last executing test programs: 4m5.313930615s ago: executing program 3 (id=526): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x0, 0x4c, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff000705"], 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000006c0)=0x6, &(0x7f0000000700)=0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000640)=0xa, 0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048801}, 0x24008082) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000740)={0x0, 0x6}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) r4 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f00000005c0)={0x0, &(0x7f0000000240)}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc\x00', 0x1ff) r5 = syz_usb_connect(0x3, 0x40, &(0x7f0000001200)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r6 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r5, 0x1, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0x40, &(0x7f0000001240)="900100"/64) ioctl$sock_SIOCOUTQNSD(r6, 0x40106183, &(0x7f0000001280)) mount(0x0, &(0x7f0000000a80)='./proc\x00', &(0x7f0000000ac0)='v7\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0xc0) write(r6, &(0x7f0000000a00)="4e42c11ebced0aea7e27eec8c0d04407deeea4c8aa9c8c00000000", 0x1b) 3m59.195154158s ago: executing program 3 (id=536): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x200080d4) r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m54.184146926s ago: executing program 3 (id=546): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000026c0)="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", 0x2000, &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004780)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004840)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000048c0)="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", 0x2000, &(0x7f00000068c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006980)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0x0, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x7, 0x4000040000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0x7, 0x8000, 0xd, r2, 0x0, 0x1, 0xfffffdff}}, {0x0, 0xc3293c87af04c7fd}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000006a40)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 3m53.301616321s ago: executing program 3 (id=550): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f00000000c0)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000019680)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00( ^ ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000019700)='./dev\x00', 0x1ff) syz_usb_connect(0x0, 0x39, &(0x7f0000019e80)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) mkdir(&(0x7f0000019f40)='./sys\x00', 0x1ff) 3m49.786167827s ago: executing program 3 (id=558): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)) chdir(&(0x7f00000001c0)='./bus\x00') r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000003c0)=0x5) setreuid(r1, r1) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240), 0x2008, &(0x7f00000024c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x78, 0x6b]}}], [{@subj_type={'subj_type', 0x3d, 'upperdir'}}, {@hash}, {@fowner_lt}, {@audit}, {@pcr={'pcr', 0x3d, 0x22}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x36, 0x62, 0x61, 0x37, 0x0, 0x67, 0x30], 0x2d, [0x62, 0x61, 0x31, 0x63], 0x2d, [0x62, 0xc1, 0x61, 0x32], 0x2d, [0x66, 0x38, 0x33, 0x64], 0x2d, [0x32, 0x57, 0x39, 0x61, 0x39, 0x30, 0x64, 0x64]}}}, {@euid_eq={'euid', 0x3d, r1}}, {@measure}, {@euid_lt}]}) 3m49.398277505s ago: executing program 3 (id=560): close(0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000004c0)={r0, &(0x7f0000000300)='!d}.\'.]\\.}\x00', 0x0, &(0x7f0000000340)={@align=0x4, {0xd508, 0x0, 0x1, 0xffffffffffffffff}}, 0x1000, &(0x7f00000003c0), &(0x7f0000000440)=0xf95}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) socket$inet6(0xa, 0x6, 0x3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x3, 0x7, 0x4, 0x2, 0x1, 0x202a9, 0x8a10, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x804, 0x8, 0x400c, 0x4, 0x9, 0x3, 0x8, 0xff, 0x5, 0x1}}) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x17f, 0x0) 3m34.27523406s ago: executing program 32 (id=560): close(0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000004c0)={r0, &(0x7f0000000300)='!d}.\'.]\\.}\x00', 0x0, &(0x7f0000000340)={@align=0x4, {0xd508, 0x0, 0x1, 0xffffffffffffffff}}, 0x1000, &(0x7f00000003c0), &(0x7f0000000440)=0xf95}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) socket$inet6(0xa, 0x6, 0x3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x3, 0x7, 0x4, 0x2, 0x1, 0x202a9, 0x8a10, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x804, 0x8, 0x400c, 0x4, 0x9, 0x3, 0x8, 0xff, 0x5, 0x1}}) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x17f, 0x0) 2m39.676075071s ago: executing program 0 (id=705): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, 0x0, 0x2a, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, 0x0, 0x2a, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff00000007058102000200070502020002"], 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r4, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) ioctl(r0, 0x8914, &(0x7f0000000200)="7573623000000000000000000000000003") (async) ioctl(r0, 0x8914, &(0x7f0000000200)="7573623000000000000000000000000003") syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) 2m36.35965316s ago: executing program 0 (id=715): syz_io_uring_setup(0x28a, &(0x7f0000000000)={0x0, 0xa17e, 0x2, 0x0, 0x2c}, &(0x7f00000002c0), &(0x7f0000001840), &(0x7f0000000300)) 2m36.12682513s ago: executing program 0 (id=716): r0 = socket(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180049c26172da67cd2cf1bf1b15f52200000000000000000400727e3ca31801000060756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000056030000850000002d0000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$kcm(0x2, 0x3, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b1600000000048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/152], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f00000008c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000940)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) mount(0x0, 0x0, &(0x7f00000001c0)='qnx6\x00', 0x1800080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000dc0)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000019dc0)=0x7) sendmsg$nl_route_sched(r0, &(0x7f0000019e00)={0x0, 0x0, &(0x7f0000019e40)={&(0x7f00000004c0)=@getchain={0x2c, 0x66, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc537d90706a4db13, 0x10}, {0x6, 0x10}, {0x5, 0xfff3}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4088015}, 0x4000890) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000019ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000019f00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000019f40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000019f80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000019fc0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f000001a000)=[{0x2b, 0x0, [0xfffffffb, 0x874, 0x101, 0x7, 0x10010, 0x1, 0x7, 0x7, 0x1, 0x9, 0xc, 0x5, 0x1, 0x8, 0x10001, 0xffff]}], r8, 0x1, 0x1, 0x48}}, 0x20) socket(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x2) 2m34.102080214s ago: executing program 0 (id=720): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xe0, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0xff7d, 0x57, 0x1, {0x22, 0xfb2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x7, 0x64}}}}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000180)={0x40, 0x2, 0x22, {0x22, 0xc, "b606ff26b1ec3dbe68a0284fb83130778e575b9d61c4c142a88d12571d913c6e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0xc00000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, r1, 0x3c, 0x0) recvmmsg(r3, &(0x7f0000000280), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r6 = socket(0x8, 0x2, 0x0) bind(r6, 0x0, 0x0) bind$bt_hci(r5, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000300)="46000000130001000242424242424242424242424242424242", 0x19) 2m30.017948325s ago: executing program 1 (id=732): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000002bc0)={{0x7, 0x2, 0xffff, 0x2, 'syz1\x00', 0xd}, 0x0, [0x10001, 0x8001, 0x9, 0xb8f6, 0x2, 0x4, 0x7fff, 0x5, 0x8, 0x0, 0x0, 0x4, 0x400000, 0xd2e, 0x9a8, 0x6, 0x2, 0x6, 0x886, 0xd0d, 0xfffffffffffffff7, 0x2, 0x401, 0x4, 0x5, 0x6, 0x8ef, 0x5, 0x7, 0x7, 0x1, 0x0, 0x6, 0x3, 0x3, 0x0, 0x8, 0x80, 0x0, 0x5, 0x8, 0x1, 0x3, 0x2, 0x10000, 0xfffffffffffff483, 0xb, 0x3, 0x5, 0x8, 0x5, 0x6, 0x8000000000000000, 0x9, 0x200, 0x2, 0x1, 0x8, 0x9ff, 0x2a19, 0x6, 0x8, 0x100, 0x3, 0x1, 0x5, 0x9091, 0x4d6, 0x2, 0x1, 0x7, 0x9, 0x5, 0x401, 0x77, 0x5, 0x4, 0x33a080d4, 0x8, 0x9, 0x2, 0x3b9, 0x1, 0x4, 0x1000, 0x6, 0x400, 0xf3e6, 0xfffffffffffffff8, 0x3, 0x3, 0x2, 0x98, 0x8, 0x0, 0x1, 0x9, 0xcd9b, 0xad, 0x5, 0x1d4e, 0x4, 0x1, 0x7, 0x3, 0x6, 0x9, 0xe8b, 0x5, 0x233, 0x8000000000000001, 0xf, 0x1000, 0x0, 0x7, 0xfffffffffffffffa, 0x3, 0x2000000000, 0x5, 0x3, 0x10, 0xd85, 0x3, 0x10, 0x100000000, 0x3, 0x3, 0x8001]}) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$FUSE(r0, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffda) sched_getparam(r2, &(0x7f0000002b80)) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000000)='./pipefs\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r4 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(r2, 0xd, &(0x7f00000003c0)={0x9, 0x8000000000000000}, &(0x7f0000000500)) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000340)) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0x1001) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) 2m29.3285835s ago: executing program 1 (id=734): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10169, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m29.308287947s ago: executing program 0 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() gettid() timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0xff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='udp 2', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/versions\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='-2 ', 0x3) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000100)="d5", 0xb840c58f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1b) close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x100}, {r2, 0x10c}, {}, {r2, 0x8657}, {r1, 0x4c0}], 0x5, &(0x7f00000002c0)={r5, r6+60000000}, &(0x7f0000000200)={[0x361]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) 2m28.072817652s ago: executing program 0 (id=736): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000003c0)) setreuid(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240), 0x2008, &(0x7f00000024c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x78, 0x6b]}}], [{@subj_type={'subj_type', 0x3d, 'upperdir'}}, {@hash}, {@fowner_lt}, {@audit}, {@pcr={'pcr', 0x3d, 0x22}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x36, 0x62, 0x61, 0x37, 0x0, 0x67, 0x30], 0x2d, [0x62, 0x61, 0x31, 0x63], 0x2d, [0x62, 0xc1, 0x61, 0x32], 0x2d, [0x66, 0x38, 0x33, 0x64], 0x2d, [0x32, 0x57, 0x39, 0x61, 0x39, 0x30, 0x64, 0x64]}}}, {@euid_eq}, {@measure}, {@euid_lt}]}) 2m28.070458864s ago: executing program 1 (id=737): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000080), 0x90) getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000003f00)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000003f40)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003f80), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000003fc0), 0x2, 0x141102) writev(r3, &(0x7f0000004000)=[{&(0x7f0000004040)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000004100)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000004140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000004180)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004200)={0x40, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2m26.703956325s ago: executing program 1 (id=740): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x1b0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x1, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x101, 0xffff0001, 0x0, 0xd25d, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m26.646493601s ago: executing program 1 (id=741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "ba853641a01fa9175c02fbafc6d972a2375894179d9a1aa5156b2343b8eb9ee72bbe6d439728895fd207cb8f72df8aff1130e69d9f24d2a454869dd076e9174b", 0x35}, 0x48, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000600)='logon\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r2}) add_key(&(0x7f0000000680)='asymmetric\x00', 0x0, &(0x7f00000006c0)="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", 0x1d8, r2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000200)) socket$tipc(0x1e, 0x5, 0x0) vmsplice(r4, &(0x7f0000002c00)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="4cda0b3d5fe533e260860fe0597a16a33ab210bd4e3e37bc5cad9f871b24bc27c5fce4c281e34164749e88196a45b4ea14b6611fa4ac6b81f7adf178ed1adf55ba05fdcbfc671d322590a9c94163f38ac08d2e8f472684ceeffd41ff0f7de09f8e9ea390d710e71ddc624bd2c0593d244adeed8c16ebe13b1008c65634502ff75aa12a3d04f1754b0ec00d5ba73f4fb2dc599ef2e425c15f0c4f55ac5866e25898f548b838191783991a737b3f9141d80957f6e67d75319b9ea059d58103a0b55096fb41f93cfebfda664f8b4c1ba732c040a56077b5b2f1f6a3c86f78107ed1cd3dcf09827c799837f3597a1c37bd818562", 0xf2}, {&(0x7f00000019c0)="f2aa46c72ae8b1ff191069ed7ce0bbadaffce85b199ffe596b7924db42213817311211c78dae21d0063e19f76bcb0e466873324976683db928f05741c8ea135a4bce4799eae1639ee10e4dd39cf76c6141f51d4ca4ca4746da24c8c2ba03b43ecfc90d938d72b86a8d43faf88d7dfcd8f00a7e074869a5", 0x77}, {&(0x7f0000001a40)="6bd62e2a76efcbd53b22436151bd5f7f192b0eb14d039ad769a10c63ceba1cd7a1c7bab1dacd712cb1bef342df16f7c30ee499f38d6ed38c78a8e6a8b8a2a96e3ffaf4dbf03b7ddb7b63d38bbee97e1f7895783dfe1c81aff06bc758714abdf19267c12b6ec010db94f9abb9727272daee6dd9f6bfefa7874fac9b52d79a2cda02f631c705e9ee96c4bb90fc7bea74eb4d48efccb1498b47e2aeee086985a902810e64b22a5ba437025031b939fe294a3c943a4e3644a28002", 0xb9}, {&(0x7f0000001b00)="c4f093526114e3fb0e65e975d9091db7905a2c23ebd2f55caea27d85220615ac666bc4f20b4ce34f261d5a5a9443762112f335cc70a3cef8639972b12a93a36ecc3280317eac084acc3b0fad672ba7d084ca", 0x52}, {&(0x7f0000001b80)="68baf0ac5a30304adaaa5dcc97714993d08c2d55f96e1bce17928551e99a7191a6c586ae42eba4524167bc84420981849b13293bb4f2a17b76eae6b8358249fdde9d85b301229ab8deafa64b1826a26957830453eafebcc0f8311d8dc17ab44c3492ff2f5f365cea54060661b1c125b7480bccdae4b106949e0147ab3d7c", 0x7e}, {&(0x7f0000001c00)="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", 0x1000}], 0x7, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002d00)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000002d80)='./proc\x00', &(0x7f0000002dc0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002e00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000002e40), 0x0, 0x0, 0x1) write(r5, &(0x7f0000002e80)='3', 0x4e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000100)=@gettaction={0x60, 0x32, 0x100, 0x70bd26, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x60}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl(r7, 0x40047438, &(0x7f0000000300)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) readv(r7, &(0x7f00000003c0), 0x37) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000002d61f68d15a64f5c38e981bda1ac5d35aa640e61f22f442c54a90ad8cd", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf25170000000c0006800800060000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24}, 0x20000000) semop(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x40, 0x800}, {0x2, 0xe95, 0x1000}, {0x1, 0x6, 0x800}, {0x0, 0xc, 0x1000}, {0x2, 0x7, 0x1800}, {0x0, 0x3, 0x800}, {0x2, 0x0, 0x1000}, {0x2, 0x2, 0x3800}, {0x2, 0x3, 0x1800}], 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), 0xffffffffffffffff) 2m25.87071546s ago: executing program 1 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() gettid() timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0xff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='udp 2', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/versions\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='-2 ', 0x3) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000100)="d5", 0xb840c58f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1b) close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x100}, {r2, 0x10c}, {}, {r2, 0x8657}, {r1, 0x4c0}], 0x5, &(0x7f00000002c0)={r5, r6+60000000}, &(0x7f0000000200)={[0x361]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) 2m17.006413944s ago: executing program 2 (id=775): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002480)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000024c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) (fail_nth: 1) 2m16.782840116s ago: executing program 2 (id=777): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x7ff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002480)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000024c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) 2m16.503745182s ago: executing program 2 (id=780): dup(0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@nested_load_code={0x12e, 0x56, {0x2, "0f072667450f2185360f01c4450f07f2abc744240051000000c744240200980000ff1c24656526f30f009e00480000440f01ca660f381d3266b823008ec8"}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x26, 0x60d, 0x8001}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x1, 0x6}}, @set_irq_handler={0xc8, 0x20, {0x72}}, @nested_amd_clgi={0x17f, 0x10}], 0x11e}) mbind(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) 2m16.496328036s ago: executing program 2 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000002c0)=0x405, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x4000) shutdown(0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f00000005c0)=""/28, 0xfffffffffffffdee) write$tun(r4, 0x0, 0xffe) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r6, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000004740)={0x12, 0x6, 0xfa00, {0x0, r6, r5}}, 0x18) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB="2373797a313a73797a311b11fb4484385d510222"], &(0x7f0000000100)='./mnt/trace_pipe\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="666c6f6352aab3ab854b9b7f6175746f63656c6c2c666c6f636b3d64796e2c666c6f636b3d810000006c2c6613b9f057be333719c43a9d6c6f756b3d737472696319e307c8d5b393dc0e8b742c666c6f636b3d776f743d072e2c647374656d5f"]) read(r1, &(0x7f0000000740)=""/16384, 0x4000) write$binfmt_script(r0, 0x0, 0x0) 2m15.588360397s ago: executing program 2 (id=783): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000002c0)=0x405, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x4000) shutdown(0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, 0x0, 0x0) write$tun(r4, 0x0, 0xffe) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r6, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000004740)={0x12, 0x6, 0xfa00, {0x0, r6, r5}}, 0x18) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB="2373797a313a73797a311b11fb4484385d510222"], &(0x7f0000000100)='./mnt/trace_pipe\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="666c6f6352aab3ab854b9b7f6175746f63656c6c2c666c6f636b3d64796e2c666c6f636b3d810000006c2c6613b9f057be333719c43a9d6c6f756b3d737472696319e307c8d5b393dc0e8b742c666c6f636b3d776f743d072e2c647374656d5f"]) read(r1, &(0x7f0000000740)=""/16384, 0x4000) write$binfmt_script(r0, 0x0, 0x0) 2m14.051361617s ago: executing program 2 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() gettid() timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0xff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='udp 2', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/versions\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='-2 ', 0x3) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000100)="d5", 0xb840c58f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1b) close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x100}, {r2, 0x10c}, {}, {r2, 0x8657}, {r1, 0x4c0}], 0x5, &(0x7f00000002c0)={r5, r6+60000000}, &(0x7f0000000200)={[0x361]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2m12.777174158s ago: executing program 33 (id=736): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000003c0)) setreuid(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240), 0x2008, &(0x7f00000024c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x78, 0x6b]}}], [{@subj_type={'subj_type', 0x3d, 'upperdir'}}, {@hash}, {@fowner_lt}, {@audit}, {@pcr={'pcr', 0x3d, 0x22}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x36, 0x62, 0x61, 0x37, 0x0, 0x67, 0x30], 0x2d, [0x62, 0x61, 0x31, 0x63], 0x2d, [0x62, 0xc1, 0x61, 0x32], 0x2d, [0x66, 0x38, 0x33, 0x64], 0x2d, [0x32, 0x57, 0x39, 0x61, 0x39, 0x30, 0x64, 0x64]}}}, {@euid_eq}, {@measure}, {@euid_lt}]}) 2m10.141350288s ago: executing program 34 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() gettid() timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0xff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='udp 2', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/versions\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='-2 ', 0x3) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000100)="d5", 0xb840c58f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1b) close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x100}, {r2, 0x10c}, {}, {r2, 0x8657}, {r1, 0x4c0}], 0x5, &(0x7f00000002c0)={r5, r6+60000000}, &(0x7f0000000200)={[0x361]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) 1m58.532369994s ago: executing program 35 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() gettid() timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0xff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='udp 2', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/versions\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='-2 ', 0x3) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000100)="d5", 0xb840c58f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1b) close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x100}, {r2, 0x10c}, {}, {r2, 0x8657}, {r1, 0x4c0}], 0x5, &(0x7f00000002c0)={r5, r6+60000000}, &(0x7f0000000200)={[0x361]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1m32.581113923s ago: executing program 5 (id=874): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7f, 0x200004d, 0x6}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000008000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0d54000000060a010400000000000000000500000008000b40000000002c0004802800018008000100666962001c00028008000240000000030800014000000003080003400000000a0900010073797a3000000000140000001100"], 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000005440)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000005540), 0xcaf8, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000006c0), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000002c0)=0x200000000) write$vhost_msg_v2(r5, &(0x7f0000000300)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f0000000400)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000440)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000500), 0x7f03) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000055c0)={0x1, 0x5, 0xcd}) pread64(r0, &(0x7f0000000700)=""/251, 0xfb, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000005600)={0x7, 0x52a1, 0x1e}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000005640)={0x1, &(0x7f0000005680)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1m31.44473455s ago: executing program 5 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000240)='\\\x00', 0x0, r3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000280)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x300, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000300)={0x1f}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 1m29.260548742s ago: executing program 5 (id=879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800, 0x0, 0x700}, @mpls={[], @ipv6=@tipc_packet={0xb, 0x6, "47cf2c", 0x2c, 0x6, 0x5764972646e6bd40, @dev={0xfe, 0x80, '\x00', 0xf}, @remote, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x1, 0xb, 0x2, 0x2, 0x0, 0x0, 0x1, 0x5, 0x4, 0x1, 0x0, 0x3, 0x3, 0x4e24, 0x4e24}, 0x2, 0x1}, 0x1, 0x2}, 0x1}}}}}}}, 0x62) 1m26.249035496s ago: executing program 5 (id=884): socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo/3\x00') mount(0x0, 0x0, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f0000001580)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='oom_adj\x00') syz_usb_connect(0x5, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000480), 0x1, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000004c0)={&(0x7f0000000500)=[{0x0, 0x3200, 0x0, 0x0}], 0x1}) write$cgroup_int(r2, &(0x7f0000000400)=0x800, 0x12) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000140)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f0000000380)='GPL\x00', 0x4, 0x1000, &(0x7f0000000580)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4000) write$vga_arbiter(r0, 0x0, 0xa) 1m22.804431946s ago: executing program 5 (id=890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000240)='\\\x00', 0x0, r3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000280)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x300, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000300)={0x1f}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 1m21.693835122s ago: executing program 5 (id=892): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r1, &(0x7f0000000040)='[!