last executing test programs: 7m23.213561679s ago: executing program 4 (id=1233): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, r4}) 7m22.233851778s ago: executing program 4 (id=1236): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) 7m22.165800268s ago: executing program 4 (id=1237): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x8, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d700500000000002000000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000001c0)={0x2, 0x0, @pic={0xa, 0x8, 0x1, 0x9, 0xb6, 0x8, 0x4, 0x1, 0x7, 0x10, 0xc7, 0x1, 0x4, 0xba, 0x0, 0x8}}) 7m20.738134607s ago: executing program 4 (id=1240): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) (fail_nth: 6) 7m20.261784195s ago: executing program 4 (id=1241): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="01ff000013000e00000000000000000007000000d3a5818897d9f90c6be0a3821e970f42e6c80d3878d7610d0028ff538b91c1d205b3806fa7ff272d2884987ee11ff92cfadaa430898d3b803ec3fa81dbfa7ccef5ff88e9915ba3d60da322153bbc6a832cb33687449c980210764e7bc53dde273eff56183410ae73f326f58575377ace7e185441b4dad8c838a4ce51809a0bff59ededfdf585", @ANYRES32=r1, @ANYBLOB], 0x2c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0x32) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x450900) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) madvise(&(0x7f000033d000/0x1000)=nil, 0x1000, 0x17) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x401, 0x0, 0x0, 0x0, 0x59}) 7m20.005453158s ago: executing program 4 (id=1243): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) pipe2(0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x77, 0x2, 0x47}, 0xb) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r7, 0x1) r9 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0x0, &(0x7f0000000480)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3908004900003800000000000690780a210104ac1414aa44244a01070b3d030e004b5ca4c14a000000fffc254543b0ce617b733e9f3633484a27ed0070d42fbec45c5fbb540b32d6d41dad8c6b8242ff5dc87de3a9e4a83ef0f6780f3c0fdcbc67e169177d86b727d75b8dff8ab427e1e0b2cdce1b160d91f8af159ff4e92adb1ab0b409821dca4cd2aad24431f63903d68324d8a2e800dbd3ef41916a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078fffe"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) close(0xffffffffffffffff) 7m19.681738032s ago: executing program 32 (id=1243): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) pipe2(0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x77, 0x2, 0x47}, 0xb) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r7, 0x1) r9 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0x0, &(0x7f0000000480)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3908004900003800000000000690780a210104ac1414aa44244a01070b3d030e004b5ca4c14a000000fffc254543b0ce617b733e9f3633484a27ed0070d42fbec45c5fbb540b32d6d41dad8c6b8242ff5dc87de3a9e4a83ef0f6780f3c0fdcbc67e169177d86b727d75b8dff8ab427e1e0b2cdce1b160d91f8af159ff4e92adb1ab0b409821dca4cd2aad24431f63903d68324d8a2e800dbd3ef41916a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078fffe"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) close(0xffffffffffffffff) 7m19.676293002s ago: executing program 2 (id=1245): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 7m19.54929328s ago: executing program 2 (id=1247): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x498, 0x2000c0c4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e22, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, {0xa, 0x4e24, 0xf5, @mcast2, 0x3}, 0xfffc, {[0x2, 0x10000006, 0x401, 0x8, 0x10001, 0x8, 0x2, 0x30000000]}}, 0x5c) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x81) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40600, 0xc) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r5, &(0x7f0000000380)=""/4091, 0xff3a) syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbb88f700000000"], 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0xa, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 7m18.701411573s ago: executing program 2 (id=1249): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r0, &(0x7f00000035c0)={0x2020}, 0x2020) (fail_nth: 3) 7m17.857339727s ago: executing program 2 (id=1251): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x3, 0xffff, 0xfffffffe, 0x3, 0x0, 0x0, 0xc00, 0x8}}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d030000000000000000"], 0x0, 0x4e}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000003000)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/130, 0x82}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/172, 0xac}], 0x3, &(0x7f0000000780)=""/244, 0xf4}, 0x4}, {{&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000009c0)=""/201, 0xc9}, {&(0x7f0000000b40)=""/210, 0xd2}, {&(0x7f0000000c40)=""/155, 0x9b}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/199, 0xc7}, {&(0x7f0000000f40)=""/87, 0x57}], 0xa}, 0x3}, {{&(0x7f0000001080)=@rc, 0x80, &(0x7f0000002800)=[{&(0x7f0000002140)=""/222, 0xde}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000002240)=""/136, 0x88}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002400)=""/126, 0x7e}, {&(0x7f0000002480)=""/95, 0x5f}, {&(0x7f0000002500)=""/158, 0x9e}, {&(0x7f00000025c0)=""/174, 0xae}, {&(0x7f0000002680)=""/65, 0x41}, {&(0x7f0000002700)=""/203, 0xcb}], 0xa}, 0xff}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f00000028c0)=""/111, 0x6f}], 0x2, &(0x7f0000002940)=""/106, 0x6a}, 0x4}, {{&(0x7f00000029c0)=@un=@abs, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002a40)=""/157, 0x9d}, {&(0x7f0000002b00)=""/87, 0x57}, {&(0x7f0000002b80)=""/226, 0xe2}, {&(0x7f00000006c0)=""/24, 0x18}, {&(0x7f0000002c80)=""/125, 0x7d}, {&(0x7f0000002d00)=""/110, 0x6e}], 0x6, &(0x7f0000002e00)=""/187, 0xbb}, 0x5}], 0x5, 0x120, &(0x7f0000003040)={r8, r9+10000000}) sendmsg$nl_route(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f0001090506"], 0x0) 7m14.014388515s ago: executing program 2 (id=1260): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x8, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000001c0)={0x2, 0x0, @pic={0xa, 0x8, 0x1, 0x9, 0xb6, 0x8, 0x4, 0x1, 0x7, 0x10, 0xc7, 0x1, 0x4, 0xba, 0x0, 0x8}}) 7m12.502292313s ago: executing program 2 (id=1264): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44048804) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000340)="1f22daa4c084", 0xf000}], 0x1, 0x8, 0x7, 0x17) 6m57.411266036s ago: executing program 33 (id=1264): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44048804) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000340)="1f22daa4c084", 0xf000}], 0x1, 0x8, 0x7, 0x17) 6m19.547624023s ago: executing program 0 (id=1481): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f00000003c0)=[{0x28, 0x0, 0x2, 0x983a}, {0x20, 0x0, 0xaf, 0xfff7f024}, {0x6}]}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 6m19.410890468s ago: executing program 0 (id=1482): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) pipe2(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x77, 0x2, 0x47}, 0xb) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r4 = syz_io_uring_setup(0x23c, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r7, 0x1) r9 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0x0, &(0x7f0000000480)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3908004900003800000000000690780a210104ac1414aa44244a01070b3d030e004b5ca4c14a000000fffc254543b0ce617b733e9f3633484a27ed0070d42fbec45c5fbb540b32d6d41dad8c6b8242ff5dc87de3a9e4a83ef0f6780f3c0fdcbc67e169177d86b727d75b8dff8ab427e1e0b2cdce1b160d91f8af159ff4e92adb1ab0b409821dca4cd2aad24431f63903d68324d8a2e800dbd3ef41916a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078fffe"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) close(0xffffffffffffffff) 6m17.451742361s ago: executing program 0 (id=1490): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x8, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d700500000000002000000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000001c0)={0x2, 0x0, @pic={0xa, 0x8, 0x1, 0x9, 0xb6, 0x8, 0x4, 0x1, 0x7, 0x10, 0xc7, 0x1, 0x4, 0xba, 0x0, 0x8}}) 6m16.159962419s ago: executing program 0 (id=1495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="a5002dde2c000000", @ANYRES16=r1, @ANYBLOB="170900000000e4ffffff0100000008000a000200000005000700000000000800090002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) 6m15.885959771s ago: executing program 0 (id=1496): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x97, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 6m15.83488866s ago: executing program 0 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_init_net_socket$x25(0x9, 0x5, 0x1000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$netrom(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x6a918f8f45b69a96, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) socket$inet6(0xa, 0x3, 0xff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 5m59.835177776s ago: executing program 34 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_init_net_socket$x25(0x9, 0x5, 0x1000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$netrom(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x6a918f8f45b69a96, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) socket$inet6(0xa, 0x3, 0xff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 2m31.770081056s ago: executing program 1 (id=2488): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161002) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) syz_io_uring_setup(0x113, &(0x7f0000000100)={0x0, 0xf8d7, 0x2, 0x0, 0x2f9}, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r2, 0x28543634fae43ad, 0x70bd2b, 0x0, {0xd}}, 0x14}}, 0x0) 2m31.556486965s ago: executing program 1 (id=2491): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000480)=""/111, 0x6f}], 0x5}, 0x2211}], 0x1, 0x2002, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1], 0x184}}, 0x0) 2m31.426017499s ago: executing program 1 (id=2493): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r3, 0x407, 0x1000000) fcntl$setpipe(r3, 0x407, 0x2000000) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r5, 0xffff) close(0x3) fcntl$addseals(r5, 0x409, 0x7) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x200040, 0x28) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000180)) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000001c0)={r5, 0x1, 0x0, 0x8000}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000000000007911b000000000008510000002000000850000000800753912e08ab6a6eed6613847ee000095000007000000009500a505000000008a016a60809daa037667c9d880d2700403b02ceda8812414144db365ae669ba2bb359b565e3d0113e558e9cd3a2f1186efb2434a2276e2da83cda096877e231ebec755bfdb24900144c9206369ff39b3e3dc242264a0a9cbec96320706cfdfafcaa577ca7348d49517c50b29e7847dd129218fb51f5ed805f10434d174201b8232d293d7383f943d0b622af143b463f33b4c8e75cbb7392542"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x42, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m29.925441037s ago: executing program 1 (id=2501): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3, &(0x7f0000001380)={0x0, 0xc071, 0x8, 0x2, 0x3b4}) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x13, 0x80, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0xe, 0x0, 0x30, 0x2e, 0x61, 0x2e, 0x2e, 0x61, 0x51, 0x61]}}, &(0x7f0000000200)=""/119, 0x30, 0x77, 0x0, 0x2}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0xa49, 0x1, &(0x7f0000000380)="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", 0xa, 0x0, 0x0, {0xffff}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m29.064979536s ago: executing program 1 (id=2504): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000480)=""/111, 0x6f}], 0x5}, 0x2211}], 0x1, 0x2002, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1], 0x184}}, 0x0) 2m29.064418838s ago: executing program 1 (id=2505): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,']) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0016000000000500"/18], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x2040408, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESOCT]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x83) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x1b4, 0x30, 0x4, 0x0, 0x0, {}, [{0x1a0, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x170, 0x1, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xffffffff, 0x0, 0x101, 0xffffff80}, @multicast2, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xbe6, 0x2, 0x10000000, 0x5b, 0x1}, @broadcast, @loopback, 0x0, 0x58b}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xcb53, 0x3, 0x1, 0x3, 0x8}, @dev={0xac, 0x14, 0x14, 0x1d}, @local, 0x7f000080}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x27a, 0x9, 0xffffffffffffffff, 0x0, 0x800}, @empty, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7c7d32d, 0xffffffff, 0x8, 0x100006, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000}}]}, {0x7f, 0x6, "6b061042b24db59fe06e33b8896f5fcf9d1d7b1f031a5660ae4a610de8212e5ef59d77e8cf425e70fd3283577c294b22d1e97030fce26d3469ca1169f8a06dd853a0ec2f009f677aaa0c42aec19e7d1708890b4769204df86bdc0df681b366299341eff165421fd6c0b0160fc1b9debf8cd5c4e9814285b3a68fb6"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x3, 0x36, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='svc_process\x00', 0xffffffffffffffff, 0x0, 0x101}, 0x18) sync() r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) 2m13.971344627s ago: executing program 35 (id=2505): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,']) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0016000000000500"/18], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x2040408, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESOCT]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x83) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x1b4, 0x30, 0x4, 0x0, 0x0, {}, [{0x1a0, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x170, 0x1, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xffffffff, 0x0, 0x101, 0xffffff80}, @multicast2, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xbe6, 0x2, 0x10000000, 0x5b, 0x1}, @broadcast, @loopback, 0x0, 0x58b}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xcb53, 0x3, 0x1, 0x3, 0x8}, @dev={0xac, 0x14, 0x14, 0x1d}, @local, 0x7f000080}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x27a, 0x9, 0xffffffffffffffff, 0x0, 0x800}, @empty, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7c7d32d, 0xffffffff, 0x8, 0x100006, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000}}]}, {0x7f, 0x6, "6b061042b24db59fe06e33b8896f5fcf9d1d7b1f031a5660ae4a610de8212e5ef59d77e8cf425e70fd3283577c294b22d1e97030fce26d3469ca1169f8a06dd853a0ec2f009f677aaa0c42aec19e7d1708890b4769204df86bdc0df681b366299341eff165421fd6c0b0160fc1b9debf8cd5c4e9814285b3a68fb6"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x3, 0x36, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='svc_process\x00', 0xffffffffffffffff, 0x0, 0x101}, 0x18) sync() r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) 28.191300869s ago: executing program 6 (id=2969): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0xfffb, 0x4, 0x5, 0x8, 0x61134d30, 0xdf9, 0x6, 0x6, r2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r4, &(0x7f0000000040)=@random={'security.', '(}&{\x00'}) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "a36ee6", 0x30, 0x3a, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @param_prob={0x4, 0x79a1c8f8f6de6eb3, 0x0, 0xb, {0x4, 0x6, "709eb1", 0xfff, 0xff, 0x1, @empty, @private2}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ec00000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000008800068008000100"], 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0xfffb, 0x4, 0x5, 0x8, 0x61134d30, 0xdf9, 0x6, 0x6, r2}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) fremovexattr(r4, &(0x7f0000000040)=@random={'security.', '(}&{\x00'}) (async) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "a36ee6", 0x30, 0x3a, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @param_prob={0x4, 0x79a1c8f8f6de6eb3, 0x0, 0xb, {0x4, 0x6, "709eb1", 0xfff, 0xff, 0x1, @empty, @private2}}}}}}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ec00000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000008800068008000100"], 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) (async) 27.547970934s ago: executing program 6 (id=2972): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @local}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0xffffffa7, 0x118, 0xb, '1'}], 0x1}, 0x0) recvmmsg$unix(r6, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) 26.2288789s ago: executing program 6 (id=2976): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x36, 0x8001, 0xc445, 0x3, 0xfa, 0x4}, 0xc) iopl(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000003140)=""/102392, 0x18ff8) iopl(0xd8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000101ac1414aa00"/60, @ANYRES32=0x0, @ANYRES32=0x0], 0x184}, 0x1, 0x0, 0x0, 0x44014}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020}, 0x2020) r3 = socket(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000340)=0x1, 0x4) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) 25.229828436s ago: executing program 6 (id=2982): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x0, 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9a4a, 0x2) ppoll(&(0x7f0000000340)=[{r4, 0x4}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x2, @vbi={0x0, 0xf, 0x6, 0x3234564e, [0x3, 0x8], [0xfff, 0x5], 0x1}}) io_uring_enter(r1, 0x351e, 0x483, 0x0, 0x0, 0x0) 24.978576565s ago: executing program 6 (id=2984): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_clone(0xd5240700, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x17}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfb}, 0xa) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xff7f000000000000, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 24.072744034s ago: executing program 6 (id=2986): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4888", 0x2}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000c000780080012400005ffff10000300686173683a69702c6d616300050005000200000005000400000000000900020073797a31000000000500010007000000591c0ef6405f064c14571bb5b33c3dda371c9aabe090d47034d6bd9acd2dd2d76264c733342b60ee24f7ba07fc32a143cb66da05cc66fff5f7971d60691795e7fd253818d5d5aa411f1a849f5b853b08e842cc9b05bc8a11d94788b9dcdc542644a699155697001aa6ee61cff93c4f48ad9d6a2ce87506d3ea774015274cca50aa84c3e9c60ade053d1c6a6ea6466db4ddc69323"], 0x54}}, 0x850) 8.435922533s ago: executing program 36 (id=2986): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4888", 0x2}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000c000780080012400005ffff10000300686173683a69702c6d616300050005000200000005000400000000000900020073797a31000000000500010007000000591c0ef6405f064c14571bb5b33c3dda371c9aabe090d47034d6bd9acd2dd2d76264c733342b60ee24f7ba07fc32a143cb66da05cc66fff5f7971d60691795e7fd253818d5d5aa411f1a849f5b853b08e842cc9b05bc8a11d94788b9dcdc542644a699155697001aa6ee61cff93c4f48ad9d6a2ce87506d3ea774015274cca50aa84c3e9c60ade053d1c6a6ea6466db4ddc69323"], 0x54}}, 0x850) 4.589372986s ago: executing program 7 (id=3049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x44501, 0x0) bind$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$KVM_SET_NESTED_STATE(r2, 0xc048aeca, &(0x7f0000003680)={{0x1, 0x0, 0x80, {0x1000, 0x80a0000, 0x2}}, "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", "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"}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="203301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$nl_generic(0x10, 0x3, 0x10) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000080)={0x1, 0x3, 0x6, &(0x7f0000000040)={0x1c, "3b3c16d75ccbfe5ab6cb3190036cbd5b07cad3a2cb83ecb5444f06520653e7279f"}}) 4.400387691s ago: executing program 8 (id=3051): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 4.278537022s ago: executing program 8 (id=3054): socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x15, 0x5, 0x0) getsockopt(r1, 0x111, 0x3718, 0x0, &(0x7f0000000400)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000006680)) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0xd9481726d31966ee, 0x0) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="030000ca2c000000"], 0x8, 0x800) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000e00)={0x4ff1, r6, r5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 3.501792176s ago: executing program 8 (id=3056): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000000000040000000000900000000000000"]) 3.340516415s ago: executing program 8 (id=3057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000100)={0xf, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000b148b0a28bd7001fbdbdfa5080001"], 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x4, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x37, 0x2d, 0x33, 0x3a]}}}, 0x4e}]}) 3.198714264s ago: executing program 8 (id=3059): syz_open_dev$sndmidi(0x0, 0x2, 0x161102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r2, 0x0) fadvise64(r1, 0x18, 0x88, 0x4) 3.012548388s ago: executing program 3 (id=3060): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() r1 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4002a5e, 0x2, 0x8001006, 0x38}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x149101) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f00000000c0)={0xfffffffb, 0x6}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x800000, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x20010, r2, 0x6c41a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) connect$unix(r5, 0x0, 0x0) 2.982541284s ago: executing program 9 (id=3036): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000180)={0x19980330, r3}, &(0x7f0000000300)={0x8cb3, 0x7fffffff, 0x1, 0x40, 0xe8}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) socket(0x10, 0x803, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x149a82, 0x40) write$cgroup_int(r6, &(0x7f0000000000)=0xfe8e, 0x12) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) 2.351877775s ago: executing program 3 (id=3063): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000100)=[{0x0}, {&(0x7f00000000c0)="3e444c729f37cfe59d9d07a9949032d5a78a47ce62695d9ec17734a43488b20172b82a4b424be91273a297600e2702184802e2a2e693", 0x36}, {&(0x7f0000001380)="014618f368f9293a5436750ce73620d70a67ffe3fb8abcf5d3dd8e08d0c988c66e83b6d8402166d188a5f7678f11e330bd5899aae056784c9328fea3cf6a31e74a1b040bbd41a5eaf674c721ca7e5e6115ba32e460bbe1e0bc69c706cb6e3bedeb2800d03c65b128636be5ca9f6bcec123d8b38807c0c221ae51886690530290c88a0f44fec7fe9da2b5780bb679eb3e4735bebef7c9cffd4776072481e036d5f1a69f7d619c07382c577a831be6240b9be50d7bb854141b42f5", 0xba}], 0x3}, 0x40090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000280)) shutdown(r4, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 2.269597289s ago: executing program 8 (id=3064): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8, 0x80}}]}}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x0, 0x9, {0x9, 0x9, "2db078e4667948"}}, 0x0}, 0x0) 1.905505156s ago: executing program 7 (id=3065): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000033c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x7fffffff, @mcast1, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000180)="9a2845309a19df6d8bc636078e9f15fc7ca91650f557a9b5fcc8587d1618b7ac35b02c84e556e449cdb956361b7c4035a7310fe7215f97726daff5fb6aacf325dc", 0x41}, {&(0x7f0000000200)="08e716ef302ac24733a70185c031be408608b8ebc84a1158895d2b1d502fc1945b52a2366af0709a75c350d511ab1866d6b22c7fc9084a7f2fb79e92ef94d2be10b26928b8554c6b362c3f10d52bc6a995bf9eb06e2e211bc8873b9bb8f2f3dbbb9faef434c5b21a37b54fe46e09655aff107907bba24cee97a31ed87215fa2b531cbe33d8f6d9430fe60e1a665750f31b65c5539994811d5255acf3f91269454d323deb552f07eb82dd64341196a42c", 0xb0}, {&(0x7f00000002c0)="63e1b50015ce6d0df8aeede7378050e1fabe180dc546a2f173cd0bc4fa6af63881ca818543d6b5f93bdaebd3149fec3689b5d22e4af91b5191af3e31e26b98f56581d8d0b815b222fb7ae2e94a96d5", 0x4f}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f0000000380)="64cd207647c84709878ff9213fe8d1c69d914b5a5603736f6991ef098b39a59d8c0e52834e4a7e685b1786c114ad5b95a681230311848476b8531fbfefcb020f164405432c5efb42a57fa077a6e65e9bbe2aea0743be0808f10802a6c50d337710b19424896a973d8c7c5f0e430dc8111ef989e854c43198a9b8e94dc4bdf132dccda37189216038ff", 0x89}, {&(0x7f0000000440)="b383bfe809166769901e667e6b0db478baa36addb040d7ae76156f18e0395f0599d69e44850ce30b9293414b51cddd070dfd8011e30a7ef432e2d6e447045a9eb6f542a94e043773d44270d4be9eacd515d1279c31c574f86906ef082a5fe1cb", 0x60}, {&(0x7f00000004c0)="79a106972c614c9bd7fca42203111e88779b80a98f54f22a546afdd46cc8bd8d9592094e2c4c32efc8a194eb5778bc25dc534f935ea83d31ad0f3b8fde8dac7708aec5dd65bd6914d43a2fb64f40747a00", 0x51}], 0x8, &(0x7f00000005c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7ff}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe7}}], 0x30}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x5, @private1, 0x1}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000640)="6c5d1f88f60bd8ee2191cfd03220ffef6087ad66be64ff667d1ca9180f97d086c65a618f0ce6e8ba05453ab230c3ba5f103393054d8290d873d55aa40fb7f37a5c", 0x41}, {&(0x7f00000006c0)="da211ebfc4d466e0", 0x8}, {&(0x7f0000000700)="bfe6a621ea8af04e012e971340be8fbae36e8e47f5dabb98951df078e85cebaa475f377520d52ced8f331c1c2faed65943e4b822b41635100d289db5bf5d7ed9e8cf1aa97ed377be03f02f6ad9a6b502a35e4d0870b165437b5159b661917f897dfa7a021f00b72391", 0x69}, {&(0x7f0000000780)="7a202d6545b916755aab8e450549c09d8361213da9ac3d7a306eae7cee03e08fc2799006073a0d202d61f9c2c35f2edf4ac147a459dcfd3779d9eafdf04a7b11a4083288af2f285d46946b438d23ad17b77147700b50bee16ed274743305a752e47d8db6a571848bbeea43dbb7b99cdc99e311a6e7cbcb9d8dee07298d39a6bce0998f5e788afa3bd6c3558b82e1757c1fb1422e032bf0661973725eab3b23e3a9eed79a87b8708e76afbc88f8ba18e5d8fdafc297b011ffd1163bf397c012502c6c1bd3b45ec7a0053e3cab599ce795d7d219b30a83bb6798ca864df04688a24e95fcc25ff5b3253b1214", 0xeb}], 0x4, &(0x7f00000008c0)=[@rthdrdstopts={{0xa0, 0x29, 0x37, {0x67, 0x10, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x6, 0x800, [0x81, 0x4, 0x100000001, 0xfffffffffffffe01]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x3, 0xe, [0x1, 0x6, 0x6, 0x57dd5e3d, 0x7, 0x7]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x6}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xe1}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x3b, 0x7, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x9, [0x23]}}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0xfb, 0x0, [@mcast1]}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x0, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x28, {0x3, 0x8, 0x7, 0x7fff, [0xffffffffffffffff, 0x2, 0xe7, 0x6]}}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x5}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0x1c0}}, {{&(0x7f0000000ac0)={0xa, 0x4e22, 0x3, @private1}, 0x1c, &(0x7f00000031c0)=[{&(0x7f0000000b00)="ae4f2ce2241371a8c00d1be9e920c99d6af858c23e533b0d76a9fdff8a57e4a566ef91544eda63079f8777962c2791ccd7b165492a3bce5a207270b1f4b7c673c9f1741d3294c9cc62136536eec6a192fc5d4b5f924c54d54d8ff27e6f235fffc83c25db32c2fbad4d81e6a02a1c5932fc82de76b52a7d470e288f42cf502b5a5c64d9c1209fed740af7a8", 0x8b}, {&(0x7f0000000bc0)="633cd45942b84ad2997f66278fef70a4809337809a24c191b666dba3f1fd140616b502558f9f8f14e18c2f9f9adb5e114d9f05df24c790441352f793ab163ee7bdcabeffb32c38b518938134a856578873867519948d4c6bb559d00a8bbd0ba5c829bc4774", 0x65}, {&(0x7f0000000c40)="ea82dd79cc24006f2cb67950aefe9100b0a99da693231d728ab00f69b6c5acaa6161ef48b0697ee6e328931d1e94d452164ade43e075d7b21fca534330cca6d623ef874b7fe4ed0050684e099f3dac9cc6b0893c1c71fd", 0x57}, {&(0x7f0000000cc0)="7df7ff527ecd2c3a318c9f0825a261804140c728dc9cd2cd687373945f712b0187acd99afbbe10296e811d8da978f98f9426ac62227edc1ccc44fc19a3fc6006581eebdf45e6b8403cbd834e2a08b5820d027de190321c47e1221d22", 0x5c}, {&(0x7f0000000d40)="af99e551635dab7e096d310cc5b2ed269a5c0031cf20e7d78d0acd65b87e093e891a7f6a5771772c5ce30441ca086f6b582b", 0x32}, {&(0x7f0000000d80)="51831598d08c28bf20454e6e95dbefe1", 0x10}, {&(0x7f0000000dc0)="bb6e343a802cd9dc511bcee8807ee74de360d83e4e1327ea109e6b1c9d866115ced8943237b1e4059afc222ef87e95f072269cb261427da38c2eaabbcec0356908f1c350d67c69bd553f49154dc391f38a6b7fdfd43cef1bda76465c6342fc9c85aed6877548a3c72fabaada2466f075ec474c758929ee40cb799902057b17a948766673feec431792f018002774", 0x8e}, {&(0x7f0000000e80)="b0e5174ab43a44d141fa70d79df1d8fd8f3df5f0d1697029f8cd3c1e740eb21b53a2f37114cb9ab2e059610f2de40769d6d4a08d45a767fbecbfc183255958cb8b53d236e20b1f231d3b77e7f99e2fe6b6990f3409a9639aedf4408bf75feb36548bca61306cac3fb26ec2c3e3ea027cbf5f7b9863a1d986ef3000b1721f62695e5f324e87438fdfa6ab6e78955f747d83fab49d5f61c6efefc232ade29ab30c6284aa711f6faec49aaf4e67ae9628", 0xaf}, {&(0x7f0000000f40)="f309e9b50418a6c238083a758f3a127d805c7c4493799cb40ffea5ae14d10438a4e04468a5952a2545ee63f2a53a2b41f9a4e7d353d699626f86cfc8516535f7b6f4700c17d3e8982dd7589262888c57db4ab00b0e6bd621e5a6fe974e4cfa30ca054a05a293dae0381c7364a16239abaef32b53c5ee21f820bbeba048e4a7f3aa1914754cdcf2a8813dab00b170dd4a6800fe71a8eea7c559bc413582c74ca8e17baedb9bb449c99d9966d5bafb2ab2b3b3316ab0bcb9d9d48671b09f27f4d8daf469e5efb942304f52f5ff31e49e", 0xcf}, {&(0x7f00000030c0)="019650726c40935e5cf128cf9b6a25e43caddeecdfd87a8e5f6ced7f4ae8b332a69deae16f5a1aa4240ef79611a44eb3e08ac7dacd12c09feac32ff9fdcf8f144f38249af396a4a103c831fd6f4dfead365996af4785358ee5f39274aa4286b8082f79430047c3cb5078c17dce5e79ab88ed6d4ff8c85bed1bc03a7801e759f8721399457da366ed0dc29a544cdd2e57b46d604eb4ec6ea938f122b9ccda0507f466e019da37437a1810e94f39c021f796f2837198fb1d87ab618d90301d7cd4075541c5", 0xc4}], 0xa, &(0x7f0000003280)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0xcf, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @hopopts_2292={{0xc8, 0x29, 0x36, {0x6c, 0x15, '\x00', [@pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0xe, 0x7fff, [0x901, 0x4, 0xd, 0x0]}}, @generic={0x7, 0x56, "c0732c8e52a3185a1dbcdc0a37d8d6b0e511040f444b22db057e208cca7a488fd5a389ed3fef587968f3b528bf13caf44716c066318f5da19c85f0c5383d5ab5fdcaed5a70156f5edfe61ace1f680632f4a566048523"}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x40}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x3}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2c, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x8000}, @jumbo={0xc2, 0x4, 0xc8}, @ra={0x5, 0x2, 0x5}]}}}], 0x128}}], 0x3, 0x4000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) socket$inet_mptcp(0x2, 0x1, 0x106) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) 1.74733061s ago: executing program 9 (id=3066): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000000000040000000000900000000000000"]) 1.702477588s ago: executing program 9 (id=3067): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000700)) 1.62566934s ago: executing program 9 (id=3068): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file1\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000065895340f010022067d7010203010902240001fc00000009046b00020a00000009056b10000000000109058a03"], 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) socketpair(0x25, 0x6, 0x53410eff, &(0x7f0000004f40)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x56, 0x80002, 0x0, 0x0, 0x0, 0x4a9e47b6, 0xffffdf3e}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r3, 0x0, r3) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) write$rfkill(r5, &(0x7f0000000000)={0x5954, 0x8, 0x1, 0xff, 0x10}, 0x8) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000003c0)={0x0, {{0xa, 0x4e20, 0x1, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffd}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) 1.513494594s ago: executing program 5 (id=3069): r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaac7aaaabbec97671900140065000001329078ac14012d64010102fa4e985363e8d5dc9c1b23d34d8bc8057fada88101768784d2bf0586be190a1622aa5e36e37b72ccbb1f5fce4c9eec8c4e2d41accaf6281e63c5aa415f25db4b80ec7f4e7a4570abe324c67bd6c4bf3278b529ae2df617afb2cbbc67152bc2844628d90481662e14a2c6a41e118bc445ac46e358f17df860d78438c751f140e8878b9d235b973ede45720e7fa31317f44d0e9f78d5ad7f2abd7756ccb0c6a997500ca81fa2599109729762ec2a9c4d14aecdba166d579e010719ecd0c8"], 0x26) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) shutdown(r5, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r6, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000080) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.360821395s ago: executing program 5 (id=3070): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xc00}}, 0x10, 0x0}, 0x0) 1.356877817s ago: executing program 3 (id=3071): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.319023278s ago: executing program 5 (id=3072): r0 = io_uring_setup(0xa4e, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) splice(r1, 0x0, r4, 0x0, 0xbcc, 0x1) write$binfmt_misc(r2, &(0x7f00000005c0)="50e67817319be7e7072daad0b310704ebdb238757a00fa22030e1d5815db6a973f783689a8945d115776092462a665a60ade258ab3a04c9c883517882c6b2f63637462843e13b4b2691f72d060bc184b9eab1a53ceaba5dacaa0606b5115b91b979c9954a585362f3f7e4abcd56b4559638c29fb11efe15793d4a4dc9ecf496589e35626fc2d33b5ae06d8d68651ee3e", 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 1.315822789s ago: executing program 3 (id=3073): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000100)=[{0x0}, {&(0x7f00000000c0)="3e444c729f37cfe59d9d07a9949032d5a78a47ce62695d9ec17734a43488b20172b82a4b424be91273a297600e2702184802e2a2e693", 0x36}, {&(0x7f0000001380)="014618f368f9293a5436750ce73620d70a67ffe3fb8abcf5d3dd8e08d0c988c66e83b6d8402166d188a5f7678f11e330bd5899aae056784c9328fea3cf6a31e74a1b040bbd41a5eaf674c721ca7e5e6115ba32e460bbe1e0bc69c706cb6e3bedeb2800d03c65b128636be5ca9f6bcec123d8b38807c0c221ae51886690530290c88a0f44fec7fe9da2b5780bb679eb3e4735bebef7c9cffd4776072481e036d5f1a69f7d619c07382c577a831be6240b9be50d7bb854141b42f5", 0xba}], 0x3}, 0x40090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) epoll_create1(0x80000) close_range(r4, 0xffffffffffffffff, 0x0) 1.29176326s ago: executing program 3 (id=3074): syz_open_dev$sndmidi(0x0, 