fc00000 [ 904.363153][ T31] audit: type=1326 audit(1794288036.169:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13774 comm="syz.5.2513" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb33a8f19 code=0x7fc00000 [ 904.508359][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 904.513508][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 904.514602][ T31] audit: type=1800 audit(1794288036.309:4242): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222074 res=0 errno=-22 [ 904.514710][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 904.516376][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 904.555855][ T31] audit: type=1800 audit(1794288036.359:4243): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222085 res=0 errno=-22 [ 904.563543][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 904.631217][ T31] audit: type=1800 audit(1794288036.429:4244): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222115 res=0 errno=-22 [ 904.633798][ T31] audit: type=1800 audit(1794288036.429:4245): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222104 res=0 errno=-22 [ 904.904034][ T31] audit: type=1800 audit(1794288036.699:4246): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2518" name="bus" dev="tmpfs" ino=3284 res=0 errno=-22 [ 904.933449][ T31] audit: type=1804 audit(1794288036.739:4247): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2518" name="/newroot/599/bus" dev="tmpfs" ino=3284 res=1 errno=0 [ 905.820700][T13800] FAULT_INJECTION: forcing a failure. [ 905.820700][T13800] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 905.820719][T13800] CPU: 0 UID: 0 PID: 13800 Comm: syz.8.2522 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.820735][T13800] Tainted: [L]=SOFTLOCKUP [ 905.820738][T13800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 905.820744][T13800] Call Trace: [ 905.820748][T13800] [ 905.820752][T13800] dump_stack_lvl+0x100/0x190 [ 905.820774][T13800] should_fail_ex.cold+0x5/0xa [ 905.820791][T13800] should_fail_alloc_page+0xeb/0x140 [ 905.820807][T13800] prepare_alloc_pages+0x1f0/0x5b0 [ 905.820822][T13800] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 905.820839][T13800] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 905.820856][T13800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 905.820873][T13800] ? rb_read_data_buffer.isra.0+0x174/0x470 [ 905.820891][T13800] ? check_buffer+0x13f/0x820 [ 905.820905][T13800] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 905.820922][T13800] ? __pfx_check_buffer+0x10/0x10 [ 905.820936][T13800] ? process_measurement+0x10d6/0x2360 [ 905.820949][T13800] ? stack_trace_save+0x8e/0xc0 [ 905.820962][T13800] ? __pfx_stack_trace_save+0x10/0x10 [ 905.820977][T13800] ? __pfx_trace_clock_local+0x10/0x10 [ 905.820988][T13800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 905.821006][T13800] ? rb_read_data_buffer.isra.0+0x174/0x470 [ 905.821023][T13800] ? check_buffer+0x13f/0x820 [ 905.821039][T13800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 905.821062][T13800] ? policy_nodemask+0xed/0x5e0 [ 905.821076][T13800] alloc_pages_mpol+0x201/0x560 [ 905.821091][T13800] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 905.821104][T13800] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 905.821125][T13800] folio_alloc_mpol_noprof+0x36/0x260 [ 905.821141][T13800] shmem_alloc_folio+0x135/0x160 [ 905.821159][T13800] shmem_alloc_and_add_folio+0x371/0xd40 [ 905.821174][T13800] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 905.821188][T13800] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 905.821204][T13800] shmem_get_folio_gfp+0x758/0x1af0 [ 905.821220][T13800] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 905.821234][T13800] ? filemap_map_pages+0x1155/0x1f10 [ 905.821253][T13800] shmem_fault+0x1fb/0xa30 [ 905.821265][T13800] ? __pfx_shmem_fault+0x10/0x10 [ 905.821277][T13800] ? __pte_offset_map+0x9a/0x470 [ 905.821293][T13800] ? __pfx_filemap_map_pages+0x10/0x10 [ 905.821311][T13800] ? find_held_lock+0x2b/0x80 [ 905.821324][T13800] ? __pfx_filemap_map_pages+0x10/0x10 [ 905.821339][T13800] __do_fault+0x10b/0x440 [ 905.821354][T13800] do_fault+0xb3f/0x1890 [ 905.821366][T13800] ? __pfx_do_fault+0x10/0x10 [ 905.821375][T13800] ? rcu_read_unlock+0x2d/0xb0 [ 905.821387][T13800] ? rcu_read_unlock+0x2d/0xb0 [ 905.821402][T13800] __handle_mm_fault+0x1858/0x2f40 [ 905.821418][T13800] ? __pfx___handle_mm_fault+0x10/0x10 [ 905.821430][T13800] ? __pfx_mt_find+0x10/0x10 [ 905.821453][T13800] ? find_vma+0xbf/0x140 [ 905.821467][T13800] ? __pfx_find_vma+0x10/0x10 [ 905.821484][T13800] handle_mm_fault+0x363/0xa30 [ 905.821499][T13800] do_user_addr_fault+0x745/0x12f0 [ 905.821519][T13800] exc_page_fault+0x6f/0xd0 [ 905.821532][T13800] asm_exc_page_fault+0x26/0x30 [ 905.821543][T13800] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 905.821559][T13800] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 bf bd 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 905.821570][T13800] RSP: 0018:ffffc90005477e08 EFLAGS: 00050206 [ 905.821579][T13800] RAX: 0000000000000001 RBX: 0000200000000100 RCX: 0000000000000100 [ 905.821586][T13800] RDX: 0000000000000001 RSI: 0000200000001000 RDI: ffff888048704f00 [ 905.821592][T13800] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10090e09ff [ 905.821598][T13800] R10: ffff888048704fff R11: 0000000000000000 R12: 0000000000000000 [ 905.821604][T13800] R13: ffff888048704000 R14: 1ffff92000a8efcf R15: 0000000000000000 [ 905.821618][T13800] _copy_from_user+0x98/0xd0 [ 905.821635][T13800] copy_mount_options+0x76/0x190 [ 905.821649][T13800] __x64_sys_mount+0x1ab/0x310 [ 905.821666][T13800] ? __pfx___x64_sys_mount+0x10/0x10 [ 905.821687][T13800] do_syscall_64+0x123/0x7b0 [ 905.821703][T13800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.821714][T13800] RIP: 0033:0x7f1976ba8f19 [ 905.821723][T13800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.821732][T13800] RSP: 002b:00007f1977a5f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 905.821742][T13800] RAX: ffffffffffffffda RBX: 00007f1976e25fa0 RCX: 00007f1976ba8f19 [ 905.821748][T13800] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 905.821754][T13800] RBP: 00007f1976c37f6d R08: 0000200000000100 R09: 0000000000000000 [ 905.821760][T13800] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000000 [ 905.821766][T13800] R13: 00007f1976e26038 R14: 00007f1976e25fa0 R15: 00007fff884fd808 [ 905.821781][T13800] [ 906.647220][T12688] Bluetooth: hci1: command tx timeout [ 906.960264][T13815] FAULT_INJECTION: forcing a failure. [ 906.960264][T13815] name failslab, interval 1, probability 0, space 0, times 0 [ 906.960284][T13815] CPU: 0 UID: 0 PID: 13815 Comm: syz.8.2526 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.960298][T13815] Tainted: [L]=SOFTLOCKUP [ 906.960303][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 906.960309][T13815] Call Trace: [ 906.960313][T13815] [ 906.960318][T13815] dump_stack_lvl+0x100/0x190 [ 906.960338][T13815] should_fail_ex.cold+0x5/0xa [ 906.960355][T13815] should_failslab+0xc2/0x120 [ 906.960368][T13815] __kmalloc_cache_noprof+0x91/0x6d0 [ 906.960384][T13815] ? __debugfs_file_get+0x2ac/0x860 [ 906.960396][T13815] __debugfs_file_get+0x2ac/0x860 [ 906.960406][T13815] ? __pfx___debugfs_file_get+0x10/0x10 [ 906.960421][T13815] ? __pfx_selinux_file_open+0x10/0x10 [ 906.960436][T13815] open_proxy_open+0x7e/0x330 [ 906.960448][T13815] do_dentry_open+0x674/0x1470 [ 906.960459][T13815] ? __pfx_open_proxy_open+0x10/0x10 [ 906.960475][T13815] vfs_open_consume+0xcc/0x460 [ 906.960492][T13815] path_openat+0x1547/0x23f0 [ 906.960507][T13815] ? __pfx_path_openat+0x10/0x10 [ 906.960525][T13815] do_file_open+0x20e/0x430 [ 906.960539][T13815] ? __pfx_do_file_open+0x10/0x10 [ 906.960563][T13815] ? _raw_spin_unlock+0x28/0x50 [ 906.960574][T13815] ? alloc_fd+0x471/0x7a0 [ 906.960591][T13815] do_sys_openat2+0x163/0x1d0 [ 906.960605][T13815] ? __pfx_do_sys_openat2+0x10/0x10 [ 906.960620][T13815] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 906.960638][T13815] __x64_sys_openat+0x12d/0x210 [ 906.960652][T13815] ? __pfx___x64_sys_openat+0x10/0x10 [ 906.960672][T13815] do_syscall_64+0x123/0x7b0 [ 906.960686][T13815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.960697][T13815] RIP: 0033:0x7f1976ba8f19 [ 906.960707][T13815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.960717][T13815] RSP: 002b:00007f1977a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 906.960728][T13815] RAX: ffffffffffffffda RBX: 00007f1976e25fa0 RCX: 00007f1976ba8f19 [ 906.960735][T13815] RDX: 0000000000000002 RSI: 00002000000046c0 RDI: ffffffffffffff9c [ 906.960741][T13815] RBP: 00007f1976c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 906.960747][T13815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.960753][T13815] R13: 00007f1976e26038 R14: 00007f1976e25fa0 R15: 00007fff884fd808 [ 906.960767][T13815] [ 907.256679][T13779] rxe_eth0 speed is unknown, defaulting to 1000 [ 907.294792][ T31] audit: type=1400 audit(1794288039.089:4248): avc: denied { read } for pid=13818 comm="syz.0.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 907.407269][T13820] loop6: detected capacity change from 0 to 2640 [ 907.407538][T13820] buffer_io_error: 6 callbacks suppressed [ 907.407546][T13820] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.407563][T13820] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.407578][T13820] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.407592][T13820] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.407606][T13820] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.407627][T13820] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.407646][T13820] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.407660][T13820] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.407668][T13820] ldm_validate_partition_table(): Disk read failed. [ 907.407681][T13820] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.407695][T13820] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.407716][T13820] Dev loop6: unable to read RDB block 0 [ 907.407781][T13820] loop6: unable to read partition table [ 907.407865][T13820] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 908.057804][ T1209] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 908.124941][ T1408] bridge_slave_1: left allmulticast mode [ 908.125065][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.151158][ T1408] bridge_slave_0: left allmulticast mode [ 908.151260][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.184006][ T1408] dvmrp0: left allmulticast mode [ 908.212964][ T1209] usb 9-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 908.217781][ T1209] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 908.217795][ T1209] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 