\\\x00', 0x100, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x4]}, {0x7c, 0x76, 0xfffff000, 0x8}}, 0x95, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9}, {[0x4, 0x0, 0xffffffff, 0x1]}, 0x0, 0xd7, &(0x7f0000000140)=""/215}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0xc}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000000340)={r3, @in={{0x2, 0x4e20, @local}}, 0x4e21}, &(0x7f0000000400)=0x90) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x25, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xe2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x41) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000600)={@loopback, @empty, 0x0}, &(0x7f0000000640)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x95, 0x200000, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x40, 0x10, 0xb6, 0x5b8a90d2}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r2, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x80, 0x787, 0x20, 0x2, {{0x27, 0x4, 0x3, 0x3d, 0x9c, 0x67, 0x0, 0xab, 0x2f, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x64, 0xffffffffffffffff, [{0x1, 0x4, ' {'}, {0x0, 0x12, "f68a91131f0b3030300ee0c66e9e5c14"}, {0x7, 0x8, "8a3bc6330bda"}, {0x1, 0x6, "7ca7b47d"}, {0x1, 0x9, "3dd187635e1da9"}, {0x6, 0x11, "c93a7cd0b3a3695f8f2078f5d1ad97"}, {0x6, 0x12, "38d5b05b610881c5d815034fab536dc9"}, {0x6, 0xe, "54d945b49e78a734f2254fcc"}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x73, [@local, @local, @loopback, @empty, @multicast2]}, @rr={0x7, 0x7, 0x31, [@rand_addr=0x64010100]}]}}}}}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'nicvf0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000b40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xe4, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1000}, 0x4000011) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000b80)=@svm={0x101, 0x1, 0x1080, {0x41000, 0x100000000}, {"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"}}) (async, rerun: 32) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 32) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000001e40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001c80)={0x178, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6c}}}}, [@NL80211_ATTR_SSID={0xb, 0x34, @random="868b518de0868d"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x123, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x4}}, @challenge={0x10, 0x1, 0x26}, @random={0xf, 0x67, "44d2c3283f326dde149f00c12bc1fdfbd7815e452d66e9591d9390918564ab0200fc989eed244e76fbb7d5d26a5aad76a9154daf2c84606387f50fd4f560abe79efddb423f9b534ba270fb9d025a0899ec274721ae8fc61458206a2c5563dd728e3b8a7ea50ca0"}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x6, 0x7, @device_a, 0x7, 0x13, 0x9}}, @measure_req={0x26, 0x1b, {0x40, 0xb, 0x9, "64a7c6ebfd241025f274456b752bf997342ee08446b06b56"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x4, 0x52, @device_a, 0x8, 0x3, 0xe}}, @preq={0x82, 0x57, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x4, 0x8, 0x1, @broadcast, 0x0, @value, 0x2, 0x0, 0x5, [{{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @device_b, 0x5}, {{}, @device_b, 0x6}, {{}, @broadcast, 0x1}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xff, 0xaf, 0x5}}]}, @NL80211_ATTR_SSID={0x21, 0x34, @random="cd83364ee1346308e3a898e0f5972112473f54f01a131f6d37fcc56e13"}]}, 0x178}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r13 = socket$inet(0x2, 0x800, 0x3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r13, 0x0, 0x41, &(0x7f0000001e80)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x40, r14, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x14}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004880) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x4010, r13, 0x61e8e000) (async, rerun: 64) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000002040)={0xfffffff9, 0x9}) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x4c3db000) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000002080)={0x800, 0xc468, 0x0, 0x3, 0xc, 0x7, 0xc94, 0xf6, r3}, 0x20) (async) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000002140)={{@align=0x714c, {0x6, 0x2, 0x0, 0x40}}, {{[0xa9c, 0x8, 0x1]}, 0x0, 0x2, 0xd44f, 0x0, &(0x7f00000020c0)=[{{@_ha_fsid={[0x7, 0x60]}, {0x8e, 0x1, 0x1, 0x8}}, 0xe, 0x0, ']\x00'}, {{@align=0x9, {0x4, 0x5, 0x1, 0x4}}, 0x9, 0x0, ',\x00'}]}}) (async, rerun: 64) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (rerun: 64) 1m6.570570972s ago: executing program 36 (id=892): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r1, &(0x7f0000000040)='[!\\\x00', 0x100, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x4]}, {0x7c, 0x76, 0xfffff000, 0x8}}, 0x95, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9}, {[0x4, 0x0, 0xffffffff, 0x1]}, 0x0, 0xd7, &(0x7f0000000140)=""/215}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0xc}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000000340)={r3, @in={{0x2, 0x4e20, @local}}, 0x4e21}, &(0x7f0000000400)=0x90) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x25, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xe2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x41) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000600)={@loopback, @empty, 0x0}, &(0x7f0000000640)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x95, 0x200000, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x40, 0x10, 0xb6, 0x5b8a90d2}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r2, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x80, 0x787, 0x20, 0x2, {{0x27, 0x4, 0x3, 0x3d, 0x9c, 0x67, 0x0, 0xab, 0x2f, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x64, 0xffffffffffffffff, [{0x1, 0x4, ' {'}, {0x0, 0x12, "f68a91131f0b3030300ee0c66e9e5c14"}, {0x7, 0x8, "8a3bc6330bda"}, {0x1, 0x6, "7ca7b47d"}, {0x1, 0x9, "3dd187635e1da9"}, {0x6, 0x11, "c93a7cd0b3a3695f8f2078f5d1ad97"}, {0x6, 0x12, "38d5b05b610881c5d815034fab536dc9"}, {0x6, 0xe, "54d945b49e78a734f2254fcc"}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x73, [@local, @local, @loopback, @empty, @multicast2]}, @rr={0x7, 0x7, 0x31, [@rand_addr=0x64010100]}]}}}}}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'nicvf0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000b40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xe4, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1000}, 0x4000011) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000b80)=@svm={0x101, 0x1, 0x1080, {0x41000, 0x100000000}, {"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"}}) (async, rerun: 32) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 32) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000001e40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001c80)={0x178, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6c}}}}, [@NL80211_ATTR_SSID={0xb, 0x34, @random="868b518de0868d"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x123, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x4}}, @challenge={0x10, 0x1, 0x26}, @random={0xf, 0x67, "44d2c3283f326dde149f00c12bc1fdfbd7815e452d66e9591d9390918564ab0200fc989eed244e76fbb7d5d26a5aad76a9154daf2c84606387f50fd4f560abe79efddb423f9b534ba270fb9d025a0899ec274721ae8fc61458206a2c5563dd728e3b8a7ea50ca0"}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x6, 0x7, @device_a, 0x7, 0x13, 0x9}}, @measure_req={0x26, 0x1b, {0x40, 0xb, 0x9, "64a7c6ebfd241025f274456b752bf997342ee08446b06b56"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x4, 0x52, @device_a, 0x8, 0x3, 0xe}}, @preq={0x82, 0x57, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x4, 0x8, 0x1, @broadcast, 0x0, @value, 0x2, 0x0, 0x5, [{{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @device_b, 0x5}, {{}, @device_b, 0x6}, {{}, @broadcast, 0x1}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xff, 0xaf, 0x5}}]}, @NL80211_ATTR_SSID={0x21, 0x34, @random="cd83364ee1346308e3a898e0f5972112473f54f01a131f6d37fcc56e13"}]}, 0x178}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r13 = socket$inet(0x2, 0x800, 0x3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r13, 0x0, 0x41, &(0x7f0000001e80)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x40, r14, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x14}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004880) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x4010, r13, 0x61e8e000) (async, rerun: 64) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000002040)={0xfffffff9, 0x9}) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x4c3db000) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000002080)={0x800, 0xc468, 0x0, 0x3, 0xc, 0x7, 0xc94, 0xf6, r3}, 0x20) (async) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000002140)={{@align=0x714c, {0x6, 0x2, 0x0, 0x40}}, {{[0xa9c, 0x8, 0x1]}, 0x0, 0x2, 0xd44f, 0x0, &(0x7f00000020c0)=[{{@_ha_fsid={[0x7, 0x60]}, {0x8e, 0x1, 0x1, 0x8}}, 0xe, 0x0, ']\x00'}, {{@align=0x9, {0x4, 0x5, 0x1, 0x4}}, 0x9, 0x0, ',\x00'}]}}) (async, rerun: 64) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (rerun: 64) 12.515364742s ago: executing program 9 (id=1050): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x9, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102392, 0x18ff8) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000019440)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000019480)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f00000194c0), 0x0) mkdir(&(0x7f0000019500)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000019540), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000019580), 0x2, 0x0) write(r1, &(0x7f00000195c0)='1', 0x1) removexattr(&(0x7f0000019540)='./cgroup/../file0\x00', &(0x7f0000019600)=@known='trusted.overlay.upper\x00') r6 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='1', 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 11.844444193s ago: executing program 4 (id=1051): r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r0) r1 = socket(0x23, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x1014c98, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r0]) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001ecdbcf20460d810021fc0102030109021b00010303900909044f0501aca74b"], 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083ef0840cc7d6e67db7700000003090220000100000000090400000eef01"], 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000140)={0x6, 'vlan1\x00', {0x1c}, 0x195}) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x2, 0x2, {0xa, 0x4e22, 0xff, @loopback, 0x1}}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x4008af21, &(0x7f00000005c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x3, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000400), 0x4) 11.124532429s ago: executing program 8 (id=1054): mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000001840)=ANY=[@ANYBLOB="66643d7bda646141138f5230db35ed697137ea3e1f61643ea999ec9d9f9344f5fcd194873b12b35edaeee85052885060d31aec3a4d4a3176f679bacdcb4c32665acdb69c47dc24a6bfd64b09670a6481d6b1d0381eb5a9d2f5ee02db2b2512265bfd551e0c213caa7a6b42df30c25667ef724a7686c8aa08"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000068e101d500"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000fc0), &(0x7f0000001000)=0x8) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_clone(0x10090900, 0x0, 0xfffffdb3, 0x0, 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000080)={0x8001, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000005e80)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000640), 0x0, &(0x7f0000000240)=[@rights={{0x34, 0x1, 0x1, [r3, r3, r2, r2, r7, r0, r1, r1, r2]}}], 0x38, 0x800}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="bbe3436a75dee39fc136f1f2767c7e30d2555a84e4347ec65af6ab5aa9bf00e815b811d371e23fdd42ffa4e637b29c1b5b1cd12bb77fadd54c1171181a58f11db1a651b65073f352bffa61a5a39712372537dd34525d415be0a424c3fcaf3052c09d87150900ed28624e8860473d921ad59eb42fe2092f3153f3e5afc121fa3df0f1f01772fad483c9e2bcfa739c40ea99615f1e32aa6224eadd9c0f13720d46c2ea327aa4ac39a2055a8a3e791ec541e5ddd1643ab4e11effa9d08f9b0caaf7b2656a6cbf24b412925d25b14bc8b55f21600016920ac0", 0xd7}, {&(0x7f00000007c0)="825e296e7524a57040e0092a92f4863fef30b1c719fddf2803a903005758daf87bdd6ccb4080d4eea91bfee98bd4865cfe3b3c408370c8044479b1ea797b0a83d2346df9005adb3dbd8bc8dd687c135900f752f5b920eb45e5a4f99f3f9adac3fce6550d18eb3b13fc9b1e77a785eb0f1aa1f624850c", 0x76}, {&(0x7f0000000840)="e163b31066bd090042e9ea607e3784d5775267c95666", 0x16}], 0x3, &(0x7f0000005c40)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x4000}}, {{&(0x7f0000005c80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005d40)=[{&(0x7f0000005d00)="469edbc4e29e5f1473ac0f0b0dda40d5f73c3d687281f1c50f156f108bf3ce73ddcc32e7e319412fa282a349f95b667ded611aae4ade5b84176511", 0x3b}], 0x1, &(0x7f0000005dc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r1, r2]}}, @rights={{0x24, 0x1, 0x1, [r2, r0, r3, 0xffffffffffffffff, r6]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x88, 0x10}}], 0x3, 0x0) fanotify_init(0x2, 0x2) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) mount(&(0x7f0000000380)=@filename='./dev/sda1\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000440)='./file0\x00') r8 = open(&(0x7f0000000480)='./bus\x00', 0x4c27e, 0x10) fallocate(r8, 0x0, 0x0, 0x1000f4) sendfile(r8, r8, 0x0, 0x40000000800) r9 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x80042, 0x4d) fallocate(r9, 0x100000000000011, 0x2000, 0x2f93) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000500), 0x4) write$bt_hci(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="0000023f3201"], 0x138) 11.014223386s ago: executing program 8 (id=1055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000ed3300000000000000"], 0x50) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x8}) write$sndseq(r1, &(0x7f0000000240)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x111, 0x2}}, 0x20) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000004c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000003b00010329bd7000fbdbdf25070000007f34a6d34112a9be351db45810090963a6ab883d9e6c8fee4ec951e773cc53a3b4b06bd62ecde05cbbf094afa087923f54b439746cb3d9afb368e1b4a171d4886806b9eba6c14ce05ce62709110a645787560ae952b8cd9c7860aeaddc4bd34061d11deabb813d1d6d648b07b4ede8e1ce79f343a554ed98cecdc65369f7c466de"], 0x14}, 0x1, 0x0, 0x0, 0x240441c2}, 0x2004c844) 9.957731554s ago: executing program 6 (id=1058): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x1b0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x1, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x101, 0xffff0001, 0x0, 0xd25d, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 9.626128082s ago: executing program 9 (id=1060): add_key(&(0x7f0000002340)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_ublk_setup_io_uring(0x801d, &(0x7f00000012c0)={0x0, 0xb04, 0x2, 0x2, 0x17c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000001340)=0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000000c0)="93", 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x210800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgid(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01060000000000000000020000000900010073797a30000000002c000000030a01060000000000000000020000000900010073797a30000000000900030073797a300000000044000000090a01060000000000000000020200000900010073797a30000000000900020073797a300000000008000a40000000010800054000000004080003400000002060000000060a01060000000000000000020000000900010073797a30000000000900020073797a300000000034000480300001800b00010064796e7365740000200002800900010073797a30000000000800034000000000080004"], 0x118}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f0000000600)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000640)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) bind$netlink(r4, &(0x7f0000000680)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000780)={0x20, 0x7, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 9.624853123s ago: executing program 8 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000040)={0xa, 0x9}, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfffffffffffffead) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000980)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000a40)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000100)="d4403181869569775e5951edb2c94729c4554d98af19cb012191"}, {0x0}], 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000ac0)={0x55, 0x7, 0x400b, 0xb, 0x100, 0x8100}) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x505dc3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="18020000fffffe7f0000000008000000950000d66e394f528cb823e76584c91ef6000000000013b2e038996010e0f1c380a25f564adbfab5a6da6d00689684b0af7c7ba1a333306f45f65efd40f5aae1dcec2ece060eff3ef41615235db548d07d0a8d1e26f070c6ac9c9a368e2ad3f7cd2f2f7b0e99d94134d1f663a61b2acaf6244c8bc3e9c5d533"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x1, &(0x7f0000000800)=0x7) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x884}, 0x48000) sendmsg$NFT_BATCH(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400100001000000000000000000000000000000eb7dc8221c817babc097a33f84016afaafe900e35600010073797a3000000000140000001100010000000010000000000000000a00000000001f00009296230000c1fb2305"], 0x54}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x3e, 0x0, &(0x7f0000000480)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_dev$amidi(&(0x7f0000000940), 0x2, 0x10440) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r7, 0x40045731, &(0x7f0000000a80)=0x8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x1, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0xd, 0x1, 0x9}, 0x0, 0x0) 9.6002107s ago: executing program 6 (id=1062): add_key(&(0x7f0000002340)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_ublk_setup_io_uring(0x801d, &(0x7f00000012c0)={0x0, 0xb04, 0x2, 0x2, 0x17c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000001340)=0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000000c0)="93", 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x210800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgid(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f0000000600)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000640)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) bind$netlink(r4, &(0x7f0000000680)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000780)={0x20, 0x7, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 9.475019208s ago: executing program 7 (id=1063): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7f, 0x200004d, 0x6}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000005440)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000005540), 0xcaf8, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) ioprio_set$uid(0x3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000002c0)=0x200000000) write$vhost_msg_v2(r5, &(0x7f0000000300)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) chdir(0x0) r6 = open(&(0x7f0000000400)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000440)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000500), 0x7f03) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000055c0)={0x1, 0x5, 0xcd}) pread64(r1, &(0x7f0000000700)=""/251, 0xfb, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000005600)={0x7, 0x52a1, 0x1e}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000005640)={0x1, &(0x7f0000005680)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 9.474285708s ago: executing program 4 (id=1064): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) 8.607315443s ago: executing program 8 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x870bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xc, 0xffff}, {0xb, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) syz_usb_connect$midi(0x0, 0x41, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x3, 0x88, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x40, [], [{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0xf2, 0xf, {0x14, 0x25, 0x1, 0x10, "0835b04d4efbd56e517ce5e485d7300d"}}}]}}}}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000540)={r7, 0x0, 0x0}, 0xd) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000080), &(0x7f0000000680)=0x4) tkill(r5, 0xb) 8.346334178s ago: executing program 4 (id=1066): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x11, 0x481, 0x0, &(0x7f00000000c0)) truncate(0x0, 0x2fffffd) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x40010) 7.95170954s ago: executing program 7 (id=1067): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x800001d, 0x0) (fail_nth: 3) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x1, 0x1ffc, 0x3a}, 0x2c) 5.167519139s ago: executing program 4 (id=1068): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000080), 0x90) getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000003f00)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000003f40)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003f80), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000003fc0), 0x2, 0x141102) writev(r3, &(0x7f0000004000)=[{&(0x7f0000004040)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000004100)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000004140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000004180)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004200)={0x40, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004280)={&(0x7f00000042c0)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x48040) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000004340)='./binderfs/custom0\x00', 0x2, 0x0) r9 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BINDER_FREEZE(r8, 0x400c620e, &(0x7f0000004380)={r9, 0x0, 0x6}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 5.131445936s