0x2, 0x161102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r2, 0x0) fadvise64(r1, 0x18, 0x88, 0x4) 1.205765902s ago: executing program 5 (id=3075): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf255100000008000300", @ANYRES32=r1, @ANYBLOB="0a002900f06683f50001000005008a"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x4c000) 1.049618276s ago: executing program 5 (id=3076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) accept4$unix(r2, 0x0, 0x0, 0x80000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) 757.499173ms ago: executing program 7 (id=3077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 643.186094ms ago: executing program 7 (id=3078): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 603.928661ms ago: executing program 7 (id=3079): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfb}}, {{0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r1) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)=""/187, &(0x7f0000000000)=0xbb) 537.504678ms ago: executing program 7 (id=3080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x220001, 0x54) getdents64(r3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005e833, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001fc0)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x80, 0x0, 0x0, &(0x7f00000026c0)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x30}}, {{&(0x7f0000002740)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, &(0x7f0000002c00)=[{0x0}, {&(0x7f00000029c0)}, {&(0x7f0000002a00)}, {0x0}], 0x4}}, {{&(0x7f0000002d00)=@rc={0x1f, @none, 0x7}, 0x80, &(0x7f0000002dc0)=[{0x0}], 0x1}}, {{&(0x7f0000002ec0)=@isdn={0x22, 0xfd, 0x5, 0x9, 0xbd}, 0x80, 0x0, 0x0, &(0x7f0000004080)=[@timestamping={{0x14, 0x1, 0x25, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x3e, 0x1, 0x3d, 0x816}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @txtime={{0x0, 0x1, 0x3d, 0x1}}], 0xa8}}], 0x5, 0x20004040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@arm64_ccsidr={0x6020000000110006, &(0x7f0000000040)=0x401}) r4 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x6040000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 361.718499ms ago: executing program 3 (id=3081): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x60}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0x3}, {0xf, 0xffff}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x100, 0x10000, {{0x29, 0x4, 0x0, 0x6, 0xa4, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0x8, 0x86, 0x0, 0x4, [0x93]}, @rr={0x7, 0x17, 0x7d, [@broadcast, @remote, @local, @remote, @multicast1]}, @timestamp_prespec={0x44, 0x4, 0x5a, 0x3, 0x7}, @cipso={0x86, 0x33, 0xfffffffffffffffd, [{0x7, 0xe, "6e58c72c24328eea30cecdc1"}, {0x0, 0x6, "9780c7ae"}, {0x1, 0x7, "cf53188697"}, {0x7, 0xe, "f4f5e7ddcedc2339d5fb158a"}, {0x7, 0x4, "a171"}]}, @timestamp={0x44, 0x2c, 0xf7, 0x0, 0x6, [0x3, 0x6, 0x6, 0x6, 0x101, 0x3ff, 0x40ed6c25, 0x6, 0x2, 0x6a]}, @cipso={0x86, 0xc, 0x1, [{0x1, 0x6, "8f62bb80"}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r5, 0x0, 0x0, 0x51, &(0x7f0000000000)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 5 (id=3082): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000000006"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008814) r1 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="020000000000000000000000004cf0780f1529e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x14, &(0x7f0000000000)=0x8, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x16, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r8, 0x227b, &(0x7f00000001c0)=0x2001) r9 = fcntl$dupfd(r8, 0x0, r8) readv(r9, &(0x7f0000000840)=[{&(0x7f0000000200)=""/243, 0xf3}], 0x1) write$sndseq(r9, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x8, {0x1}, {0x0, 0x4}, @ext={0x0, 0x0}}, {0x33, 0x0, 0xff, 0x3, @time={0xe, 0x5}, {0x0, 0x31}, {0x8, 0xfc}, @result={0x0, 0x4}}], 0x38) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002"], 0x0) kernel console output (not intermixed with test programs): Number: syz [ 589.348422][ T30] audit: type=1326 audit(589.094:219114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.8.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 589.355055][T15488] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 589.546758][T13122] usb 4-1: config 0 descriptor?? [ 589.922142][T15548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.938970][ T30] audit: type=1326 audit(589.094:219115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.8.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 589.968039][T15548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.978799][ T30] audit: type=1326 audit(589.094:219116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.8.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 590.012587][T13122] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 590.021109][ T30] audit: type=1326 audit(589.094:219117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.8.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 590.044735][ T30] audit: type=1326 audit(589.094:219118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.8.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 590.072432][ T30] audit: type=1326 audit(589.094:219119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.8.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 590.156969][T15488] lo speed is unknown, defaulting to 1000 [ 590.164061][ T30] audit: type=1326 audit(589.094:219120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.8.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 590.508784][ T30] audit: type=1326 audit(589.094:219121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.8.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 590.980515][T13122] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 591.501883][ T30] audit: type=1326 audit(589.094:219122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.8.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 591.526353][ T30] audit: type=1326 audit(589.124:219123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.8.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 591.616270][T15558] /dev/nullb0: Can't open blockdev [ 591.653578][ T30] audit: type=1326 audit(589.174:219124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.8.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 591.908910][ T43] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 592.373541][T13122] usb 4-1: USB disconnect, device number 69 [ 592.443644][ T43] usb 7-1: device descriptor read/64, error -71 [ 592.674885][ T24] cdc_mbim 8-1:1.0: bind() failure [ 592.695914][ T24] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 592.709181][ T24] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 592.727511][ T24] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 592.751680][ T24] usb 8-1: USB disconnect, device number 31 [ 592.858932][ T43] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 592.997272][T15585] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2645'. [ 593.018865][ T43] usb 7-1: device descriptor read/64, error -71 [ 593.026415][T15586] FAULT_INJECTION: forcing a failure. [ 593.026415][T15586] name failslab, interval 1, probability 0, space 0, times 0 [ 593.101250][T15586] CPU: 1 UID: 0 PID: 15586 Comm: syz.3.2646 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 593.101276][T15586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.101286][T15586] Call Trace: [ 593.101291][T15586] [ 593.101297][T15586] dump_stack_lvl+0x16c/0x1f0 [ 593.101320][T15586] should_fail_ex+0x512/0x640 [ 593.101340][T15586] should_failslab+0xc2/0x120 [ 593.101360][T15586] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 593.101378][T15586] ? fpstate_reset+0x112/0x3b0 [ 593.101401][T15586] ? alloc_pid+0xc7/0xbc0 [ 593.101429][T15586] alloc_pid+0xc7/0xbc0 [ 593.101447][T15586] copy_process+0x466f/0x7690 [ 593.101476][T15586] ? __pfx_copy_process+0x10/0x10 [ 593.101500][T15586] ? lockdep_init_map_type+0x5c/0x280 [ 593.101517][T15586] ? __raw_spin_lock_init+0x3a/0x110 [ 593.101535][T15586] ? lockdep_init_map_type+0x5c/0x280 [ 593.101551][T15586] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 593.101575][T15586] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 593.101603][T15586] vhost_task_create+0x1d2/0x2e0 [ 593.101621][T15586] ? __pfx_vhost_task_create+0x10/0x10 [ 593.101641][T15586] ? __pfx_vhost_task_fn+0x10/0x10 [ 593.101659][T15586] ? rcu_is_watching+0x12/0xc0 [ 593.101680][T15586] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 593.101704][T15586] kvm_mmu_post_init_vm+0x1b7/0x380 [ 593.101727][T15586] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 593.101753][T15586] ? rcu_is_watching+0x12/0xc0 [ 593.101774][T15586] ? lock_release+0x201/0x2f0 [ 593.101801][T15586] kvm_vcpu_ioctl+0x5eb/0x1690 [ 593.101825][T15586] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 593.101848][T15586] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 593.101870][T15586] ? do_vfs_ioctl+0x128/0x14f0 [ 593.101897][T15586] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 593.101922][T15586] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 593.101951][T15586] ? rcu_is_watching+0x12/0xc0 [ 593.101972][T15586] ? __fget_files+0x204/0x3c0 [ 593.101990][T15586] ? hook_file_ioctl_common+0x145/0x410 [ 593.102010][T15586] ? selinux_file_ioctl+0x180/0x270 [ 593.102035][T15586] ? selinux_file_ioctl+0xb4/0x270 [ 593.102059][T15586] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 593.102082][T15586] __x64_sys_ioctl+0x18b/0x210 [ 593.102108][T15586] do_syscall_64+0xcd/0x4c0 [ 593.102127][T15586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.102145][T15586] RIP: 0033:0x7f87e518ebe9 [ 593.102158][T15586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.102175][T15586] RSP: 002b:00007f87e60ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.102193][T15586] RAX: ffffffffffffffda RBX: 00007f87e53b6090 RCX: 00007f87e518ebe9 [ 593.102205][T15586] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 593.102214][T15586] RBP: 00007f87e60ae090 R08: 0000000000000000 R09: 0000000000000000 [ 593.102223][T15586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.102231][T15586] R13: 00007f87e53b6128 R14: 00007f87e53b6090 R15: 00007ffdcaeb6248 [ 593.102245][T15586] [ 593.787541][ T24] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 593.808841][ T43] usb usb7-port1: attempt power cycle [ 593.993849][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.004834][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 594.040391][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 594.051665][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 594.062567][ T24] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.079870][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.089007][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.097090][ T24] usb 8-1: Product: syz [ 594.101537][ T24] usb 8-1: Manufacturer: syz [ 594.106292][ T24] usb 8-1: SerialNumber: syz [ 594.239696][ T43] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 594.367357][T15576] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 594.414254][ T24] cdc_mbim 8-1:1.0: skipping garbage [ 594.449343][ T43] usb 7-1: device descriptor read/8, error -71 [ 594.549416][T15609] netlink: 20 bytes leftover after parsing attributes in process `\'. [ 594.579823][T15576] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 594.758763][ T5904] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 595.237835][ T5904] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 595.247764][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.256426][ T5904] usb 4-1: Product: syz [ 595.261086][ T5904] usb 4-1: Manufacturer: syz [ 595.265910][ T5904] usb 4-1: SerialNumber: syz [ 595.277389][ T5904] usb 4-1: config 0 descriptor?? [ 595.503037][T15576] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 595.514444][ T5904] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 596.109813][T15576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.220498][T15576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.246690][T15642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2662'. [ 596.306418][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 596.306447][ T30] audit: type=1326 audit(596.264:219213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.5.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 596.350137][T15642] openvswitch: netlink: Flow key attr not present in new flow. [ 596.416199][ T30] audit: type=1326 audit(596.264:219214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.5.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 596.548797][ T24] cdc_mbim 8-1:1.0: bind() failure [ 596.561791][ T24] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 596.585719][ T24] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 596.599188][ T30] audit: type=1326 audit(596.264:219215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.5.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 597.778770][ T5904] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 597.809784][T15647] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.822234][ T30] audit: type=1326 audit(596.264:219216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.5.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 597.828777][ T43] usb 4-1: USB disconnect, device number 70 [ 597.852573][ T24] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 597.894074][ T24] usb 8-1: USB disconnect, device number 32 [ 597.915197][ T30] audit: type=1326 audit(596.264:219217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.5.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 597.940865][ T30] audit: type=1326 audit(596.264:219218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.5.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 597.964405][ T30] audit: type=1326 audit(596.264:219219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.5.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 597.987747][ T30] audit: type=1326 audit(596.264:219220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.5.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 598.050334][T15647] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.065053][ T30] audit: type=1326 audit(596.274:219221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.5.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 598.408469][ T30] audit: type=1326 audit(596.274:219222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.5.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 598.452548][T15647] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.516420][T15647] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.527030][T15661] kvm: pic: non byte write [ 598.575517][T14053] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.590478][T14053] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.602977][T14053] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.644069][T14053] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.637590][ T24] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 601.473371][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 601.526372][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.636554][ T24] usb 7-1: Product: syz [ 601.645140][ T24] usb 7-1: Manufacturer: syz [ 601.652048][ T24] usb 7-1: SerialNumber: syz [ 601.676305][ T24] usb 7-1: config 0 descriptor?? [ 601.758014][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2680'. [ 602.439374][ T24] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 603.058382][T15730] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 603.816844][ T24] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 604.532197][T15764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2693'. [ 604.696249][T15766] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2693'. [ 604.705822][T15766] netlink: 'syz.3.2693': attribute type 9 has an invalid length. [ 604.714116][T15766] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2693'. [ 604.744745][T15766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2693'. [ 604.904640][ T5904] usb 7-1: USB disconnect, device number 32 [ 605.073477][T15776] comedi comedi1: pcmmio: I/O port conflict (0x4f27,32) [ 605.200837][T15776] lo: entered promiscuous mode [ 605.205691][T15776] lo: entered allmulticast mode [ 605.216445][T15776] tunl0: entered promiscuous mode [ 605.221628][T15776] tunl0: entered allmulticast mode [ 605.227148][T15776] gre0: entered promiscuous mode [ 605.232094][T15776] gre0: entered allmulticast mode [ 605.237506][T15776] gretap0: entered promiscuous mode [ 605.242724][T15776] gretap0: entered allmulticast mode [ 605.248309][T15776] erspan0: entered promiscuous mode [ 605.253553][T15776] erspan0: entered allmulticast mode [ 605.259391][T15776] ip_vti0: entered promiscuous mode [ 605.264613][T15776] ip_vti0: entered allmulticast mode [ 605.270554][T15776] ip6_vti0: entered promiscuous mode [ 605.275887][T15776] ip6_vti0: entered allmulticast mode [ 605.282007][T15776] sit0: entered promiscuous mode [ 605.286963][T15776] sit0: entered allmulticast mode [ 605.292567][T15776] ip6tnl0: entered promiscuous mode [ 605.297753][T15776] ip6tnl0: entered allmulticast mode [ 605.303485][T15776] ip6gre0: entered promiscuous mode [ 605.308689][T15776] ip6gre0: entered allmulticast mode [ 605.314747][T15776] syz_tun: entered promiscuous mode [ 605.320221][T15776] syz_tun: entered allmulticast mode [ 605.325932][T15776] ip6gretap0: entered promiscuous mode [ 605.331387][T15776] ip6gretap0: entered allmulticast mode [ 605.337313][T15776] bridge0: entered promiscuous mode [ 605.342546][T15776] bridge0: entered allmulticast mode [ 605.348262][T15776] vcan0: entered promiscuous mode [ 605.353310][T15776] vcan0: entered allmulticast mode [ 605.358607][T15776] bond0: entered promiscuous mode [ 605.363637][T15776] bond_slave_0: entered promiscuous mode [ 605.369410][T15776] bond_slave_1: entered promiscuous mode [ 605.375104][T15776] team0: entered promiscuous mode [ 605.380123][T15776] team_slave_0: entered promiscuous mode [ 605.385924][T15776] team_slave_1: entered promiscuous mode [ 605.391664][T15776] bond0: entered allmulticast mode [ 605.396755][T15776] bond_slave_0: entered allmulticast mode [ 605.402480][T15776] bond_slave_1: entered allmulticast mode [ 605.408183][T15776] team0: entered allmulticast mode [ 605.413281][T15776] team_slave_0: entered allmulticast mode [ 605.419180][T15776] team_slave_1: entered allmulticast mode [ 605.425526][T15776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.433312][T15776] nlmon0: entered promiscuous mode [ 605.438411][T15776] nlmon0: entered allmulticast mode [ 605.456842][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 605.456852][ T30] audit: type=1400 audit(605.094:219231): avc: denied { bind } for pid=15770 comm="syz.5.