908.217806][ T1209] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 908.217826][ T1209] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 908.217839][ T1209] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 908.297101][ T1209] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 908.297116][ T1209] usb 9-1: Product: syz [ 908.297124][ T1209] usb 9-1: Manufacturer: syz [ 908.328391][ T1209] cdc_wdm 9-1:1.0: skipping garbage [ 908.328403][ T1209] cdc_wdm 9-1:1.0: skipping garbage [ 908.332285][ T1209] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 908.332296][ T1209] cdc_wdm 9-1:1.0: Unknown control protocol [ 908.727169][T12688] Bluetooth: hci1: command tx timeout [ 910.379044][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 910.379057][ T31] audit: type=1400 audit(1794288042.179:4281): avc: denied { read write } for pid=13821 comm="syz.8.2529" name="cdc-wdm0" dev="devtmpfs" ino=3245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 910.379081][ T31] audit: type=1400 audit(1794288042.179:4282): avc: denied { open } for pid=13821 comm="syz.8.2529" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 910.629909][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.651929][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.669632][ T1408] bond0 (unregistering): Released all slaves [ 910.711828][T13779] ±ÿ speed is unknown, defaulting to 1000 [ 910.731805][T13779] hsr0 speed is unknown, defaulting to 1000 [ 910.760817][ C0] cdc_wdm 9-1:1.0: Unexpected error -71 [ 910.761214][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 910.761261][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 910.761429][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 910.761439][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 910.761598][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 910.761606][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 910.761776][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 910.761785][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 910.761945][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 910.761953][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 910.762113][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 910.762122][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 910.762280][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 910.762289][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 910.762449][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 910.762458][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 910.762621][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 910.762629][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 910.762791][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 910.762800][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 910.775159][ T5724] usb 9-1: USB disconnect, device number 18 [ 910.775278][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 910.807836][T12688] Bluetooth: hci1: command tx timeout [ 910.981962][ T1408] tipc: Disabling bearer [ 910.982092][ T1408] tipc: Left network mode [ 911.192597][ T31] audit: type=1400 audit(1794288042.989:4283): avc: denied { write } for pid=13835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 911.224456][T13858] FAULT_INJECTION: forcing a failure. [ 911.224456][T13858] name failslab, interval 1, probability 0, space 0, times 0 [ 911.224473][T13858] CPU: 0 UID: 0 PID: 13858 Comm: syz.5.2539 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.224487][T13858] Tainted: [L]=SOFTLOCKUP [ 911.224491][T13858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 911.224496][T13858] Call Trace: [ 911.224501][T13858] [ 911.224505][T13858] dump_stack_lvl+0x100/0x190 [ 911.224528][T13858] should_fail_ex.cold+0x5/0xa [ 911.224544][T13858] should_failslab+0xc2/0x120 [ 911.224558][T13858] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 911.224571][T13858] ? kstrdup_const+0x63/0x80 [ 911.224586][T13858] kstrdup+0x51/0xe0 [ 911.224598][T13858] kstrdup_const+0x63/0x80 [ 911.224609][T13858] __kernfs_new_node+0x9b/0xa10 [ 911.224620][T13858] ? lock_acquire+0x1d1/0x380 [ 911.224637][T13858] ? __pfx___kernfs_new_node+0x10/0x10 [ 911.224649][T13858] ? lock_acquire+0x1d1/0x380 [ 911.224662][T13858] ? kernfs_root+0x23/0x2a0 [ 911.224678][T13858] ? find_held_lock+0x2b/0x80 [ 911.224689][T13858] ? kernfs_root+0xee/0x2a0 [ 911.224704][T13858] ? kernfs_root+0xee/0x2a0 [ 911.224722][T13858] kernfs_new_node+0x194/0x200 [ 911.224735][T13858] ? __pfx_kernfs_new_node+0x10/0x10 [ 911.224748][T13858] ? kernfs_add_one+0x213/0xb40 [ 911.224762][T13858] __kernfs_create_file+0x53/0x350 [ 911.224778][T13858] cgroup_addrm_files+0x48e/0xd30 [ 911.224795][T13858] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 911.224812][T13858] ? css_next_descendant_pre+0x58/0x1a0 [ 911.224829][T13858] css_populate_dir+0x161/0x590 [ 911.224843][T13858] cgroup_apply_control_enable+0x441/0xdd0 [ 911.224863][T13858] cgroup_mkdir+0x9da/0x13a0 [ 911.224876][T13858] ? __pfx_cgroup_mkdir+0x10/0x10 [ 911.224886][T13858] kernfs_iop_mkdir+0x111/0x190 [ 911.224897][T13858] ? security_inode_mkdir+0xc9/0x2b0 [ 911.224910][T13858] vfs_mkdir+0x36d/0x8a0 [ 911.224923][T13858] filename_mkdirat+0x4c4/0x630 [ 911.224938][T13858] ? __pfx_filename_mkdirat+0x10/0x10 [ 911.224955][T13858] ? strncpy_from_user+0x19d/0x2d0 [ 911.224973][T13858] ? do_getname+0x191/0x390 [ 911.224989][T13858] __x64_sys_mkdirat+0x89/0xc0 [ 911.225004][T13858] do_syscall_64+0x123/0x7b0 [ 911.225019][T13858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.225035][T13858] RIP: 0033:0x7fcdb33a8f19 [ 911.225045][T13858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.225055][T13858] RSP: 002b:00007fcdb4184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 911.225068][T13858] RAX: ffffffffffffffda RBX: 00007fcdb3625fa0 RCX: 00007fcdb33a8f19 [ 911.225075][T13858] RDX: 00000000000001ff RSI: 0000200000000f80 RDI: ffffffffffffff9c [ 911.225082][T13858] RBP: 00007fcdb3437f6d R08: 0000000000000000 R09: 0000000000000000 [ 911.225089][T13858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.225095][T13858] R13: 00007fcdb3626038 R14: 00007fcdb3625fa0 R15: 00007ffce441d878 [ 911.225111][T13858] [ 911.225124][T13858] cgroup: cgroup_addrm_files: failed to add bfq.dequeue, err=-12 [ 911.825088][ T31] audit: type=1400 audit(1794288043.619:4284): avc: denied { write } for pid=13865 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 911.826106][T13869] tmpfs: Using encoding : utf8-12.1.0 [ 912.045135][ T5284] 8021q: adding VLAN 0 to HW filter on device eth13 [ 912.103628][ T31] audit: type=1400 audit(1794288043.899:4285): avc: denied { rename } for pid=13877 comm="syz.5.2544" name="file0" dev="tmpfs" ino=3308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 912.103654][ T31] audit: type=1400 audit(1794288043.899:4286): avc: denied { rename } for pid=13877 comm="syz.5.2544" name="bus" dev="tmpfs" ino=3309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 912.206746][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.225468][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.889573][T12688] Bluetooth: hci1: command tx timeout [ 914.431527][ T31] audit: type=1800 audit(1794288046.229:4287): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15640 res=0 errno=-22 [ 914.592840][ T31] audit: type=1400 audit(1794288046.389:4288): avc: denied { map } for pid=13900 comm="syz.5.2549" path="/606/dev/sda" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 914.833731][ T31] audit: type=1400 audit(1794288046.639:4289): avc: denied { write } for pid=13886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.057259][ T31] audit: type=1400 audit(1794288046.849:4290): avc: denied { write } for pid=13911 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.112821][T13903] bridge0: port 3(syz_tun) entered blocking state [ 915.112865][T13903] bridge0: port 3(syz_tun) entered disabled state [ 915.112949][T13903] syz_tun: entered allmulticast mode [ 915.269659][ T5284] 8021q: adding VLAN 0 to HW filter on device eth14 [ 915.333117][T13779] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.333160][T13779] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.333209][T13779] bridge_slave_0: entered allmulticast mode [ 915.336884][T13779] bridge_slave_0: entered promiscuous mode [ 915.380360][T13779] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.380401][T13779] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.380453][T13779] bridge_slave_1: entered allmulticast mode [ 915.382258][T13779] bridge_slave_1: entered promiscuous mode [ 915.412649][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 915.412658][ T31] audit: type=1800 audit(1794288047.219:4295): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=35463 res=0 errno=-22 [ 915.415481][ T31] audit: type=1800 audit(1794288047.219:4296): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="removable" dev="sysfs" ino=35736 res=0 errno=-22 [ 915.551617][T13779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.573901][T13779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.673819][ T1408] IPVS: stop unused estimator thread 0... [ 915.696240][T13779] team0: Port device team_slave_0 added [ 915.712606][T13779] team0: Port device team_slave_1 added [ 915.733820][ T31] audit: type=1800 audit(1794288047.529:4297): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35461 res=0 errno=-22 [ 915.735071][ T31] audit: type=1800 audit(1794288047.529:4298): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35451 res=0 errno=-22 [ 915.797005][ T31] audit: type=1800 audit(1794288047.599:4299): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=21627 res=0 errno=-22 [ 915.880390][T13779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.880401][T13779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.880412][T13779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.924065][T13779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.924075][T13779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.924088][T13779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.100035][T13779] hsr_slave_0: entered promiscuous mode [ 916.227663][T13779] hsr_slave_1: entered promiscuous mode [ 916.227965][T13779] debugfs: 'hsr0' already exists in 'hsr' [ 916.227974][T13779] Cannot create hsr debugfs directory [ 916.808007][ T31] audit: type=1800 audit(1794288048.609:4300): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37074 res=0 errno=-22 [ 917.094523][T13928] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 917.094552][T13928] SELinux: failed to load policy [ 917.603661][ T31] audit: type=1800 audit(1794288049.399:4301): pid=13697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="dev" dev="sysfs" ino=35771 res=0 errno=-22 [ 