ago: executing program 6 (id=1069): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x0, r2, 0x1}) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000580)=0x3, 0x2) connect$bt_sco(r0, &(0x7f00000005c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r3 = open(&(0x7f0000000400)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r3, 0x400, 0x1) accept4$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14, 0x180000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000001c0)='27', 0x2) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x8000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x44) write(r4, &(0x7f00000002c0)='3', 0x4e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x67673f72, 0x26, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x40000000) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x1) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r6, 0x89ec, &(0x7f00000004c0)={0x40, 0x6}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x50041) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) chdir(&(0x7f0000000000)='./file0\x00') 5.073543344s ago: executing program 8 (id=1070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x67, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000280)="340000001a0001000100e000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) r6 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r6, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 5.036090996s ago: executing program 7 (id=1071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x40241, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$FIOCLEX(r1, 0x5451) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x318, 0x0) r2 = gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000200), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x18, r3, 0x0, 0x80) setpgid(r3, r3) io_uring_setup(0x8, &(0x7f0000000240)={0x0, 0x8da2, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001080)={'syzkaller1\x00', 0xc201}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110012f5be1080b0c09a19e9e010203010902120001080050080904280100a9ff5609"], &(0x7f0000000040)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x60, 0x3, 0xa, 0xff}, 0x1b, &(0x7f00000000c0)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xc0, 0xcf}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x8, 0xf, 0x6}]}}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x2, 0x2, 0x7, 0x0, r2}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000140)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000640)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000680)={0x2, 0x0, @multicast1}, 0x10) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x4, 0xffff, 0x2b, 0x40}, @ipv6=@icmpv6={0x7, 0x6, "0158ca", 0x324, 0x3a, 0x1, @local, @remote, {[@srh={0x33, 0x2, 0x4, 0x1, 0x4, 0x0, 0x7ff, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x0, 0x0, 0x3, 0x1, 0x0, 0x3, 0x65}, @fragment={0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x62, 0x11, '\x00', [@generic={0xc, 0x88, "74e789228dabb7d22e77fd1afb792cb0bf09b42726ba0ce88b2c13ac6d69126b2984c15469c472559c530119fa150231bae8817ba348decc44625a338a29ca0f531444acd2b51dfd1c1e1a1aa6e5136eb4f8e23030da33ba4ea5e79fe8923dde66e25b69c453e52096f39febf6ca4760adf11891757e1198f43315ee9d49a176f63b5bf99862a3b2"}, @enc_lim={0x4, 0x1, 0xc}]}, @srh={0x2e, 0x10, 0x4, 0x8, 0x8, 0x78, 0x7, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x62, 0x8, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1]}, @fragment={0x0, 0x0, 0x6, 0x1, 0x0, 0x11, 0x66}, @srh={0x6c, 0xa, 0x4, 0x5, 0x0, 0x0, 0xe8, [@local, @empty, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x2c, 0x14, 0x4, 0xa, 0xdf, 0x68, 0x68a, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1e}, @private1, @local, @dev={0xfe, 0x80, '\x00', 0x10}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3f}]}], @mlv2_query={0x82, 0x0, 0x0, 0x2, 0x7, @local, 0x5, 0x1, 0x8, 0xd5, 0x7, [@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, @empty, @mcast2, @empty]}}}}, 0x35a) 4.98198934s ago: executing program 9 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000003b00010329bd7000fbdbdf25070000007f34a6d34112a9be351db45810090963a6ab883d9e6c8fee4ec951e773cc53a3b4b06bd62ecde05cbbf094afa087923f54b439746cb3d9afb368e1b4a171d4886806b9eba6c14ce05ce62709110a645787560ae952b8cd9c7860aeaddc4bd34061d11deabb813d1d6d648b07b4ede8e1ce79f343a554ed98cecdc65369f7c466de"], 0x14}, 0x1, 0x0, 0x0, 0x240441c2}, 0x2004c844) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000140) 4.158231142s ago: executing program 9 (id=1073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000020a01010000000000000000010000000900010073797a3000"], 0x248}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r1, &(0x7f0000001900)={0x2020}, 0xfffffc7a) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003980), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000003ac0)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a80)={&(0x7f00000039c0)={0x8c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xb09, 0x7}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x41}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf9}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa, 0xac, "eb2dfcd84c53"}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40040d1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000280)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) tgkill(r3, r3, 0x2d) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r7, 0x4020565b, &(0x7f0000000080)={0x0, 0x7}) close_range(r6, 0xffffffffffffffff, 0x0) 3.820112824s ago: executing program 4 (id=1074): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mkdir(&(0x7f0000019480)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019640)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000019700)='3', 0x4e) futex_waitv(&(0x7f0000019740)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000194c0)='./config\x00', &(0x7f0000019500)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000019540)='./config/usb_gadget/g1\x00', 0x0) mkdir(&(0x7f0000019580)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000195c0)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) read(r5, &(0x7f0000019640), 0x64) capset(&(0x7f0000019680)={0x20080522}, &(0x7f00000196c0)={0x200002, 0x200003, 0x803, 0xffffff7b, 0x55ea}) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) r7 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/make-it-fail\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='1', 0x1) 2.447444331s ago: executing program 9 (id=1075): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) 1.959878655s ago: executing program 4 (id=1076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x8000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1d2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, 0x0, r3) mkdir(&(0x7f0000000400)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) write(r1, &(0x7f0000000100)='3', 0x1) listen(r0, 0x4000000) 1.4688927s ago: executing program 8 (id=1077): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x6f4000) r1 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x7, 0x2) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000900)={0xcd25}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0xd, 0x3, &(0x7f00000006c0)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c, 0x4}}, &(0x7f0000000700)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='e:\fV', 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = open$dir(&(0x7f00000004c0)='./tracing/dynamic_events\x00', 0x602042, 0x39) fanotify_mark(r2, 0x1, 0x1020, r4, &(0x7f0000000a80)='./tracing/dynamic_events\x00') shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000980)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000009c0)=0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000835be796f590d97bb988a0f358dd19c43b02b94a179ac0ced6a07e911b57b5b599569e9fb26246ac1501087195d3b12b06", @ANYRES16=r9, @ANYBLOB="050000000000000000005d00000008", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "295c29ecdc587695"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x6, 0x3}, {0xec}, {0xe0, 0x3}, {0x4}, {0xff}, {0xf, 0x9}, {0x2, 0x4}, {0x0, 0x4}, {0x9, 0x4}, {0x7, 0x4}, {0xf9, 0x7}, {0x9, 0x7}], "fd10aa30111d5718"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "5531b37acfb4ef9d"}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044840}, 0xc040) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) 1.384540209s ago: executing program 9 (id=1078): mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x0, 0x0, 0x4007) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x1022002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net\x00') io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f00000002c0)={0x6, 0x0, 0x0, &(0x7f0000000300)}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000300)) r3 = socket$inet6(0xa, 0x805, 0x0) io_setup(0x9, &(0x7f0000000340)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_debug_messages', 0x28201, 0x1ca) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) rt_sigprocmask(0x0, &(0x7f0000000640)={[0xfffffffffffffffd]}, 0x0, 0x8) getsockopt$inet6_int(r3, 0x29, 0x19, 0x0, &(0x7f0000000680)=0xffffffffffffff84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000380)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() sync() sync() ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22ffe6) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x406140, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.331949078s ago: executing program 7 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000001c0)=0x8, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) (fail_nth: 3) 1.192026288s ago: executing program 7 (id=1080): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="620ad0ff45002c00620ad4ff00000000620ad8ff40060000620adcff7f000001620ae0ff7f000001620ae4ff12345678620ae8ff15223344620aecff00000000620af0ff60021000620af4ff00000000620af8ff1c0405b4620afcff00000000bfa100000000000007010000d0ffffffbfa200000000000007020000e4ffffffb70300001800000085000000cc000000b70000000200000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r0, 0x0, 0x22, 0x0, &(0x7f0000000e80)="00000000000100000000000208004500002800000000400600007f0000017f000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.089283836s ago: executing program 6 (id=1081): prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381"], 0x460}}, 0x0) 1.077308623s ago: executing program 7 (id=1082): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000600)={'vlan1\x00', 0x3}) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="10031200e0ff02000200", 0xa, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) (async) r3 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x3, 0x10000) read$hidraw(r3, &(0x7f0000000200)=""/130, 0x82) (async, rerun: 32) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f0000000100)=0x3, 0x4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r9 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) (async) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) (async) syz_emit_ethernet(0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb00030c0c03"], 0x0) socket$kcm(0x29, 0x6, 0x0) 937.519872ms ago: executing program 6 (id=1083): ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000140)=0x4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='blake2bjh#n\xfb\xd7E-256-generic\x00\v\xe5\xa1\"\x05<\x99\xd3U\xf8\x9cb\x95\xd7\xc7\xe1\xb7\xcdn]\xcb\x05\x7f\xeb\xcf\xbfdGQ\xbaY\xf7,\x1d\x98\xbfp\x17\x03v\xda\a\xa6PWfS\x81K\xb4#\xfb\x01\xed\x91\x81[\xf4O\fdl_\xb7\xc0\xde\xcdS\xef\xb2\x90\xc4\x17\xd7I\x9a6l\xa5\xf1\xe0i\x8d\v\xd2\x93$\xa7u\x15\x9d^\xafE\xd7\xa5\xac\xa0ss\x06\x05\x9a\xc1\x0f\x98\xf0\x96\x16\xa7K\x7fl\x16\xd9\xc2\r`\xde\xf4\x16r\xc4r\x9b(\xbd\x1a(\n\xc8 \x9f\x94\x00\x14\xf5<\xd1\xe3\x06\x81\\\xe4\x03\xef\x11\x99\xe4D\xb3\xad\x0e\x1eP\xdc\x13\x818no\xd4p\xefp]\xbb\be\xca\xf1l(\x94bZ\xe2\r\xa17\xc9\xac\xe79\xbfS\xf2`\xba\x1f?\v\x83\xb9X\x00\xde\xbe\x05\xfd\xe6\xa9?', 0x0) request_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x561101) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000080)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r3, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x1, 0x20000}, 0xc) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000100)=0x10, 0x4) recvmmsg(r3, &(0x7f0000000140), 0x3ffffffffffff81, 0x2, 0x0) write(r3, &(0x7f0000000180)="b9", 0x1) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) 0s ago: executing program 6 (id=1084): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x19b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfc, 0x6, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0xffffffffffffffed, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x23, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="61cc23d4941575be99b80c562e9872f8", 0x10}], 0x100000000000028f, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000500), 0x185301, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)) ppoll(&(0x7f0000000580)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f00000005c0)) r1 = getpid() syz_pidfd_open(r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='mtd0\x00', &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./mnt/fillfile\x00', 0x42, 0x9f) mount_setattr(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', 0x8000, &(0x7f00000007c0)={0x6, 0x8a, 0x20000}, 0x20) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x492400) r2 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='+%/-\x00', 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f00000001c0)='/\tQ\xcam:E\n\xa0\xa0\xbd\x15\x83\x1c\x8e\x93\x00\xe8\x026r\x05\x17k\xb8\xcfX)9Ld\xce@\xa8\xcew\x10D\xb1\x92\x8fb@\x1aqP<+3`\xacq\x97\x1e\x1c\x101\xa7\x1e\xd6%\x8ft', &(0x7f0000000140)) keyctl$update(0x2, r2, &(0x7f0000000180)="9e0a978cf26433d6153bedf0d38fb5bc07d77b", 0x13) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000200)={0x37, 0x800000, 0x8, 0x9, 0x8000}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.376821][ T9383] RSP: 002b:00007f9936312028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.376840][ T9383] RAX: ffffffffffffffda RBX: 00007f9935625fa0 RCX: 00007f993539e1d9 [ 459.376852][ T9383] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 459.376863][ T9383] RBP: 00007f9936312090 R08: 0000000000000000 R09: 0000000000000000 [ 459.376875][ T9383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.376885][ T9383] R13: 00007f9935626038 R14: 00007f9935625fa0 R15: 00007fff77540ad8 [ 459.376914][ T9383] [ 459.865981][ T9385] FAULT_INJECTION: forcing a failure. [ 459.865981][ T9385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.866011][ T9385] CPU: 1 UID: 0 PID: 9385 Comm: syz.6.875 Tainted: G L syzkaller #0 PREEMPT(full) [ 459.866027][ T9385] Tainted: [L]=SOFTLOCKUP [ 459.866031][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 459.866038][ T9385] Call Trace: [ 459.866042][ T9385] [ 459.866047][ T9385] dump_stack_lvl+0x100/0x190 [ 459.866068][ T9385] should_fail_ex.cold+0x5/0xa [ 459.866085][ T9385] _copy_from_iter+0x43a/0x1690 [ 459.866106][ T9385] ? __pfx__copy_from_iter+0x10/0x10 [ 459.866123][ T9385] ? lock_acquire+0x1d1/0x380 [ 459.866136][ T9385] ? __napi_alloc_frag_align+0x11a/0x560 [ 459.866154][ T9385] ? find_held_lock+0x2b/0x80 [ 459.866171][ T9385] ? __napi_alloc_frag_align+0x271/0x560 [ 459.866190][ T9385] skb_copy_datagram_from_iter+0x11f/0x720 [ 459.866207][ T9385] ? __local_bh_enable_ip+0xa5/0x120 [ 459.866220][ T9385] ? lockdep_hardirqs_on+0x7d/0x110 [ 459.866236][ T9385] ? __netdev_alloc_frag_align+0xcb/0x120 [ 459.866255][ T9385] tun_get_user+0x1967/0x3da0 [ 459.866280][ T9385] ? __lock_acquire+0x5c0/0x1f40 [ 459.866293][ T9385] ? __pfx_tun_get_user+0x10/0x10 [ 459.866311][ T9385] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 459.866329][ T9385] ? find_held_lock+0x2b/0x80 [ 459.866345][ T9385] ? tun_get+0x191/0x370 [ 459.866360][ T9385] ? tun_get+0x191/0x370 [ 459.866380][ T9385] tun_chr_write_iter+0xdc/0x200 [ 459.866399][ T9385] do_iter_readv_writev+0x6f7/0x930 [ 459.866414][ T9385] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 459.866426][ T9385] ? avc_policy_seqno+0x9/0x20 [ 459.866438][ T9385] ? selinux_file_permission+0x8f/0x6d0 [ 459.866461][ T9385] ? bpf_lsm_file_permission+0x9/0x10 [ 459.866486][ T9385] ? security_file_permission+0x76/0x210 [ 459.866514][ T9385] ? rw_verify_area+0xce/0x6d0 [ 459.866537][ T9385] vfs_writev+0x360/0xdd0 [ 459.866553][ T9385] ? __lock_acquire+0x5c0/0x1f40 [ 459.866568][ T9385] ? __pfx_vfs_writev+0x10/0x10 [ 459.866585][ T9385] ? lock_acquire+0x1d1/0x380 [ 459.866597][ T9385] ? __fget_files+0x34/0x3d0 [ 459.866619][ T9385] ? __fget_files+0x21f/0x3d0 [ 459.866640][ T9385] ? do_writev+0x13e/0x340 [ 459.866651][ T9385] do_writev+0x13e/0x340 [ 459.866664][ T9385] ? __pfx_do_writev+0x10/0x10 [ 459.866684][ T9385] do_syscall_64+0x123/0x790 [ 459.866702][ T9385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.866714][ T9385] RIP: 0033:0x7f993539e1d9 [ 459.866725][ T9385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.866735][ T9385] RSP: 002b:00007f9936312028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 459.866747][ T9385] RAX: ffffffffffffffda RBX: 00007f9935625fa0 RCX: 00007f993539e1d9 [ 459.866754][ T9385] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000003 [ 459.866761][ T9385] RBP: 00007f9936312090 R08: 0000000000000000 R09: 0000000000000000 [ 459.866768][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.866774][ T9385] R13: 00007f9935626038 R14: 00007f9935625fa0 R15: 00007fff77540ad8 [ 459.866790][ T9385] [ 460.813748][ T31] audit: type=1400 audit(1791737316.951:871): avc: denied { write } for pid=9391 comm="syz.8.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 460.867546][ T31] audit: type=1400 audit(1791737317.001:872): avc: denied { read } for pid=9391 comm="syz.8.867" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 460.867823][ T31] audit: type=1400 audit(1791737317.001:873): avc: denied { open } for pid=9391 comm="syz.8.867" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 463.040963][ T5616] Bluetooth: hci5: command 0x0406 tx timeout [ 463.063347][ T460] rpcbind: server 127.0.0.1 not responding, timed out [ 463.172913][ T2246] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 463.354644][ T2246] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 463.364879][ T2246] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.408204][ T2246] usb 9-1: config 0 descriptor?? [ 463.615605][ T2246] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 464.193620][ T2246] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 464.193647][ T2246] [drm] Initialized udl on minor 1 [ 464.314599][ T2246] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 464.341212][ T2246] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 464.360690][ T2246] usb 9-1: USB disconnect, device number 2 [ 464.402006][ T5705] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 464.552068][ T5705] usb 7-1: Using ep0 maxpacket: 8 [ 464.554062][ T5705] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 464.557631][ T5705] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.557676][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.564434][ T5705] usb 7-1: config 0 descriptor?? [ 464.587046][ T5705] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 466.172233][ T31] audit: type=1400 audit(1791737322.301:874): avc: denied { connect } for pid=9412 comm="syz.6.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 466.177812][ T31] audit: type=1400 audit(1791737322.311:875): avc: denied { setattr } for pid=9412 comm="syz.6.881" path="/dev/sequencer" dev="devtmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 466.245739][ T30] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 466.392204][ T5705] gspca_vc032x: reg_w err -110 [ 466.392291][ T5705] vc032x 7-1:0.0: probe with driver vc032x failed with error -110 [ 467.122587][ T30] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 467.195157][ T30] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.195191][ T30] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 467.195214][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 467.199037][ T30] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 467.199063][ T30] usb 8-1: Product: syz [ 467.199078][ T30] usb 8-1: Manufacturer: syz [ 467.199094][ T30] usb 8-1: SerialNumber: syz [ 467.201791][ T30] usb 8-1: config 0 descriptor?? [ 467.210472][ T30] usb 8-1: selecting invalid altsetting 0 [ 467.281047][ T9432] 9p: Bad value for 'rfdno' [ 467.292176][ T31] audit: type=1400 audit(1791737323.431:876): avc: denied { map } for pid=9431 comm="syz.4.885" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 467.326087][ T2246] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 467.522454][ T2246] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 467.523368][ T2246] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 467.525475][ T2246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.525499][ T2246] usb 6-1: Product: syz [ 467.525514][ T2246] usb 6-1: Manufacturer: syz [ 467.525528][ T2246] usb 6-1: SerialNumber: syz [ 467.583726][ T30] usb 8-1: USB disconnect, device number 4 [ 467.614666][ T2246] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 467.615010][ T2246] dvb-usb: bulk message failed: -22 (3/0) [ 467.698721][ T2246] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.714224][ T2246] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 467.714279][ T2246] usb 6-1: media controller created [ 467.757638][ T31] audit: type=1400 audit(1791737323.891:877): avc: denied { write } for pid=9439 comm="syz.4.886" name="nullb" dev="configfs" ino=3586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 467.770205][ T9440] null_blk: nullb1: using native zone append [ 467.790049][ T5789] usb 7-1: USB disconnect, device number 6 [ 467.819714][ T9440] null_blk: disk nullb1 created [ 467.819827][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 467.845251][ T9428] dvb-usb: bulk message failed: -22 (2/0) [ 467.848860][ T9428] syz.5.884 (9428): /proc/9428/oom_adj is deprecated, please use /proc/9428/oom_score_adj instead. [ 468.382714][ T2246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.413172][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 468.502524][ T9] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 468.503456][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 33, changing to 9 [ 468.503485][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1800, setting to 1024 [ 468.503530][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.508670][ T9] usb 9-1: config 0 descriptor?? [ 468.509349][ T9437] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 468.599259][ T2246] DVB: Unable to find symbol mt352_attach() [ 468.599279][ T2246] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 468.601539][ T2246] dvb-usb: bulk message failed: -22 (3/0) [ 468.617221][ T2246] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 468.736751][ T9430] netlink: 'syz.8.882': attribute type 83 has an invalid length. [ 468.803095][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.7.889'. [ 468.865779][ T9050] usb 6-1: USB disconnect, device number 10 [ 468.913684][ T9050] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 468.945674][ T9] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 468.962978][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.000E/input/input11 [ 469.117993][ T9] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 469.177046][ T9] usb 9-1: USB disconnect, device number 3 [ 469.318404][ T9452] fido_id[9452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 469.570088][ T31] audit: type=1400 audit(1791737325.701:878): avc: denied { create } for pid=9457 comm="syz.4.