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 605.503111][T15776] caif0: entered promiscuous mode [ 605.508143][T15776] caif0: entered allmulticast mode [ 605.513720][T15776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.529517][T15772] veth0_to_batadv: entered allmulticast mode [ 605.552805][ T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 605.589641][ T30] audit: type=1400 audit(605.114:219232): avc: denied { write } for pid=15770 comm="syz.5.2694" path="socket:[53470]" dev="sockfs" ino=53470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 605.689081][ T30] audit: type=1400 audit(605.644:219233): avc: denied { append } for pid=15780 comm="syz.6.2696" name="nbd6" dev="devtmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 605.738763][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 606.000277][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.012407][ T30] audit: type=1400 audit(605.944:219234): avc: denied { kexec_image_load } for pid=15780 comm="syz.6.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 606.032397][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 606.048704][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.058592][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 606.068744][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.103152][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 606.122923][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.714881][ T24] usb 4-1: config 0 descriptor?? [ 606.951393][ T5904] usb 4-1: USB disconnect, device number 71 [ 608.858882][ T5904] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 609.208951][ T5904] usb 9-1: Using ep0 maxpacket: 32 [ 609.235909][ T5904] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 609.280481][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.290014][ T5904] usb 9-1: Product: syz [ 609.294484][ T5904] usb 9-1: Manufacturer: syz [ 609.299630][ T5904] usb 9-1: SerialNumber: syz [ 609.310747][ T5904] usb 9-1: config 0 descriptor?? [ 609.327992][ T5904] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 609.447370][ T5862] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 609.741533][T15827] SELinux: failed to load policy [ 609.782266][ T5862] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 609.792987][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.801075][ T5862] usb 7-1: Product: syz [ 609.805658][ T5862] usb 7-1: Manufacturer: syz [ 609.828777][ T5862] usb 7-1: SerialNumber: syz [ 609.842534][ T5862] usb 7-1: config 0 descriptor?? [ 610.763954][ T5862] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 611.094528][ T5904] gspca_stk1135: reg_w 0x5 err -71 [ 611.101985][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 611.110050][ T5904] gspca_stk1135: Sensor write failed [ 611.140418][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 611.159688][ T5904] gspca_stk1135: Sensor write failed [ 611.175686][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 611.200160][ T5904] gspca_stk1135: Sensor read failed [ 611.408684][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 611.471355][ T5904] gspca_stk1135: Sensor read failed [ 611.513199][ T5904] gspca_stk1135: Detected sensor type unknown (0x0) [ 611.528776][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 611.548794][ T5904] gspca_stk1135: Sensor read failed [ 611.554128][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 611.563296][ T5904] gspca_stk1135: Sensor read failed [ 611.570797][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 611.580511][ T5904] gspca_stk1135: Sensor write failed [ 611.586053][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 611.592611][ T5904] gspca_stk1135: Sensor write failed [ 611.598071][ T5904] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 611.623034][ T5904] usb 9-1: USB disconnect, device number 3 [ 611.633652][ T5862] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 611.759462][T15847] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2714'. [ 612.846160][ T43] usb 7-1: USB disconnect, device number 33 [ 614.778339][ T5904] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 615.120086][ T5904] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 615.162598][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.338390][ T5904] usb 9-1: config 0 descriptor?? [ 615.346300][ T5904] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 616.381318][ T30] audit: type=1400 audit(616.344:219235): avc: denied { write } for pid=15879 comm="syz.8.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 616.442350][ T5904] gp8psk: usb out operation failed. [ 616.503435][ T5904] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 616.550587][ T5904] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 616.607150][ T5904] usb 9-1: USB disconnect, device number 4 [ 616.662675][T15912] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 616.672935][T15912] SELinux: failed to load policy [ 616.775205][T15917] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2735'. [ 617.725385][T15925] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 617.731921][T15925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 617.739850][T15925] vhci_hcd vhci_hcd.0: Device attached [ 618.297220][ T5862] usb 47-1: new high-speed USB device number 3 using vhci_hcd [ 618.604261][T15926] vhci_hcd: connection reset by peer [ 618.628926][T10907] vhci_hcd: stop threads [ 618.645646][T10907] vhci_hcd: release socket [ 618.669253][T10907] vhci_hcd: disconnect device [ 618.757489][ T30] audit: type=1400 audit(618.714:219236): avc: denied { watch watch_reads } for pid=15933 comm="syz.6.2737" path="pipe:[28674]" dev="pipefs" ino=28674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 618.782133][T15936] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 620.321320][T15958] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 620.331816][T15958] SELinux: failed to load policy [ 621.573576][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2747'. [ 622.098715][ T5904] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 623.189679][ T5904] usb 8-1: Using ep0 maxpacket: 8 [ 623.197853][ T5904] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 623.214303][ T5904] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 623.233908][ T5904] usb 8-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 623.247655][ T5904] usb 8-1: Product: syz [ 623.260886][ T5904] usb 8-1: Manufacturer: syz [ 623.336012][ T5904] usb 8-1: SerialNumber: syz [ 623.523366][ T5904] usb 8-1: config 0 descriptor?? [ 623.531780][ T5904] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 623.551024][T15994] tmpfs: Bad value for 'mpol' [ 623.610867][ T5862] vhci_hcd: vhci_device speed not set [ 623.870221][T16001] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 623.876771][T16001] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 623.885150][T16001] vhci_hcd vhci_hcd.0: Device attached [ 624.039114][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.060962][T16002] vhci_hcd: connection closed [ 624.061385][ T1162] vhci_hcd: stop threads [ 624.075834][ T1162] vhci_hcd: release socket [ 624.080495][ T1162] vhci_hcd: disconnect device [ 624.108997][ T974] vhci_hcd: vhci_device speed not set [ 624.504256][ T5904] gspca_zc3xx: reg_w_i err -110 [ 624.613192][ T30] audit: type=1400 audit(624.574:219237): avc: denied { create } for pid=16011 comm="syz.5.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 624.635088][ T30] audit: type=1400 audit(624.574:219238): avc: denied { setopt } for pid=16011 comm="syz.5.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 625.025882][ T30] audit: type=1400 audit(624.984:219239): avc: denied { ioctl } for pid=15982 comm="syz.7.2750" path="socket:[54511]" dev="sockfs" ino=54511 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 625.138796][ T5904] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 625.145099][ T5904] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 626.708894][ T43] usb 8-1: USB disconnect, device number 33 [ 627.352663][ T5862] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 627.710813][ T5862] usb 7-1: config 0 has an invalid interface number: 6 but max is 0 [ 627.738765][ T5862] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.764011][ T5862] usb 7-1: config 0 has no interface number 0 [ 627.786623][ T5862] usb 7-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 627.793342][ T30] audit: type=1400 audit(627.744:219240): avc: denied { map } for pid=16052 comm="syz.8.2770" path="socket:[54562]" dev="sockfs" ino=54562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 627.811621][ T5862] usb 7-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 627.843593][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.864446][ T5862] usb 7-1: Product: syz [ 627.939040][ T30] audit: type=1400 audit(627.814:219241): avc: denied { name_connect } for pid=16053 comm="syz.5.2769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 627.972585][T16062] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2772'. [ 628.334357][ T5862] usb 7-1: Manufacturer: syz [ 628.351259][ T5862] usb 7-1: SerialNumber: syz [ 628.364403][ T5862] usb 7-1: config 0 descriptor?? [ 628.371740][T16042] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 628.380034][T16042] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 629.149241][ T5862] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 629.235295][T16071] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2773'. [ 629.344694][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2774'. [ 630.149678][T16077] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2774'. [ 630.182960][T16077] netlink: 'syz.3.2774': attribute type 9 has an invalid length. [ 630.192512][T16080] tmpfs: Bad value for 'mpol' [ 630.211870][T16077] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2774'. [ 630.231117][T16077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2774'. [ 630.358732][T16089] blktrace: Concurrent blktraces are not allowed on sg0 [ 630.568905][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 631.259702][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 631.290494][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.302155][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 631.302186][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.302204][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 631.302222][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.302249][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 631.302267][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.306362][ T9] usb 4-1: config 0 descriptor?? [ 631.723869][ T9] usb 4-1: USB disconnect, device number 72 [ 631.774148][T16103] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2779'. [ 631.779997][ T5904] usb 7-1: USB disconnect, device number 34 [ 631.883708][ T30] audit: type=1400 audit(631.844:219242): avc: denied { ioctl } for pid=16095 comm="syz.8.2779" path="socket:[54618]" dev="sockfs" ino=54618 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 632.555760][T16115] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 632.589642][T16115] SELinux: failed to load policy [ 633.465159][T16126] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2787'. [ 635.849272][T16158] overlayfs: failed to resolve './file1': -2 [ 635.880050][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2796'. [ 635.953808][T16160] netlink: 332 bytes leftover after parsing attributes in process `syz.8.2796'. [ 635.965375][T16160] netlink: 'syz.8.2796': attribute type 9 has an invalid length. [ 635.973334][T16160] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2796'. [ 635.986732][T16160] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2796'. [ 636.031658][T16167] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 636.042262][T16167] SELinux: failed to load policy [ 636.192245][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 636.470478][ T974] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 636.631798][ T9] usb 7-1: device descriptor read/64, error -71 [ 636.934431][ T974] usb 9-1: Using ep0 maxpacket: 8 [ 637.012632][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 637.031850][ T974] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.068993][ T974] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 637.090275][ T974] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 637.107334][ T974] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 637.117667][ T974] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.148807][ T9] usb 7-1: device descriptor read/64, error -71 [ 637.198009][ T974] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 637.207238][ T974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.211452][T16187] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2804'. [ 637.216431][ T974] usb 9-1: config 0 descriptor?? [ 637.314078][ T9] usb usb7-port1: attempt power cycle [ 637.463575][ T30] audit: type=1400 audit(637.424:219243): avc: denied { bind } for pid=16177 comm="syz.3.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 637.718871][ T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 638.021653][ T5904] usb 9-1: USB disconnect, device number 5 [ 638.331452][ T9] usb 7-1: device descriptor read/8, error -71 [ 638.748772][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 639.446958][T16207] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 639.457450][T16207] SELinux: failed to load policy [ 640.430778][ T9] usb 7-1: device not accepting address 38, error -71 [ 640.433236][ T9] usb usb7-port1: unable to enumerate USB device [ 640.989302][ T5954] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 641.174633][ T5954] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 641.194825][ T5954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.208826][ T5954] usb 4-1: config 0 has no interface number 0 [ 641.215076][ T5954] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 641.467078][ T5954] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 641.477389][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.485491][ T5954] usb 4-1: Product: syz [ 641.490392][ T5954] usb 4-1: Manufacturer: syz [ 641.522555][ T5954] usb 4-1: SerialNumber: syz [ 641.774778][ T5954] usb 4-1: config 0 descriptor?? [ 642.173392][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2820'. [ 642.210623][T16230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 642.223078][T16230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 642.257728][T16255] syz.5.2819: attempt to access beyond end of device [ 642.257728][T16255] nbd5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 642.273941][T16255] hfsplus: unable to find HFS+ superblock [ 642.314040][T16252] netlink: 332 bytes leftover after parsing attributes in process `syz.7.2820'. [ 642.348893][T16252] netlink: 'syz.7.2820': attribute type 9 has an invalid length. [ 642.357422][T16252] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2820'. [ 642.366963][ T5954] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 642.377239][T16252] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2820'. [ 642.638786][ T5862] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 643.353157][T16263] overlayfs: failed to resolve './file0': -2 [ 643.448741][ T5862] usb 8-1: Using ep0 maxpacket: 8 [ 643.455187][ T5862] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.466486][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 643.478239][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 643.489146][ T5862] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 643.498843][ T5862] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.512045][ T5862] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 643.526985][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.543562][ T5862] usb 8-1: config 0 descriptor?? [ 643.567756][T16279] blktrace: Concurrent blktraces are not allowed on sg0 [ 643.754899][ T5862] usb 8-1: USB disconnect, device number 34 [ 644.761359][ T24] usb 4-1: USB disconnect, device number 73 [ 644.804480][T16292] SELinux: failed to load policy [ 644.960799][ T30] audit: type=1400 audit(644.924:219244): avc: denied { create } for pid=16298 comm="syz.6.