918.150051][T13957] FAULT_INJECTION: forcing a failure. [ 918.150051][T13957] name failslab, interval 1, probability 0, space 0, times 0 [ 918.150071][T13957] CPU: 0 UID: 0 PID: 13957 Comm: syz.7.2561 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.150086][T13957] Tainted: [L]=SOFTLOCKUP [ 918.150090][T13957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 918.150096][T13957] Call Trace: [ 918.150100][T13957] [ 918.150106][T13957] dump_stack_lvl+0x100/0x190 [ 918.150128][T13957] should_fail_ex.cold+0x5/0xa [ 918.150144][T13957] should_failslab+0xc2/0x120 [ 918.150159][T13957] __kvmalloc_node_noprof+0x113/0x9b0 [ 918.150172][T13957] ? lockdep_init_map_type+0x5c/0x250 [ 918.150187][T13957] ? lockdep_init_map_type+0x5c/0x250 [ 918.150201][T13957] ? alloc_netdev_mqs+0xb63/0x1540 [ 918.150218][T13957] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 918.150230][T13957] alloc_netdev_mqs+0xb63/0x1540 [ 918.150247][T13957] ipip6_tunnel_locate+0x53e/0xae0 [ 918.150263][T13957] ? __pfx_ipip6_tunnel_locate+0x10/0x10 [ 918.150277][T13957] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 918.150298][T13957] ipip6_tunnel_ctl+0x4a4/0x860 [ 918.150314][T13957] ip_tunnel_siocdevprivate+0x11b/0x1c0 [ 918.150328][T13957] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 918.150349][T13957] ipip6_tunnel_siocdevprivate+0x33e/0x1360 [ 918.150364][T13957] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 918.150381][T13957] ? mark_held_locks+0x40/0x70 [ 918.150394][T13957] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 918.150406][T13957] ? full_name_hash+0xbc/0x100 [ 918.150422][T13957] ? dev_ifsioc+0xc71/0x1f70 [ 918.150435][T13957] dev_ifsioc+0xc71/0x1f70 [ 918.150451][T13957] ? __pfx_dev_ifsioc+0x10/0x10 [ 918.150464][T13957] ? __pfx___mutex_lock+0x10/0x10 [ 918.150479][T13957] ? lock_acquire+0x1d1/0x380 [ 918.150494][T13957] ? dev_load+0x8e/0x240 [ 918.150507][T13957] ? dev_load+0x8e/0x240 [ 918.150525][T13957] dev_ioctl+0x70e/0x10e0 [ 918.150541][T13957] sock_ioctl+0x494/0x6b0 [ 918.150552][T13957] ? __pfx_sock_ioctl+0x10/0x10 [ 918.150565][T13957] ? selinux_file_ioctl+0x1e0/0x290 [ 918.150576][T13957] ? selinux_file_ioctl+0x1e7/0x290 [ 918.150586][T13957] ? __pfx_sock_ioctl+0x10/0x10 [ 918.150597][T13957] __x64_sys_ioctl+0x18e/0x210 [ 918.150610][T13957] do_syscall_64+0x123/0x7b0 [ 918.150623][T13957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.150634][T13957] RIP: 0033:0x7fa0455a8f19 [ 918.150644][T13957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.150653][T13957] RSP: 002b:00007fa0463a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 918.150665][T13957] RAX: ffffffffffffffda RBX: 00007fa045825fa0 RCX: 00007fa0455a8f19 [ 918.150673][T13957] RDX: 0000200000000500 RSI: 00000000000089f1 RDI: 0000000000000004 [ 918.150680][T13957] RBP: 00007fa045637f6d R08: 0000000000000000 R09: 0000000000000000 [ 918.150687][T13957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.150693][T13957] R13: 00007fa045826038 R14: 00007fa045825fa0 R15: 00007ffcbe331ed8 [ 918.150707][T13957] [ 918.522625][ T31] audit: type=1400 audit(1794288050.319:4302): avc: denied { write } for pid=13925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.524736][ T31] audit: type=1800 audit(1794288050.319:4303): pid=13959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2562" name="bus" dev="tmpfs" ino=3348 res=0 errno=-22 [ 918.574174][ T31] audit: type=1800 audit(1794288050.379:4304): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24554 res=0 errno=-13 [ 919.562286][ T5284] 8021q: adding VLAN 0 to HW filter on device eth15 [ 919.591216][T13779] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 919.613401][T13779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 919.626110][T13779] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 919.641273][T13779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 919.641863][T13779] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 919.669778][T13779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 919.670181][T13779] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 919.692530][T13779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 919.928515][T13779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.972093][T13779] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.999399][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.999445][ T5969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.034579][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.034624][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.691377][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 920.691389][ T31] audit: type=1400 audit(1794288052.489:4309): avc: denied { write } for pid=13989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.762752][ T31] audit: type=1400 audit(1794288052.559:4310): avc: denied { write } for pid=14013 comm="syz.8.2571" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 920.762778][ T31] audit: type=1400 audit(1794288052.559:4311): avc: denied { open } for pid=14013 comm="syz.8.2571" path="/336/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 920.762798][ T31] audit: type=1400 audit(1794288052.559:4312): avc: denied { read } for pid=14013 comm="syz.8.2571" path="/336/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 920.860083][ T31] audit: type=1400 audit(1794288052.659:4313): avc: denied { mounton } for pid=14013 comm="syz.8.2571" path="/336/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 921.037368][ T31] audit: type=1400 audit(1794288052.829:4314): avc: denied { write } for pid=14019 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.204424][ T5284] 8021q: adding VLAN 0 to HW filter on device eth16 [ 921.252065][T13779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.337199][ T31] audit: type=1800 audit(1794288054.129:4315): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2575" name="bus" dev="tmpfs" ino=1838 res=0 errno=-22 [ 922.363525][ T31] audit: type=1804 audit(1794288054.169:4316): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.2575" name="/newroot/337/bus" dev="tmpfs" ino=1838 res=1 errno=0 [ 923.217944][T13779] veth0_vlan: entered promiscuous mode [ 923.242324][T13779] veth1_vlan: entered promiscuous mode [ 923.310444][T13779] veth0_macvtap: entered promiscuous mode [ 923.325262][T13779] veth1_macvtap: entered promiscuous mode [ 923.371185][T13779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.393975][T13779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.449019][ T1408] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.506237][ T7381] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.506383][ T7381] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.506416][ T7381] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.579258][ T31] audit: type=1800 audit(1794288055.379:4317): pid=14057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231905 res=0 errno=-22 [ 923.646612][ T1191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.646624][ T1191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.669991][ T31] audit: type=1800 audit(1794288055.469:4318): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232031 res=0 errno=-22 [ 923.758356][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.758368][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.734497][T14072] siw: device registration error -23 [ 924.804690][T14078] fuse: Bad value for 'fd' [ 924.815233][T14071] FAULT_INJECTION: forcing a failure. [ 924.815233][T14071] name failslab, interval 1, probability 0, space 0, times 0 [ 924.815251][T14071] CPU: 0 UID: 0 PID: 14071 Comm: syz.7.2577 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.815266][T14071] Tainted: [L]=SOFTLOCKUP [ 924.815270][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 924.815277][T14071] Call Trace: [ 924.815281][T14071] [ 924.815286][T14071] dump_stack_lvl+0x100/0x190 [ 924.815307][T14071] should_fail_ex.cold+0x5/0xa [ 924.815325][T14071] should_failslab+0xc2/0x120 [ 924.815340][T14071] __kmalloc_noprof+0xfc/0x840 [ 924.815351][T14071] ? do_sys_poll+0x273/0xf00 [ 924.815367][T14071] do_sys_poll+0x273/0xf00 [ 924.815378][T14071] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 924.815396][T14071] ? rcu_is_watching+0x13/0xc0 [ 924.815411][T14071] ? __pfx_do_sys_poll+0x10/0x10 [ 924.815422][T14071] ? __lock_acquire+0x5c0/0x1f40 [ 924.815448][T14071] ? futex_unqueue+0x13d/0x2c0 [ 924.815485][T14071] ? do_futex+0x190/0x440 [ 924.815496][T14071] ? set_user_sigmask+0x1e1/0x270 [ 924.815508][T14071] ? __pfx_set_user_sigmask+0x10/0x10 [ 924.815525][T14071] __x64_sys_ppoll+0x2b5/0x350 [ 924.815541][T14071] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 924.815560][T14071] do_syscall_64+0x123/0x7b0 [ 924.815574][T14071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.815585][T14071] RIP: 0033:0x7fa0455a8f19 [ 924.815594][T14071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.815604][T14071] RSP: 002b:00007fa0463a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 924.815615][T14071] RAX: ffffffffffffffda RBX: 00007fa045825fa0 RCX: 00007fa0455a8f19 [ 924.815621][T14071] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 0000200000000380 [ 924.815627][T14071] RBP: 00007fa045637f6d R08: 0000000000000030 R09: 0000000000000000 [ 924.815634][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.815639][T14071] R13: 00007fa045826038 R14: 00007fa045825fa0 R15: 00007ffcbe331ed8 [ 924.815653][T14071] [ 925.401167][T14088] ip_tables: iptables: counters copy to user failed while replacing table [ 925.747598][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 925.747610][ T31] audit: type=1800 audit(1794288057.539:4322): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31628 res=0 errno=-22 [ 925.784917][ T31] audit: type=1800 audit(1794288057.589:4323): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31651 res=0 errno=-22 [ 925.868219][ T5724] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 925.977598][ T1209] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 926.029326][ T5724] usb 9-1: not running at top speed; connect to a high speed hub [ 926.029344][ T5724] usb 9-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 926.030109][ T5724] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 926.030131][ T5724] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.032613][T14098] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 926.033240][ T31] audit: type=1800 audit(1794288057.829:4324): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232247 res=0 errno=-22 [ 926.035622][ T5724] cyberjack 9-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 926.057162][ T31] audit: type=1800 audit(1794288057.859:4325): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=232276 res=0 errno=-22 [ 926.069612][ T31] audit: type=1800 audit(1794288057.879:4326): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=232254 res=0 errno=-22 [ 926.107882][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.107908][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.119909][ T5724] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 926.197571][ T1209] usb 10-1: unable to get BOS descriptor or descriptor too short [ 926.197596][ T1209] usb 10-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 926.202979][ T31] audit: type=1800 audit(1794288057.979:4327): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=232255 res=0 errno=-22 [ 926.203005][ T31] audit: type=1800 audit(1794288057.999:4328): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=232256 res=0 errno=-22 [ 926.203736][ T1209] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.203748][ T1209] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 926.203768][ T1209] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 926.203785][ T1209] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 926.203803][ T1209] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 926.203817][ T1209] usb 10-1: config 1 interface 1 has no altsetting 0 [ 926.206488][ T1209] usb 10-1: string descriptor 0 read error: -22 [ 926.206553][ T1209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.326699][ T31] audit: type=1800 audit(1794288058.129:4329): pid=14057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232405 res=0 errno=-22 [ 926.392637][ T31] audit: type=1800 audit(1794288058.189:4330): pid=14057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=232434 res=0 errno=-22 [ 926.425805][ T31] audit: type=1800 audit(1794288058.229:4331): pid=14057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=232412 res=0 errno=-22 [ 926.531815][ T5724] usb 9-1: USB disconnect, device number 19 [ 926.556906][ T5724] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 926.571623][ T5724] cyberjack 9-1:1.0: device disconnected [ 926.622612][ T1209] usb 10-1: 2:0: failed to get current value for ch 0 (-32) [ 926.644792][T14111] FAULT_INJECTION: forcing a failure. [ 926.644792][T14111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 926.644812][T14111] CPU: 0 UID: 0 PID: 14111 Comm: syz.5.2586 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.644827][T14111] Tainted: [L]=SOFTLOCKUP [ 926.644831][T14111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 926.644837][T14111] Call Trace: [ 926.644841][T14111] [ 926.644846][T14111] dump_stack_lvl+0x100/0x190 [ 926.644867][T14111] should_fail_ex.cold+0x5/0xa [ 926.644887][T14111] should_fail_alloc_page+0xeb/0x140 [ 926.644903][T14111] prepare_alloc_pages+0x1f0/0x5b0 [ 926.644918][T14111] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 926.644934][T14111] ? is_bpf_text_address+0x25/0x1a0 [ 926.644948][T14111] ? find_held_lock+0x2b/0x80 [ 926.644959][T14111] ? is_bpf_text_address+0x8a/0x1a0 [ 926.644978][T14111] ? is_bpf_text_address+0x8a/0x1a0 [ 926.644996][T14111] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 926.645015][T14111] ? __css_rstat_updated+0x1ce/0x590 [ 926.645027][T14111] ? xa_load+0x153/0x2c0 [ 926.645042][T14111] ? __pfx___css_rstat_updated+0x10/0x10 [ 926.645062][T14111] ? __lock_acquire+0x5c0/0x1f40 [ 926.645077][T14111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 926.645095][T14111] ? policy_nodemask+0xed/0x5e0 [ 926.645110][T14111] alloc_pages_mpol+0x201/0x560 [ 926.645124][T14111] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 926.645137][T14111] ? do_raw_spin_lock+0x128/0x260 [ 926.645147][T14111] ? find_held_lock+0x2b/0x80 [ 926.645158][T14111] ? __swap_cache_alloc_folio+0x374/0xc50 [ 926.645178][T14111] folio_alloc_mpol_noprof+0x36/0x260 [ 926.645195][T14111] __swap_cache_alloc_folio+0x3d7/0xc50 [ 926.645213][T14111] ? __pfx___swap_cache_alloc_folio+0x10/0x10 [ 926.645229][T14111] ? swap_cache_get_folio+0x35c/0x4f0 [ 926.645245][T14111] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 926.645262][T14111] ? get_swap_device+0x1e5/0x260 [ 926.645276][T14111] swap_cache_read_folio+0x47/0x150 [ 926.645293][T14111] read_swap_cache_async+0xea/0x440 [ 926.645310][T14111] ? __pfx_read_swap_cache_async+0x10/0x10 [ 926.645326][T14111] ? find_held_lock+0x2b/0x80 [ 926.645336][T14111] ? swapin_walk_pmd_entry+0x2ec/0x620 [ 926.645349][T14111] ? swapin_walk_pmd_entry+0x2ec/0x620 [ 926.645364][T14111] swapin_walk_pmd_entry+0x310/0x620 [ 926.645380][T14111] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 926.645393][T14111] ? __pfx_trace_clock_local+0x10/0x10 [ 926.645407][T14111] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 926.645423][T14111] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 926.645437][T14111] walk_pgd_range+0xbef/0x1e00 [ 926.645462][T14111] ? __pfx_walk_pgd_range+0x10/0x10 [ 926.645478][T14111] ? __lock_acquire+0x5c0/0x1f40 [ 926.645495][T14111] __walk_page_range+0x171/0x850 [ 926.645509][T14111] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 926.645522][T14111] ? rcu_is_watching+0x13/0xc0 [ 926.645538][T14111] walk_page_range_vma_unsafe+0x209/0x8f0 [ 926.645555][T14111] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 926.645575][T14111] ? mas_prev_slot+0x768/0x11b0 [ 926.645592][T14111] walk_page_range_vma+0x63/0x90 [ 926.645608][T14111] madvise_vma_behavior+0xddf/0x2170 [ 926.645623][T14111] ? __pfx_mas_prev+0x10/0x10 [ 926.645639][T14111] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 926.645654][T14111] ? find_vma_prev+0xd8/0x150 [ 926.645664][T14111] ? __pfx_find_vma_prev+0x10/0x10 [ 926.645673][T14111] ? lock_acquire+0x1d1/0x380 [ 926.645695][T14111] madvise_walk_vmas+0x30e/0xf00 [ 926.645711][T14111] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 926.645725][T14111] ? __pfx_futex_wake_mark+0x10/0x10 [ 926.645742][T14111] ? lock_acquire+0x1d1/0x380 [ 926.645758][T14111] madvise_do_behavior+0x1ea/0x510 [ 926.645773][T14111] ? __pfx_madvise_do_behavior+0x10/0x10 [ 926.645787][T14111] ? down_read+0x136/0x4c0 [ 926.645807][T14111] do_madvise+0x238/0x290 [ 926.645820][T14111] ? __pfx_do_madvise+0x10/0x10 [ 926.645832][T14111] ? do_futex+0x190/0x440 [ 926.645847][T14111] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 926.645871][T14111] __x64_sys_madvise+0xa9/0x110 [ 926.645884][T14111] ? lockdep_hardirqs_on+0x7d/0x110 [ 926.645896][T14111] do_syscall_64+0x123/0x7b0 [ 926.645910][T14111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.645921][T14111] RIP: 0033:0x7fcdb33a8f19 [ 926.645931][T14111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.645942][T14111] RSP: 002b:00007fcdb4184028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 926.645953][T14111] RAX: ffffffffffffffda RBX: 00007fcdb3625fa0 RCX: 00007fcdb33a8f19 [ 926.645960][T14111] RDX: 0000000000000003 RSI: 0000000000600000 RDI: 0000200000000000 [ 926.645968][T14111] RBP: 00007fcdb3437f6d R08: 0000000000000000 R09: 0000000000000000 [ 926.645981][T14111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.645988][T14111] R13: 00007fcdb3626038 R14: 00007fcdb3625fa0 R15: 00007ffce441d878 [ 926.646005][T14111] [ 927.529264][ T1209] usb 10-1: 2:0: failed to get current value for ch 1 (-71) [ 927.644160][ T1209] usb 10-1: USB disconnect, device number 2 [ 929.565618][T14186] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2628'. [ 929.897037][ T5724] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 930.048031][ T5724] usb 8-1: New USB device found: idVendor=1044, idProduct=7001, bcdDevice=5.20 [ 930.050987][ T5724] usb 8-1: config 4 has an invalid interface number: 44 but max is 0 [ 930.051000][ T5724] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 930.051010][ T5724] usb 8-1: config 4 has no interface number 0 [ 930.051026][ T5724] usb 8-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 930.413506][ T5724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.413522][ T5724] usb 8-1: Product: syz [ 930.413531][ T5724] usb 8-1: Manufacturer: syz [ 930.413539][ T5724] usb 8-1: SerialNumber: syz [ 930.971469][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 930.971481][ T31] audit: type=1800 audit(1794288062.769:4355): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=232719 res=0 errno=-22 [ 930.971503][ T31] audit: type=1800 audit(1794288062.769:4356): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=232694 res=0 errno=-22 [ 930.971522][ T31] audit: type=1800 audit(1794288062.769:4357): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=232695 res=0 errno=-22 [ 932.093773][ T5724] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 932.113201][ T5724] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 932.115771][ T5724] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 932.115795][ T5724] usb 8-1: media controller created [ 932.142076][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 932.262522][ T5724] DVB: Unable to find symbol dib7000p_attach() [ 932.262531][ T5724] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 932.365817][T14187] i2c i2c-1: Invalid block size returned: 78 [ 932.383080][ T31] audit: type=1800 audit(1794288064.179:4358): pid=14213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2637" name="bus" dev="tmpfs" ino=3455 res=0 errno=-22 [ 932.413654][ T5724] rc_core: IR keymap rc-dib0700-rc5 not found [ 932.413663][ T5724] Registered IR keymap rc-empty [ 932.414080][ T5724] dvb-usb: could not initialize remote control. [ 932.414087][ T5724] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 932.415937][ T31] audit: type=1804 audit(1794288064.219:4359): pid=14213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2637" name="/newroot/630/bus" dev="tmpfs" ino=3455 res=1 errno=0 [ 933.126652][ T31] audit: type=1800 audit(1794288064.919:4360): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=232716 res=0 errno=-22 [ 933.126679][ T31] audit: type=1800 audit(1794288064.919:4361): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=232717 res=0 errno=-22 [ 933.126699][ T31] audit: type=1800 audit(1794288064.919:4362): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=232696 res=0 errno=-22 [ 933.126719][ T31] audit: type=1800 audit(1794288064.919:4363): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=232718 res=0 errno=-22 [ 933.198691][ T5724] usb 8-1: USB disconnect, device number 35 [ 933.270206][ T5724] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 933.369073][T14223] lo: entered promiscuous mode [ 933.370162][T14223] tunl0: entered promiscuous mode [ 933.394630][T14223] gre0: entered promiscuous mode [ 933.423933][T14223] gretap0: entered promiscuous mode [ 933.448971][T14223] erspan0: entered promiscuous mode [ 933.463048][T14223] ip_vti0: entered promiscuous mode [ 933.484137][T14223] ip6_vti0: entered promiscuous mode [ 933.485002][T14223] sit0: entered promiscuous mode [ 934.136217][T14223] ip6tnl0: entered promiscuous mode [ 934.171542][T14223] ip6gre0: entered promiscuous mode [ 934.197471][ T31] audit: type=1400 audit(1794288065.999:4364): avc: denied { write } for pid=14202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 934.197691][T14223] syz_tun: entered promiscuous mode [ 934.251537][T14223] ip6gretap0: entered promiscuous mode [ 934.260174][T14223] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.260290][T14223] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.291512][T14223] bridge0: entered promiscuous mode [ 934.312592][T14223] vcan0: entered promiscuous mode [ 934.353335][T14223] bond0: entered promiscuous mode [ 934.353346][T14223] bond_slave_0: entered promiscuous mode [ 934.353428][T14223] bond_slave_1: entered promiscuous mode [ 934.354544][T14223] team0: entered promiscuous mode [ 934.354553][T14223] team_slave_0: entered promiscuous mode [ 934.354625][T14223] team_slave_1: entered promiscuous mode [ 934.402782][T14223] dummy0: entered promiscuous mode [ 934.439732][T14223] nlmon0: entered promiscuous mode [ 934.440357][T14223] batadv0: entered promiscuous mode [ 934.471158][T14223] vxcan0: entered promiscuous mode [ 934.471497][T14223] vxcan1: entered promiscuous mode [ 934.471832][T14223] veth0: entered promiscuous mode [ 934.504173][T14223] veth1: entered promiscuous mode [ 934.536651][T14223] wg0: entered promiscuous mode [ 934.552745][T14223] wg1: entered promiscuous mode [ 934.592459][T14223] wg2: entered promiscuous mode [ 934.593153][T14223] veth0_to_bridge: entered promiscuous mode [ 934.620820][T14223] veth1_to_bridge: entered promiscuous mode [ 934.649841][T14223] veth0_to_bond: entered promiscuous mode [ 934.692999][T14223] veth1_to_bond: entered promiscuous mode [ 934.721882][T14223] veth0_to_team: entered promiscuous mode [ 934.752923][T14223] veth1_to_team: entered promiscuous mode [ 934.774491][T14223] veth0_to_batadv: entered promiscuous mode [ 934.799104][T14223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.812220][T14223] batadv_slave_0: entered promiscuous mode [ 934.828418][T14223] veth1_to_batadv: entered promiscuous mode [ 934.841603][T14223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.841628][T14223] batadv_slave_1: entered promiscuous mode [ 934.867996][T14223] xfrm0: entered promiscuous mode [ 934.868822][T14223] veth0_to_hsr: entered promiscuous mode [ 934.905544][T14223] veth1_to_hsr: entered promiscuous mode [ 934.922728][T14223] hsr0: entered promiscuous mode [ 934.937307][T14223] veth1_virt_wifi: entered promiscuous mode [ 934.947089][ T10] usb 8-1: new low-speed USB device number 36 using dummy_hcd [ 934.948746][T14223] veth0_virt_wifi: entered promiscuous mode [ 934.982426][T14223] virt_wifi0: entered promiscuous mode [ 935.010236][T14223] vlan0: entered promiscuous mode [ 935.024103][T14223] vlan1: entered promiscuous mode [ 935.033060][T14223] macvlan0: entered promiscuous mode [ 935.054500][T14223] macvlan1: entered promiscuous mode [ 935.065156][T14223] ipvtap0: entered promiscuous mode [ 935.074908][T14223] ipvlan0: entered promiscuous mode [ 935.086423][T14223] ipvlan1: entered promiscuous mode [ 935.098604][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 935.098627][ T10] usb 8-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 935.099531][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 14, setting to 0 [ 935.099550][ T10] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 935.144567][ T10] usb 8-1: string descriptor 0 read error: -22 [ 935.144643][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.178914][ T10] usb 8-1: low speed audio streaming not supported [ 935.178925][ T10] usb 8-1: low speed audio streaming not supported [ 935.222826][T14223] macvtap0: entered promiscuous mode [ 935.235064][T14223] macsec0: entered promiscuous mode [ 935.254255][T14223] geneve0: entered promiscuous mode [ 935.278179][T14223] geneve1: entered promiscuous mode [ 935.306658][T14223] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 935.336694][T14223] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 935.363742][T14223] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 935.393429][T14223] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 935.484335][ T10] usb 8-1: USB disconnect, device number 36 [ 935.499211][T14223] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 935.583470][T14223] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 935.584311][T14223] dvmrp0: entered promiscuous mode [ 935.584756][T14223] mac80211_hwsim hwsim24 wlan2: entered promiscuous mode [ 935.584824][T14223] mac80211_hwsim hwsim25 wlan3: entered promiscuous mode [ 935.584885][T14223] vxlan0: entered promiscuous mode [ 935.630395][T14223] vxlan1: entered promiscuous mode [ 935.644031][ T9984] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.644048][ T9984] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.644066][ T9984] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.644080][ T9984] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.644096][ T9984] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.644109][ T9984] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.644125][ T9984] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.644137][ T9984] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.032777][T14262] rxe_eth0 speed is unknown, defaulting to 1000 [ 936.727126][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2651'. [ 936.729316][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 936.729325][ T31] audit: type=1800 audit(1794288068.529:4381): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=233538 res=0 errno=-22 [ 936.776211][T14270] FAULT_INJECTION: forcing a failure. [ 936.776211][T14270] name failslab, interval 1, probability 0, space 0, times 0 [ 936.776229][T14270] CPU: 0 UID: 0 PID: 14270 Comm: syz.0.2651 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.776244][T14270] Tainted: [L]=SOFTLOCKUP [ 936.776249][T14270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 936.776257][T14270] Call Trace: [ 936.776262][T14270] [ 936.776267][T14270] dump_stack_lvl+0x100/0x190 [ 936.776289][T14270] should_fail_ex.cold+0x5/0xa [ 936.776306][T14270] should_failslab+0xc2/0x120 [ 936.776321][T14270] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 936.776339][T14270] ? start_dirop+0x79/0xb0 [ 936.776351][T14270] ? alloc_inode+0x68/0x250 [ 936.776363][T14270] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 936.776377][T14270] alloc_inode+0x68/0x250 [ 936.776388][T14270] new_inode+0x22/0x1c0 [ 936.776400][T14270] debugfs_create_dir+0xbe/0x440 [ 936.776414][T14270] wiphy_register+0x2495/0x3380 [ 936.776434][T14270] ? __pfx_wiphy_register+0x10/0x10 [ 936.776449][T14270] ? __asan_memset+0x23/0x50 [ 936.776466][T14270] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 936.776487][T14270] ieee80211_register_hw+0x3086/0x45c0 [ 936.776508][T14270] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 936.776520][T14270] ? __pfx___debug_object_init+0x10/0x10 [ 936.776540][T14270] ? find_held_lock+0x2b/0x80 [ 936.776553][T14270] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 936.776571][T14270] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 936.776588][T14270] ? __hrtimer_setup+0x208/0x330 [ 936.776602][T14270] mac80211_hwsim_new_radio+0x2b01/0x66f0 [ 936.776625][T14270] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 936.776643][T14270] hwsim_new_radio_nl+0xc6b/0x13f0 [ 936.776655][T14270] ? trace_kmalloc+0xeb/0x110 [ 936.776668][T14270] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 936.776685][T14270] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 936.776701][T14270] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 936.776721][T14270] genl_family_rcv_msg_doit+0x214/0x300 [ 936.776739][T14270] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 936.776760][T14270] ? bpf_lsm_capable+0x9/0x10 [ 936.776771][T14270] ? security_capable+0x80/0x260 [ 936.776786][T14270] ? ns_capable+0xcd/0xf0 [ 936.776800][T14270] genl_rcv_msg+0x560/0x800 [ 936.776820][T14270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 936.776836][T14270] ? __lock_acquire+0x5c0/0x1f40 [ 936.776850][T14270] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 936.776864][T14270] ? __lock_acquire+0x5c0/0x1f40 [ 936.776881][T14270] netlink_rcv_skb+0x159/0x420 [ 936.776895][T14270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 936.776912][T14270] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 936.776940][T14270] ? netlink_deliver_tap+0x1ae/0xb50 [ 936.776958][T14270] genl_rcv+0x28/0x40 [ 936.776973][T14270] netlink_unicast+0x668/0x950 [ 936.776991][T14270] ? __pfx_netlink_unicast+0x10/0x10 [ 936.777011][T14270] netlink_sendmsg+0x9ac/0x10c0 [ 936.777030][T14270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.777050][T14270] ? selinux_socket_sendmsg+0x198/0x2f0 [ 936.777069][T14270] ? ____sys_sendmsg+0xa99/0xc30 [ 936.777085][T14270] ____sys_sendmsg+0xa99/0xc30 [ 936.777100][T14270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.777116][T14270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 936.777139][T14270] ___sys_sendmsg+0x190/0x1e0 [ 936.777151][T14270] ? __pfx____sys_sendmsg+0x10/0x10 [ 936.777162][T14270] ? futex_wait+0x11e/0x370 [ 936.777183][T14270] ? find_held_lock+0x2b/0x80 [ 936.777205][T14270] __sys_sendmsg+0x160/0x210 [ 936.777219][T14270] ? __pfx___sys_sendmsg+0x10/0x10 [ 936.777242][T14270] do_syscall_64+0x123/0x7b0 [ 936.777257][T14270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.777268][T14270] RIP: 0033:0x7f73de3a8f19 [ 936.777279][T14270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.777289][T14270] RSP: 002b:00007f73df202028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 936.777300][T14270] RAX: ffffffffffffffda RBX: 00007f73de625fa0 RCX: 00007f73de3a8f19 [ 936.777308][T14270] RDX: 0000000004000084 RSI: 0000200000000440 RDI: 0000000000000005 [ 936.777315][T14270] RBP: 00007f73de437f6d R08: 0000000000000000 R09: 0000000000000000 [ 936.777322][T14270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.777329][T14270] R13: 00007f73de626038 R14: 00007f73de625fa0 R15: 00007ffe6a05fcb8 [ 936.777345][T14270] [ 936.912719][T14270] debugfs: out of free dentries, can not create directory 'phy33' [ 937.508270][ T31] audit: type=1400 audit(1794288069.309:4382): avc: denied { write } for pid=14252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 937.800961][ T31] audit: type=1400 audit(1794288069.589:4383): avc: denied { write } for pid=14290 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 937.874623][T14293] FAULT_INJECTION: forcing a failure. [ 937.874623][T14293] name failslab, interval 1, probability 0, space 0, times 0 [ 937.874643][T14293] CPU: 0 UID: 0 PID: 14293 Comm: syz.0.2660 Tainted: G L syzkaller #0 PREEMPT(full) [ 