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 469.599901][ T31] audit: type=1400 audit(1791737325.731:879): avc: denied { ioctl } for pid=9457 comm="syz.4.888" path="socket:[25040]" dev="sockfs" ino=25040 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 471.169095][ T5705] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 471.779453][ T9467] ip_tables: iptables: counters copy to user failed while replacing table [ 471.817620][ T5705] usb 5-1: unable to get BOS descriptor or descriptor too short [ 471.818238][ T5705] usb 5-1: not running at top speed; connect to a high speed hub [ 471.818269][ T5705] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.819907][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.819929][ T5705] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.841595][ T5705] usb 5-1: string descriptor 0 read error: -22 [ 471.841708][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.855427][ T5705] usb 5-1: 0:2 : does not exist [ 471.966543][ T31] audit: type=1400 audit(1791737328.101:880): avc: denied { ioctl } for pid=9468 comm="syz.8.893" path="socket:[25770]" dev="sockfs" ino=25770 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 472.247997][ T31] audit: type=1400 audit(1791737328.341:881): avc: denied { write } for pid=9457 comm="syz.4.888" name="usb_gadget" dev="configfs" ino=3811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 472.977255][ T5705] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 472.982592][ T5705] usb 5-1: Warning! Unlikely big volume step count (=6566), linear volume or wrong cval->res? [ 472.982616][ T5705] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = -28324/-21758/1 [ 472.988013][ T5705] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 472.993189][ T5705] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 473.075331][ T5705] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 473.106846][ T5705] usb 5-1: USB disconnect, device number 45 [ 473.672810][ T8228] udevd[8228]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.012174][ T9492] FAULT_INJECTION: forcing a failure. [ 474.012174][ T9492] name failslab, interval 1, probability 0, space 0, times 0 [ 474.012207][ T9492] CPU: 0 UID: 0 PID: 9492 Comm: syz.6.898 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.012237][ T9492] Tainted: [L]=SOFTLOCKUP [ 474.012244][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 474.012255][ T9492] Call Trace: [ 474.012265][ T9492] [ 474.012273][ T9492] dump_stack_lvl+0x100/0x190 [ 474.012312][ T9492] should_fail_ex.cold+0x5/0xa [ 474.012343][ T9492] should_failslab+0xc2/0x120 [ 474.012373][ T9492] __kmalloc_noprof+0xfc/0x840 [ 474.012398][ T9492] ? offload_action_alloc+0x29/0xf0 [ 474.012425][ T9492] offload_action_alloc+0x29/0xf0 [ 474.012447][ T9492] tcf_action_offload_add_ex+0x1b6/0x7b0 [ 474.012481][ T9492] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 474.012516][ T9492] ? __lock_acquire+0x5c0/0x1f40 [ 474.012566][ T9492] ? tunnel_key_get_fill_size+0x11d/0x540 [ 474.012598][ T9492] tcf_action_init+0x679/0xa60 [ 474.012627][ T9492] ? __pfx_tcf_action_init+0x10/0x10 [ 474.012671][ T9492] ? __kernel_text_address+0xd/0x30 [ 474.012692][ T9492] ? unwind_get_return_address+0x59/0xa0 [ 474.012723][ T9492] ? arch_stack_walk+0xa6/0xf0 [ 474.012774][ T9492] ? __lock_acquire+0x5c0/0x1f40 [ 474.012812][ T9492] tcf_action_add+0xed/0x5c0 [ 474.012840][ T9492] ? __pfx_tcf_action_add+0x10/0x10 [ 474.012908][ T9492] ? __nla_parse+0x40/0x60 [ 474.012937][ T9492] tc_ctl_action+0x2e3/0x470 [ 474.012961][ T9492] ? __pfx_tc_ctl_action+0x10/0x10 [ 474.012995][ T9492] ? __pfx_tc_ctl_action+0x10/0x10 [ 474.013017][ T9492] rtnetlink_rcv_msg+0x3c9/0xe90 [ 474.013043][ T9492] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.013075][ T9492] ? ref_tracker_free+0x37e/0x6c0 [ 474.013101][ T9492] netlink_rcv_skb+0x159/0x420 [ 474.013133][ T9492] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.013158][ T9492] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.013200][ T9492] ? netlink_deliver_tap+0x1ae/0xcc0 [ 474.013236][ T9492] netlink_unicast+0x585/0x850 [ 474.013270][ T9492] ? __pfx_netlink_unicast+0x10/0x10 [ 474.013308][ T9492] netlink_sendmsg+0x8b0/0xda0 [ 474.013343][ T9492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.013377][ T9492] ? selinux_socket_sendmsg+0x198/0x2f0 [ 474.013410][ T9492] ____sys_sendmsg+0xa4d/0xbe0 [ 474.013433][ T9492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.013466][ T9492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.013506][ T9492] ___sys_sendmsg+0x190/0x1e0 [ 474.013533][ T9492] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.013559][ T9492] ? futex_wait+0x11e/0x370 [ 474.013590][ T9492] ? find_held_lock+0x2b/0x80 [ 474.013638][ T9492] __sys_sendmsg+0x160/0x210 [ 474.013662][ T9492] ? __pfx___sys_sendmsg+0x10/0x10 [ 474.013698][ T9492] do_syscall_64+0x123/0x790 [ 474.013730][ T9492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.013753][ T9492] RIP: 0033:0x7f993539e1d9 [ 474.013770][ T9492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.013796][ T9492] RSP: 002b:00007f9936312028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.013816][ T9492] RAX: ffffffffffffffda RBX: 00007f9935625fa0 RCX: 00007f993539e1d9 [ 474.013829][ T9492] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 474.013842][ T9492] RBP: 00007f9935435888 R08: 0000000000000000 R09: 0000000000000000 [ 474.013853][ T9492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.013865][ T9492] R13: 00007f9935626038 R14: 00007f9935625fa0 R15: 00007fff77540ad8 [ 474.013894][ T9492] [ 474.026565][ T9491] FAULT_INJECTION: forcing a failure. [ 474.026565][ T9491] name failslab, interval 1, probability 0, space 0, times 0 [ 474.026596][ T9491] CPU: 1 UID: 0 PID: 9491 Comm: syz.8.897 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.026624][ T9491] Tainted: [L]=SOFTLOCKUP [ 474.026631][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 474.026642][ T9491] Call Trace: [ 474.026649][ T9491] [ 474.026661][ T9491] dump_stack_lvl+0x100/0x190 [ 474.026699][ T9491] should_fail_ex.cold+0x5/0xa [ 474.026730][ T9491] should_failslab+0xc2/0x120 [ 474.026758][ T9491] __kmalloc_cache_noprof+0x91/0x6d0 [ 474.026781][ T9491] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 474.026815][ T9491] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 474.026845][ T9491] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 474.026876][ T9491] selinux_socket_post_create+0x368/0x7e0 [ 474.026904][ T9491] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 474.026932][ T9491] ? raw_sk_init+0x97/0xb0 [ 474.026957][ T9491] ? __pfx_raw_sk_init+0x10/0x10 [ 474.026983][ T9491] ? inet_create+0x962/0x1060 [ 474.027012][ T9491] security_socket_post_create+0xaf/0x270 [ 474.027040][ T9491] __sock_create+0x70b/0x860 [ 474.027071][ T9491] __sys_socket+0x14d/0x260 [ 474.027097][ T9491] ? __pfx___sys_socket+0x10/0x10 [ 474.027132][ T9491] __x64_sys_socket+0x72/0xb0 [ 474.027156][ T9491] ? lockdep_hardirqs_on+0x7d/0x110 [ 474.027183][ T9491] do_syscall_64+0x123/0x790 [ 474.027213][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.027233][ T9491] RIP: 0033:0x7f879e19e1d9 [ 474.027249][ T9491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.027268][ T9491] RSP: 002b:00007f879f08c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 474.027294][ T9491] RAX: ffffffffffffffda RBX: 00007f879e425fa0 RCX: 00007f879e19e1d9 [ 474.027308][ T9491] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 474.027319][ T9491] RBP: 00007f879e235888 R08: 0000000000000000 R09: 0000000000000000 [ 474.027334][ T9491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.027347][ T9491] R13: 00007f879e426038 R14: 00007f879e425fa0 R15: 00007ffc59ecf828 [ 474.027377][ T9491] [ 475.089323][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.897'. [ 475.531974][ T30] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 475.733590][ T9505] jffs2: notice: (9505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 475.786407][ T30] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 475.814367][ T30] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 475.814401][ T30] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 475.814424][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 476.035557][ T30] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 476.035587][ T30] usb 5-1: Product: syz [ 476.035602][ T30] usb 5-1: Manufacturer: syz [ 476.035617][ T30] usb 5-1: SerialNumber: syz [ 477.599359][ T30] usb 5-1: config 0 descriptor?? [ 477.610555][ T30] usb 5-1: selecting invalid altsetting 0 [ 477.783702][ T9514] FAULT_INJECTION: forcing a failure. [ 477.783702][ T9514] name failslab, interval 1, probability 0, space 0, times 0 [ 477.783737][ T9514] CPU: 1 UID: 0 PID: 9514 Comm: syz.6.904 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.783763][ T9514] Tainted: [L]=SOFTLOCKUP [ 477.783771][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 477.783783][ T9514] Call Trace: [ 477.783789][ T9514] [ 477.783797][ T9514] dump_stack_lvl+0x100/0x190 [ 477.783829][ T9514] should_fail_ex.cold+0x5/0xa [ 477.783865][ T9514] should_failslab+0xc2/0x120 [ 477.783893][ T9514] __kmalloc_cache_noprof+0x91/0x6d0 [ 477.783916][ T9514] ? kvm_init_irq_routing+0x43/0xf0 [ 477.783941][ T9514] kvm_init_irq_routing+0x43/0xf0 [ 477.783960][ T9514] kvm_dev_ioctl+0x7ca/0x1b50 [ 477.783993][ T9514] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 477.784022][ T9514] ? selinux_file_ioctl+0x13b/0x290 [ 477.784048][ T9514] ? selinux_file_ioctl+0xb6/0x290 [ 477.784076][ T9514] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 477.784100][ T9514] __x64_sys_ioctl+0x18e/0x210 [ 477.784126][ T9514] do_syscall_64+0x123/0x790 [ 477.784156][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.784177][ T9514] RIP: 0033:0x7f993539e1d9 [ 477.784193][ T9514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.784211][ T9514] RSP: 002b:00007f9936312028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.784230][ T9514] RAX: ffffffffffffffda RBX: 00007f9935625fa0 RCX: 00007f993539e1d9 [ 477.784244][ T9514] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 477.784256][ T9514] RBP: 00007f9936312090 R08: 0000000000000000 R09: 0000000000000000 [ 477.784268][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.784279][ T9514] R13: 00007f9935626038 R14: 00007f9935625fa0 R15: 00007fff77540ad8 [ 477.784309][ T9514] [ 478.044673][ T9] usb 5-1: USB disconnect, device number 46 [ 478.341085][ T31] audit: type=1400 audit(1791737334.471:882): avc: denied { connect } for pid=9517 comm="syz.6.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 478.664342][ T5705] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 478.721991][ T30] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 478.812604][ T5705] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 478.813502][ T5705] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.813545][ T5705] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.815266][ T5705] usb 8-1: config 0 descriptor?? [ 478.818747][ T5705] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 478.873132][ T30] usb 7-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 478.874353][ T30] usb 7-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 478.874385][ T30] usb 7-1: config 1 interface 0 has no altsetting 0 [ 478.878631][ T30] usb 7-1: string descriptor 0 read error: -22 [ 478.878725][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.882267][ T9523] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 481.864460][ T30] usbhid 7-1:1.0: can't add hid device: -71 [ 481.864871][ T30] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 481.946802][ T30] usb 7-1: USB disconnect, device number 7 [ 482.178767][ T9559] kAFS: unable to lookup cell 'syz1' [ 482.516298][ T30] usb 8-1: USB disconnect, device number 5 [ 482.659940][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.915'. [ 482.835915][ T5613] Bluetooth: hci1: unexpected event for opcode 0x041c [ 483.491061][ T31] audit: type=1400 audit(1791737339.621:883): avc: denied { read write } for pid=9564 comm="syz.6.914" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 483.518504][ T31] audit: type=1400 audit(1791737339.621:884): avc: denied { open } for pid=9564 comm="syz.6.914" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 483.528181][ T31] audit: type=1400 audit(1791737339.661:885): avc: denied { ioctl } for pid=9564 comm="syz.6.914" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 484.097848][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 484.097881][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 484.272470][ T30] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 484.435438][ T30] usb 9-1: unable to get BOS descriptor or descriptor too short [ 484.435486][ T30] usb 9-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 484.436398][ T30] usb 9-1: config 142 has an invalid interface number: 251 but max is 0 [ 484.436423][ T30] usb 9-1: config 142 has no interface number 0 [ 484.436456][ T30] usb 9-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 484.436480][ T30] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 484.436502][ T30] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 484.436521][ T30] usb 9-1: config 142 interface 251 has no altsetting 0 [ 484.439198][ T30] usb 9-1: string descriptor 0 read error: -22 [ 484.439322][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.505456][ T9604] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 484.516463][ T9604] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 484.591581][ T30] cypress_m8 9-1:142.251: HID->COM RS232 Adapter converter detected [ 484.701618][ T9613] kAFS: unable to lookup cell 'syz1' [ 484.732974][ T30] usb 9-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 485.117793][ T30] usb 9-1: USB disconnect, device number 4 [ 485.465964][ T30] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 485.466285][ T30] cypress_m8 9-1:142.251: device disconnected [ 487.813864][ T9619] synth uevent: /bus/virtio/drivers/virtio_net: unknown uevent action string [ 488.007057][ T9637] FAULT_INJECTION: forcing a failure. [ 488.007057][ T9637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.007080][ T9637] CPU: 0 UID: 0 PID: 9637 Comm: syz.8.930 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.007096][ T9637] Tainted: [L]=SOFTLOCKUP [ 488.007100][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 488.007107][ T9637] Call Trace: [ 488.007111][ T9637] [ 488.007116][ T9637] dump_stack_lvl+0x100/0x190 [ 488.007137][ T9637] should_fail_ex.cold+0x5/0xa [ 488.007155][ T9637] _copy_from_user+0x2e/0xd0 [ 488.007172][ T9637] ucma_write+0x128/0x330 [ 488.007190][ T9637] ? __pfx_ucma_write+0x10/0x10 [ 488.007206][ T9637] ? bpf_lsm_file_permission+0x9/0x10 [ 488.007223][ T9637] ? security_file_permission+0x76/0x210 [ 488.007241][ T9637] ? rw_verify_area+0xce/0x6d0 [ 488.007255][ T9637] vfs_write+0x2aa/0x1050 [ 488.007269][ T9637] ? __pfx_ucma_write+0x10/0x10 [ 488.007285][ T9637] ? lock_acquire+0x1d1/0x380 [ 488.007298][ T9637] ? __fget_files+0x34/0x3d0 [ 488.007314][ T9637] ? __pfx_vfs_write+0x10/0x10 [ 488.007326][ T9637] ? find_held_lock+0x2b/0x80 [ 488.007343][ T9637] ? __fget_files+0x215/0x3d0 [ 488.007358][ T9637] ? __fget_files+0x215/0x3d0 [ 488.007377][ T9637] ? __fget_files+0x21f/0x3d0 [ 488.007397][ T9637] ksys_write+0x1f8/0x250 [ 488.007410][ T9637] ? __pfx_ksys_write+0x10/0x10 [ 488.007429][ T9637] do_syscall_64+0x123/0x790 [ 488.007447][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.007459][ T9637] RIP: 0033:0x7f879e19e1d9 [ 488.007468][ T9637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.007479][ T9637] RSP: 002b:00007f879f08c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 488.007490][ T9637] RAX: ffffffffffffffda RBX: 00007f879e425fa0 RCX: 00007f879e19e1d9 [ 488.007498][ T9637] RDX: 0000000000000090 RSI: 0000200000000400 RDI: 0000000000000005 [ 488.007504][ T9637] RBP: 00007f879f08c090 R08: 0000000000000000 R09: 0000000000000000 [ 488.007511][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.007518][ T9637] R13: 00007f879e426038 R14: 00007f879e425fa0 R15: 00007ffc59ecf828 [ 488.007534][ T9637] [ 488.317222][ T5616] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 488.333143][ T5616] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 488.336317][ T5616] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 488.339696][ T5616] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 488.352549][ T5616] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 488.492882][ T31] audit: type=1400 audit(1791737344.631:886): avc: denied { write } for pid=9615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.886739][ T9663] kAFS: unable to lookup cell 'syz1' [ 489.118784][ T31] audit: type=1400 audit(1791737345.251:887): avc: denied { write } for pid=9660 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.615904][ T5616] Bluetooth: hci8: command tx timeout [ 491.162848][ T31] audit: type=1326 audit(1791737347.301:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.6.940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f993539e1d9 code=0x0 [ 491.211949][ T10] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 491.251604][ T31] audit: type=1400 audit(1791737347.381:889): avc: denied { lock } for pid=9685 comm="syz.6.940" path="socket:[25495]" dev="sockfs" ino=25495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 491.353997][ T9645] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.355239][ T9645] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.355424][ T9645] bridge_slave_0: entered allmulticast mode [ 491.357613][ T9645] bridge_slave_0: entered promiscuous mode [ 491.366094][ T10] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 491.368775][ T9645] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.369169][ T9645] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.369277][ T9645] bridge_slave_1: entered allmulticast mode [ 491.372079][ T9645] bridge_slave_1: entered promiscuous mode [ 491.380711][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.380734][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 491.380779][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.455087][ T10] usb 9-1: config 0 descriptor?? [ 491.469767][ T9645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.488111][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 491.488150][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 491.494149][ T9645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.538790][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 491.540819][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 491.540862][ T10] usb 9-1: media controller created [ 491.566366][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 491.571938][ T5871] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 491.597426][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 491.597587][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 491.619584][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input12 [ 491.672150][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 491.672179][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 491.672719][ T9645] team0: Port device team_slave_0 added [ 491.692934][ T9645] team0: Port device team_slave_1 added [ 491.743195][ T5871] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 491.745384][ T5871] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.745428][ T5871] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 491.745453][ T5871] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.748378][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 491.748401][ T5871] usb 8-1: Product: syz [ 491.748416][ T5871] usb 8-1: Manufacturer: syz [ 491.774974][ T9693] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 491.824775][ T5871] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 491.837114][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 491.837149][ T10] dvb-usb: error while querying for an remote control event. [ 491.838015][ T5871] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 491.928772][ T9645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.928788][ T9645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.928809][ T9645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.950239][ T25] usb 9-1: USB disconnect, device number 5 [ 492.048783][ T9645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.048799][ T9645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.048821][ T9645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.154777][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 492.247513][ T9645] hsr_slave_0: entered promiscuous mode [ 492.260219][ T9645] hsr_slave_1: entered promiscuous mode [ 492.264716][ T9645] debugfs: 'hsr0' already exists in 'hsr' [ 492.264735][ T9645] Cannot create hsr debugfs directory [ 492.380740][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.941'. [ 492.398294][ T31] audit: type=1400 audit(1791737348.531:890): avc: denied { read } for pid=9698 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 492.485858][ T31] audit: type=1400 audit(1791737348.621:891): avc: denied { setopt } for pid=9698 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 492.512544][ T31] audit: type=1400 audit(1791737348.651:892): avc: denied { execute } for pid=9698 comm="syz.4.941" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 492.623610][ T5616] Bluetooth: hci8: command tx timeout [ 493.059163][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.8.943'. [ 493.333749][ T5616] Bluetooth: hci1: unexpected cc 0x200b length: 2 > 1 [ 493.333790][ T5616] Bluetooth: hci1: unexpected event for opcode 0x200b [ 493.424222][ T31] audit: type=1400 audit(1791737349.561:893): avc: denied { setattr } for pid=9713 comm="syz.4.947" name="PACKET" dev="sockfs" ino=26206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 493.466527][ T9645] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 493.489124][ T9645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.495535][ T9645] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 493.509987][ T9645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.511798][ T9645] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 493.532140][ T5871] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 493.535173][ T9645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.536555][ T9645] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 493.540739][ T9645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.684678][ T5871] usb 7-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 493.685642][ T5871] usb 7-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 493.685662][ T5871] usb 7-1: config 1 interface 0 has no altsetting 0 [ 493.688973][ T5871] usb 7-1: string descriptor 0 read error: -22 [ 493.689037][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.732317][ T9712] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 493.746584][ T9645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.747168][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 493.790974][ T9645] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.816821][ T3254] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.816911][ T3254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.850964][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.851059][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.891995][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 493.892478][ T10] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 493.894693][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 493.894718][ T10] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 493.894739][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 493.897926][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.897941][ T10] usb 9-1: Product: syz [ 493.897950][ T10] usb 9-1: Manufacturer: syz [ 493.897958][ T10] usb 9-1: SerialNumber: syz [ 493.955812][ T10] usb 9-1: config 0 descriptor?? [ 494.168003][ T9730] FAULT_INJECTION: forcing a failure. [ 494.168003][ T9730] name failslab, interval 1, probability 0, space 0, times 0 [ 494.168038][ T9730] CPU: 1 UID: 0 PID: 9730 Comm: syz.4.