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 644.980452][ T30] audit: type=1400 audit(644.934:219245): avc: denied { read } for pid=16298 comm="syz.6.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 645.434004][ T30] audit: type=1400 audit(645.394:219246): avc: denied { map } for pid=16305 comm="syz.7.2837" path="socket:[56414]" dev="sockfs" ino=56414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 645.460003][ T30] audit: type=1400 audit(645.394:219247): avc: denied { read } for pid=16305 comm="syz.7.2837" path="socket:[56414]" dev="sockfs" ino=56414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 645.640160][T16313] overlayfs: failed to resolve './file0': -2 [ 645.668562][ T30] audit: type=1400 audit(645.624:219248): avc: denied { firmware_load } for pid=16298 comm="syz.6.2835" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 646.040556][T16314] syz.6.2835 (16314) used greatest stack depth: 19224 bytes left [ 646.074182][T16322] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2842'. [ 647.184937][T16339] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 647.196422][T16339] SELinux: failed to load policy [ 648.493350][T16363] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2854'. [ 650.740240][ T30] audit: type=1400 audit(650.704:219249): avc: denied { setattr } for pid=16397 comm="syz.3.2862" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 651.398772][ T5862] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 651.550334][ T5862] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.587783][ T5862] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 651.611128][ T5862] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 651.726887][ T5862] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 651.772300][ T5862] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.830923][ T5862] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.069585][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.112222][ T5862] usb 8-1: Product: syz [ 652.153574][ T5862] usb 8-1: Manufacturer: syz [ 652.158287][ T5862] usb 8-1: SerialNumber: syz [ 652.188074][T16415] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 652.218014][ T5862] cdc_mbim 8-1:1.0: skipping garbage [ 652.542095][T16415] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 653.210158][T16415] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 653.446046][T16415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.457774][T16415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.994340][T16460] FAULT_INJECTION: forcing a failure. [ 653.994340][T16460] name failslab, interval 1, probability 0, space 0, times 0 [ 654.007414][T16460] CPU: 0 UID: 0 PID: 16460 Comm: syz.3.2878 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 654.007443][T16460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 654.007454][T16460] Call Trace: [ 654.007461][T16460] [ 654.007467][T16460] dump_stack_lvl+0x16c/0x1f0 [ 654.007492][T16460] should_fail_ex+0x512/0x640 [ 654.007514][T16460] should_failslab+0xc2/0x120 [ 654.007538][T16460] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 654.007560][T16460] ? lock_acquire+0x2cd/0x350 [ 654.007586][T16460] ? sidtab_sid2str_get+0x17a/0x680 [ 654.007616][T16460] kmemdup_noprof+0x29/0x60 [ 654.007636][T16460] sidtab_sid2str_get+0x17a/0x680 [ 654.007663][T16460] sidtab_entry_to_string+0x33/0x110 [ 654.007688][T16460] security_sid_to_context_core+0x35c/0x640 [ 654.007713][T16460] avc_audit_post_callback+0x109/0x8f0 [ 654.007732][T16460] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 654.007750][T16460] ? skb_put+0x138/0x1b0 [ 654.007773][T16460] ? audit_log_n_string+0x253/0x540 [ 654.007794][T16460] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 654.007811][T16460] common_lsm_audit+0x24b/0x300 [ 654.007836][T16460] ? __pfx_common_lsm_audit+0x10/0x10 [ 654.007861][T16460] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 654.007890][T16460] ? avc_update_node.isra.0+0x4c0/0xb60 [ 654.007909][T16460] slow_avc_audit+0x186/0x210 [ 654.007927][T16460] ? __pfx_slow_avc_audit+0x10/0x10 [ 654.007946][T16460] ? avc_denied+0x14a/0x190 [ 654.007962][T16460] ? avc_has_perm_noaudit+0x306/0x3b0 [ 654.007982][T16460] avc_has_perm+0x1b5/0x1f0 [ 654.008000][T16460] ? __pfx_avc_has_perm+0x10/0x10 [ 654.008019][T16460] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 654.008043][T16460] sock_has_perm+0x252/0x2f0 [ 654.008063][T16460] ? __pfx_sock_has_perm+0x10/0x10 [ 654.008085][T16460] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 654.008115][T16460] ? __import_iovec+0x1dd/0x650 [ 654.008137][T16460] ? rcu_is_watching+0x12/0xc0 [ 654.008160][T16460] ? __might_fault+0xe3/0x190 [ 654.008186][T16460] security_socket_sendmsg+0x9b/0x240 [ 654.008210][T16460] ____sys_sendmsg+0x865/0xc70 [ 654.008232][T16460] ? copy_msghdr_from_user+0x10a/0x160 [ 654.008250][T16460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.008272][T16460] ? __pfx_kstrtouint+0x10/0x10 [ 654.008291][T16460] ? kstrtouint_from_user+0x13c/0x1d0 [ 654.008309][T16460] ___sys_sendmsg+0x134/0x1d0 [ 654.008327][T16460] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.008350][T16460] ? rcu_is_watching+0x12/0xc0 [ 654.008376][T16460] ? __mutex_unlock_slowpath+0x100/0x800 [ 654.008399][T16460] __sys_sendmsg+0x16d/0x220 [ 654.008417][T16460] ? __pfx___sys_sendmsg+0x10/0x10 [ 654.008441][T16460] do_syscall_64+0xcd/0x4c0 [ 654.008461][T16460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.008480][T16460] RIP: 0033:0x7f87e518ebe9 [ 654.008494][T16460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.008512][T16460] RSP: 002b:00007f87e60ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.008531][T16460] RAX: ffffffffffffffda RBX: 00007f87e53b6090 RCX: 00007f87e518ebe9 [ 654.008543][T16460] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 654.008554][T16460] RBP: 00007f87e60ae090 R08: 0000000000000000 R09: 0000000000000000 [ 654.008566][T16460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.008577][T16460] R13: 00007f87e53b6128 R14: 00007f87e53b6090 R15: 00007ffdcaeb6248 [ 654.008594][T16460] [ 654.359993][ T30] audit: type=1400 audit(653.954:219250): avc: denied { write } for pid=16457 comm="syz.3.2878" ssid=148 tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 655.576578][T16415] lo speed is unknown, defaulting to 1000 [ 655.773563][T16470] fuse: Bad value for 'fd' [ 657.018299][ T5862] cdc_mbim 8-1:1.0: bind() failure [ 657.029815][ T5862] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 657.039230][ T5862] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 657.048003][ T5862] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 657.705689][ T5862] usb 8-1: USB disconnect, device number 35 [ 657.823925][T16499] FAULT_INJECTION: forcing a failure. [ 657.823925][T16499] name failslab, interval 1, probability 0, space 0, times 0 [ 657.837249][T16499] CPU: 0 UID: 0 PID: 16499 Comm: syz.8.2890 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 657.837279][T16499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.837290][T16499] Call Trace: [ 657.837295][T16499] [ 657.837302][T16499] dump_stack_lvl+0x16c/0x1f0 [ 657.837328][T16499] should_fail_ex+0x512/0x640 [ 657.837349][T16499] should_failslab+0xc2/0x120 [ 657.837370][T16499] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 657.837389][T16499] ? __alloc_skb+0x2b2/0x380 [ 657.837407][T16499] __alloc_skb+0x2b2/0x380 [ 657.837421][T16499] ? __pfx___alloc_skb+0x10/0x10 [ 657.837434][T16499] ? cap_capable+0xb3/0x250 [ 657.837454][T16499] ? bpf_lsm_capable+0x9/0x10 [ 657.837476][T16499] ? security_capable+0x7e/0x260 [ 657.837494][T16499] tipc_get_err_tlv+0x34/0xd0 [ 657.837515][T16499] tipc_nl_compat_recv+0xad0/0xc50 [ 657.837534][T16499] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 657.837554][T16499] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 657.837579][T16499] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 657.837601][T16499] ? __pfx___mutex_trylock_common+0x10/0x10 [ 657.837630][T16499] ? rcu_is_watching+0x12/0xc0 [ 657.837650][T16499] ? trace_contention_end+0xdd/0x130 [ 657.837663][T16499] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 657.837689][T16499] genl_family_rcv_msg_doit+0x206/0x2f0 [ 657.837711][T16499] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 657.837733][T16499] ? genl_get_cmd+0x194/0x580 [ 657.837755][T16499] ? __radix_tree_lookup+0x21f/0x2c0 [ 657.837784][T16499] genl_rcv_msg+0x55c/0x800 [ 657.837806][T16499] ? __pfx_genl_rcv_msg+0x10/0x10 [ 657.837827][T16499] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 657.837851][T16499] netlink_rcv_skb+0x155/0x420 [ 657.837870][T16499] ? __pfx_genl_rcv_msg+0x10/0x10 [ 657.837891][T16499] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.837913][T16499] ? netlink_deliver_tap+0x1ae/0xd30 [ 657.837932][T16499] genl_rcv+0x28/0x40 [ 657.837952][T16499] netlink_unicast+0x5aa/0x870 [ 657.837971][T16499] ? __pfx_netlink_unicast+0x10/0x10 [ 657.837994][T16499] netlink_sendmsg+0x8d1/0xdd0 [ 657.838014][T16499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.838037][T16499] ____sys_sendmsg+0xa95/0xc70 [ 657.838060][T16499] ? copy_msghdr_from_user+0x10a/0x160 [ 657.838099][T16499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.838120][T16499] ? __pfx_kstrtouint+0x10/0x10 [ 657.838139][T16499] ? kstrtouint_from_user+0x13c/0x1d0 [ 657.838157][T16499] ___sys_sendmsg+0x134/0x1d0 [ 657.838175][T16499] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.838197][T16499] ? rcu_is_watching+0x12/0xc0 [ 657.838222][T16499] ? __mutex_unlock_slowpath+0x100/0x800 [ 657.838244][T16499] __sys_sendmsg+0x16d/0x220 [ 657.838261][T16499] ? __pfx___sys_sendmsg+0x10/0x10 [ 657.838286][T16499] do_syscall_64+0xcd/0x4c0 [ 657.838306][T16499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.838324][T16499] RIP: 0033:0x7f724978ebe9 [ 657.838338][T16499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.838354][T16499] RSP: 002b:00007f724a602038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.838372][T16499] RAX: ffffffffffffffda RBX: 00007f72499b5fa0 RCX: 00007f724978ebe9 [ 657.838383][T16499] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 657.838393][T16499] RBP: 00007f724a602090 R08: 0000000000000000 R09: 0000000000000000 [ 657.838404][T16499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.838413][T16499] R13: 00007f72499b6038 R14: 00007f72499b5fa0 R15: 00007ffd0aa39958 [ 657.838429][T16499] [ 658.348749][ T5862] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 658.500401][ T5862] usb 8-1: config 0 has an invalid interface number: 6 but max is 0 [ 658.508412][ T5862] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.518567][ T5862] usb 8-1: config 0 has no interface number 0 [ 658.524763][ T5862] usb 8-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 658.539387][ T5862] usb 8-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 658.548445][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.556471][ T5862] usb 8-1: Product: syz [ 658.560814][ T5862] usb 8-1: Manufacturer: syz [ 658.565577][ T5862] usb 8-1: SerialNumber: syz [ 658.571373][ T5862] usb 8-1: config 0 descriptor?? [ 658.577040][T16488] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 658.592723][T16488] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 658.606622][ T5862] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 658.725078][ T30] audit: type=1400 audit(658.584:219251): avc: denied { listen } for pid=16506 comm="syz.6.2893" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 659.032325][T16520] blktrace: Concurrent blktraces are not allowed on sg0 [ 659.348725][ T30] audit: type=1800 audit(658.964:219252): pid=16520 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2886" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 660.322258][ T5862] usb 8-1: USB disconnect, device number 36 [ 660.422653][T16527] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2898'. [ 662.861615][ T5862] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 662.898852][ T974] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 663.192568][ T5862] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 663.200327][ T24] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 663.214751][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.234685][ T5862] usb 9-1: Product: syz [ 663.239842][ T5862] usb 9-1: Manufacturer: syz [ 663.244649][ T5862] usb 9-1: SerialNumber: syz [ 663.251245][ T5862] usb 9-1: config 0 descriptor?? [ 663.272536][T16568] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2913'. [ 663.281846][T16568] openvswitch: netlink: Flow key attr not present in new flow. [ 663.291082][ T30] audit: type=1326 audit(663.254:219253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.5.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 663.316074][ T30] audit: type=1326 audit(663.254:219254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.5.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 663.339365][ T974] usb 7-1: Using ep0 maxpacket: 8 [ 663.339702][ T30] audit: type=1326 audit(663.264:219255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.5.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 663.369425][ T30] audit: type=1326 audit(663.264:219256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.5.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 663.372663][ T974] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 663.394675][ T30] audit: type=1326 audit(663.264:219257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.5.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 663.402829][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.427976][ T30] audit: type=1326 audit(663.264:219258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.5.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 663.435015][ T974] usb 7-1: config 0 descriptor?? [ 663.462700][ T24] usb 8-1: config 0 has an invalid interface number: 6 but max is 0 [ 663.471160][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.482213][ T24] usb 8-1: config 0 has no interface number 0 [ 663.488500][ T5862] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 663.489305][ T24] usb 8-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 663.516268][ T24] usb 8-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 663.526130][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.534742][ T30] audit: type=1326 audit(663.264:219259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.5.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 663.536817][ T24] usb 8-1: Product: syz [ 663.561597][ T30] audit: type=1326 audit(663.264:219260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.5.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb0d98ebe9 code=0x7ffc0000 [ 663.564474][ T24] usb 8-1: Manufacturer: syz [ 663.590775][ T24] usb 8-1: SerialNumber: syz [ 663.597331][ T24] usb 8-1: config 0 descriptor?? [ 663.604118][T16555] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 663.693930][T16555] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 663.708157][ T24] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 663.727180][ T974] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 664.146462][ T5862] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 664.282928][T16579] blktrace: Concurrent blktraces are not allowed on sg0 [ 665.510349][T16592] veth0_to_team: entered promiscuous mode [ 665.516129][T16592] veth0_to_team: entered allmulticast mode [ 665.530932][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 665.530951][ T30] audit: type=1326 audit(665.494:219268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.3.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e518ebe9 code=0x7ffc0000 [ 665.564193][ T30] audit: type=1326 audit(665.494:219269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.3.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e518ebe9 code=0x7ffc0000 [ 665.591205][ T30] audit: type=1326 audit(665.494:219270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.3.