937.874657][T14293] Tainted: [L]=SOFTLOCKUP [ 937.874661][T14293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 937.874668][T14293] Call Trace: [ 937.874672][T14293] [ 937.874676][T14293] dump_stack_lvl+0x100/0x190 [ 937.874698][T14293] should_fail_ex.cold+0x5/0xa [ 937.874715][T14293] should_failslab+0xc2/0x120 [ 937.874729][T14293] kmem_cache_alloc_noprof+0x92/0x6a0 [ 937.874746][T14293] ? __pfx_map_id_range_down+0x10/0x10 [ 937.874762][T14293] ? rcu_is_watching+0x13/0xc0 [ 937.874774][T14293] ? security_inode_alloc+0x3b/0x2c0 [ 937.874793][T14293] security_inode_alloc+0x3b/0x2c0 [ 937.874808][T14293] inode_init_always_gfp+0xc75/0xfb0 [ 937.874825][T14293] alloc_inode+0x8e/0x250 [ 937.874836][T14293] sock_alloc+0x42/0x240 [ 937.874852][T14293] __sock_create+0xc2/0x860 [ 937.874868][T14293] ? __lock_acquire+0x5c0/0x1f40 [ 937.874884][T14293] mptcp_subflow_create_socket+0xec/0xa30 [ 937.874901][T14293] ? mptcp_release_cb+0x485/0x710 [ 937.874914][T14293] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 937.874940][T14293] ? lock_acquire+0x1d1/0x380 [ 937.874956][T14293] __mptcp_nmpc_sk+0x17f/0x880 [ 937.874968][T14293] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 937.874982][T14293] ? __local_bh_enable_ip+0xa5/0x120 [ 937.874999][T14293] mptcp_getsockopt+0xce7/0xe50 [ 937.875011][T14293] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 937.875021][T14293] ? __asan_memset+0x23/0x50 [ 937.875038][T14293] ? _copy_from_user+0x59/0xd0 [ 937.875052][T14293] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 937.875069][T14293] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 937.875088][T14293] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 937.875104][T14293] do_sock_getsockopt+0x415/0x570 [ 937.875118][T14293] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 937.875134][T14293] ? __fget_files+0x34/0x3d0 [ 937.875147][T14293] ? find_held_lock+0x2b/0x80 [ 937.875163][T14293] ? __fget_files+0x21f/0x3d0 [ 937.875179][T14293] __sys_getsockopt+0x148/0x260 [ 937.875196][T14293] ? __x64_sys_getsockopt+0xbd/0x160 [ 937.875208][T14293] __x64_sys_getsockopt+0xbd/0x160 [ 937.875221][T14293] ? do_syscall_64+0xae/0x7b0 [ 937.875233][T14293] ? lockdep_hardirqs_on+0x7d/0x110 [ 937.875245][T14293] do_syscall_64+0x123/0x7b0 [ 937.875259][T14293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.875270][T14293] RIP: 0033:0x7f73de3a8f19 [ 937.875280][T14293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.875290][T14293] RSP: 002b:00007f73df202028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 937.875301][T14293] RAX: ffffffffffffffda RBX: 00007f73de625fa0 RCX: 00007f73de3a8f19 [ 937.875309][T14293] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000004 [ 937.875315][T14293] RBP: 00007f73de437f6d R08: 0000000000000000 R09: 0000000000000000 [ 937.875321][T14293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.875328][T14293] R13: 00007f73de626038 R14: 00007f73de625fa0 R15: 00007ffe6a05fcb8 [ 937.875342][T14293] [ 937.875358][T14293] socket: no more sockets [ 938.006752][T14262] ±ÿ speed is unknown, defaulting to 1000 [ 938.030436][T14262] hsr0 speed is unknown, defaulting to 1000 [ 939.595996][ T31] audit: type=1400 audit(1794288071.389:4384): avc: denied { write } for pid=14303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.645763][ T31] audit: type=1804 audit(1794288071.439:4385): pid=14323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.2667" name="/newroot/350/file0" dev="tmpfs" ino=1907 res=1 errno=0 [ 939.695630][T14323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.696896][ T31] audit: type=1800 audit(1794288071.489:4386): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=236890 res=0 errno=-22 [ 939.784142][T14329] FAULT_INJECTION: forcing a failure. [ 939.784142][T14329] name failslab, interval 1, probability 0, space 0, times 0 [ 939.784160][T14329] CPU: 0 UID: 0 PID: 14329 Comm: syz.7.2668 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.784180][T14329] Tainted: [L]=SOFTLOCKUP [ 939.784184][T14329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 939.784191][T14329] Call Trace: [ 939.784195][T14329] [ 939.784200][T14329] dump_stack_lvl+0x100/0x190 [ 939.784222][T14329] should_fail_ex.cold+0x5/0xa [ 939.784240][T14329] should_failslab+0xc2/0x120 [ 939.784254][T14329] kmem_cache_alloc_noprof+0x92/0x6a0 [ 939.784272][T14329] ? __kernfs_new_node+0xd2/0xa10 [ 939.784287][T14329] __kernfs_new_node+0xd2/0xa10 [ 939.784301][T14329] ? __pfx___kernfs_new_node+0x10/0x10 [ 939.784315][T14329] ? lock_acquire+0x1d1/0x380 [ 939.784330][T14329] ? kernfs_root+0x23/0x2a0 [ 939.784346][T14329] ? find_held_lock+0x2b/0x80 [ 939.784357][T14329] ? kernfs_root+0xee/0x2a0 [ 939.784373][T14329] ? kernfs_root+0xee/0x2a0 [ 939.784394][T14329] kernfs_new_node+0x194/0x200 [ 939.784407][T14329] ? __pfx_kernfs_new_node+0x10/0x10 [ 939.784420][T14329] ? kernfs_add_one+0x213/0xb40 [ 939.784434][T14329] __kernfs_create_file+0x53/0x350 [ 939.784450][T14329] sysfs_add_file_mode_ns+0x207/0x3c0 [ 939.784470][T14329] internal_create_group+0x593/0xfb0 [ 939.784490][T14329] ? __pfx_internal_create_group+0x10/0x10 [ 939.784509][T14329] ? kernfs_create_link+0x1f1/0x280 [ 939.784526][T14329] internal_create_groups+0x9d/0x150 [ 939.784537][T14329] device_add+0x71a/0x1970 [ 939.784554][T14329] ? __pfx_device_add+0x10/0x10 [ 939.784568][T14329] ? __pfx_cfg80211_dev_check_name+0x10/0x10 [ 939.784580][T14329] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 939.784598][T14329] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 939.784614][T14329] wiphy_register+0x2361/0x3380 [ 939.784633][T14329] ? __pfx_wiphy_register+0x10/0x10 [ 939.784646][T14329] ? led_trigger_register+0x46a/0x540 [ 939.784660][T14329] ? ieee80211_txq_setup_flows+0x5f5/0xdf0 [ 939.784676][T14329] ? __asan_memset+0x23/0x50 [ 939.784693][T14329] ? ieee80211_txq_setup_flows+0x898/0xdf0 [ 939.784711][T14329] ieee80211_register_hw+0x3086/0x45c0 [ 939.784732][T14329] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 939.784744][T14329] ? __pfx___debug_object_init+0x10/0x10 [ 939.784763][T14329] ? find_held_lock+0x2b/0x80 [ 939.784776][T14329] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 939.784793][T14329] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 939.784809][T14329] ? __hrtimer_setup+0x208/0x330 [ 939.784823][T14329] mac80211_hwsim_new_radio+0x2b01/0x66f0 [ 939.784847][T14329] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 939.784865][T14329] hwsim_new_radio_nl+0xc6b/0x13f0 [ 939.784877][T14329] ? trace_kmalloc+0xeb/0x110 [ 939.784890][T14329] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 939.784907][T14329] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 939.784929][T14329] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 939.784950][T14329] genl_family_rcv_msg_doit+0x214/0x300 [ 939.784969][T14329] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 939.784992][T14329] ? bpf_lsm_capable+0x9/0x10 [ 939.785004][T14329] ? security_capable+0x80/0x260 [ 939.785021][T14329] ? ns_capable+0xcd/0xf0 [ 939.785036][T14329] genl_rcv_msg+0x560/0x800 [ 939.785055][T14329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 939.785071][T14329] ? __lock_acquire+0x5c0/0x1f40 [ 939.785085][T14329] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 939.785099][T14329] ? __lock_acquire+0x5c0/0x1f40 [ 939.785117][T14329] netlink_rcv_skb+0x159/0x420 [ 939.785131][T14329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 939.785147][T14329] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 939.785168][T14329] ? netlink_deliver_tap+0x1ae/0xb50 [ 939.785184][T14329] genl_rcv+0x28/0x40 [ 939.785198][T14329] netlink_unicast+0x668/0x950 [ 939.785215][T14329] ? __pfx_netlink_unicast+0x10/0x10 [ 939.785234][T14329] netlink_sendmsg+0x9ac/0x10c0 [ 939.785251][T14329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.785269][T14329] ? selinux_socket_sendmsg+0x198/0x2f0 [ 939.785287][T14329] ? ____sys_sendmsg+0xa99/0xc30 [ 939.785302][T14329] ____sys_sendmsg+0xa99/0xc30 [ 939.785317][T14329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.785333][T14329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.785356][T14329] ___sys_sendmsg+0x190/0x1e0 [ 939.785368][T14329] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.785379][T14329] ? futex_wait+0x11e/0x370 [ 939.785400][T14329] ? find_held_lock+0x2b/0x80 [ 939.785422][T14329] __sys_sendmsg+0x160/0x210 [ 939.785435][T14329] ? __pfx___sys_sendmsg+0x10/0x10 [ 939.785457][T14329] do_syscall_64+0x123/0x7b0 [ 939.785472][T14329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.785483][T14329] RIP: 0033:0x7fa0455a8f19 [ 939.785493][T14329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.785504][T14329] RSP: 002b:00007fa0463a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.785515][T14329] RAX: ffffffffffffffda RBX: 00007fa045825fa0 RCX: 00007fa0455a8f19 [ 939.785522][T14329] RDX: 0000000004000084 RSI: 0000200000000440 RDI: 0000000000000005 [ 939.785528][T14329] RBP: 00007fa045637f6d R08: 0000000000000000 R09: 0000000000000000 [ 939.785536][T14329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.785543][T14329] R13: 00007fa045826038 R14: 00007fa045825fa0 R15: 00007ffcbe331ed8 [ 939.785558][T14329] [ 939.786148][ T31] audit: type=1800 audit(1794288071.579:4387): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=236909 res=0 errno=-22 [ 940.475406][ T31] audit: type=1400 audit(1794288072.269:4388): avc: denied { write } for pid=14331 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 940.587299][T14337] FAULT_INJECTION: forcing a failure. [ 940.587299][T14337] name failslab, interval 1, probability 0, space 0, times 0 [ 940.587317][T14337] CPU: 0 UID: 0 PID: 14337 Comm: syz.9.2671 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.587334][T14337] Tainted: [L]=SOFTLOCKUP [ 940.587338][T14337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 940.587344][T14337] Call Trace: [ 940.587349][T14337] [ 940.587353][T14337] dump_stack_lvl+0x100/0x190 [ 940.587374][T14337] should_fail_ex.cold+0x5/0xa [ 940.587391][T14337] should_failslab+0xc2/0x120 [ 940.587405][T14337] kmem_cache_alloc_noprof+0x92/0x6a0 [ 940.587423][T14337] ? prepare_creds+0x2c/0x950 [ 940.587439][T14337] prepare_creds+0x2c/0x950 [ 940.587453][T14337] __sys_setuid+0x97/0x430 [ 940.587467][T14337] do_syscall_64+0x123/0x7b0 [ 940.587482][T14337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.587492][T14337] RIP: 0033:0x7f28d87a8f19 [ 940.587502][T14337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.587511][T14337] RSP: 002b:00007f28d95e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 940.587523][T14337] RAX: ffffffffffffffda RBX: 00007f28d8a25fa0 RCX: 00007f28d87a8f19 [ 940.587530][T14337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 940.587536][T14337] RBP: 