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.168066][ T9730] Tainted: [L]=SOFTLOCKUP [ 494.168073][ T9730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 494.168085][ T9730] Call Trace: [ 494.168092][ T9730] [ 494.168099][ T9730] dump_stack_lvl+0x100/0x190 [ 494.168136][ T9730] should_fail_ex.cold+0x5/0xa [ 494.168169][ T9730] should_failslab+0xc2/0x120 [ 494.168201][ T9730] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 494.168231][ T9730] ? lock_acquire+0x1d1/0x380 [ 494.168255][ T9730] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 494.168284][ T9730] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 494.168314][ T9730] kstrdup+0x51/0xe0 [ 494.168339][ T9730] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 494.168365][ T9730] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 494.168396][ T9730] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 494.168430][ T9730] selinux_socket_post_create+0x368/0x7e0 [ 494.168457][ T9730] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 494.168485][ T9730] ? raw_sk_init+0x97/0xb0 [ 494.168510][ T9730] ? __pfx_raw_sk_init+0x10/0x10 [ 494.168539][ T9730] ? inet_create+0x962/0x1060 [ 494.168571][ T9730] security_socket_post_create+0xaf/0x270 [ 494.168600][ T9730] __sock_create+0x70b/0x860 [ 494.168633][ T9730] __sys_socket+0x14d/0x260 [ 494.168661][ T9730] ? __pfx___sys_socket+0x10/0x10 [ 494.168698][ T9730] __x64_sys_socket+0x72/0xb0 [ 494.168722][ T9730] ? lockdep_hardirqs_on+0x7d/0x110 [ 494.168751][ T9730] do_syscall_64+0x123/0x790 [ 494.168782][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.168805][ T9730] RIP: 0033:0x7fb4fd19e1d9 [ 494.168822][ T9730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.168842][ T9730] RSP: 002b:00007fb4fe0b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 494.168871][ T9730] RAX: ffffffffffffffda RBX: 00007fb4fd425fa0 RCX: 00007fb4fd19e1d9 [ 494.168886][ T9730] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 494.168899][ T9730] RBP: 00007fb4fd235888 R08: 0000000000000000 R09: 0000000000000000 [ 494.168914][ T9730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.168927][ T9730] R13: 00007fb4fd426038 R14: 00007fb4fd425fa0 R15: 00007ffc1984e298 [ 494.168959][ T9730] [ 494.273273][ T25] usb 8-1: USB disconnect, device number 6 [ 494.340091][ T25] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 494.340672][ T25] garmin_gps 8-1:1.0: device disconnected [ 494.702271][ T5616] Bluetooth: hci8: command tx timeout [ 495.263764][ T10] gs_usb 9-1:0.0: Couldn't get device config: (err=-110) [ 495.264174][ T10] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -110 [ 496.621107][ T9737] X.509: Couldn't decode AuthKeyIdentifier [ 496.782149][ T5616] Bluetooth: hci8: command tx timeout [ 497.210500][ T5871] usbhid 7-1:1.0: can't add hid device: -71 [ 497.210586][ T5871] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 497.346775][ T5871] usb 7-1: USB disconnect, device number 8 [ 497.403402][ T9744] usb 9-1: USB disconnect, device number 6 [ 497.812073][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 497.813686][ T5871] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 497.840827][ T9763] FAULT_INJECTION: forcing a failure. [ 497.840827][ T9763] name failslab, interval 1, probability 0, space 0, times 0 [ 497.842330][ T9763] CPU: 0 UID: 0 PID: 9763 Comm: syz.4.955 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.842361][ T9763] Tainted: [L]=SOFTLOCKUP [ 497.842369][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 497.842381][ T9763] Call Trace: [ 497.842389][ T9763] [ 497.842396][ T9763] dump_stack_lvl+0x100/0x190 [ 497.842436][ T9763] should_fail_ex.cold+0x5/0xa [ 497.842468][ T9763] should_failslab+0xc2/0x120 [ 497.842497][ T9763] __kmalloc_cache_noprof+0x91/0x6d0 [ 497.842520][ T9763] ? fib_net_init+0x1c3/0x460 [ 497.842549][ T9763] fib_net_init+0x1c3/0x460 [ 497.842576][ T9763] ? __pfx_fib_net_init+0x10/0x10 [ 497.842602][ T9763] ? timer_init_key+0x150/0x310 [ 497.842631][ T9763] ? devinet_init_net+0x56c/0x8d0 [ 497.842661][ T9763] ? __pfx_fib_net_init+0x10/0x10 [ 497.842682][ T9763] ops_init+0x1e2/0x5f0 [ 497.842707][ T9763] setup_net+0x118/0x3a0 [ 497.842729][ T9763] ? __pfx_setup_net+0x10/0x10 [ 497.842760][ T9763] copy_net_ns+0x345/0x7a0 [ 497.842786][ T9763] create_new_namespaces+0x3ea/0xac0 [ 497.842818][ T9763] unshare_nsproxy_namespaces+0xf2/0x220 [ 497.842845][ T9763] ksys_unshare+0x4a2/0xb30 [ 497.842869][ T9763] ? __pfx_ksys_unshare+0x10/0x10 [ 497.842905][ T9763] __x64_sys_unshare+0x31/0x40 [ 497.842939][ T9763] do_syscall_64+0x123/0x790 [ 497.842973][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.842995][ T9763] RIP: 0033:0x7fb4fd19e1d9 [ 497.843013][ T9763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.843033][ T9763] RSP: 002b:00007fb4fe0b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 497.843054][ T9763] RAX: ffffffffffffffda RBX: 00007fb4fd425fa0 RCX: 00007fb4fd19e1d9 [ 497.843067][ T9763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 497.843078][ T9763] RBP: 00007fb4fd235888 R08: 0000000000000000 R09: 0000000000000000 [ 497.843088][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.843098][ T9763] R13: 00007fb4fd426038 R14: 00007fb4fd425fa0 R15: 00007ffc1984e298 [ 497.843121][ T9763] [ 497.848153][ T9645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.974311][ T9] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 497.974503][ T5871] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 497.975700][ T9] usb 8-1: config 5 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 497.975728][ T9] usb 8-1: config 5 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 497.975750][ T9] usb 8-1: config 5 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 497.977633][ T5871] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 497.977657][ T5871] usb 7-1: config 0 has no interface number 0 [ 497.977689][ T5871] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.984064][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.984089][ T9] usb 8-1: Product: syz [ 497.984103][ T9] usb 8-1: Manufacturer: syz [ 497.984118][ T9] usb 8-1: SerialNumber: syz [ 497.985052][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.985074][ T5871] usb 7-1: Product: syz [ 497.985088][ T5871] usb 7-1: Manufacturer: syz [ 497.985103][ T5871] usb 7-1: SerialNumber: syz [ 498.036740][ T5871] usb 7-1: config 0 descriptor?? [ 498.211531][ T5871] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 498.349705][ T5871] usb 7-1: USB disconnect, device number 9 [ 498.369714][ T5871] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 498.424362][ T9] usb 8-1: Unused bulk OUT endpoint found: 0x03 [ 498.424378][ T9] usb 8-1: Not enough endpoints found in device, aborting! [ 499.018402][ T9760] netlink: 28 bytes leftover after parsing attributes in process `syz.7.954'. [ 499.018434][ T9760] netlink: 28 bytes leftover after parsing attributes in process `syz.7.954'. [ 499.018478][ T9760] netlink: 'syz.7.954': attribute type 4 has an invalid length. [ 499.239183][ T9760] netlink: 36 bytes leftover after parsing attributes in process `syz.7.954'. [ 499.319577][ T5871] usb 8-1: USB disconnect, device number 7 [ 499.708897][ T9645] veth0_vlan: entered promiscuous mode [ 499.731541][ T9645] veth1_vlan: entered promiscuous mode [ 500.146059][ T9786] kAFS: unable to lookup cell 'syz1' [ 500.759072][ T9645] veth0_macvtap: entered promiscuous mode [ 500.979584][ T9645] veth1_macvtap: entered promiscuous mode [ 501.036763][ T9645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.059214][ T9645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.109395][ T9792] FAULT_INJECTION: forcing a failure. [ 501.109395][ T9792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.109460][ T9792] CPU: 1 UID: 0 PID: 9792 Comm: syz.4.961 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.109489][ T9792] Tainted: [L]=SOFTLOCKUP [ 501.109496][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 501.109507][ T9792] Call Trace: [ 501.109513][ T9792] [ 501.109520][ T9792] dump_stack_lvl+0x100/0x190 [ 501.109551][ T9792] should_fail_ex.cold+0x5/0xa [ 501.109578][ T9792] _copy_from_user+0x2e/0xd0 [ 501.109607][ T9792] ucma_write+0x128/0x330 [ 501.109632][ T9792] ? __pfx_ucma_write+0x10/0x10 [ 501.109655][ T9792] ? bpf_lsm_file_permission+0x9/0x10 [ 501.109679][ T9792] ? security_file_permission+0x76/0x210 [ 501.109707][ T9792] ? rw_verify_area+0xce/0x6d0 [ 501.109735][ T9792] vfs_write+0x2aa/0x1050 [ 501.109759][ T9792] ? __pfx_ucma_write+0x10/0x10 [ 501.109785][ T9792] ? lock_acquire+0x1d1/0x380 [ 501.109806][ T9792] ? __fget_files+0x34/0x3d0 [ 501.109831][ T9792] ? __pfx_vfs_write+0x10/0x10 [ 501.109851][ T9792] ? find_held_lock+0x2b/0x80 [ 501.109876][ T9792] ? __fget_files+0x215/0x3d0 [ 501.109901][ T9792] ? __fget_files+0x215/0x3d0 [ 501.109930][ T9792] ? __fget_files+0x21f/0x3d0 [ 501.109962][ T9792] ksys_write+0x1f8/0x250 [ 501.109984][ T9792] ? __pfx_ksys_write+0x10/0x10 [ 501.110014][ T9792] do_syscall_64+0x123/0x790 [ 501.110043][ T9792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.110063][ T9792] RIP: 0033:0x7fb4fd19e1d9 [ 501.110079][ T9792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.110097][ T9792] RSP: 002b:00007fb4fe0b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 501.110115][ T9792] RAX: ffffffffffffffda RBX: 00007fb4fd425fa0 RCX: 00007fb4fd19e1d9 [ 501.110128][ T9792] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000007 [ 501.110139][ T9792] RBP: 00007fb4fe0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 501.110151][ T9792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.110161][ T9792] R13: 00007fb4fd426038 R14: 00007fb4fd425fa0 R15: 00007ffc1984e298 [ 501.110187][ T9792] [ 501.197765][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.197815][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.273738][ T9050] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 501.327568][ T31] audit: type=1400 audit(1791737357.451:894): avc: denied { nlmsg_read } for pid=9795 comm="syz.4.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 501.354198][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.354431][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.354463][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.354494][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.385541][ T30] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 501.491158][ T9585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.491173][ T9585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.514669][ T9799] X.509: Couldn't decode AuthKeyIdentifier [ 501.528371][ T9050] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 501.529284][ T9050] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.529320][ T9050] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.532201][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 501.538002][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 501.538040][ T30] usb 7-1: New USB device found, idVendor=0583, idProduct=ed81, bcdDevice=a7.d3 [ 501.541738][ T30] usb 7-1: config 1 has an invalid interface number: 221 but max is -1 [ 501.541759][ T30] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 501.541779][ T30] usb 7-1: config 1 has no interface number 0 [ 501.541811][ T30] usb 7-1: config 1 interface 221 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10 [ 501.541834][ T30] usb 7-1: config 1 interface 221 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024 [ 501.541893][ T30] usb 7-1: config 1 interface 221 has no altsetting 0 [ 501.543697][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.543719][ T30] usb 7-1: Product: syz [ 501.543733][ T30] usb 7-1: Manufacturer: syz [ 501.543747][ T30] usb 7-1: SerialNumber: syz [ 501.557416][ T9794] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 501.595659][ T9050] usb 8-1: config 0 descriptor?? [ 501.665471][ T3698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.665490][ T3698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.702973][ T9050] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 501.768415][ T30] usb 7-1: USB disconnect, device number 10 [ 504.564774][ T5789] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 504.593116][ T5705] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 504.724720][ T5789] usb 5-1: Using ep0 maxpacket: 32 [ 504.726601][ T5789] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 504.730630][ T5789] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 504.730665][ T5789] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 504.730696][ T5789] usb 5-1: config 0 interface 0 has no altsetting 0 [ 504.736902][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.736925][ T5789] usb 5-1: Product: syz [ 504.736939][ T5789] usb 5-1: Manufacturer: syz [ 504.736953][ T5789] usb 5-1: SerialNumber: syz [ 504.767575][ T5705] usb 9-1: Using ep0 maxpacket: 32 [ 504.771593][ T5705] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 504.776347][ T5705] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 504.776380][ T5705] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 504.776460][ T5705] usb 9-1: config 0 interface 0 has no altsetting 0 [ 504.791504][ T5705] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.791586][ T5705] usb 9-1: Product: syz [ 504.791650][ T5705] usb 9-1: Manufacturer: syz [ 504.791691][ T5705] usb 9-1: SerialNumber: syz [ 504.885198][ T5705] usb 9-1: config 0 descriptor?? [ 504.885428][ T5789] usb 5-1: config 0 descriptor?? [ 505.323317][ T30] usb 8-1: USB disconnect, device number 8 [ 506.307640][ T5705] gs_usb 9-1:0.0: Couldn't get device config: (err=-110) [ 506.307756][ T5705] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -110 [ 506.785064][ T5789] gs_usb 5-1:0.0: Couldn't get device config: (err=-110) [ 506.785150][ T5789] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 508.065976][ T30] usb 9-1: USB disconnect, device number 7 [ 509.329727][ T5742] usb 5-1: USB disconnect, device number 47 [ 510.934773][ T9866] FAULT_INJECTION: forcing a failure. [ 510.934773][ T9866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.934796][ T9866] CPU: 1 UID: 0 PID: 9866 Comm: syz.4.977 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.934814][ T9866] Tainted: [L]=SOFTLOCKUP [ 510.934818][ T9866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 510.934826][ T9866] Call Trace: [ 510.934830][ T9866] [ 510.934835][ T9866] dump_stack_lvl+0x100/0x190 [ 510.934858][ T9866] should_fail_ex.cold+0x5/0xa [ 510.934876][ T9866] _copy_from_user+0x2e/0xd0 [ 510.934894][ T9866] __sys_bpf+0x2f5/0x4a30 [ 510.934912][ T9866] ? __pfx___sys_bpf+0x10/0x10 [ 510.934924][ T9866] ? find_held_lock+0x2b/0x80 [ 510.934940][ T9866] ? futex_wake+0x4ea/0x5e0 [ 510.934963][ T9866] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 510.934979][ T9866] ? do_vfs_ioctl+0x226/0x13e0 [ 510.935011][ T9866] ? __x64_sys_futex+0x34f/0x4d0 [ 510.935029][ T9866] ? __x64_sys_futex+0x358/0x4d0 [ 510.935048][ T9866] ? xfd_validate_state+0x129/0x190 [ 510.935064][ T9866] ? __x64_sys_bpf+0xce/0x140 [ 510.935077][ T9866] __x64_sys_bpf+0xce/0x140 [ 510.935091][ T9866] ? do_syscall_64+0xae/0x790 [ 510.935109][ T9866] do_syscall_64+0x123/0x790 [ 510.935127][ T9866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.935140][ T9866] RIP: 0033:0x7fb4fd19e1d9 [ 510.935150][ T9866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.935161][ T9866] RSP: 002b:00007fb4fe0b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 510.935173][ T9866] RAX: ffffffffffffffda RBX: 00007fb4fd425fa0 RCX: 00007fb4fd19e1d9 [ 510.935181][ T9866] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 510.935188][ T9866] RBP: 00007fb4fd235888 R08: 0000000000000000 R09: 0000000000000000 [ 510.935194][ T9866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.935200][ T9866] R13: 00007fb4fd426038 R14: 00007fb4fd425fa0 R15: 00007ffc1984e298 [ 510.935216][ T9866] [ 511.157295][ T31] audit: type=1400 audit(1791737367.291:895): avc: denied { mount } for pid=9869 comm="syz.9.980" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 511.191971][ T30] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 511.471484][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 511.514893][ T30] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 511.522203][ T9050] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 511.616154][ T30] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 511.698348][ T30] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 511.698377][ T30] usb 7-1: Product: syz [ 511.698392][ T30] usb 7-1: Manufacturer: syz [ 511.698410][ T30] usb 7-1: SerialNumber: syz [ 511.757642][ T9050] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 511.771526][ T9050] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 511.771575][ T9050] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 511.771614][ T9050] usb 9-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 511.771645][ T9050] usb 9-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 511.771775][ T9050] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.920187][ T9872] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 512.072760][ T30] usb 7-1: config 0 descriptor?? [ 512.074363][ T9868] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 512.146444][ T9050] ims_pcu 9-1:1.0: Incorrect number of endpoints on data interface (1) [ 512.159572][ T9050] ims_pcu 9-1:1.0: probe with driver ims_pcu failed with error -22 [ 512.275522][ T30] hub 7-1:0.0: bad descriptor, ignoring hub [ 512.275549][ T30] hub 7-1:0.0: probe with driver hub failed with error -5 [ 512.302634][ T30] usb 7-1: USB disconnect, device number 11 [ 512.461080][ T9885] ip_tables: iptables: counters copy to user failed while replacing table [ 512.485538][ T9885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.485955][ T9885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.712177][ T5705] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 512.773647][ T30] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 512.865019][ T5705] usb 10-1: Using ep0 maxpacket: 8 [ 512.866424][ T5705] usb 10-1: New USB device found, idVendor=1d96, idProduct=e070, bcdDevice=aa.07 [ 512.866450][ T5705] usb 10-1: too many configurations: 179, using maximum allowed: 8 [ 512.867543][ T5705] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 512.867563][ T5705] usb 10-1: can't read configurations, error -61 [ 512.921949][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 512.922547][ T30] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 512.923805][ T30] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 512.926799][ T30] usb 7-1: string descriptor 0 read error: -22 [ 512.926973][ T30] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 512.930672][ T30] usb 7-1: config 0 descriptor?? [ 512.934269][ T9868] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 512.937993][ T30] hub 7-1:0.0: bad descriptor, ignoring hub [ 512.938016][ T30] hub 7-1:0.0: probe with driver hub failed with error -5 [ 512.993237][ T5705] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 513.012355][ T5742] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 513.142128][ T5705] usb 10-1: Using ep0 maxpacket: 8 [ 513.142754][ T5705] usb 10-1: New USB device found, idVendor=1d96, idProduct=e070, bcdDevice=aa.07 [ 513.142780][ T5705] usb 10-1: too many configurations: 179, using maximum allowed: 8 [ 513.143916][ T5705] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 513.143936][ T5705] usb 10-1: can't read configurations, error -61 [ 513.144117][ T5705] usb usb10-port1: attempt power cycle [ 513.162851][ T5742] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 513.163758][ T5742] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.163785][ T5742] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.163818][ T5742] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.168941][ T5742] usb 8-1: config 0 descriptor?? [ 513.262785][ T5789] usb 7-1: USB disconnect, device number 12 [ 513.322969][ T30] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 513.474269][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 513.474327][ T30] usb 5-1: New USB device found, idVendor=ff35, idProduct=0007, bcdDevice= 0.00 [ 513.474362][ T30] usb 5-1: too many configurations: 220, using maximum allowed: 8 [ 513.475952][ T30] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 513.475987][ T30] usb 5-1: can't read configurations, error -61 [ 513.481972][ T5705] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 513.504467][ T5705] usb 10-1: Using ep0 maxpacket: 8 [ 513.504977][ T5705] usb 10-1: New USB device found, idVendor=1d96, idProduct=e070, bcdDevice=aa.07 [ 513.505013][ T5705] usb 10-1: too many configurations: 179, using maximum allowed: 8 [ 513.506611][ T5705] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 513.506660][ T5705] usb 10-1: can't read configurations, error -61 [ 513.593394][ T5742] usbhid 8-1:0.0: can't add hid device: -71 [ 513.593468][ T5742] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 513.598785][ T5742] usb 8-1: USB disconnect, device number 9 [ 513.602629][ T30] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 513.634887][ T5705] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 513.655192][ T5705] usb 10-1: Using ep0 maxpacket: 8 [ 513.655865][ T5705] usb 10-1: New USB device found, idVendor=1d96, idProduct=e070, bcdDevice=aa.07 [ 513.655889][ T5705] usb 10-1: too many configurations: 179, using maximum allowed: 8 [ 513.657388][ T5705] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 513.657408][ T5705] usb 10-1: can't read configurations, error -61 [ 513.657638][ T5705] usb usb10-port1: unable to enumerate USB device [ 513.793660][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 513.793690][ T30] usb 5-1: New USB device found, idVendor=ff35, idProduct=0007, bcdDevice= 0.00 [ 513.793710][ T30] usb 5-1: too many configurations: 220, using maximum allowed: 8 [ 513.795687][ T30] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 513.795707][ T30] usb 5-1: can't read configurations, error -61 [ 513.795853][ T30] usb usb5-port1: attempt power cycle [ 514.134260][ T30] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 514.161024][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 514.161054][ T30] usb 5-1: New USB device found, idVendor=ff35, idProduct=0007, bcdDevice= 0.00 [ 514.161075][ T30] usb 5-1: too many configurations: 220, using maximum allowed: 8 [ 514.167065][ T30] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 514.167467][ T30] usb 5-1: can't read configurations, error -61 [ 514.233589][ T9898] FAULT_INJECTION: forcing a failure. [ 514.233589][ T9898] name failslab, interval 1, probability 0, space 0, times 0 [ 514.233613][ T9898] CPU: 1 UID: 0 PID: 9898 Comm: syz.7.986 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.233630][ T9898] Tainted: [L]=SOFTLOCKUP [ 514.233634][ T9898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 514.233641][ T9898] Call Trace: [ 514.233645][ T9898] [ 514.233651][ T9898] dump_stack_lvl+0x100/0x190 [ 514.233673][ T9898] should_fail_ex.cold+0x5/0xa [ 514.233691][ T9898] should_failslab+0xc2/0x120 [ 514.233709][ T9898] __kmalloc_cache_noprof+0x91/0x6d0 [ 514.233723][ T9898] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 514.233743][ T9898] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 514.233761][ T9898] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 514.233781][ T9898] selinux_socket_post_create+0x368/0x7e0 [ 514.233798][ T9898] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 514.233814][ T9898] ? raw_sk_init+0x97/0xb0 [ 514.233829][ T9898] ? __pfx_raw_sk_init+0x10/0x10 [ 514.233843][ T9898] ? inet_create+0x962/0x1060 [ 514.233862][ T9898] security_socket_post_create+0xaf/0x270 [ 514.233878][ T9898] __sock_create+0x70b/0x860 [ 514.233898][ T9898] __sys_socket+0x14d/0x260 [ 514.233913][ T9898] ? __pfx___sys_socket+0x10/0x10 [ 514.233942][ T9898] __x64_sys_socket+0x72/0xb0 [ 514.233958][ T9898] ? lockdep_hardirqs_on+0x7d/0x110 [ 514.233976][ T9898] do_syscall_64+0x123/0x790 [ 514.233994][ T9898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.234006][ T9898] RIP: 0033:0x7f72eab9e1d9 [ 514.234016][ T9898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.234027][ T9898] RSP: 002b:00007f72ebb09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 514.234038][ T9898] RAX: ffffffffffffffda RBX: 00007f72eae25fa0 RCX: 00007f72eab9e1d9 [ 514.234046][ T9898] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 514.234053][ T9898] RBP: 00007f72eac35888 R08: 0000000000000000 R09: 0000000000000000 [ 514.234059][ T9898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.234066][ T9898] R13: 00007f72eae26038 R14: 00007f72eae25fa0 R15: 00007ffe87f61b48 [ 514.234086][ T9898] [ 514.248760][ T5742] usb 9-1: USB disconnect, device number 8 [ 514.294852][ T30] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 514.321072][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 514.321115][ T30] usb 5-1: New USB device found, idVendor=ff35, idProduct=0007, bcdDevice= 0.00 [ 514.321147][ T30] usb 5-1: too many configurations: 220, using maximum allowed: 8 [ 514.327551][ T30] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 514.327583][ T30] usb 5-1: can't read configurations, error -61 [ 514.328009][ T30] usb usb5-port1: unable to enumerate USB device [ 514.370841][ T9900] FAULT_INJECTION: forcing a failure. [ 514.370841][ T9900] name failslab, interval 1, probability 0, space 0, times 0 [ 514.370873][ T9900] CPU: 1 UID: 0 PID: 9900 Comm: syz.8.987 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.370899][ T9900] Tainted: [L]=SOFTLOCKUP [ 514.370905][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 514.370925][ T9900] Call Trace: [ 514.370931][ T9900] [ 514.370938][ T9900] dump_stack_lvl+0x100/0x190 [ 514.370972][ T9900] should_fail_ex.cold+0x5/0xa [ 514.371000][ T9900] should_failslab+0xc2/0x120 [ 514.371028][ T9900] __kmalloc_noprof+0xfc/0x840 [ 514.371052][ T9900] ? tomoyo_encode2+0xfb/0x3c0 [ 514.371086][ T9900] tomoyo_encode2+0xfb/0x3c0 [ 514.371117][ T9900] tomoyo_encode+0x29/0x50 [ 514.371143][ T9900] tomoyo_realpath_from_path+0x18c/0x690 [ 514.371178][ T9900] tomoyo_check_open_permission+0x2af/0x3c0 [ 514.371204][ T9900] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 514.371239][ T9900] ? hook_file_open+0x248/0x8e0 [ 514.371282][ T9900] ? path_get+0x61/0x80 [ 514.371303][ T9900] tomoyo_file_open+0x6b/0x90 [ 514.371324][ T9900] security_file_open+0xb5/0x1e0 [ 514.371352][ T9900] do_dentry_open+0x588/0x14d0 [ 514.371385][ T9900] vfs_open+0x82/0x3f0 [ 514.371415][ T9900] path_openat+0x19fa/0x2440 [ 514.371446][ T9900] ? __pfx_path_openat+0x10/0x10 [ 514.371481][ T9900] do_file_open+0x20e/0x430 [ 514.371510][ T9900] ? __pfx_do_file_open+0x10/0x10 [ 514.371557][ T9900] ? _raw_spin_unlock+0x28/0x50 [ 514.371579][ T9900] ? alloc_fd+0x471/0x7a0 [ 514.371615][ T9900] do_sys_openat2+0x10f/0x1e0 [ 514.371633][ T9900] ? __pfx_do_sys_openat2+0x10/0x10 [ 514.371656][ T9900] ? kvm_sched_clock_read+0x11/0x20 [ 514.371686][ T9900] __x64_sys_openat+0x12d/0x210 [ 514.371705][ T9900] ? __pfx___x64_sys_openat+0x10/0x10 [ 514.371735][ T9900] do_syscall_64+0x123/0x790 [ 514.371764][ T9900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.371783][ T9900] RIP: 0033:0x7f879e15ea0e [ 514.371799][ T9900] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 514.371818][ T9900] RSP: 002b:00007f879f08bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 514.371836][ T9900] RAX: ffffffffffffffda RBX: 00007f879f08c6c0 RCX: 00007f879e15ea0e [ 514.371849][ T9900] RDX: 0000000000000002 RSI: 00007f879f08bc00 RDI: ffffffffffffff9c [ 514.371861][ T9900] RBP: 00007f879f08bc00 R08: 0000000000000000 R09: 0000000000000000 [ 514.371873][ T9900] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 514.371884][ T9900] R13: 00007f879e426038 R14: 00007f879e425fa0 R15: 00007ffc59ecf828 [ 514.371917][ T9900] [ 514.395944][ T9900] ERROR: Out of memory at tomoyo_realpath_from_path. [ 514.574792][ T31] audit: type=1400 audit(1791737370.701:896): avc: denied { ioctl } for pid=9901 comm="syz.7.988" path="socket:[27418]" dev="sockfs" ino=27418 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 514.647618][ T31] audit: type=1400 audit(1791737370.781:897): avc: denied { accept } for pid=9903 comm="syz.8.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 514.953272][ T9910] FAULT_INJECTION: forcing a failure. [ 514.953272][ T9910] name fail_futex, interval 1, probability 0, space 0, times 0 [ 514.953327][ T9910] CPU: 1 UID: 0 PID: 9910 Comm: syz.8.991 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.953370][ T9910] Tainted: [L]=SOFTLOCKUP [ 514.953383][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 514.953407][ T9910] Call Trace: [ 514.953414][ T9910] [ 514.953429][ T9910] dump_stack_lvl+0x100/0x190 [ 514.953479][ T9910] should_fail_ex.cold+0x5/0xa [ 514.953515][ T9910] get_futex_key+0x1d0/0x14f0 [ 514.953563][ T9910] ? __pfx_get_futex_key+0x10/0x10 [ 514.953603][ T9910] futex_wait_setup+0x91/0x540 [ 514.953646][ T9910] __futex_wait+0x19f/0x300 [ 514.953675][ T9910] ? __pfx___futex_wait+0x10/0x10 [ 514.953711][ T9910] ? __pfx_try_to_wake_up+0x10/0x10 [ 514.953746][ T9910] ? futex_hash+0x311/0x400 [ 514.953786][ T9910] ? __pfx_futex_wake_mark+0x10/0x10 [ 514.953823][ T9910] ? find_held_lock+0x2b/0x80 [ 514.953866][ T9910] ? futex_wake+0x4ea/0x5e0 [ 514.953914][ T9910] futex_wait+0xe6/0x370 [ 514.953950][ T9910] ? __pfx_futex_wait+0x10/0x10 [ 514.954011][ T9910] do_futex+0x265/0x440 [ 514.954055][ T9910] ? __pfx_do_futex+0x10/0x10 [ 514.954118][ T9910] __x64_sys_futex+0x34f/0x4d0 [ 514.954171][ T9910] ? __pfx___x64_sys_futex+0x10/0x10 [ 514.954207][ T9910] ? kmem_cache_free+0x127/0x6c0 [ 514.954245][ T9910] do_syscall_64+0x123/0x790 [ 514.954287][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.954312][ T9910] RIP: 0033:0x7f879e19e1d9 [ 514.954334][ T9910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.954355][ T9910] RSP: 002b:00007f879f08c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 514.954376][ T9910] RAX: ffffffffffffffda RBX: 00007f879e425fa8 RCX: 00007f879e19e1d9 [ 514.954396][ T9910] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f879e425fa8 [ 514.954408][ T9910] RBP: 00007f879e425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 514.954420][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.954432][ T9910] R13: 00007f879e426038 R14: 00007ffc59ecf740 R15: 00007ffc59ecf828 [ 514.954461][ T9910] [ 514.954965][ T31] audit: type=1400 audit(1791737371.091:898): avc: denied { mounton } for pid=9909 comm="syz.8.991" path="/32/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 514.959891][ T9910] FAULT_INJECTION: forcing a failure. [ 514.959891][ T9910] name failslab, interval 1, probability 0, space 0, times 0 [ 514.959925][ T9910] CPU: 1 UID: 0 PID: 9910 Comm: syz.8.991 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.959967][ T9910] Tainted: [L]=SOFTLOCKUP [ 514.959975][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 514.959997][ T9910] Call Trace: [ 514.960004][ T9910] [ 514.960012][ T9910] dump_stack_lvl+0x100/0x190 [ 514.960058][ T9910] should_fail_ex.cold+0x5/0xa [ 514.960100][ T9910] should_failslab+0xc2/0x120 [ 514.960161][ T9910] kmem_cache_alloc_noprof+0x92/0x6a0 [ 514.960193][ T9910] ? __pfx_map_id_range_down+0x10/0x10 [ 514.960225][ T9910] ? rcu_is_watching+0x13/0xc0 [ 514.960253][ T9910] ? security_inode_alloc+0x3b/0x2c0 [ 514.960288][ T9910] security_inode_alloc+0x3b/0x2c0 [ 514.960320][ T9910] inode_init_always_gfp+0xc6f/0xfb0 [ 514.960373][ T9910] alloc_inode+0x8e/0x250 [ 514.960404][ T9910] sock_alloc+0x44/0x280 [ 514.960425][ T9910] ? security_socket_create+0x7f/0x250 [ 514.960462][ T9910] __sock_create+0xc2/0x860 [ 514.960505][ T9910] __sys_socket+0x14d/0x260 [ 514.960536][ T9910] ? __pfx___sys_socket+0x10/0x10 [ 514.960582][ T9910] __x64_sys_socket+0x72/0xb0 [ 514.960617][ T9910] ? lockdep_hardirqs_on+0x7d/0x110 [ 514.960662][ T9910] do_syscall_64+0x123/0x790 [ 514.960704][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.960730][ T9910] RIP: 0033:0x7f879e19e1d9 [ 514.960747][ T9910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.960766][ T9910] RSP: 002b:00007f879f08c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 514.960786][ T9910] RAX: ffffffffffffffda RBX: 00007f879e425fa0 RCX: 00007f879e19e1d9 [ 514.960801][ T9910] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 514.960813][ T9910] RBP: 00007f879e235888 R08: 0000000000000000 R09: 0000000000000000 [ 514.960827][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.960845][ T9910] R13: 00007f879e426038 R14: 00007f879e425fa0 R15: 00007ffc59ecf828 [ 514.960885][ T9910] [ 514.960914][ T9910] socket: no more sockets [ 515.291967][ T2246] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 515.462385][ T2246] usb 8-1: unable to get BOS descriptor or descriptor too short [ 515.462856][ T2246] usb 8-1: not running at top speed; connect to a high speed hub [ 515.462884][ T2246] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 515.469086][ T2246] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 515.475068][ T2246] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.475090][ T2246] usb 8-1: Product: syz [ 515.475105][ T2246] usb 8-1: Manufacturer: syz [ 515.475119][ T2246] usb 8-1: SerialNumber: syz [ 516.053358][ T9913] »»»»»»: renamed from vlan0 (while UP) [ 517.910357][ T2246] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 518.267657][ T2246] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 518.267684][ T2246] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 518.524219][ T2246] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 518.939949][ T2246] usb 8-1: USB disconnect, device number 10 [ 519.774241][ T8228] udevd[8228]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.022466][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 520.043022][ T9949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9949 comm=syz.9.1001 [ 520.053558][ T31] audit: type=1400 audit(1791737376.191:899): avc: denied { write } for pid=9948 comm="syz.6.1002" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 520.154533][ T9951] FAULT_INJECTION: forcing a failure. [ 520.154533][ T9951] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 520.154595][ T9951] CPU: 1 UID: 0 PID: 9951 Comm: syz.7.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.154623][ T9951] Tainted: [L]=SOFTLOCKUP [ 520.154630][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 520.154642][ T9951] Call Trace: [ 520.154649][ T9951] [ 520.154656][ T9951] dump_stack_lvl+0x100/0x190 [ 520.154690][ T9951] should_fail_ex.cold+0x5/0xa [ 520.154719][ T9951] should_fail_alloc_page+0xeb/0x140 [ 520.154749][ T9951] prepare_alloc_pages+0x1f0/0x5b0 [ 520.154783][ T9951] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 520.154815][ T9951] ? __lock_acquire+0x5c0/0x1f40 [ 520.154846][ T9951] ? __css_rstat_updated+0x1ce/0x590 [ 520.154874][ T9951] ? __pfx___css_rstat_updated+0x10/0x10 [ 520.154902][ T9951] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 520.154928][ T9951] ? lock_acquire+0x1d1/0x380 [ 520.154949][ T9951] ? finish_task_switch.isra.0+0x149/0x10d0 [ 520.154973][ T9951] ? find_held_lock+0x2b/0x80 [ 520.155000][ T9951] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 520.155024][ T9951] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 520.155049][ T9951] ? rcu_is_watching+0x13/0xc0 [ 520.155077][ T9951] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 520.155101][ T9951] ? lockdep_hardirqs_on+0x7d/0x110 [ 520.155128][ T9951] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 520.155158][ T9951] ? rcu_is_watching+0x13/0xc0 [ 520.155185][ T9951] ? trace_sched_exit_tp+0x120/0x160 [ 520.155211][ T9951] ? __schedule+0x126b/0x6920 [ 520.155237][ T9951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 520.155265][ T9951] ? policy_nodemask+0xed/0x4f0 [ 520.155296][ T9951] alloc_pages_mpol+0x201/0x550 [ 520.155326][ T9951] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 520.155363][ T9951] alloc_pages_noprof+0x1a/0x160 [ 520.155385][ T9951] get_free_pages_noprof+0x10/0xb0 [ 520.155410][ T9951] __kasan_populate_vmalloc+0xa0/0x210 [ 520.155442][ T9951] alloc_vmap_area+0x95d/0x2bb0 [ 520.155477][ T9951] ? kasan_save_track+0x14/0x30 [ 520.155502][ T9951] ? __kasan_kmalloc+0xaa/0xb0 [ 520.155527][ T9951] ? __pfx_alloc_vmap_area+0x10/0x10 [ 520.155555][ T9951] ? __get_vm_area_node+0x124/0x350 [ 520.155585][ T9951] __get_vm_area_node+0x1ed/0x350 [ 520.155618][ T9951] __vmalloc_node_range_noprof+0x268/0x1420 [ 520.155647][ T9951] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 520.155676][ T9951] ? __schedule+0x126b/0x6920 [ 520.155706][ T9951] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 520.155732][ T9951] ? lock_acquire+0x1d1/0x380 [ 520.155756][ T9951] ? find_held_lock+0x2b/0x80 [ 520.155783][ T9951] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 520.155811][ T9951] ? avc_has_perm_noaudit+0x11e/0x470 [ 520.155844][ T9951] ? avc_has_perm_noaudit+0x145/0x470 [ 520.155868][ T9951] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 520.155893][ T9951] __vmalloc_node_noprof+0xad/0xf0 [ 520.155921][ T9951] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 520.155951][ T9951] __vmalloc_noprof+0xa3/0x120 [ 520.155979][ T9951] ? __pfx___vmalloc_noprof+0x10/0x10 [ 520.156011][ T9951] ? rcu_is_watching+0x13/0xc0 [ 520.156039][ T9951] ? cap_capable+0x107/0x430 [ 520.156060][ T9951] ? security_capable+0x74/0x260 [ 520.156086][ T9951] bpf_prog_alloc_no_stats+0x59/0x690 [ 520.156111][ T9951] ? security_capable+0x80/0x260 [ 520.156138][ T9951] bpf_prog_alloc+0x3b/0x200 [ 520.156162][ T9951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 520.156188][ T9951] bpf_prog_load+0x49e/0x2ab0 [ 520.156224][ T9951] ? __pfx_bpf_prog_load+0x10/0x10 [ 520.156278][ T9951] __sys_bpf+0x1f46/0x4a30 [ 520.156305][ T9951] ? __css_rstat_updated+0xe0/0x590 [ 520.156331][ T9951] ? __pfx___sys_bpf+0x10/0x10 [ 520.156351][ T9951] ? __pfx___css_rstat_updated+0x10/0x10 [ 520.156383][ T9951] ? lock_acquire+0x1d1/0x380 [ 520.156405][ T9951] ? finish_task_switch.isra.0+0x149/0x10d0 [ 520.156429][ T9951] ? find_held_lock+0x2b/0x80 [ 520.156458][ T9951] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 520.156484][ T9951] ? rcu_is_watching+0x13/0xc0 [ 520.156511][ T9951] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 520.156542][ T9951] ? rcu_is_watching+0x13/0xc0 [ 520.156569][ T9951] ? trace_sched_exit_tp+0x120/0x160 [ 520.156596][ T9951] ? __schedule+0x126b/0x6920 [ 520.156637][ T9951] ? __pfx___schedule+0x10/0x10 [ 520.156672][ T9951] ? __x64_sys_bpf+0xce/0x140 [ 520.156693][ T9951] __x64_sys_bpf+0xce/0x140 [ 520.156717][ T9951] ? do_syscall_64+0xae/0x790 [ 520.156745][ T9951] do_syscall_64+0x123/0x790 [ 520.156774][ T9951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.156796][ T9951] RIP: 0033:0x7f72eab9e1d9 [ 520.156813][ T9951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.156836][ T9951] RSP: 002b:00007f72ebac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 520.156855][ T9951] RAX: ffffffffffffffda RBX: 00007f72eae26180 RCX: 00007f72eab9e1d9 [ 520.156870][ T9951] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005 [ 520.156883][ T9951] RBP: 00007f72ebac7090 R08: 0000000000000000 R09: 0000000000000000 [ 520.156895][ T9951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.156907][ T9951] R13: 00007f72eae26218 R14: 00007f72eae26180 R15: 00007ffe87f61b48 [ 520.156936][ T9951] [ 520.157366][ T9951] syz.7.1000: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 520.157521][ T9951] CPU: 1 UID: 0 PID: 9951 Comm: syz.7.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.157549][ T9951] Tainted: [L]=SOFTLOCKUP [ 520.157557][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 520.157568][ T9951] Call Trace: [ 520.157575][ T9951] [ 520.157584][ T9951] dump_stack_lvl+0x100/0x190 [ 520.157616][ T9951] warn_alloc.cold+0x9e/0xb2 [ 520.157640][ T9951] ? __pfx_warn_alloc+0x10/0x10 [ 520.157663][ T9951] ? irqentry_exit+0x24d/0xa10 [ 520.157703][ T9951] ? kasan_save_stack+0x30/0x50 [ 520.157738][ T9951] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 520.157770][ T9951] ? __schedule+0x126b/0x6920 [ 520.157801][ T9951] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 520.157835][ T9951] ? lock_acquire+0x1d1/0x380 [ 520.157860][ T9951] ? find_held_lock+0x2b/0x80 [ 520.157888][ T9951] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 520.157916][ T9951] ? avc_has_perm_noaudit+0x11e/0x470 [ 520.157945][ T9951] ? avc_has_perm_noaudit+0x145/0x470 [ 520.157968][ T9951] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 520.157994][ T9951] __vmalloc_node_noprof+0xad/0xf0 [ 520.158022][ T9951] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 520.158052][ T9951] __vmalloc_noprof+0xa3/0x120 [ 520.158081][ T9951] ? __pfx___vmalloc_noprof+0x10/0x10 [ 520.158113][ T9951] ? rcu_is_watching+0x13/0xc0 [ 520.158141][ T9951] ? cap_capable+0x107/0x430 [ 520.158162][ T9951] ? security_capable+0x74/0x260 [ 520.158187][ T9951] bpf_prog_alloc_no_stats+0x59/0x690 [ 520.158213][ T9951] ? security_capable+0x80/0x260 [ 520.158239][ T9951] bpf_prog_alloc+0x3b/0x200 [ 520.158263][ T9951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 520.158291][ T9951] bpf_prog_load+0x49e/0x2ab0 [ 520.158325][ T9951] ? __pfx_bpf_prog_load+0x10/0x10 [ 520.158379][ T9951] __sys_bpf+0x1f46/0x4a30 [ 520.158406][ T9951] ? __css_rstat_updated+0xe0/0x590 [ 520.158433][ T9951] ? __pfx___sys_bpf+0x10/0x10 [ 520.158453][ T9951] ? __pfx___css_rstat_updated+0x10/0x10 [ 520.158485][ T9951] ? lock_acquire+0x1d1/0x380 [ 520.158507][ T9951] ? finish_task_switch.isra.0+0x149/0x10d0 [ 520.158531][ T9951] ? find_held_lock+0x2b/0x80 [ 520.158560][ T9951] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 520.158586][ T9951] ? rcu_is_watching+0x13/0xc0 [ 520.158614][ T9951] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 520.158644][ T9951] ? rcu_is_watching+0x13/0xc0 [ 520.158671][ T9951] ? trace_sched_exit_tp+0x120/0x160 [ 520.158698][ T9951] ? __schedule+0x126b/0x6920 [ 520.158739][ T9951] ? __pfx___schedule+0x10/0x10 [ 520.158775][ T9951] ? __x64_sys_bpf+0xce/0x140 [ 520.158795][ T9951] __x64_sys_bpf+0xce/0x140 [ 520.158818][ T9951] ? do_syscall_64+0xae/0x790 [ 520.158852][ T9951] do_syscall_64+0x123/0x790 [ 520.158882][ T9951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.158902][ T9951] RIP: 0033:0x7f72eab9e1d9 [ 520.158919][ T9951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.158937][ T9951] RSP: 002b:00007f72ebac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 520.158955][ T9951] RAX: ffffffffffffffda RBX: 00007f72eae26180 RCX: 00007f72eab9e1d9 [ 520.158969][ T9951] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005 [ 520.158981][ T9951] RBP: 00007f72ebac7090 R08: 0000000000000000 R09: 0000000000000000 [ 520.158994][ T9951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.159006][ T9951] R13: 00007f72eae26218 R14: 00007f72eae26180 R15: 00007ffe87f61b48 [ 520.159035][ T9951] [ 520.159078][ T9951] Mem-Info: [ 520.159138][ T9951] active_anon:61534 inactive_anon:4 isolated_anon:0 [ 520.159138][ T9951] active_file:4710 inactive_file:59660 isolated_file:0 [ 520.159138][ T9951] unevictable:0 dirty:449 writeback:0 [ 520.159138][ T9951] slab_reclaimable:12940 slab_unreclaimable:111995 [ 520.159138][ T9951] mapped:62399 shmem:50312 pagetables:1699 [ 520.159138][ T9951] sec_pagetables:0 bounce:0 [ 520.159138][ T9951] kernel_misc_reclaimable:0 [ 520.159138][ T9951] free:1166189 free_pcp:17743 free_cma:0 [ 520.159237][ T9951] Node 0 active_anon:246136kB inactive_anon:16kB active_file:18840kB inactive_file:238448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249596kB dirty:1796kB writeback:0kB shmem:201248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15204kB pagetables:6652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 520.159305][ T9951] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 520.159370][ T9951] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 520.159454][ T9951] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 520.159590][ T9951] Node 0 DMA32 free:733732kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:246136kB inactive_anon:16kB active_file:18840kB inactive_file:238448kB unevictable:0kB writepending:1796kB zspages:0kB present:3129332kB managed:2510924kB mlocked:0kB bounce:0kB free_pcp:51264kB local_pcp:17228kB free_cma:0kB [ 520.159676][ T9951] lowmem_reserve[]: 0 0 0 0 0 [ 520.159809][ T9951] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 520.159895][ T9951] lowmem_reserve[]: 0 0 0 0 0 [ 520.160029][ T9951] Node 1 Normal free:3915664kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:19708kB local_pcp:8368kB free_cma:0kB [ 520.160118][ T9951] lowmem_reserve[]: 0 0 0 0 0 [ 520.160250][ T9951] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 520.160613][ T9951] Node 0 DMA32: 100*4kB (UME) 1815*8kB (UM) 2219*16kB (UME) 1183*32kB (UME) 2251*64kB (UME) 1343*128kB (UME) 459*256kB (UME) 110*512kB (ME) 14*1024kB (UM) 5*2048kB (UME) 32*4096kB (M) = 733720kB [ 520.161133][ T9951] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 520.161404][ T9951] Node 1 Normal: 50*4kB (M) 51*8kB (UM) 55*16kB (UM) 22*32kB (UM) 12*64kB (UM) 6*128kB (UM) 1*256kB (M) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 953*4096kB (M) = 3915664kB [ 520.162020][ T9951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 520.162051][ T9951] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 520.162081][ T9951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 520.162110][ T9951] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 520.162140][ T9951] 114652 total pagecache pages [ 520.162181][ T9951] 0 pages in swap cache [ 520.162202][ T9951] Free swap = 124996kB [ 520.162224][ T9951] Total swap = 124996kB [ 520.162246][ T9951] 2097051 pages RAM [ 520.162267][ T9951] 0 pages HighMem/MovableOnly [ 520.162289][ T9951] 437689 pages reserved [ 520.162310][ T9951] 0 pages cma reserved [ 520.613725][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 520.625844][ T10] usb 9-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 520.655452][ T10] usb 9-1: config 3 has an invalid interface number: 79 but max is 0 [ 520.655470][ T10] usb 9-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 520.655481][ T10] usb 9-1: config 3 has no interface number 0 [ 520.655504][ T10] usb 9-1: config 3 interface 79 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.655519][ T10] usb 9-1: config 3 interface 79 has no altsetting 0 [ 520.974340][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.974358][ T10] usb 9-1: Product: syz [ 520.974366][ T10] usb 9-1: Manufacturer: syz [ 520.974374][ T10] usb 9-1: SerialNumber: syz [ 521.412237][ T9952] tmpfs: Bad value for 'mpol' [ 521.413375][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.413746][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.422455][ T31] audit: type=1400 audit(1791737377.541:900): avc: denied { mounton } for pid=9948 comm="syz.6.1002" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 521.799033][ T9960] Cannot find add_set index 0 as target [ 521.807557][ T31] audit: type=1400 audit(1791737377.941:901): avc: denied { connect } for pid=9956 comm="syz.7.