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f87e518ebe9 code=0x7ffc0000 [ 665.618952][ T30] audit: type=1326 audit(665.494:219271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.3.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e518ebe9 code=0x7ffc0000 [ 665.645715][ T30] audit: type=1326 audit(665.494:219272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.3.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e518ebe9 code=0x7ffc0000 [ 665.669841][ T30] audit: type=1326 audit(665.494:219273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.3.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f87e518ebe9 code=0x7ffc0000 [ 665.671468][ T24] usb 9-1: USB disconnect, device number 6 [ 665.695444][ T30] audit: type=1326 audit(665.494:219274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.3.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e518ebe9 code=0x7ffc0000 [ 665.762756][ T5862] usb 8-1: USB disconnect, device number 37 [ 665.776733][ T30] audit: type=1326 audit(665.494:219275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.3.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e518ebe9 code=0x7ffc0000 [ 665.813922][ T30] audit: type=1326 audit(665.524:219276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.3.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f87e518ebe9 code=0x7ffc0000 [ 665.848546][ T30] audit: type=1326 audit(665.524:219277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.3.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e518ebe9 code=0x7ffc0000 [ 666.021775][T16609] overlayfs: failed to resolve './file1': -2 [ 666.052418][T16611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2926'. [ 666.061508][T16611] openvswitch: netlink: Flow key attr not present in new flow. [ 666.548857][ T5862] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 666.647488][T16621] SELinux: failed to load policy [ 666.719534][ T5862] usb 8-1: Using ep0 maxpacket: 32 [ 666.740405][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.782408][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.814053][ T974] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 666.845256][ T5862] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 666.862197][T16624] FAULT_INJECTION: forcing a failure. [ 666.862197][T16624] name failslab, interval 1, probability 0, space 0, times 0 [ 666.879557][ T5862] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 666.895808][T16624] CPU: 0 UID: 0 PID: 16624 Comm: syz.6.2929 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 666.895836][T16624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 666.895847][T16624] Call Trace: [ 666.895854][T16624] [ 666.895861][T16624] dump_stack_lvl+0x16c/0x1f0 [ 666.895887][T16624] should_fail_ex+0x512/0x640 [ 666.895909][T16624] ? tomoyo_encode2+0x100/0x3e0 [ 666.895935][T16624] should_failslab+0xc2/0x120 [ 666.895957][T16624] __kmalloc_noprof+0xd2/0x510 [ 666.895980][T16624] ? rcu_is_watching+0x12/0xc0 [ 666.896005][T16624] tomoyo_encode2+0x100/0x3e0 [ 666.896031][T16624] tomoyo_unix_entry+0x341/0x650 [ 666.896056][T16624] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 666.896082][T16624] ? rcu_is_watching+0x12/0xc0 [ 666.896108][T16624] tomoyo_socket_sendmsg_permission+0x352/0x3c0 [ 666.896137][T16624] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 666.896164][T16624] ? __might_fault+0x13b/0x190 [ 666.896181][T16624] ? rcu_is_watching+0x12/0xc0 [ 666.896202][T16624] ? iovec_from_user+0xbb/0x140 [ 666.896227][T16624] ? __import_iovec+0x1dd/0x650 [ 666.896252][T16624] security_socket_sendmsg+0x211/0x240 [ 666.896277][T16624] ____sys_sendmsg+0x2f2/0xc70 [ 666.896301][T16624] ? copy_msghdr_from_user+0x10a/0x160 [ 666.896319][T16624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.896343][T16624] ? kfree+0x24f/0x4d0 [ 666.896374][T16624] ? __bpf_trace_sched_switch+0x145/0x190 [ 666.896397][T16624] ___sys_sendmsg+0x134/0x1d0 [ 666.896415][T16624] ? rcu_is_watching+0x12/0xc0 [ 666.896437][T16624] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.896454][T16624] ? lock_release+0x201/0x2f0 [ 666.896481][T16624] ? rcu_is_watching+0x12/0xc0 [ 666.896506][T16624] ? rcu_is_watching+0x12/0xc0 [ 666.896532][T16624] ? __pfx___might_resched+0x10/0x10 [ 666.896556][T16624] __sys_sendmmsg+0x200/0x420 [ 666.896576][T16624] ? __pfx___sys_sendmmsg+0x10/0x10 [ 666.896598][T16624] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 666.896627][T16624] ? fput+0x9b/0xd0 [ 666.896650][T16624] ? ksys_write+0x1ac/0x250 [ 666.896668][T16624] ? __pfx_ksys_write+0x10/0x10 [ 666.896688][T16624] __x64_sys_sendmmsg+0x9c/0x100 [ 666.896711][T16624] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 666.896733][T16624] do_syscall_64+0xcd/0x4c0 [ 666.896753][T16624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.896772][T16624] RIP: 0033:0x7ff101d8ebe9 [ 666.896787][T16624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.896809][T16624] RSP: 002b:00007ff102bd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 666.896828][T16624] RAX: ffffffffffffffda RBX: 00007ff101fb5fa0 RCX: 00007ff101d8ebe9 [ 666.896841][T16624] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000005 [ 666.896853][T16624] RBP: 00007ff102bd3090 R08: 0000000000000000 R09: 0000000000000000 [ 666.896864][T16624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.896876][T16624] R13: 00007ff101fb6038 R14: 00007ff101fb5fa0 R15: 00007ffcb0c81d08 [ 666.896894][T16624] [ 667.210144][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.259272][ T5862] usb 8-1: config 0 descriptor?? [ 667.351633][ T974] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 667.435347][ T974] asix 7-1:0.0: probe with driver asix failed with error -71 [ 667.505200][ T974] usb 7-1: USB disconnect, device number 39 [ 667.738734][ T24] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 667.764627][T16601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.784718][T16601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.892918][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 667.909103][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.942969][ T24] usb 4-1: Product: syz [ 667.951532][ T24] usb 4-1: Manufacturer: syz [ 667.960649][ T24] usb 4-1: SerialNumber: syz [ 667.977603][ T24] usb 4-1: config 0 descriptor?? [ 668.082719][ T5862] usbhid 8-1:0.0: can't add hid device: -71 [ 668.088928][ T5862] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 668.099060][ T5862] usb 8-1: USB disconnect, device number 38 [ 668.210504][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 668.564801][T16655] SELinux: failed to load policy [ 668.843584][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 668.856924][T16660] SELinux: Context system_u:object_r:agp_device_t:s0 is not valid (left unmapped). [ 668.877247][T16660] overlayfs: missing 'workdir' [ 669.253889][T16666] SELinux: failed to load policy [ 669.850835][T16633] Bluetooth: hci3: command 0x0405 tx timeout [ 669.896988][T16670] FAULT_INJECTION: forcing a failure. [ 669.896988][T16670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.914868][T16670] CPU: 1 UID: 0 PID: 16670 Comm: syz.8.2942 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 669.914897][T16670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 669.914909][T16670] Call Trace: [ 669.914915][T16670] [ 669.914923][T16670] dump_stack_lvl+0x16c/0x1f0 [ 669.914948][T16670] should_fail_ex+0x512/0x640 [ 669.914970][T16670] _copy_from_user+0x2e/0xd0 [ 669.914992][T16670] user_to_new+0x5dc/0xf90 [ 669.915017][T16670] try_set_ext_ctrls_common+0x96b/0x1d40 [ 669.915045][T16670] ? __pfx_try_set_ext_ctrls_common+0x10/0x10 [ 669.915074][T16670] try_set_ext_ctrls+0x81/0x1e0 [ 669.915098][T16670] v4l_s_ext_ctrls+0x29a/0x3a0 [ 669.915126][T16670] __video_do_ioctl+0xb40/0xfc0 [ 669.915144][T16670] ? __might_fault+0x13b/0x190 [ 669.915162][T16670] ? __pfx___video_do_ioctl+0x10/0x10 [ 669.915177][T16670] ? lock_release+0x201/0x2f0 [ 669.915208][T16670] video_usercopy+0x4cd/0x1720 [ 669.915226][T16670] ? __pfx___video_do_ioctl+0x10/0x10 [ 669.915244][T16670] ? selinux_kernel_read_file+0xa1/0x130 [ 669.915270][T16670] ? __pfx_video_usercopy+0x10/0x10 [ 669.915300][T16670] v4l2_ioctl+0x1bd/0x250 [ 669.915315][T16670] ? __pfx_v4l2_ioctl+0x10/0x10 [ 669.915332][T16670] __x64_sys_ioctl+0x18b/0x210 [ 669.915358][T16670] do_syscall_64+0xcd/0x4c0 [ 669.915378][T16670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.915395][T16670] RIP: 0033:0x7f724978ebe9 [ 669.915410][T16670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.915427][T16670] RSP: 002b:00007f724a602038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.915445][T16670] RAX: ffffffffffffffda RBX: 00007f72499b5fa0 RCX: 00007f724978ebe9 [ 669.915457][T16670] RDX: 0000200000000100 RSI: 00000000c0205648 RDI: 0000000000000003 [ 669.915469][T16670] RBP: 00007f724a602090 R08: 0000000000000000 R09: 0000000000000000 [ 669.915480][T16670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.915490][T16670] R13: 00007f72499b6038 R14: 00007f72499b5fa0 R15: 00007ffd0aa39958 [ 669.915507][T16670] [ 670.404405][T16682] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2944'. [ 670.675384][ T5954] usb 4-1: USB disconnect, device number 74 [ 670.957434][T16692] fuse: Bad value for 'fd' [ 671.123015][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 671.123027][ T30] audit: type=1400 audit(671.084:219324): avc: denied { create } for pid=16700 comm="syz.5.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 671.167183][ T5954] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 671.198846][ T30] audit: type=1400 audit(671.114:219325): avc: denied { read write } for pid=16700 comm="syz.5.2951" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 671.230258][ T5954] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 671.337622][T16712] fido_id[16712]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 671.360000][ T30] audit: type=1400 audit(671.114:219326): avc: denied { open } for pid=16700 comm="syz.5.2951" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 671.568832][ T5954] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 671.610505][T16739] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2955'. [ 671.814625][ T5954] usb 8-1: config 0 has an invalid interface number: 102 but max is 0 [ 673.160120][ T5954] usb 8-1: config 0 has no interface number 0 [ 673.166253][ T5954] usb 8-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 673.176062][ T5954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.185267][ T5954] usb 8-1: config 0 descriptor?? [ 673.188739][T13122] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 673.383053][T13122] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 673.391778][T13122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.402895][T16761] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 673.709193][T13122] usb 4-1: config 0 has no interface number 0 [ 673.744680][T13122] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 674.005187][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2960'. [ 674.139751][T13122] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 674.240916][T13122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.476865][T13122] usb 4-1: Product: syz [ 674.488372][T13122] usb 4-1: Manufacturer: syz [ 674.496321][T16709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.512130][T13122] usb 4-1: SerialNumber: syz [ 674.537859][T13122] usb 4-1: config 0 descriptor?? [ 674.551554][T16709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.557593][T16749] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 674.565626][ T5954] asix 8-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 674.584643][ T5954] asix 8-1:0.102: probe with driver asix failed with error -71 [ 674.595488][ T5954] usb 8-1: USB disconnect, device number 39 [ 674.608749][T16749] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 674.887247][T13122] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 674.911766][ T30] audit: type=1400 audit(674.844:219327): avc: denied { write } for pid=16769 comm="syz.5.2962" lport=45901 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 674.972710][ T30] audit: type=1400 audit(674.844:219328): avc: denied { setopt } for pid=16769 comm="syz.5.2962" lport=45901 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 675.017496][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2965'. [ 675.620993][T16788] blktrace: Concurrent blktraces are not allowed on sg0 [ 675.648547][ T30] audit: type=1400 audit(675.594:219329): avc: denied { write } for pid=16782 comm="syz.8.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 675.821143][T16796] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2969'. [ 676.379396][T16796] omfs: Invalid superblock (0) [ 676.386047][T16800] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2970'. [ 676.404604][T16796] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2969'. [ 676.414350][T16802] omfs: Invalid superblock (0) [ 676.785725][T13122] usb 4-1: USB disconnect, device number 75 [ 677.880914][T16828] FAULT_INJECTION: forcing a failure. [ 677.880914][T16828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.958593][T16831] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2976'. [ 677.969988][T16828] CPU: 0 UID: 0 PID: 16828 Comm: syz.3.2977 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 677.970014][T16828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.970023][T16828] Call Trace: [ 677.970028][T16828] [ 677.970034][T16828] dump_stack_lvl+0x16c/0x1f0 [ 677.970057][T16828] should_fail_ex+0x512/0x640 [ 677.970078][T16828] _copy_from_user+0x2e/0xd0 [ 677.970101][T16828] kstrtouint_from_user+0xd6/0x1d0 [ 677.970117][T16828] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 677.970138][T16828] ? __mutex_trylock_common+0xe9/0x250 [ 677.970168][T16828] proc_fail_nth_write+0x83/0x220 [ 677.970189][T16828] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 677.970209][T16828] ? __pfx___might_resched+0x10/0x10 [ 677.970240][T16828] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 677.970259][T16828] vfs_write+0x29d/0x11d0 [ 677.970279][T16828] ? __pfx___mutex_lock+0x10/0x10 [ 677.970299][T16828] ? __pfx_vfs_write+0x10/0x10 [ 677.970316][T16828] ? __fget_files+0x204/0x3c0 [ 677.970335][T16828] ? rcu_is_watching+0x12/0xc0 [ 677.970358][T16828] ? __fget_files+0x20e/0x3c0 [ 677.970376][T16828] ksys_write+0x12a/0x250 [ 677.970392][T16828] ? __pfx_ksys_write+0x10/0x10 [ 677.970410][T16828] ? fput+0x9b/0xd0 [ 677.970433][T16828] do_syscall_64+0xcd/0x4c0 [ 677.970453][T16828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.970471][T16828] RIP: 0033:0x7f87e518d69f [ 677.970485][T16828] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 677.970503][T16828] RSP: 002b:00007f87e60cf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 677.970521][T16828] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f87e518d69f [ 677.970532][T16828] RDX: 0000000000000001 RSI: 00007f87e60cf0a0 RDI: 0000000000000004 [ 677.970543][T16828] RBP: 00007f87e60cf090 R08: 0000000000000000 R09: 0000000000000000 [ 677.970554][T16828] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 677.970565][T16828] R13: 00007f87e53b6038 R14: 00007f87e53b5fa0 R15: 00007ffdcaeb6248 [ 677.970582][T16828] [ 678.364232][ T30] audit: type=1400 audit(678.324:219330): avc: denied { write } for pid=16837 comm="syz.5.2980" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 678.366600][T16838] trusted_key: syz.5.2980 sent an empty control message without MSG_MORE. [ 678.598757][ T974] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 678.750476][ T974] usb 9-1: config 0 has an invalid interface number: 6 but max is 0 [ 678.769721][ T974] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.791025][ T974] usb 9-1: config 0 has no interface number 0 [ 678.798480][ T974] usb 9-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 678.850868][ T974] usb 9-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 678.861216][ T974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.874013][ T974] usb 9-1: Product: syz [ 678.881158][ T974] usb 9-1: Manufacturer: syz [ 678.886477][ T974] usb 9-1: SerialNumber: syz [ 678.904548][ T974] usb 9-1: config 0 descriptor?? [ 678.913900][T16853] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 678.929663][T16836] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 678.951108][T16836] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 678.963752][ T974] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 679.588290][T16863] blktrace: Concurrent blktraces are not allowed on sg0 [ 680.028711][T13122] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 680.240054][T13122] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 680.248218][T13122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.269321][T13122] usb 4-1: config 0 has no interface number 0 [ 680.296708][T13122] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 680.336239][T13122] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 680.348795][ T5954] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 680.374692][T13122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.392686][T13122] usb 4-1: Product: syz [ 680.400543][T13122] usb 4-1: Manufacturer: syz [ 680.408137][T13122] usb 4-1: SerialNumber: syz [ 680.426236][T13122] usb 4-1: config 0 descriptor?? [ 680.435460][T16862] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 680.468795][T16862] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 680.480024][T13122] comedi comedi6: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 680.541060][ T5954] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 680.551593][ T5954] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 680.567871][ T5954] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.587773][ T5954] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 680.629102][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.771048][ T5954] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.787585][ T5954] usb 7-1: invalid MIDI out EP 0 [ 680.876165][T16874] blktrace: Concurrent blktraces are not allowed on sg0 [ 681.267199][ T5954] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 681.393760][ T974] usb 9-1: USB disconnect, device number 7 [ 681.644015][ T30] audit: type=1400 audit(681.514:219331): avc: denied { bind } for pid=16875 comm="syz.8.