00007f28d8837f6d R08: 0000000000000000 R09: 0000000000000000 [ 940.587542][T14337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.587548][T14337] R13: 00007f28d8a26038 R14: 00007f28d8a25fa0 R15: 00007ffcb6663878 [ 940.587564][T14337] [ 940.716581][T10856] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 940.867086][T10856] usb 9-1: Using ep0 maxpacket: 32 [ 940.867859][T10856] usb 9-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 940.868634][T10856] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 940.868651][T10856] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 940.868665][T10856] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 940.868677][T10856] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 940.868690][T10856] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 940.948704][T10856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.948719][T10856] usb 9-1: Product: syz [ 940.948727][T10856] usb 9-1: Manufacturer: syz [ 940.948735][T10856] usb 9-1: SerialNumber: syz [ 940.981452][ T31] audit: type=1800 audit(1794288072.789:4389): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=236936 res=0 errno=-22 [ 940.981478][ T31] audit: type=1800 audit(1794288072.789:4390): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=236968 res=0 errno=-22 [ 941.034305][T10856] usb 9-1: config 0 descriptor?? [ 941.905152][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 941.905165][ T31] audit: type=1400 audit(1794288073.699:4393): avc: denied { create } for pid=14352 comm="syz.5.2677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 941.985132][ T31] audit: type=1400 audit(1794288073.779:4394): avc: denied { write } for pid=14352 comm="syz.5.2677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 942.012863][T14346] kvm: pic: non byte read [ 942.013263][T14346] kvm: pic: non byte read [ 942.013597][T14346] kvm: pic: non byte read [ 942.013905][T14346] kvm: pic: non byte read [ 942.036542][T14346] kvm: pic: non byte read [ 942.037093][T14346] kvm: pic: single mode not supported [ 942.047735][T14346] kvm: pic: non byte read [ 942.048007][T14346] kvm: pic: single mode not supported [ 942.048054][T14346] kvm: pic: non byte read [ 942.072981][T14346] kvm: pic: level sensitive irq not supported [ 942.073045][T14346] kvm: pic: non byte read [ 942.073348][T14346] kvm: pic: single mode not supported [ 942.073395][T14346] kvm: pic: non byte read [ 942.073742][T14346] kvm: pic: non byte read [ 942.116403][T10856] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 942.116427][T10856] input input16: Device does not respond to id packet M [ 942.124964][T14346] kvm: pic: level sensitive irq not supported [ 942.145637][T10856] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 942.145661][T10856] input input16: Device does not respond to id packet P [ 942.146330][T10856] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 942.146351][T10856] input input16: Device does not respond to id packet B [ 942.146787][T10856] input input16: Limiting number of effects to 32 (device reports 85) [ 942.193692][T14346] kvm: pic: single mode not supported [ 942.194387][T14346] kvm: pic: level sensitive irq not supported [ 942.194688][T14346] kvm: pic: single mode not supported [ 942.194693][T14346] kvm: pic: level sensitive irq not supported [ 942.229630][T14346] kvm: pic: single mode not supported [ 942.229637][T14346] kvm: pic: level sensitive irq not supported [ 942.261244][T14346] kvm: pic: single mode not supported [ 942.261252][T14346] kvm: pic: level sensitive irq not supported [ 942.262338][T14346] kvm: pic: single mode not supported [ 942.262344][T14346] kvm: pic: level sensitive irq not supported [ 942.310103][T14346] kvm: pic: single mode not supported [ 942.310111][T14346] kvm: pic: level sensitive irq not supported [ 942.311098][T14346] kvm: pic: single mode not supported [ 942.311103][T14346] kvm: pic: level sensitive irq not supported [ 942.327106][T14346] kvm: pic: level sensitive irq not supported [ 942.348829][T14334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.349038][T14334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.383026][T10856] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 942.385314][T10856] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 942.385584][T10856] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 942.385828][T10856] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 942.438987][ T31] audit: type=1400 audit(1794288074.239:4395): avc: denied { getopt } for pid=14364 comm="syz.5.2679" lport=34702 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 942.484612][T10856] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input16 [ 942.522541][ T31] audit: type=1800 audit(1794288074.319:4396): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=236965 res=0 errno=-22 [ 942.523899][ T31] audit: type=1800 audit(1794288074.319:4397): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=236966 res=0 errno=-22 [ 942.524381][ T31] audit: type=1800 audit(1794288074.319:4398): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=236945 res=0 errno=-22 [ 942.573709][ T31] audit: type=1800 audit(1794288074.379:4399): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=236967 res=0 errno=-22 [ 942.624874][T10856] usb 9-1: USB disconnect, device number 20 [ 942.644058][ T4974] iforce 9-1:0.0: usb_submit_urb failed -19 [ 942.671725][ T31] audit: type=1800 audit(1794288074.469:4400): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237013 res=0 errno=-22 [ 942.712242][ T31] audit: type=1800 audit(1794288074.509:4401): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=237029 res=0 errno=-22 [ 942.712266][ T31] audit: type=1800 audit(1794288074.509:4402): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=237032 res=0 errno=-22 [ 943.251745][T14389] LUN: removable file: (no medium) [ 943.273224][T14389] [ 943.275546][T14389] ====================================================== [ 943.282531][T14389] WARNING: possible circular locking dependency detected [ 943.289515][T14389] syzkaller #0 Tainted: G L [ 943.295459][T14389] ------------------------------------------------------ [ 943.302442][T14389] syz.9.2686/14389 is trying to acquire lock: [ 943.308470][T14389] ffff888062e3b9a8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2360 [ 943.319042][T14389] [ 943.319042][T14389] but task is already holding lock: [ 943.326371][T14389] ffff888048eec920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 943.335553][T14389] [ 943.335553][T14389] which lock already depends on the new lock. [ 943.335553][T14389] [ 943.345924][T14389] [ 943.345924][T14389] the existing dependency chain (in reverse order) is: [ 943.354904][T14389] [ 943.354904][T14389] -> #2 (&common->filesem){++++}-{4:4}: [ 943.362600][T14389] lock_acquire+0x1d1/0x380 [ 943.367600][T14389] down_read+0x94/0x4c0 [ 943.372258][T14389] fsg_show_file+0x20/0x180 [ 943.377254][T14389] configfs_read_iter+0x426/0x6f0 [ 943.382778][T14389] __kernel_read+0x397/0xac0 [ 943.387856][T14389] integrity_kernel_read+0x7e/0xb0 [ 943.393471][T14389] ima_calc_file_hash_tfm+0x25e/0x350 [ 943.399342][T14389] ima_calc_file_hash+0x1e3/0x380 [ 943.404858][T14389] ima_collect_measurement+0x952/0xb30 [ 943.410816][T14389] process_measurement+0xe04/0x2360 [ 943.416502][T14389] ima_file_check+0xbf/0x110 [ 943.421590][T14389] security_file_post_open+0xc4/0x210 [ 943.427453][T14389] path_openat+0x5d0/0x23f0 [ 943.432446][T14389] do_file_open+0x20e/0x430 [ 943.437452][T14389] do_sys_openat2+0x163/0x1d0 [ 943.442623][T14389] __x64_sys_openat+0x12d/0x210 [ 943.447966][T14389] do_syscall_64+0x123/0x7b0 [ 943.453045][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.459437][T14389] [ 943.459437][T14389] -> #1 (&p->frag_sem){++++}-{4:4}: [ 943.466790][T14389] lock_acquire+0x1d1/0x380 [ 943.471784][T14389] down_read+0x94/0x4c0 [ 943.476432][T14389] __configfs_open_file+0xe8/0x9c0 [ 943.482032][T14389] do_dentry_open+0x674/0x1470 [ 943.487294][T14389] vfs_open+0x8a/0x400 [ 943.491854][T14389] dentry_open+0x71/0xd0 [ 943.496599][T14389] ima_calc_file_hash+0xe1/0x380 [ 943.502038][T14389] ima_collect_measurement+0x952/0xb30 [ 943.507996][T14389] process_measurement+0xe04/0x2360 [ 943.513682][T14389] ima_file_check+0xbf/0x110 [ 943.518771][T14389] security_file_post_open+0xc4/0x210 [ 943.524636][T14389] path_openat+0x5d0/0x23f0 [ 943.529630][T14389] do_file_open+0x20e/0x430 [ 943.534625][T14389] do_sys_openat2+0x163/0x1d0 [ 943.539795][T14389] __x64_sys_openat+0x12d/0x210 [ 943.545138][T14389] do_syscall_64+0x123/0x7b0 [ 943.550230][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.556614][T14389] [ 943.556614][T14389] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 943.565184][T14389] check_prev_add+0xeb/0xe60 [ 943.570266][T14389] __lock_acquire+0x1528/0x1f40 [ 943.575610][T14389] lock_acquire+0x1d1/0x380 [ 943.580603][T14389] __mutex_lock+0x19f/0x1c10 [ 943.585683][T14389] process_measurement+0x5ab/0x2360 [ 943.591381][T14389] ima_file_check+0xbf/0x110 [ 943.596461][T14389] security_file_post_open+0xc4/0x210 [ 943.602327][T14389] path_openat+0x5d0/0x23f0 [ 943.607330][T14389] do_file_open+0x20e/0x430 [ 943.612325][T14389] file_open_name+0x1c3/0x3e0 [ 943.617495][T14389] filp_open+0x2e/0x50 [ 943.622055][T14389] fsg_lun_open+0x6b/0x7b0 [ 943.626962][T14389] fsg_store_file+0x1e7/0x450 [ 943.632129][T14389] configfs_write_iter+0x302/0x4e0 [ 943.637738][T14389] vfs_write+0x6af/0x1040 [ 943.642555][T14389] ksys_write+0x12a/0x250 [ 943.647382][T14389] do_syscall_64+0x123/0x7b0 [ 943.652461][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.658842][T14389] [ 943.658842][T14389] other info that might help us debug this: [ 943.658842][T14389] [ 943.669036][T14389] Chain exists of: [ 943.669036][T14389] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &common->filesem [ 943.669036][T14389] [ 943.682818][T14389] Possible unsafe locking scenario: [ 943.682818][T14389] [ 943.690232][T14389] CPU0 CPU1 [ 943.695562][T14389] ---- ---- [ 943.700894][T14389] lock(&common->filesem); [ 943.705367][T14389] lock(&p->frag_sem); [ 943.712007][T14389] lock(&common->filesem); [ 943.718994][T14389] lock(&ima_iint_mutex_key[depth]); [ 943.724332][T14389] [ 943.724332][T14389] *** DEADLOCK *** [ 943.724332][T14389] [ 943.732441][T14389] locks held by syz.9.2686/14389: 5, on CPU#0: [ 943.738559][T14389] #0: ffff8880770af0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 943.747576][T14389] #1: ffff88801fba0478 (sb_writers#21){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 943.756593][T14389] #2: ffff888059036e80 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 943.766554][T14389] #3: ffff88805b723b70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 943.776253][T14389] #4: ffff888048eec920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 