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 521.808211][ T31] audit: type=1400 audit(1791737377.941:902): avc: denied { setopt } for pid=9956 comm="syz.7.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 521.882205][ T5705] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 522.034703][ T5705] usb 7-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 522.036059][ T5705] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.038323][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.038348][ T5705] usb 7-1: Product: syz [ 522.038364][ T5705] usb 7-1: Manufacturer: syz [ 522.038379][ T5705] usb 7-1: SerialNumber: syz [ 522.064687][ T5705] kaweth 7-1:1.0: couldn't find required endpoints [ 522.346964][ T2246] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 522.366675][ T10] kobil_sct 9-1:3.79: required endpoints missing [ 522.382034][ T5705] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 522.440322][ T10] usb 9-1: USB disconnect, device number 9 [ 522.526296][ T2246] usb 8-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 522.549373][ T2246] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.549822][ T2246] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.550117][ T2246] usb 8-1: config 0 interface 0 has no altsetting 0 [ 522.550989][ T2246] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.628130][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 522.689516][ T5705] usb 5-1: unable to get BOS descriptor or descriptor too short [ 522.689580][ T5705] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 522.731658][ T2246] usb 8-1: config 0 descriptor?? [ 522.759510][ T5705] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 523.020937][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.020964][ T5705] usb 5-1: Product: syz [ 523.020979][ T5705] usb 5-1: Manufacturer: syz [ 523.020994][ T5705] usb 5-1: SerialNumber: syz [ 523.358009][ T2246] usbhid 8-1:0.0: can't add hid device: -71 [ 523.358348][ T2246] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 523.402879][ T2246] usb 8-1: USB disconnect, device number 11 [ 526.594756][ T5705] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 526.629550][ T5705] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 526.694697][ T25] usb 7-1: USB disconnect, device number 13 [ 526.837965][ T5705] usb 5-1: USB disconnect, device number 52 [ 526.894501][ T8228] udevd[8228]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.026325][ T9988] tipc: Enabling of bearer rejected, failed to enable media [ 527.529002][ T25] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 527.671954][ T5705] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 527.721919][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 527.722997][ T25] usb 10-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 527.836587][ T25] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.836621][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 527.836654][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.841009][ T25] usb 10-1: config 0 descriptor?? [ 528.154119][ T9991] synth uevent: /bus/virtio/drivers/virtio_net: unknown uevent action string [ 528.852510][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 528.866498][ T5705] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 528.867444][ T5705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.867473][ T5705] usb 5-1: config 0 has no interfaces? [ 528.869532][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.869555][ T5705] usb 5-1: Product: syz [ 528.869570][ T5705] usb 5-1: Manufacturer: syz [ 528.869585][ T5705] usb 5-1: SerialNumber: syz [ 528.874463][ T5705] usb 5-1: config 0 descriptor?? [ 528.994494][ T31] audit: type=1400 audit(1791737385.131:903): avc: denied { remount } for pid=9997 comm="syz.7.1017" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 529.191546][ T25] uclogic 0003:5543:0064.000F: unknown main item tag 0x0 [ 529.191579][ T25] uclogic 0003:5543:0064.000F: unknown main item tag 0x0 [ 529.191605][ T25] uclogic 0003:5543:0064.000F: unknown main item tag 0x0 [ 529.191630][ T25] uclogic 0003:5543:0064.000F: unknown main item tag 0x0 [ 529.191655][ T25] uclogic 0003:5543:0064.000F: unknown main item tag 0x0 [ 529.203946][ T25] uclogic 0003:5543:0064.000F: hiddev0,hidraw0: USB HID v0.01 Device [HID 5543:0064] on usb-dummy_hcd.9-1/input0 [ 529.263156][ T25] usb 5-1: USB disconnect, device number 53 [ 529.729915][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1013'. [ 529.768472][ T5742] usb 10-1: USB disconnect, device number 6 [ 530.051707][ T31] audit: type=1400 audit(1791737386.181:904): avc: denied { append } for pid=10012 comm="syz.6.1020" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 530.212084][ T5610] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 530.283561][T10019] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1022'. [ 530.302010][ T5742] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 530.322242][ T31] audit: type=1400 audit(1791737386.451:905): avc: denied { setattr } for pid=10018 comm="syz.4.1022" name="NETLINK" dev="sockfs" ino=27793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.373370][ T5610] usb 8-1: Using ep0 maxpacket: 16 [ 530.374031][ T5610] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 530.374967][ T5610] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.374997][ T5610] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.375049][ T5610] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 530.375088][ T5610] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.378349][ T5610] usb 8-1: config 0 descriptor?? [ 530.486698][ T5742] usb 7-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 530.502314][ T5742] usb 7-1: config 114 has too many interfaces: 208, using maximum allowed: 32 [ 530.502342][ T5742] usb 7-1: config 114 has an invalid descriptor of length 52, skipping remainder of the config [ 530.502361][ T5742] usb 7-1: config 114 has 1 interface, different from the descriptor's value: 208 [ 530.502381][ T5742] usb 7-1: config 114 has no interface number 0 [ 530.502408][ T5742] usb 7-1: config 114 interface 97 has no altsetting 0 [ 530.513943][ T5742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.513969][ T5742] usb 7-1: Product: syz [ 530.513984][ T5742] usb 7-1: Manufacturer: syz [ 530.513999][ T5742] usb 7-1: SerialNumber: syz [ 530.879280][T10011] syz.7.1019(10011): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 530.905297][ T5610] usbhid 8-1:0.0: can't add hid device: -71 [ 530.905393][ T5610] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 530.926974][ T5610] usb 8-1: USB disconnect, device number 12 [ 530.942871][ T2246] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 531.534035][ T2246] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 531.535921][ T2246] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.535952][ T2246] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.535988][ T2246] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.541226][ T2246] usb 10-1: config 0 descriptor?? [ 531.827879][T10036] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 531.839945][ T5742] usb 7-1: USB disconnect, device number 14 [ 531.941173][T10041] FAULT_INJECTION: forcing a failure. [ 531.941173][T10041] name failslab, interval 1, probability 0, space 0, times 0 [ 531.941216][T10041] CPU: 1 UID: 0 PID: 10041 Comm: syz.6.1027 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.941243][T10041] Tainted: [L]=SOFTLOCKUP [ 531.941251][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 531.941263][T10041] Call Trace: [ 531.941271][T10041] [ 531.941279][T10041] dump_stack_lvl+0x100/0x190 [ 531.941313][T10041] should_fail_ex.cold+0x5/0xa [ 531.941342][T10041] should_failslab+0xc2/0x120 [ 531.941371][T10041] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 531.941398][T10041] ? sidtab_sid2str_get+0x84/0x670 [ 531.941419][T10041] ? sidtab_sid2str_get+0x17a/0x670 [ 531.941444][T10041] kmemdup_noprof+0x29/0x60 [ 531.941467][T10041] sidtab_sid2str_get+0x17a/0x670 [ 531.941490][T10041] security_sid_to_context_core+0x373/0x700 [ 531.941524][T10041] avc_audit_post_callback+0x1aa/0x910 [ 531.941547][T10041] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 531.941576][T10041] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 531.941595][T10041] ? skb_put+0x138/0x180 [ 531.941621][T10041] ? audit_log_n_string+0x2a3/0x5a0 [ 531.941651][T10041] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 531.941671][T10041] common_lsm_audit+0x23f/0x2b0 [ 531.941700][T10041] ? __pfx_common_lsm_audit+0x10/0x10 [ 531.941729][T10041] ? lockdep_hardirqs_on+0x7d/0x110 [ 531.941756][T10041] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 531.941786][T10041] slow_avc_audit+0x186/0x210 [ 531.941808][T10041] ? __pfx_slow_avc_audit+0x10/0x10 [ 531.941834][T10041] ? avc_denied+0x14a/0x190 [ 531.941857][T10041] ? avc_has_perm_noaudit+0x3a2/0x470 [ 531.941890][T10041] avc_has_perm+0x1a6/0x1e0 [ 531.941914][T10041] ? __pfx_avc_has_perm+0x10/0x10 [ 531.941947][T10041] sock_has_perm+0x253/0x2f0 [ 531.941973][T10041] ? __pfx_sock_has_perm+0x10/0x10 [ 531.942006][T10041] ? find_held_lock+0x2b/0x80 [ 531.942034][T10041] ? get_pid_task+0xfc/0x250 [ 531.942059][T10041] ? get_pid_task+0xfc/0x250 [ 531.942090][T10041] security_socket_getsockopt+0x9b/0x230 [ 531.942118][T10041] do_sock_getsockopt+0x1e3/0x6e0 [ 531.942149][T10041] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 531.942180][T10041] ? __fget_files+0x34/0x3d0 [ 531.942207][T10041] ? find_held_lock+0x2b/0x80 [ 531.942244][T10041] ? __fget_files+0x21f/0x3d0 [ 531.942278][T10041] __sys_getsockopt+0x148/0x260 [ 531.942308][T10041] ? __x64_sys_getsockopt+0xbd/0x160 [ 531.942327][T10041] __x64_sys_getsockopt+0xbd/0x160 [ 531.942346][T10041] ? do_syscall_64+0xae/0x790 [ 531.942372][T10041] ? lockdep_hardirqs_on+0x7d/0x110 [ 531.942399][T10041] do_syscall_64+0x123/0x790 [ 531.942428][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.942449][T10041] RIP: 0033:0x7f993539e1d9 [ 531.942467][T10041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.942485][T10041] RSP: 002b:00007f9936312028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 531.942505][T10041] RAX: ffffffffffffffda RBX: 00007f9935625fa0 RCX: 00007f993539e1d9 [ 531.942519][T10041] RDX: 0000000000000700 RSI: 0000000000000118 RDI: 0000000000000004 [ 531.942531][T10041] RBP: 00007f9936312090 R08: 0000200000001580 R09: 0000000000000000 [ 531.942544][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.942556][T10041] R13: 00007f9935626038 R14: 00007f9935625fa0 R15: 00007fff77540ad8 [ 531.942586][T10041] [ 531.947331][ T31] audit: type=1400 audit(1791737388.071:906): avc: denied { getopt } for pid=10040 comm="syz.6.1027" scontext=root:sysadm_r:sysadm_t tsid=145 tclass=nfc_socket permissive=1 [ 532.199582][ T2246] usbhid 10-1:0.0: can't add hid device: -71 [ 532.199678][ T2246] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 532.331701][ T2246] usb 10-1: USB disconnect, device number 7 [ 532.958017][T10052] afs: Bad value for 'source' [ 533.350749][T10048] FAULT_INJECTION: forcing a failure. [ 533.350749][T10048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.350820][T10048] CPU: 1 UID: 0 PID: 10048 Comm: syz.8.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.350849][T10048] Tainted: [L]=SOFTLOCKUP [ 533.350857][T10048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 533.350869][T10048] Call Trace: [ 533.350876][T10048] [ 533.350885][T10048] dump_stack_lvl+0x100/0x190 [ 533.350919][T10048] should_fail_ex.cold+0x5/0xa [ 533.350950][T10048] _copy_to_user+0x32/0xd0 [ 533.350981][T10048] simple_read_from_buffer+0xcb/0x170 [ 533.351013][T10048] proc_fail_nth_read+0x1af/0x230 [ 533.351044][T10048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.351075][T10048] ? rw_verify_area+0xce/0x6d0 [ 533.351098][T10048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.351134][T10048] vfs_read+0x1e4/0xb40 [ 533.351159][T10048] ? lock_acquire+0x1d1/0x380 [ 533.351182][T10048] ? __fget_files+0x34/0x3d0 [ 533.351210][T10048] ? __pfx_vfs_read+0x10/0x10 [ 533.351232][T10048] ? find_held_lock+0x2b/0x80 [ 533.351261][T10048] ? __fget_files+0x215/0x3d0 [ 533.351293][T10048] ? __fget_files+0x21f/0x3d0 [ 533.351329][T10048] ksys_read+0x12a/0x250 [ 533.351353][T10048] ? __pfx_ksys_read+0x10/0x10 [ 533.351386][T10048] do_syscall_64+0x123/0x790 [ 533.351417][T10048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.351439][T10048] RIP: 0033:0x7f879e15ea0e [ 533.351456][T10048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 533.351474][T10048] RSP: 002b:00007f879f08bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 533.351494][T10048] RAX: ffffffffffffffda RBX: 00007f879f08c6c0 RCX: 00007f879e15ea0e [ 533.351508][T10048] RDX: 000000000000000f RSI: 00007f879f08c0a0 RDI: 0000000000000004 [ 533.351520][T10048] RBP: 00007f879f08c090 R08: 0000000000000000 R09: 0000000000000000 [ 533.351532][T10048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.351544][T10048] R13: 00007f879e426038 R14: 00007f879e425fa0 R15: 00007ffc59ecf828 [ 533.351575][T10048] [ 533.393080][ T5705] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 534.135225][ T5705] usb 7-1: Using ep0 maxpacket: 32 [ 534.138496][ T5705] usb 7-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 534.223033][ T5705] usb 7-1: config 3 has an invalid interface number: 79 but max is 0 [ 534.223144][ T5705] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 534.223761][ T5705] usb 7-1: config 3 has no interface number 0 [ 534.226835][ T5705] usb 7-1: config 3 interface 79 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.227496][ T5705] usb 7-1: config 3 interface 79 has no altsetting 0 [ 534.408047][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.408948][ T5705] usb 7-1: Product: syz [ 534.409524][ T5705] usb 7-1: Manufacturer: syz [ 534.409849][ T5705] usb 7-1: SerialNumber: syz [ 534.798130][T10050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.815963][T10058] FAULT_INJECTION: forcing a failure. [ 534.815963][T10058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.815996][T10058] CPU: 0 UID: 0 PID: 10058 Comm: syz.7.1033 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.816024][T10058] Tainted: [L]=SOFTLOCKUP [ 534.816031][T10058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 534.816042][T10058] Call Trace: [ 534.816049][T10058] [ 534.816057][T10058] dump_stack_lvl+0x100/0x190 [ 534.816089][T10058] should_fail_ex.cold+0x5/0xa [ 534.816117][T10058] _copy_to_user+0x32/0xd0 [ 534.816147][T10058] simple_read_from_buffer+0xcb/0x170 [ 534.816177][T10058] proc_fail_nth_read+0x1af/0x230 [ 534.816207][T10058] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.816237][T10058] ? rw_verify_area+0xce/0x6d0 [ 534.816258][T10058] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.816286][T10058] vfs_read+0x1e4/0xb40 [ 534.816309][T10058] ? lock_acquire+0x1d1/0x380 [ 534.816331][T10058] ? __fget_files+0x34/0x3d0 [ 534.816357][T10058] ? __pfx_vfs_read+0x10/0x10 [ 534.816378][T10058] ? find_held_lock+0x2b/0x80 [ 534.816407][T10058] ? __fget_files+0x215/0x3d0 [ 534.816430][T10050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.816438][T10058] ? __fget_files+0x21f/0x3d0 [ 534.816471][T10058] ksys_read+0x12a/0x250 [ 534.816492][T10058] ? __pfx_ksys_read+0x10/0x10 [ 534.816517][T10058] do_syscall_64+0x123/0x790 [ 534.816546][T10058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.816565][T10058] RIP: 0033:0x7f72eab5ea0e [ 534.816581][T10058] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 534.816596][T10058] RSP: 002b:00007f72ebb08fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 534.816616][T10058] RAX: ffffffffffffffda RBX: 00007f72ebb096c0 RCX: 00007f72eab5ea0e [ 534.816629][T10058] RDX: 000000000000000f RSI: 00007f72ebb090a0 RDI: 0000000000000004 [ 534.816642][T10058] RBP: 00007f72ebb09090 R08: 0000000000000000 R09: 0000000000000000 [ 534.816653][T10058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.816664][T10058] R13: 00007f72eae26038 R14: 00007f72eae25fa0 R15: 00007ffe87f61b48 [ 534.816695][T10058] [ 535.062383][ T5610] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 535.224209][ T5610] usb 9-1: Invalid ep0 maxpacket: 64 [ 535.342378][ T25] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 535.352079][ T5610] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 535.492317][ T25] usb 10-1: Using ep0 maxpacket: 32 [ 535.493156][ T25] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 535.494288][ T25] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.494311][ T25] usb 10-1: config 0 has no interfaces? [ 535.494338][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.499165][ T25] usb 10-1: config 0 descriptor?? [ 535.522040][ T5610] usb 9-1: Invalid ep0 maxpacket: 64 [ 535.522280][ T5610] usb usb9-port1: attempt power cycle [ 535.563218][ T5705] kobil_sct 7-1:3.79: required endpoints missing [ 535.571316][ T5705] usb 7-1: USB disconnect, device number 15 [ 535.675063][ T31] audit: type=1400 audit(1791737391.811:907): avc: denied { create } for pid=10074 comm="syz.6.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 535.882087][ T5610] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 535.906217][ T5610] usb 9-1: Invalid ep0 maxpacket: 64 [ 536.032068][ T5610] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 536.054162][ T5610] usb 9-1: Invalid ep0 maxpacket: 64 [ 536.054508][ T5610] usb usb9-port1: unable to enumerate USB device [ 536.921974][ T5705] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 537.075707][ T5705] usb 8-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 537.076784][ T5705] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.076816][ T5705] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.079615][ T5705] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 537.079639][ T5705] usb 8-1: Product: syz [ 537.079655][ T5705] usb 8-1: Manufacturer: syz [ 537.760267][ T5705] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:046D:C299.0010/input/input15 [ 538.321793][ T5705] logitech 0003:046D:C299.0010: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.7-1/input0 [ 538.323907][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1046'. [ 538.366554][ T5705] logitech 0003:046D:C299.0010: Force feedback support for Logitech Gaming Wheels [ 538.551393][ T5610] usb 10-1: USB disconnect, device number 8 [ 538.582493][T10094] vivid-000: disconnect [ 538.593715][T10094] vivid-000: reconnect [ 538.705162][ T31] audit: type=1400 audit(1791737394.841:908): avc: denied { create } for pid=10101 comm="syz.9.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 538.706027][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1048'. [ 538.707407][ T31] audit: type=1400 audit(1791737394.841:909): avc: denied { write } for pid=10101 comm="syz.9.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 539.955527][T10109] jffs2: notice: (10109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 540.070946][ T31] audit: type=1400 audit(1791737396.141:910): avc: denied { write } for pid=10106 comm="syz.8.1049" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 540.071182][ T31] audit: type=1400 audit(1791737396.141:911): avc: denied { add_name } for pid=10106 comm="syz.8.1049" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 540.071266][ T31] audit: type=1400 audit(1791737396.151:912): avc: denied { create } for pid=10106 comm="syz.8.1049" name="test" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 540.089759][ T31] audit: type=1400 audit(1791737396.201:913): avc: denied { read write open } for pid=10106 comm="syz.8.1049" path="/42/mnt/test" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 541.002786][ T5610] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 541.084523][ T9] usb 8-1: USB disconnect, device number 13 [ 541.153026][ T5610] usb 5-1: Using ep0 maxpacket: 32 [ 541.153769][ T5610] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 541.154702][ T5610] usb 5-1: config 3 has an invalid interface number: 79 but max is 0 [ 541.154726][ T5610] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 541.154746][ T5610] usb 5-1: config 3 has no interface number 0 [ 541.154779][ T5610] usb 5-1: config 3 interface 79 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.154804][ T5610] usb 5-1: config 3 interface 79 has no altsetting 0 [ 541.158433][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.158456][ T5610] usb 5-1: Product: syz [ 541.158470][ T5610] usb 5-1: Manufacturer: syz [ 541.158486][ T5610] usb 5-1: SerialNumber: syz [ 541.457609][T10113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.458074][T10113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.298085][T10133] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 542.426800][ T31] audit: type=1400 audit(1791737398.491:914): avc: denied { ioctl } for pid=10130 comm="syz.9.1050" path="pid:[4026534605]" dev="nsfs" ino=4026534605 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 542.823442][ T5610] kobil_sct 5-1:3.79: required endpoints missing [ 542.840736][ T5610] usb 5-1: USB disconnect, device number 54 [ 544.230303][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 544.342456][ T5610] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 544.495579][ T5610] usb 9-1: Using ep0 maxpacket: 8 [ 544.515349][ T5610] usb 9-1: unable to get BOS descriptor or descriptor too short [ 544.515564][ T5610] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 544.568437][ T5610] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 544.609612][ T5610] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.609675][ T5610] usb 9-1: Product: syz [ 544.609716][ T5610] usb 9-1: Manufacturer: syz [ 544.609788][ T5610] usb 9-1: SerialNumber: syz [ 544.775246][T10158] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 545.023756][T10157] ceph: No mds server is up or the cluster is laggy [ 547.035694][T10166] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 547.120501][ T8875] IPVS: starting estimator thread 0... [ 547.136677][T10166] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 547.183550][ T5610] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.183606][ T5610] usb 9-1: MIDIStreaming interface descriptor not found [ 547.207714][T10168] IPVS: using max 37 ests per chain, 88800 per kthread [ 547.304596][ T5610] usb 9-1: USB disconnect, device number 14 [ 547.336310][ T31] audit: type=1400 audit(1791737403.471:915): avc: denied { connect } for pid=10172 comm="syz.6.