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 681.720203][T16879] netlink: 332 bytes leftover after parsing attributes in process `syz.7.2989'. [ 681.731268][T16879] netlink: 'syz.7.2989': attribute type 9 has an invalid length. [ 681.739474][T16879] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2989'. [ 681.750768][T16879] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2989'. [ 681.998722][ T5862] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 682.148768][ T5862] usb 8-1: Using ep0 maxpacket: 8 [ 682.155162][ T5862] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.165423][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 682.176455][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 682.186303][ T5862] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 682.196128][ T5862] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.209145][ T5862] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 682.218390][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.227917][ T5862] usb 8-1: config 0 descriptor?? [ 682.453260][ T974] usb 4-1: USB disconnect, device number 76 [ 682.472158][ T5862] usb 8-1: USB disconnect, device number 40 [ 682.969283][T16900] netlink: 'syz.3.2994': attribute type 10 has an invalid length. [ 682.977283][T16900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2994'. [ 683.568837][ T974] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 683.581874][T16633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 683.589171][T16633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 683.597436][T16633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 683.605169][T16633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 683.798946][ T974] usb 9-1: device descriptor read/64, error -71 [ 683.925773][T16633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 683.949724][T16913] lo speed is unknown, defaulting to 1000 [ 683.982115][ T30] audit: type=1400 audit(683.944:219332): avc: denied { mount } for pid=16916 comm="syz.5.2999" name="/" dev="autofs" ino=59061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 683.982849][T16917] FAULT_INJECTION: forcing a failure. [ 683.982849][T16917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.019946][T16917] CPU: 1 UID: 0 PID: 16917 Comm: syz.5.2999 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 684.019975][T16917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 684.019992][T16917] Call Trace: [ 684.019998][T16917] [ 684.020005][T16917] dump_stack_lvl+0x16c/0x1f0 [ 684.020029][T16917] should_fail_ex+0x512/0x640 [ 684.020051][T16917] strncpy_from_user+0x3b/0x2e0 [ 684.020071][T16917] getname_flags.part.0+0x8f/0x550 [ 684.020098][T16917] getname_flags+0x93/0xf0 [ 684.020117][T16917] user_path_at+0x24/0x60 [ 684.020135][T16917] __x64_sys_mount+0x1fc/0x310 [ 684.020158][T16917] ? __pfx___x64_sys_mount+0x10/0x10 [ 684.020184][T16917] do_syscall_64+0xcd/0x4c0 [ 684.020204][T16917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.020222][T16917] RIP: 0033:0x7fdb0d98ebe9 [ 684.020235][T16917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.020253][T16917] RSP: 002b:00007fdb0e772038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 684.020272][T16917] RAX: ffffffffffffffda RBX: 00007fdb0dbb5fa0 RCX: 00007fdb0d98ebe9 [ 684.020284][T16917] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 684.020295][T16917] RBP: 00007fdb0e772090 R08: 0000000000000000 R09: 0000000000000000 [ 684.020306][T16917] R10: 0000000002005400 R11: 0000000000000246 R12: 0000000000000001 [ 684.020317][T16917] R13: 00007fdb0dbb6038 R14: 00007fdb0dbb5fa0 R15: 00007ffdf644f0c8 [ 684.020335][T16917] [ 684.190414][ T30] audit: type=1400 audit(684.154:219333): avc: denied { unmount } for pid=10166 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 684.224280][ T1162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.241165][T16913] chnl_net:caif_netlink_parms(): no params data found [ 684.274598][ T1162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.308700][ T974] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 684.331270][T16913] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.339048][T16913] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.346235][T16913] bridge_slave_0: entered allmulticast mode [ 684.353283][T16913] bridge_slave_0: entered promiscuous mode [ 684.365694][ T1162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.386893][T16913] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.404412][T16913] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.411785][T16913] bridge_slave_1: entered allmulticast mode [ 684.420367][T16913] bridge_slave_1: entered promiscuous mode [ 684.431077][ T1162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.456979][T16913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.466566][ T974] usb 9-1: device descriptor read/64, error -71 [ 684.468328][T16913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.496188][T16913] team0: Port device team_slave_0 added [ 684.504106][T16913] team0: Port device team_slave_1 added [ 684.528191][T16913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.535578][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.562312][T16913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.578937][ T974] usb usb9-port1: attempt power cycle [ 684.588196][T16913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.595319][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.630874][T16913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.663186][ T1162] dummy0: left allmulticast mode [ 684.668375][ T1162] bridge0: port 3(dummy0) entered disabled state [ 684.678509][T16936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.714300][ T1162] bridge_slave_1: left allmulticast mode [ 684.722276][ T1162] bridge_slave_1: left promiscuous mode [ 684.727960][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.738040][ T1162] bridge_slave_0: left allmulticast mode [ 684.744037][ T1162] bridge_slave_0: left promiscuous mode [ 684.751239][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.876852][ T1162] team0: Port device geneve0 removed [ 684.918699][ T974] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 684.931172][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.940570][ T1162] bond0 (unregistering): Released all slaves [ 684.949874][ T974] usb 9-1: device descriptor read/8, error -71 [ 684.972645][ T1162] bond1 (unregistering): Released all slaves [ 684.991716][ T1162] bond2 (unregistering): Released all slaves [ 685.000511][ T1162] bond3 (unregistering): Released all slaves [ 685.010833][ T1162] bond4 (unregistering): Released all slaves [ 685.018698][ T9] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 685.029038][ T1162] bond5 (unregistering): Released all slaves [ 685.038327][ T1162] bond6 (unregistering): Released all slaves [ 685.050659][ T1162] bond7 (unregistering): Released all slaves [ 685.062217][ T1162] bond8 (unregistering): Released all slaves [ 685.090634][T16913] hsr_slave_0: entered promiscuous mode [ 685.096697][T16913] hsr_slave_1: entered promiscuous mode [ 685.104419][T16913] debugfs: 'hsr0' already exists in 'hsr' [ 685.110266][T16913] Cannot create hsr debugfs directory [ 685.168807][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 685.196686][ T9] usb 8-1: config 0 has no interfaces? [ 685.208846][ T974] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 685.239931][ T974] usb 9-1: device descriptor read/8, error -71 [ 685.269273][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 685.278459][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.286839][ T9] usb 8-1: Product: syz [ 685.293396][ T9] usb 8-1: Manufacturer: syz [ 685.298018][ T9] usb 8-1: SerialNumber: syz [ 685.315598][ T9] usb 8-1: config 0 descriptor?? [ 685.359910][ T974] usb usb9-port1: unable to enumerate USB device [ 685.450996][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.697229][T16913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 685.705965][T16913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 685.714700][T16913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 685.724235][T16913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 685.757607][T16913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.771508][T16913] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.781239][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.788311][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.801178][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.808251][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.894480][T16913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.917072][T16913] veth0_vlan: entered promiscuous mode [ 685.926730][T16913] veth1_vlan: entered promiscuous mode [ 685.943781][T16913] veth0_macvtap: entered promiscuous mode [ 685.951806][T16913] veth1_macvtap: entered promiscuous mode [ 685.965321][T16913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.976691][T16913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.987664][T14052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.996483][T14052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.005829][T14052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.010994][T16633] Bluetooth: hci2: command tx timeout [ 686.016019][T14052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.051360][T14052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.063949][T14052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.081395][T10816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.090828][T10816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.582164][ T30] audit: type=1400 audit(686.534:219334): avc: denied { shutdown } for pid=16978 comm="syz.3.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 686.809527][ T5862] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 686.848980][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 686.960418][ T5862] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 686.972590][ T5862] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 686.981714][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.989836][ T5862] usb 9-1: Product: syz [ 686.994181][ T5862] usb 9-1: Manufacturer: syz [ 686.999184][ T5862] usb 9-1: SerialNumber: syz [ 687.007281][ T5862] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 687.016170][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 687.022730][ T9] usb 4-1: config 4 has an invalid interface number: 8 but max is 0 [ 687.031186][ T9] usb 4-1: config 4 has no interface number 0 [ 687.037317][ T9] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 687.047355][ T9] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 687.058405][ T9] usb 4-1: config 4 interface 8 has no altsetting 0 [ 687.066997][ T9] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 687.076272][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.085486][ T9] usb 4-1: Product: syz [ 687.089963][ T9] usb 4-1: Manufacturer: syz [ 687.094614][ T9] usb 4-1: SerialNumber: syz [ 687.141955][ T1162] hsr_slave_0: left promiscuous mode [ 687.147686][ T1162] hsr_slave_1: left promiscuous mode [ 687.167865][ T1162] veth1_macvtap: left promiscuous mode [ 687.173466][ T1162] veth0_macvtap: left promiscuous mode [ 687.179064][ T1162] veth1_vlan: left promiscuous mode [ 687.257269][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 687.269686][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 687.670757][ T5862] usb 9-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 687.691017][ T5862] usb 9-1: USB disconnect, device number 12 [ 687.754228][ T5904] usb 8-1: USB disconnect, device number 41 [ 688.097409][T16994] FAULT_INJECTION: forcing a failure. [ 688.097409][T16994] name failslab, interval 1, probability 0, space 0, times 0 [ 688.110283][T16994] CPU: 1 UID: 0 PID: 16994 Comm: syz.7.3007 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 688.110310][T16994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 688.110321][T16994] Call Trace: [ 688.110327][T16994] [ 688.110334][T16994] dump_stack_lvl+0x16c/0x1f0 [ 688.110357][T16994] should_fail_ex+0x512/0x640 [ 688.110379][T16994] should_failslab+0xc2/0x120 [ 688.110400][T16994] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 688.110419][T16994] ? rcu_is_watching+0x12/0xc0 [ 688.110440][T16994] ? __alloc_skb+0x2b2/0x380 [ 688.110459][T16994] __alloc_skb+0x2b2/0x380 [ 688.110474][T16994] ? __pfx___alloc_skb+0x10/0x10 [ 688.110490][T16994] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 688.110516][T16994] tipc_nl_compat_dumpit+0x15d/0x820 [ 688.110540][T16994] tipc_nl_compat_recv+0x6b6/0xc50 [ 688.110562][T16994] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 688.110585][T16994] ? __pfx_tipc_nl_compat_name_table_dump_header+0x10/0x10 [ 688.110607][T16994] ? __pfx_tipc_nl_name_table_dump+0x10/0x10 [ 688.110626][T16994] ? __pfx_tipc_nl_compat_name_table_dump+0x10/0x10 [ 688.110648][T16994] ? rcu_is_watching+0x12/0xc0 [ 688.110668][T16994] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 688.110690][T16994] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 688.110717][T16994] genl_family_rcv_msg_doit+0x206/0x2f0 [ 688.110740][T16994] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 688.110762][T16994] ? genl_get_cmd+0x194/0x580 [ 688.110785][T16994] ? netlink_rcv_skb+0x130/0x420 [ 688.110802][T16994] ? __radix_tree_lookup+0x21f/0x2c0 [ 688.110829][T16994] genl_rcv_msg+0x55c/0x800 [ 688.110852][T16994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 688.110874][T16994] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 688.110900][T16994] netlink_rcv_skb+0x155/0x420 [ 688.110919][T16994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 688.110941][T16994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 688.110972][T16994] genl_rcv+0x28/0x40 [ 688.110992][T16994] netlink_unicast+0x5aa/0x870 [ 688.111013][T16994] ? __pfx_netlink_unicast+0x10/0x10 [ 688.111032][T16994] ? skb_put+0xb0/0x1b0 [ 688.111057][T16994] netlink_sendmsg+0x8d1/0xdd0 [ 688.111078][T16994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.111097][T16994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.111118][T16994] ____sys_sendmsg+0xa95/0xc70 [ 688.111141][T16994] ? copy_msghdr_from_user+0x10a/0x160 [ 688.111158][T16994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.111185][T16994] ___sys_sendmsg+0x134/0x1d0 [ 688.111203][T16994] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.111225][T16994] ? rcu_is_watching+0x12/0xc0 [ 688.111253][T16994] __sys_sendmsg+0x16d/0x220 [ 688.111271][T16994] ? __pfx___sys_sendmsg+0x10/0x10 [ 688.111296][T16994] do_syscall_64+0xcd/0x4c0 [ 688.111316][T16994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.111334][T16994] RIP: 0033:0x7ff4f718ebe9 [ 688.111349][T16994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.111365][T16994] RSP: 002b:00007ff4f53d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.111383][T16994] RAX: ffffffffffffffda RBX: 00007ff4f73b6180 RCX: 00007ff4f718ebe9 [ 688.111395][T16994] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000007 [ 688.111407][T16994] RBP: 00007ff4f53d5090 R08: 0000000000000000 R09: 0000000000000000 [ 688.111418][T16994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.111429][T16994] R13: 00007ff4f73b6218 R14: 00007ff4f73b6180 R15: 00007ffe17754e08 [ 688.111447][T16994] [ 688.197604][ T5845] Bluetooth: hci2: command tx timeout [ 689.022334][T17011] FAULT_INJECTION: forcing a failure. [ 689.022334][T17011] name failslab, interval 1, probability 0, space 0, times 0 [ 689.037277][T17011] CPU: 0 UID: 0 PID: 17011 Comm: syz.7.3014 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 