943.785876][T14389] [ 943.785876][T14389] stack backtrace: [ 943.791745][T14389] CPU: 0 UID: 0 PID: 14389 Comm: syz.9.2686 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.802646][T14389] Tainted: [L]=SOFTLOCKUP [ 943.806936][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 943.816959][T14389] Call Trace: [ 943.820211][T14389] [ 943.823116][T14389] dump_stack_lvl+0x100/0x190 [ 943.827767][T14389] print_circular_bug.cold+0x178/0x1be [ 943.833198][T14389] check_noncircular+0x146/0x160 [ 943.838108][T14389] check_prev_add+0xeb/0xe60 [ 943.842671][T14389] __lock_acquire+0x1528/0x1f40 [ 943.847495][T14389] ? do_syscall_64+0x123/0x7b0 [ 943.852238][T14389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.858282][T14389] lock_acquire+0x1d1/0x380 [ 943.862757][T14389] ? process_measurement+0x5ab/0x2360 [ 943.868106][T14389] ? __pfx___might_resched+0x10/0x10 [ 943.873362][T14389] __mutex_lock+0x19f/0x1c10 [ 943.877924][T14389] ? process_measurement+0x5ab/0x2360 [ 943.883264][T14389] ? process_measurement+0x5ab/0x2360 [ 943.888605][T14389] ? __pfx___mutex_lock+0x10/0x10 [ 943.893599][T14389] ? rcu_is_watching+0x13/0xc0 [ 943.898332][T14389] ? trace_kmem_cache_alloc+0xdd/0x100 [ 943.903759][T14389] ? __kasan_slab_alloc+0x89/0x90 [ 943.908752][T14389] ? find_held_lock+0x2b/0x80 [ 943.913400][T14389] ? process_measurement+0x5ab/0x2360 [ 943.918740][T14389] process_measurement+0x5ab/0x2360 [ 943.923913][T14389] ? find_held_lock+0x2b/0x80 [ 943.928560][T14389] ? __pfx_process_measurement+0x10/0x10 [ 943.934164][T14389] ? avc_has_perm_noaudit+0x145/0x470 [ 943.939509][T14389] ? avc_has_perm+0x135/0x1e0 [ 943.944157][T14389] ? __pfx_avc_has_perm+0x10/0x10 [ 943.949156][T14389] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 943.955451][T14389] ima_file_check+0xbf/0x110 [ 943.960012][T14389] ? __pfx_ima_file_check+0x10/0x10 [ 943.965183][T14389] security_file_post_open+0xc4/0x210 [ 943.970528][T14389] path_openat+0x5d0/0x23f0 [ 943.975004][T14389] ? __pfx_path_openat+0x10/0x10 [ 943.979913][T14389] ? kasan_save_stack+0x3f/0x50 [ 943.984732][T14389] ? kasan_save_stack+0x30/0x50 [ 943.989560][T14389] ? kasan_save_track+0x14/0x30 [ 943.994378][T14389] ? __kasan_slab_alloc+0x89/0x90 [ 943.999370][T14389] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 944.004976][T14389] ? do_getname_kernel+0x5d/0x250 [ 944.009971][T14389] ? filp_open+0x1d/0x50 [ 944.014187][T14389] do_file_open+0x20e/0x430 [ 944.018660][T14389] ? __pfx_do_file_open+0x10/0x10 [ 944.023663][T14389] file_open_name+0x1c3/0x3e0 [ 944.028322][T14389] ? __pfx_file_open_name+0x10/0x10 [ 944.033490][T14389] ? do_getname_kernel+0x5d/0x250 [ 944.038487][T14389] ? __asan_memcpy+0x3c/0x60 [ 944.043049][T14389] ? do_getname_kernel+0x1be/0x250 [ 944.048131][T14389] filp_open+0x2e/0x50 [ 944.052182][T14389] fsg_lun_open+0x6b/0x7b0 [ 944.056570][T14389] ? __pfx_down_read+0x10/0x10 [ 944.061305][T14389] fsg_store_file+0x1e7/0x450 [ 944.065953][T14389] configfs_write_iter+0x302/0x4e0 [ 944.071034][T14389] vfs_write+0x6af/0x1040 [ 944.075331][T14389] ? __pfx_configfs_write_iter+0x10/0x10 [ 944.080931][T14389] ? __pfx_vfs_write+0x10/0x10 [ 944.085663][T14389] ? find_held_lock+0x2b/0x80 [ 944.090313][T14389] ksys_write+0x12a/0x250 [ 944.094611][T14389] ? __pfx_ksys_write+0x10/0x10 [ 944.099431][T14389] do_syscall_64+0x123/0x7b0 [ 944.103991][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.109862][T14389] RIP: 0033:0x7f28d87a8f19 [ 944.114247][T14389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.133824][T14389] RSP: 002b:00007f28d95e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 944.142205][T14389] RAX: ffffffffffffffda RBX: 00007f28d8a25fa0 RCX: 00007f28d87a8f19 [ 944.150146][T14389] RDX: 0000000000000005 RSI: 00002000000019c0 RDI: 0000000000000003 [ 944.158095][T14389] RBP: 00007f28d8837f6d R08: 0000000000000000 R09: 0000000000000000 [ 944.166044][T14389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 944.173983][T14389] R13: 00007f28d8a26038 R14: 00007f28d8a25fa0 R15: 00007ffcb6663878 [ 944.181938][T14389] [ 944.508753][T14398] syz_tun (unregistering): left allmulticast mode [ 944.508784][T14398] bridge0: port 3(syz_tun) entered disabled state [ 944.586887][T14397] syz_tun (unregistering): left allmulticast mode [ 944.586983][T14397] bridge0: port 2(syz_tun) entered disabled state [ 944.704572][T14389] mass_storage.0/lun.0: file too small: file0 [ 944.743561][ T5969] bridge_slave_1: left allmulticast mode [ 944.743640][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.765846][ T5969] bridge_slave_0: left allmulticast mode [ 944.765928][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.780787][ T5969] pimreg: left allmulticast mode [ 944.892165][ T5969] bond1 (unregistering): (slave bond0): Releasing active interface [ 944.892433][ T5969] bond0 (unregistering): Released all slaves [ 944.894282][ T5969] bond1 (unregistering): Released all slaves [ 944.929742][ T5969] tipc: Left network mode [ 945.176012][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 945.202228][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 945.325128][ T5284] 8021q: adding VLAN 0 to HW filter on device eth18 [ 945.350241][ T5969] IPVS: stop unused estimator thread 0... [ 945.372276][ T5969] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.395547][ T5969] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.424729][ T5969] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.454960][ T5969] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.655203][ T5969] bridge_slave_1: left allmulticast mode [ 945.655217][ T5969] bridge_slave_1: left promiscuous mode [ 945.655285][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.655921][ T5969] bridge_slave_0: left allmulticast mode [ 945.655931][ T5969] bridge_slave_0: left promiscuous mode [ 945.655990][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.699313][ T5969] bridge_slave_0: left allmulticast mode [ 945.699369][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.715238][ T5969] dvmrp0: left allmulticast mode [ 945.715265][ T5969] pimreg: left allmulticast mode [ 945.735719][ T5969] bridge_slave_1: left allmulticast mode [ 945.735775][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.736265][ T5969] bridge_slave_0: left allmulticast mode [ 945.736316][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.767140][ T5969] dvmrp0: left allmulticast mode [ 945.824475][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.826254][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.846775][ T5969] bond0 (unregistering): Released all slaves [ 945.891294][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.891817][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.892111][ T5969] bond0 (unregistering): Released all slaves [ 945.957651][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.958160][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.958467][ T5969] bond0 (unregistering): Released all slaves [ 945.960080][ T5284] 8021q: adding VLAN 0 to HW filter on device eth19 [ 946.030440][ T5969] tipc: Left network mode [ 946.314246][ T5284] 8021q: adding VLAN 0 to HW filter on device eth20 [ 946.415392][ T5969] hsr_slave_0: left promiscuous mode [ 946.415609][ T5969] hsr_slave_1: left promiscuous mode [ 946.415792][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 946.415801][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.416030][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.416037][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.459244][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.460979][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.461237][ T5969] batman_adv: batadv0: Removing interface: macvtap1 [ 946.464912][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.465117][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.504780][ T5969] veth1_macvtap: left promiscuous mode [ 946.504796][ T5969] veth0_macvtap: left promiscuous mode [ 946.504830][ T5969] veth1_vlan: left promiscuous mode [ 946.504849][ T5969] veth0_vlan: left promiscuous mode [ 946.634938][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 946.646918][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 946.771653][ T9984] smbdirect: ib_dev[syz2] removed [ 946.804645][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 946.806502][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 946.897297][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 946.899136][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 946.937873][ T5284] 8021q: adding VLAN 0 to HW filter on device eth17 [ 947.166346][ T31] kauditd_printk_skb: 74 callbacks suppressed [ 947.166358][ T31] audit: type=1400 audit(1794288078.969:4477): avc: denied { write } for pid=14461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 947.226167][ T5969] IPVS: stop unused estimator thread 0... [ 947.274073][ T31] audit: type=1400 audit(1794288079.079:4478): avc: denied { write } for pid=14472 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 947.336131][ T5284] 8021q: adding VLAN 0 to HW filter on device eth21 [ 947.436654][ T31] audit: type=1400 audit(1794288079.229:4479): avc: denied { write } for pid=14475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 947.486858][ T31] audit: type=1400 audit(1794288079.279:4480): avc: denied { write } for pid=14486 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 947.525758][ T5284] 8021q: adding VLAN 0 to HW filter on device eth22 [ 947.631973][ T31] audit: type=1400 audit(1794288079.429:4481): avc: denied { write } for pid=14490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 947.681949][ T31] audit: type=1400 audit(1794288079.479:4482): avc: denied { write } for pid=14501 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 947.722116][ T5284] 8021q: adding VLAN 0 to HW filter on device eth23 [ 947.822031][ T31] audit: type=1400 audit(1794288079.619:4483): avc: denied { write } for pid=14504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 947.872784][ T31] audit: type=1400 audit(1794288079.669:4484): avc: denied { write } for pid=14515 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 947.912003][ T5284] 8021q: adding VLAN 0 to HW filter on device eth24 [ 948.011749][ T31] audit: type=1400 audit(1794288079.809:4485): avc: denied { write } for pid=14518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.061252][ T31] audit: type=1400 audit(1794288079.859:4486): avc: denied { write } for pid=14529 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.102463][ T5284] 8021q: adding VLAN 0 to HW filter on device eth25 [ 948.245978][ T5284] 8021q: adding VLAN 0 to HW filter on device eth26 [ 948.392172][ T5284] 8021q: adding VLAN 0 to HW filter on device eth27 [ 948.536485][ T5284] 8021q: adding VLAN 0 to HW filter on device eth28