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 547.363934][T10173] FAULT_INJECTION: forcing a failure. [ 547.363934][T10173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.363969][T10173] CPU: 0 UID: 0 PID: 10173 Comm: syz.6.1069 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.363999][T10173] Tainted: [L]=SOFTLOCKUP [ 547.364008][T10173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 547.364021][T10173] Call Trace: [ 547.364029][T10173] [ 547.364038][T10173] dump_stack_lvl+0x100/0x190 [ 547.364073][T10173] should_fail_ex.cold+0x5/0xa [ 547.364110][T10173] _copy_from_user+0x2e/0xd0 [ 547.364149][T10173] __sys_bpf+0x2f5/0x4a30 [ 547.364184][T10173] ? __pfx___sys_bpf+0x10/0x10 [ 547.364205][T10173] ? find_held_lock+0x2b/0x80 [ 547.364238][T10173] ? futex_wake+0x4ea/0x5e0 [ 547.364282][T10173] ? rcu_read_lock_any_held+0x6a/0x90 [ 547.364303][T10173] ? find_held_lock+0x2b/0x80 [ 547.364332][T10173] ? ksys_write+0x190/0x250 [ 547.364354][T10173] ? ksys_write+0x190/0x250 [ 547.364394][T10173] ? __x64_sys_futex+0x34f/0x4d0 [ 547.364422][T10173] ? __x64_sys_futex+0x358/0x4d0 [ 547.364456][T10173] ? xfd_validate_state+0x129/0x190 [ 547.364483][T10173] ? __x64_sys_bpf+0xce/0x140 [ 547.364506][T10173] __x64_sys_bpf+0xce/0x140 [ 547.364530][T10173] ? do_syscall_64+0xae/0x790 [ 547.364565][T10173] do_syscall_64+0x123/0x790 [ 547.364598][T10173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.364620][T10173] RIP: 0033:0x7f993539e1d9 [ 547.364640][T10173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.364663][T10173] RSP: 002b:00007f9936312028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.364686][T10173] RAX: ffffffffffffffda RBX: 00007f9935625fa0 RCX: 00007f993539e1d9 [ 547.364702][T10173] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 547.364716][T10173] RBP: 00007f9935435888 R08: 0000000000000000 R09: 0000000000000000 [ 547.364730][T10173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.364743][T10173] R13: 00007f9935626038 R14: 00007f9935625fa0 R15: 00007fff77540ad8 [ 547.364777][T10173] [ 548.337311][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1073'. [ 548.392180][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 548.527132][ T8309] udevd[8309]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.554461][T10189] vivid-000: disconnect [ 548.554899][T10189] vivid-000: reconnect [ 548.557862][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 548.563534][ T10] usb 8-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=9e.9e [ 548.574641][ T10] usb 8-1: config 8 has an invalid interface number: 40 but max is 0 [ 548.574666][ T10] usb 8-1: config 8 has no interface number 0 [ 548.574693][ T10] usb 8-1: config 8 interface 40 has no altsetting 0 [ 548.601693][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.601719][ T10] usb 8-1: Product: syz [ 548.601735][ T10] usb 8-1: Manufacturer: syz [ 548.601751][ T10] usb 8-1: SerialNumber: syz [ 549.286969][T10192] FAULT_INJECTION: forcing a failure. [ 549.286969][T10192] name failslab, interval 1, probability 0, space 0, times 0 [ 549.287020][T10192] CPU: 0 UID: 0 PID: 10192 Comm: syz.4.1074 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.287051][T10192] Tainted: [L]=SOFTLOCKUP [ 549.287059][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 549.287072][T10192] Call Trace: [ 549.287080][T10192] [ 549.287088][T10192] dump_stack_lvl+0x100/0x190 [ 549.287111][T10192] should_fail_ex.cold+0x5/0xa [ 549.287130][T10192] should_failslab+0xc2/0x120 [ 549.287148][T10192] __kmalloc_noprof+0xfc/0x840 [ 549.287164][T10192] ? __do_sys_futex_waitv+0x204/0x2b0 [ 549.287185][T10192] __do_sys_futex_waitv+0x204/0x2b0 [ 549.287203][T10192] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 549.287234][T10192] do_syscall_64+0x123/0x790 [ 549.287253][T10192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.287265][T10192] RIP: 0033:0x7fb4fd19e1d9 [ 549.287276][T10192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.287288][T10192] RSP: 002b:00007fb4fe094028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 549.287299][T10192] RAX: ffffffffffffffda RBX: 00007fb4fd426090 RCX: 00007fb4fd19e1d9 [ 549.287307][T10192] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000019740 [ 549.287314][T10192] RBP: 00007fb4fd235888 R08: 0000000000000000 R09: 0000000000000000 [ 549.287322][T10192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.287329][T10192] R13: 00007fb4fd426128 R14: 00007fb4fd426090 R15: 00007ffc1984e298 [ 549.287346][T10192] [ 549.852360][ T5616] Bluetooth: hci6: command 0x0406 tx timeout [ 549.882736][ T31] audit: type=1400 audit(1791737405.441:916): avc: denied { write } for pid=10190 comm="syz.4.1074" name="functions" dev="configfs" ino=25774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 550.726612][ T5610] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 550.807678][ T10] ums-datafab 8-1:8.40: USB Mass Storage device detected [ 550.814511][ T10] ums-datafab 8-1:8.40: Quirks match for vid 0c0b pid a109: 1 [ 550.930180][ T10] ums-sddr55 8-1:8.40: USB Mass Storage device detected [ 551.013116][ T10] usb 8-1: USB disconnect, device number 14 [ 551.058180][ T31] audit: type=1400 audit(1791737407.191:917): avc: denied { ioctl } for pid=10206 comm="syz.7.1079" path="socket:[28183]" dev="sockfs" ino=28183 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 551.416986][ T31] audit: type=1400 audit(1791737407.551:918): avc: denied { setopt } for pid=10215 comm="syz.7.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 552.033883][ T31] audit: type=1400 audit(1791737408.171:919): avc: denied { bind } for pid=10215 comm="syz.7.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 552.051978][ T5610] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 552.202843][ T5610] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 552.203948][ T5610] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.203979][ T5610] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.204014][ T5610] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.207382][ T5610] usb 9-1: config 0 descriptor?? [ 552.387958][ T32] INFO: task syz-executor:5603 blocked for more than 142 seconds. [ 552.387984][ T32] Tainted: G L syzkaller #0 [ 552.387996][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.388004][ T32] task:syz-executor state:D stack:21472 pid:5603 tgid:5603 ppid:1 task_flags:0x400140 flags:0x00080002 [ 552.388060][ T32] Call Trace: [ 552.388066][ T32] [ 552.388078][ T32] __schedule+0x1259/0x6920 [ 552.388108][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 552.388139][ T32] ? do_raw_spin_lock+0x128/0x260 [ 552.388175][ T32] ? __pfx___schedule+0x10/0x10 [ 552.388198][ T32] ? find_held_lock+0x2b/0x80 [ 552.388228][ T32] ? schedule+0x225/0x2c0 [ 552.388258][ T32] schedule+0xdd/0x2c0 [ 552.388282][ T32] schedule_preempt_disabled+0x13/0x30 [ 552.388316][ T32] __mutex_lock+0xccb/0x1bd0 [ 552.388350][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 552.388379][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 552.388410][ T32] ? net_generic+0x25/0x2a0 [ 552.388436][ T32] ? net_generic+0xea/0x2a0 [ 552.388459][ T32] ? net_generic+0xea/0x2a0 [ 552.388483][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 552.388506][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 552.388534][ T32] nfsd_umount+0x3b/0x60 [ 552.388562][ T32] deactivate_locked_super+0xbd/0x130 [ 552.388588][ T32] deactivate_super+0xea/0x110 [ 552.388613][ T32] cleanup_mnt+0xb7/0x160 [ 552.388636][ T32] task_work_run+0x150/0x240 [ 552.388667][ T32] ? __pfx_task_work_run+0x10/0x10 [ 552.388702][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 552.388729][ T32] ? rcu_is_watching+0x13/0xc0 [ 552.388760][ T32] do_syscall_64+0x661/0x790 [ 552.388790][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.388811][ T32] RIP: 0033:0x7f51f0b9f417 [ 552.388828][ T32] RSP: 002b:00007ffdda39b598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 552.388848][ T32] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f51f0b9f417 [ 552.388862][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdda39b650 [ 552.388875][ T32] RBP: 00007ffdda39b650 R08: 00007ffdda39c650 R09: 00000000ffffffff [ 552.388889][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdda39c6e0 [ 552.388902][ T32] R13: 00007f51f0c34ccb R14: 0000000000062732 R15: 00007ffdda39c720 [ 552.388930][ T32] [ 552.388978][ T32] INFO: task syz.1.747:8789 blocked for more than 142 seconds. [ 552.388993][ T32] Tainted: G L syzkaller #0 [ 552.389004][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.389012][ T32] task:syz.1.747 state:D stack:26888 pid:8789 tgid:8785 ppid:5604 task_flags:0x400040 flags:0x00080002 [ 552.389072][ T32] Call Trace: [ 552.389079][ T32] [ 552.389090][ T32] __schedule+0x1259/0x6920 [ 552.389114][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 552.389154][ T32] ? __pfx___schedule+0x10/0x10 [ 552.389175][ T32] ? find_held_lock+0x2b/0x80 [ 552.389204][ T32] ? schedule+0x225/0x2c0 [ 552.390906][ T32] schedule+0xdd/0x2c0 [ 552.390936][ T32] schedule_preempt_disabled+0x13/0x30 [ 552.390963][ T32] __mutex_lock+0xccb/0x1bd0 [ 552.390991][ T32] ? write_versions+0x9d/0xba0 [ 552.391018][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 552.391051][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 552.391078][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 552.391110][ T32] ? write_versions+0x9d/0xba0 [ 552.391128][ T32] write_versions+0x9d/0xba0 [ 552.391147][ T32] ? find_held_lock+0x2b/0x80 [ 552.391175][ T32] ? __pfx_write_versions+0x10/0x10 [ 552.391193][ T32] ? __pfx_write_versions+0x10/0x10 [ 552.391213][ T32] ? _copy_from_user+0x59/0xd0 [ 552.391238][ T32] ? __pfx_write_versions+0x10/0x10 [ 552.391257][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 552.391288][ T32] vfs_write+0x2aa/0x1050 [ 552.391313][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 552.391350][ T32] ? lock_acquire+0x1d1/0x380 [ 552.391376][ T32] ? __fget_files+0x34/0x3d0 [ 552.391405][ T32] ? __pfx_vfs_write+0x10/0x10 [ 552.391426][ T32] ? find_held_lock+0x2b/0x80 [ 552.391454][ T32] ? __fget_files+0x215/0x3d0 [ 552.391486][ T32] ? __fget_files+0x21f/0x3d0 [ 552.391520][ T32] ksys_write+0x12a/0x250 [ 552.391543][ T32] ? __pfx_ksys_write+0x10/0x10 [ 552.391573][ T32] do_syscall_64+0x123/0x790 [ 552.391603][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.391623][ T32] RIP: 0033:0x7fb10219e1d9 [ 552.391639][ T32] RSP: 002b:00007fb103099028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 552.391658][ T32] RAX: ffffffffffffffda RBX: 00007fb102426090 RCX: 00007fb10219e1d9 [ 552.391673][ T32] RDX: 0000000000000003 RSI: 00002000000004c0 RDI: 0000000000000006 [ 552.391685][ T32] RBP: 00007fb102235888 R08: 0000000000000000 R09: 0000000000000000 [ 552.391698][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.391711][ T32] R13: 00007fb102426128 R14: 00007fb102426090 R15: 00007ffc44585d58 [ 552.391741][ T32] [ 552.391797][ T32] [ 552.391797][ T32] Showing all locks held in the system: [ 552.391811][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 552.391826][ T32] #0: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 552.391993][ T32] locks held by khugepaged/38: 1, last CPU#0: [ 552.392009][ T32] #0: ffffffff8ff56d60 (lock#5){+.+.}-{4:4}, at: __lru_add_drain_all+0xcf/0x820 [ 552.392070][ T32] locks held by kworker/0:3/2246: 3, last CPU#0: [ 552.392084][ T32] #0: ffff888055c25940 ((wq_completion)wg-crypt-wg0#8){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 552.392144][ T32] #1: ffffc90007027d08 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 552.392194][ T32] #2: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: __hrtimer_run_queues+0x1b7/0x9c0 [ 552.392259][ T32] locks held by getty/5358: 2, on CPU#0: [ 552.392273][ T32] #0: ffff888038dc20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 552.392321][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 552.392374][ T32] locks held by syz-executor/5602: 4, last CPU#0: [ 552.392388][ T32] #0: ffffffff8ff3de10 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4816/0x8380 [ 552.392435][ T32] #1: ffff88802e89f180 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 552.392489][ T32] #2: ffff888075ba4080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 552.392547][ T32] #3: ffff88807144ccd0 (&anon_vma->rwsem){++++}-{4:4}, at: anon_vma_clone+0x41a/0xca0 [ 552.392594][ T32] locks held by syz-executor/5603: 2, on CPU#1: [ 552.392608][ T32] #0: ffff88807d3460e8 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 552.392659][ T32] #1: ffffffff90289ca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 552.392713][ T32] locks held by kworker/0:4/5610: 5, on CPU#0: [ 552.392728][ T32] #0: ffff8880226a5d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 552.392784][ T32] #1: ffffc90003b8fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 552.392840][ T32] #2: ffff88802bf421d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 552.392889][ T32] #3: ffff888055a9a1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 552.392944][ T32] #4: ffff8880270331a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 552.393008][ T32] locks held by syz.1.747/8787: 3, on CPU#1: [ 552.393021][ T32] #0: ffff88803680c9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 552.393077][ T32] #1: ffff888075bac460 (sb_writers#18){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 552.393129][ T32] #2: ffffffff90289ca0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 552.393172][ T32] locks held by syz.1.747/8789: 3, on CPU#1: [ 552.393193][ T32] #0: ffff88807c2c37b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 552.393237][ T32] #1: ffff888075bac460 (sb_writers#18){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 552.393288][ T32] #2: ffffffff90289ca0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 552.393339][ T32] locks held by syz.2.784/8925: 3, on CPU#1: [ 552.393353][ T32] #0: ffff8880354b7b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 552.393394][ T32] #1: ffff88807bdb2460 (sb_writers#18){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 552.393445][ T32] #2: ffffffff90289ca0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 552.393489][ T32] locks held by syz.2.784/8926: 3, on CPU#0: [ 552.393502][ T32] #0: ffff8880354b6470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 552.393541][ T32] #1: ffff88807bdb2460 (sb_writers#18){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 552.393588][ T32] #2: ffffffff90289ca0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 552.393653][ T32] locks held by syz-executor/8937: 1, last CPU#1: [ 552.393668][ T32] #0: ffff88802e3c4460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 552.393730][ T32] locks held by syz.5.892/9481: 1, on CPU#0: [ 552.393744][ T32] #0: ffff88807d3460e8 (&type->s_umount_key#84){++++}-{4:4}, at: super_lock+0x326/0x3f0 [ 552.393795][ T32] locks held by syz.9.1078/10210: 1, on CPU#1: [ 552.393810][ T32] #0: ffff88807d3460e8 (&type->s_umount_key#84){++++}-{4:4}, at: super_lock+0x326/0x3f0 [ 552.393859][ T32] locks held by syz.9.1078/10212: 1, on CPU#0: [ 552.393873][ T32] #0: ffff88807d3460e8 (&type->s_umount_key#84){++++}-{4:4}, at: super_lock+0x326/0x3f0 [ 552.393924][ T32] locks held by syz.9.1078/10220: 1, on CPU#0: [ 552.393938][ T32] #0: ffff88807d3460e8 (&type->s_umount_key#84){++++}-{4:4}, at: super_lock+0x326/0x3f0 [ 552.393985][ T32] locks held by syz.7.1082/10218: 2, on CPU#0: [ 552.393999][ T32] #0: ffff88807fe1e9c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 552.394051][ T32] #1: ffffffff8fdf84a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 552.394100][ T32] [ 552.394105][ T32] ============================================= [ 552.394105][ T32] [ 552.394127][ T32] NMI backtrace for cpu 1 [ 552.394142][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 552.394169][ T32] Tainted: [L]=SOFTLOCKUP [ 552.394177][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 552.394188][ T32] Call Trace: [ 552.394196][ T32] [ 552.394204][ T32] dump_stack_lvl+0x100/0x190 [ 552.394235][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 552.394267][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 552.394290][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 552.394318][ T32] sys_info+0x141/0x190 [ 552.394348][ T32] watchdog+0xcb1/0x1030 [ 552.394379][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 552.394406][ T32] ? __pfx_watchdog+0x10/0x10 [ 552.394431][ T32] ? __kthread_parkme+0x18f/0x230 [ 552.394459][ T32] ? kthread+0x13a/0x450 [ 552.394484][ T32] ? __pfx_watchdog+0x10/0x10 [ 552.394506][ T32] kthread+0x373/0x450 [ 552.394532][ T32] ? __pfx_kthread+0x10/0x10 [ 552.394559][ T32] ret_from_fork+0x730/0xd60 [ 552.394583][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 552.394607][ T32] ? __switch_to+0x800/0x10f0 [ 552.394634][ T32] ? __pfx_kthread+0x10/0x10 [ 552.394660][ T32] ret_from_fork_asm+0x1a/0x30 [ 552.394693][ T32] [ 552.394700][ T32] Sending NMI from CPU 1 to CPUs 0: [ 552.394726][ C0] NMI backtrace for cpu 0 [ 552.394739][ C0] CPU: 0 UID: 0 PID: 9579 Comm: kworker/u8:25 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.394765][ C0] Tainted: [L]=SOFTLOCKUP [ 552.394772][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 552.394787][ C0] Workqueue: bat_events batadv_bla_periodic_work [ 552.394808][ C0] RIP: 0010:__lock_acquire+0x4ee/0x1f40 [ 552.394835][ C0] Code: 02 44 0f 44 f0 41 83 c5 01 48 83 c3 28 45 3b ac 24 a0 0b 00 00 7d 27 0f b7 43 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 d2 12 ab 15 <72> ac 8b 05 ea be b3 1a 85 c0 0f 84 05 03 00 00 31 c9 eb aa 48 89 [ 552.394851][ C0] RSP: 0018:ffffc900000073d0 EFLAGS: 00000003 [ 552.394866][ C0] RAX: 0000000000000007 RBX: ffff888029cf31a8 RCX: 0000000000000000 [ 552.394878][ C0] RDX: 0000000000000007 RSI: ffff888029cf31a8 RDI: 0000000000000020 [ 552.394889][ C0] RBP: ffff888029cf31d0 R08: 0000000000000000 R09: 0000000000000004 [ 552.394901][ C0] R10: 0000000000000004 R11: 0000000000000001 R12: ffff888029cf2580 [ 552.394913][ C0] R13: 0000000000000003 R14: 0000000000000003 R15: 0000000000000001 [ 552.394924][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 552.394941][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.394954][ C0] CR2: 00007fb4fdf556c8 CR3: 000000007d0ba000 CR4: 00000000003526f0 [ 552.394966][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000063235cd5 [ 552.394978][ C0] DR3: 0000000000007000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 552.394990][ C0] Call Trace: [ 552.394995][ C0] [ 552.395005][ C0] ? lock_acquire+0x1d1/0x380 [ 552.395026][ C0] ? unwind_next_frame+0xbd/0x2090 [ 552.395053][ C0] lock_acquire+0x1d1/0x380 [ 552.395073][ C0] ? unwind_next_frame+0xbd/0x2090 [ 552.395099][ C0] ? unwind_next_frame+0x3c8/0x2090 [ 552.395124][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 552.395146][ C0] unwind_next_frame+0xd1/0x2090 [ 552.395170][ C0] ? unwind_next_frame+0xbd/0x2090 [ 552.395194][ C0] ? stack_trace_save+0x8e/0xc0 [ 552.395212][ C0] ? __unwind_start+0x3cd/0x7e0 [ 552.395237][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 552.395258][ C0] arch_stack_walk+0x94/0xf0 [ 552.395283][ C0] ? stack_trace_save+0x8e/0xc0 [ 552.395302][ C0] ? skb_free_head+0xb9/0x160 [ 552.395326][ C0] stack_trace_save+0x8e/0xc0 [ 552.395345][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 552.395366][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 552.395388][ C0] kasan_save_stack+0x30/0x50 [ 552.395430][ C0] kasan_save_track+0x14/0x30 [ 552.395454][ C0] kasan_save_free_info+0x3b/0x70 [ 552.395473][ C0] __kasan_slab_free+0x5f/0x80 [ 552.395497][ C0] ? skb_free_head+0x30/0x160 [ 552.395521][ C0] kfree+0x22b/0x6d0 [ 552.395538][ C0] ? irqentry_exit+0x24d/0xa10 [ 552.395564][ C0] skb_free_head+0xb9/0x160 [ 552.395589][ C0] skb_release_data+0x659/0x860 [ 552.395607][ C0] ? rcu_is_watching+0x13/0xc0 [ 552.395634][ C0] consume_skb+0xc4/0x110 [ 552.395654][ C0] arp_process+0xa19/0x2440 [ 552.395682][ C0] ? __pfx_arp_process+0x10/0x10 [ 552.395707][ C0] ? __pfx_arp_process+0x10/0x10 [ 552.395732][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 552.395759][ C0] ? __pfx_arp_process+0x10/0x10 [ 552.395787][ C0] arp_rcv+0x3ba/0x500 [ 552.395823][ C0] ? __pfx_arp_rcv+0x10/0x10 [ 552.395851][ C0] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 552.395879][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 552.395906][ C0] ? lock_acquire+0x1d1/0x380 [ 552.395928][ C0] ? process_backlog+0x437/0x1600 [ 552.395954][ C0] ? process_backlog+0x437/0x1600 [ 552.395978][ C0] __netif_receive_skb+0x1f/0x120 [ 552.396004][ C0] process_backlog+0x487/0x1600 [ 552.396033][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 552.396060][ C0] net_rx_action+0xa40/0xf20 [ 552.396090][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 552.396115][ C0] ? clockevents_tick_resume+0x60/0x60 [ 552.396143][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 552.396167][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 552.396190][ C0] ? sched_clock+0x3a/0x60 [ 552.396207][ C0] ? sched_clock_cpu+0x6c/0x570 [ 552.396231][ C0] ? mark_held_locks+0x40/0x70 [ 552.396253][ C0] handle_softirqs+0x1e6/0x9d0 [ 552.396274][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 552.396294][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 552.396313][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 552.396334][ C0] ? netif_rx+0x65/0xb0 [ 552.396352][ C0] do_softirq+0xaf/0xf0 [ 552.396370][ C0] [ 552.396376][ C0] [ 552.396383][ C0] __local_bh_enable_ip+0xff/0x120 [ 552.396403][ C0] ? netif_rx+0x65/0xb0 [ 552.396422][ C0] netif_rx+0x93/0xb0 [ 552.396440][ C0] batadv_bla_send_claim+0x4e5/0x1190 [ 552.396462][ C0] ? __pfx_batadv_bla_send_claim+0x10/0x10 [ 552.396482][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 552.396504][ C0] batadv_bla_send_announce+0x130/0x190 [ 552.396523][ C0] ? __pfx_batadv_bla_send_announce+0x10/0x10 [ 552.396542][ C0] ? batadv_bla_periodic_work+0x282/0xa10 [ 552.396562][ C0] ? batadv_bla_periodic_work+0x588/0xa10 [ 552.396581][ C0] ? batadv_bla_periodic_work+0x588/0xa10 [ 552.396603][ C0] batadv_bla_periodic_work+0x428/0xa10 [ 552.396626][ C0] process_one_work+0xac7/0x1b10 [ 552.396658][ C0] ? __pfx_process_one_work+0x10/0x10 [ 552.396686][ C0] ? lock_acquire+0x1d1/0x380 [ 552.396709][ C0] ? __pfx_batadv_bla_periodic_work+0x10/0x10 [ 552.396730][ C0] worker_thread+0x5ef/0xe50 [ 552.396750][ C0] ? __pfx_worker_thread+0x10/0x10 [ 552.396767][ C0] ? kthread+0x13a/0x450 [ 552.396790][ C0] ? __pfx_worker_thread+0x10/0x10 [ 552.396807][ C0] kthread+0x373/0x450 [ 552.396834][ C0] ? __pfx_kthread+0x10/0x10 [ 552.396859][ C0] ret_from_fork+0x730/0xd60 [ 552.396879][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 552.396900][ C0] ? __switch_to+0x800/0x10f0 [ 552.396925][ C0] ? __pfx_kthread+0x10/0x10 [ 552.396950][ C0] ret_from_fork_asm+0x1a/0x30 [ 552.396975][ C0] [ 552.397731][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 554.056169][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 554.066829][ T32] Tainted: [L]=SOFTLOCKUP [ 554.071127][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 554.081162][ T32] Call Trace: [ 554.084420][ T32] [ 554.087329][ T32] dump_stack_lvl+0x100/0x190 [ 554.091996][ T32] vpanic+0x553/0x970 [ 554.095961][ T32] ? __pfx_vpanic+0x10/0x10 [ 554.100452][ T32] panic+0xd1/0xe0 [ 554.104156][ T32] ? __pfx_panic+0x10/0x10 [ 554.108551][ T32] ? wq_watchdog_touch+0xec/0x1a0 [ 554.113571][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 554.119708][ T32] ? watchdog.cold+0x1ec/0x234 [ 554.124456][ T32] watchdog.cold+0x1fd/0x234 [ 554.129032][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 554.134821][ T32] ? __pfx_watchdog+0x10/0x10 [ 554.139480][ T32] ? __kthread_parkme+0x18f/0x230 [ 554.144491][ T32] ? kthread+0x13a/0x450 [ 554.148715][ T32] ? __pfx_watchdog+0x10/0x10 [ 554.153371][ T32] kthread+0x373/0x450 [ 554.157424][ T32] ? __pfx_kthread+0x10/0x10 [ 554.162013][ T32] ret_from_fork+0x730/0xd60 [ 554.166588][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 554.171681][ T32] ? __switch_to+0x800/0x10f0 [ 554.176345][ T32] ? __pfx_kthread+0x10/0x10 [ 554.180921][ T32] ret_from_fork_asm+0x1a/0x30 [ 554.185679][ T32] [ 554.189029][ T32] Kernel Offset: disabled [ 554.193356][ T32] Rebooting in 86400 seconds..