689.037298][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 689.037305][T17011] Call Trace: [ 689.037309][T17011] [ 689.037314][T17011] dump_stack_lvl+0x16c/0x1f0 [ 689.037330][T17011] should_fail_ex+0x512/0x640 [ 689.037344][T17011] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 689.037361][T17011] should_failslab+0xc2/0x120 [ 689.037375][T17011] __kmalloc_noprof+0xd2/0x510 [ 689.037387][T17011] tomoyo_realpath_from_path+0xc2/0x6e0 [ 689.037405][T17011] ? tomoyo_profile+0x47/0x60 [ 689.037416][T17011] tomoyo_path_number_perm+0x245/0x580 [ 689.037430][T17011] ? tomoyo_path_number_perm+0x237/0x580 [ 689.037444][T17011] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 689.037460][T17011] ? ksys_write+0x190/0x250 [ 689.037475][T17011] ? rcu_is_watching+0x12/0xc0 [ 689.037490][T17011] ? __fget_files+0x204/0x3c0 [ 689.037502][T17011] ? hook_file_ioctl_common+0x145/0x410 [ 689.037513][T17011] ? lock_release+0x201/0x2f0 [ 689.037531][T17011] ? __fget_files+0x20e/0x3c0 [ 689.037544][T17011] security_file_ioctl+0x9b/0x240 [ 689.037561][T17011] __x64_sys_ioctl+0xb7/0x210 [ 689.037578][T17011] do_syscall_64+0xcd/0x4c0 [ 689.037591][T17011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.037602][T17011] RIP: 0033:0x7ff4f718ebe9 [ 689.037611][T17011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.037623][T17011] RSP: 002b:00007ff4f7f2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.037641][T17011] RAX: ffffffffffffffda RBX: 00007ff4f73b5fa0 RCX: 00007ff4f718ebe9 [ 689.037653][T17011] RDX: 00002000000002c0 RSI: 00000000c03064b7 RDI: 0000000000000003 [ 689.037664][T17011] RBP: 00007ff4f7f2e090 R08: 0000000000000000 R09: 0000000000000000 [ 689.037674][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.037682][T17011] R13: 00007ff4f73b6038 R14: 00007ff4f73b5fa0 R15: 00007ffe17754e08 [ 689.037692][T17011] [ 689.037710][T17011] ERROR: Out of memory at tomoyo_realpath_from_path. [ 689.290302][ T9] opticon 4-1:4.8: opticon converter detected [ 689.300082][ T9] usb 4-1: opticon converter now attached to ttyUSB0 [ 689.318174][ T9] usb 4-1: USB disconnect, device number 77 [ 689.331039][ T9] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 689.339567][ T9] opticon 4-1:4.8: device disconnected [ 689.339633][T13122] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 689.585262][T13122] usb 9-1: Using ep0 maxpacket: 8 [ 689.648605][T13122] usb 9-1: config 0 has an invalid interface number: 17 but max is 0 [ 689.681976][T13122] usb 9-1: config 0 has an invalid interface number: 167 but max is 0 [ 689.690522][T13122] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.702183][T13122] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 689.711487][T13122] usb 9-1: config 0 has no interface number 0 [ 689.717564][T13122] usb 9-1: config 0 has no interface number 1 [ 689.723764][T13122] usb 9-1: config 0 interface 17 altsetting 63 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 689.734848][T13122] usb 9-1: config 0 interface 17 altsetting 63 endpoint 0xA has an invalid bInterval 129, changing to 7 [ 689.748810][ T9] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 689.756440][T13122] usb 9-1: config 0 interface 17 altsetting 63 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 689.768388][T13122] usb 9-1: config 0 interface 17 altsetting 63 has 3 endpoint descriptors, different from the interface descriptor's value: 11 [ 689.784810][T13122] usb 9-1: config 0 interface 167 altsetting 216 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 689.799172][T13122] usb 9-1: config 0 interface 17 has no altsetting 0 [ 689.805937][T13122] usb 9-1: config 0 interface 167 has no altsetting 0 [ 689.814414][T13122] usb 9-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=71.58 [ 689.823763][T13122] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.831791][T13122] usb 9-1: Product: syz [ 689.836070][T13122] usb 9-1: Manufacturer: syz [ 689.840846][T13122] usb 9-1: SerialNumber: syz [ 689.846732][T13122] usb 9-1: config 0 descriptor?? [ 689.972018][ T9] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 689.980104][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.990323][ T9] usb 4-1: config 0 has no interface number 0 [ 689.997392][ T9] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 690.011044][ T9] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 690.021103][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.029443][ T9] usb 4-1: Product: syz [ 690.033834][ T9] usb 4-1: Manufacturer: syz [ 690.038428][ T9] usb 4-1: SerialNumber: syz [ 690.049089][ T9] usb 4-1: config 0 descriptor?? [ 690.057767][T17014] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 690.070116][T17014] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 690.101809][ T9] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 690.458939][ T9] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 690.471856][T17030] blktrace: Concurrent blktraces are not allowed on sg0 [ 690.809321][ T5845] Bluetooth: hci2: command tx timeout [ 691.028696][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 691.035258][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.046245][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.056705][ T9] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 691.065932][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.212188][ T9] usb 8-1: config 0 descriptor?? [ 691.977967][T17028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.002612][T17039] fuse: Bad value for 'fd' [ 692.132634][T17028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.162404][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 692.167674][T13122] usb 9-1: USB disconnect, device number 13 [ 692.186001][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 692.209622][ T9] usb 8-1: USB disconnect, device number 42 [ 692.504335][ T5862] usb 4-1: USB disconnect, device number 78 [ 692.541642][ T30] audit: type=1400 audit(692.504:219335): avc: denied { setopt } for pid=17042 comm="syz.8.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 692.654948][T17052] FAULT_INJECTION: forcing a failure. [ 692.654948][T17052] name failslab, interval 1, probability 0, space 0, times 0 [ 692.667714][T17052] CPU: 0 UID: 0 PID: 17052 Comm: syz.8.3026 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 692.667732][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 692.667739][T17052] Call Trace: [ 692.667743][T17052] [ 692.667747][T17052] dump_stack_lvl+0x16c/0x1f0 [ 692.667764][T17052] should_fail_ex+0x512/0x640 [ 692.667777][T17052] should_failslab+0xc2/0x120 [ 692.667791][T17052] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 692.667803][T17052] ? __alloc_skb+0x2b2/0x380 [ 692.667815][T17052] __alloc_skb+0x2b2/0x380 [ 692.667824][T17052] ? __pfx___alloc_skb+0x10/0x10 [ 692.667834][T17052] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 692.667857][T17052] ? is_bpf_text_address+0x94/0x1a0 [ 692.667874][T17052] ? kernel_text_address+0x8d/0x100 [ 692.667894][T17052] ? __kernel_text_address+0xd/0x40 [ 692.667911][T17052] alloc_skb_with_frags+0xe0/0x860 [ 692.667923][T17052] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 692.667936][T17052] ? stack_depot_save_flags+0x3de/0x9c0 [ 692.667948][T17052] ? rcu_is_watching+0x12/0xc0 [ 692.667963][T17052] sock_alloc_send_pskb+0x7fb/0x990 [ 692.667986][T17052] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 692.668006][T17052] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 692.668023][T17052] ? kasan_save_stack+0x42/0x60 [ 692.668033][T17052] ? kasan_save_stack+0x33/0x60 [ 692.668043][T17052] ? kasan_save_track+0x14/0x30 [ 692.668053][T17052] ? __kasan_kmalloc+0xaa/0xb0 [ 692.668063][T17052] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 692.668080][T17052] ? ip6_blackhole_route+0x402/0x4e0 [ 692.668091][T17052] ? xfrm_lookup_route+0x10e/0x200 [ 692.668105][T17052] ? ip6_dst_lookup_flow+0x15c/0x1d0 [ 692.668122][T17052] ? ip6_sk_dst_lookup_flow+0x56d/0x970 [ 692.668139][T17052] ? udpv6_sendmsg+0x19ef/0x2d20 [ 692.668152][T17052] ? inet6_sendmsg+0x105/0x140 [ 692.668166][T17052] ? ____sys_sendmsg+0x705/0xc70 [ 692.668179][T17052] ? ___sys_sendmsg+0x134/0x1d0 [ 692.668189][T17052] ? __sys_sendmmsg+0x200/0x420 [ 692.668199][T17052] ? __x64_sys_sendmmsg+0x9c/0x100 [ 692.668210][T17052] ? do_syscall_64+0xcd/0x4c0 [ 692.668222][T17052] __ip6_append_data+0x2a98/0x4750 [ 692.668242][T17052] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 692.668258][T17052] ? __pfx___ip6_append_data+0x10/0x10 [ 692.668275][T17052] ? dst_blackhole_mtu+0xb7/0xf0 [ 692.668291][T17052] ? ip6_setup_cork+0xc51/0x1530 [ 692.668308][T17052] ip6_make_skb+0x2c8/0x3f0 [ 692.668319][T17052] ? lock_release+0x201/0x2f0 [ 692.668335][T17052] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 692.668348][T17052] ? __pfx_ip6_make_skb+0x10/0x10 [ 692.668358][T17052] ? ip6_sk_dst_store_flow+0x4fb/0x830 [ 692.668368][T17052] ? rcu_is_watching+0x12/0xc0 [ 692.668382][T17052] ? ip6_sk_dst_store_flow+0x33a/0x830 [ 692.668395][T17052] ? udpv6_sendmsg+0x235c/0x2d20 [ 692.668407][T17052] udpv6_sendmsg+0x235c/0x2d20 [ 692.668420][T17052] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 692.668434][T17052] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 692.668447][T17052] ? avc_has_perm_noaudit+0x149/0x3b0 [ 692.668459][T17052] ? avc_has_perm+0x144/0x1f0 [ 692.668470][T17052] ? rcu_is_watching+0x12/0xc0 [ 692.668484][T17052] ? unwind_next_frame+0x3f4/0x20a0 [ 692.668497][T17052] ? rcu_is_watching+0x12/0xc0 [ 692.668513][T17052] ? __import_iovec+0x1dd/0x650 [ 692.668527][T17052] ? rcu_is_watching+0x12/0xc0 [ 692.668540][T17052] ? __might_fault+0xe3/0x190 [ 692.668551][T17052] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 692.668564][T17052] ? inet6_sendmsg+0x105/0x140 [ 692.668577][T17052] inet6_sendmsg+0x105/0x140 [ 692.668591][T17052] ____sys_sendmsg+0x705/0xc70 [ 692.668604][T17052] ? copy_msghdr_from_user+0x10a/0x160 [ 692.668615][T17052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.668639][T17052] ? __pfx__kstrtoull+0x10/0x10 [ 692.668657][T17052] ___sys_sendmsg+0x134/0x1d0 [ 692.668673][T17052] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.668692][T17052] ? rcu_is_watching+0x12/0xc0 [ 692.668718][T17052] __sys_sendmmsg+0x200/0x420 [ 692.668732][T17052] ? __pfx___sys_sendmmsg+0x10/0x10 [ 692.668745][T17052] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 692.668759][T17052] ? fput+0x9b/0xd0 [ 692.668774][T17052] ? ksys_write+0x1ac/0x250 [ 692.668785][T17052] ? __pfx_ksys_write+0x10/0x10 [ 692.668795][T17052] ? lock_release+0x201/0x2f0 [ 692.668812][T17052] __x64_sys_sendmmsg+0x9c/0x100 [ 692.668823][T17052] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 692.668837][T17052] do_syscall_64+0xcd/0x4c0 [ 692.668849][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.668860][T17052] RIP: 0033:0x7f724978ebe9 [ 692.668869][T17052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.668881][T17052] RSP: 002b:00007f724a602038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 692.668893][T17052] RAX: ffffffffffffffda RBX: 00007f72499b5fa0 RCX: 00007f724978ebe9 [ 692.668901][T17052] RDX: 0000000000000020 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 692.668908][T17052] RBP: 00007f724a602090 R08: 0000000000000000 R09: 0000000000000000 [ 692.668915][T17052] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 692.668922][T17052] R13: 00007f72499b6038 R14: 00007f72499b5fa0 R15: 00007ffd0aa39958 [ 692.668931][T17052] [ 693.475080][ T5845] Bluetooth: hci2: command tx timeout [ 693.515279][T17057] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3027'. [ 693.535610][T17057] openvswitch: netlink: Flow key attr not present in new flow. [ 693.551323][T17059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3030'. [ 693.561277][ T30] audit: type=1326 audit(693.524:219336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.8.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 693.569916][T17059] openvswitch: netlink: Flow key attr not present in new flow. [ 693.586688][ T30] audit: type=1326 audit(693.524:219337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.8.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 693.615658][ T30] audit: type=1326 audit(693.524:219338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.8.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 693.638965][ T30] audit: type=1326 audit(693.524:219339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.8.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 693.672371][ T30] audit: type=1326 audit(693.524:219340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.8.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 693.695763][ T30] audit: type=1326 audit(693.524:219341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.8.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 693.718804][ T30] audit: type=1326 audit(693.524:219342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.8.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 693.742157][ T30] audit: type=1326 audit(693.524:219343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.8.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 693.766614][ T30] audit: type=1326 audit(693.524:219344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.8.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f724978ebe9 code=0x7ffc0000 [ 694.913475][T17075] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3033'. [ 695.013745][T17063] SELinux: failed to load policy [ 696.387384][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3037'. [ 697.146657][T17090] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 697.202092][T10414] Bluetooth: (null): Invalid header checksum [ 697.243046][T16633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 697.250585][T10414] Bluetooth: (null): Invalid header checksum [ 697.257258][T16633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 697.268125][T16633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 697.276514][T16633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 697.283811][T16633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 697.316887][T17102] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3041'. [ 697.471329][ T3605] Bluetooth: (null): Invalid header checksum [ 697.477433][ T3605] Bluetooth: (null): Invalid header checksum [ 697.592002][T10414] Bluetooth: (null): Invalid header checksum [ 697.728757][ T974] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 698.183314][ T75] Bluetooth: (null): Invalid header checksum [ 698.195435][T17097] lo speed is unknown, defaulting to 1000 [ 698.201418][ T75] Bluetooth: (null): Invalid header checksum [ 698.220563][ T75] Bluetooth: (null): Invalid header checksum [ 698.268687][ T75] Bluetooth: (null): Invalid header checksum [ 698.274731][ T75] Bluetooth: (null): Invalid header checksum [ 698.320169][ T974] usb 9-1: unable to get BOS descriptor or descriptor too short [ 698.328389][ T974] usb 9-1: not running at top speed; connect to a high speed hub [ 698.339968][ T974] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.358075][ T974] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 698.377531][ T974] usb 9-1: config 1 has no interface number 1 [ 698.396116][ T974] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 698.444442][T17108] FAULT_INJECTION: forcing a failure. [ 698.444442][T17108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.467748][ T974] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 698.483094][T17108] CPU: 1 UID: 0 PID: 17108 Comm: syz.3.3042 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 698.483121][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.483131][T17108] Call Trace: [ 698.483137][T17108] [ 698.483144][T17108] dump_stack_lvl+0x16c/0x1f0 [ 698.483166][T17108] should_fail_ex+0x512/0x640 [ 698.483186][T17108] _copy_from_iter+0x29f/0x16f0 [ 698.483207][T17108] ? __alloc_skb+0x200/0x380 [ 698.483223][T17108] ? __pfx__copy_from_iter+0x10/0x10 [ 698.483245][T17108] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 698.483268][T17108] netlink_sendmsg+0x829/0xdd0 [ 698.483287][T17108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.483310][T17108] ____sys_sendmsg+0xa95/0xc70 [ 698.483333][T17108] ? copy_msghdr_from_user+0x10a/0x160 [ 698.483350][T17108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.483371][T17108] ? __pfx_kstrtouint+0x10/0x10 [ 698.483390][T17108] ? kstrtouint_from_user+0x13c/0x1d0 [ 698.483409][T17108] ___sys_sendmsg+0x134/0x1d0 [ 698.483427][T17108] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.483449][T17108] ? rcu_is_watching+0x12/0xc0 [ 698.483476][T17108] ? __mutex_unlock_slowpath+0x100/0x800 [ 698.483499][T17108] __sys_sendmsg+0x16d/0x220 [ 698.483516][T17108] ? __pfx___sys_sendmsg+0x10/0x10 [ 698.483540][T17108] do_syscall_64+0xcd/0x4c0 [ 698.483559][T17108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.483577][T17108] RIP: 0033:0x7fc58d98ebe9 [ 698.483591][T17108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.483608][T17108] RSP: 002b:00007fc58e8c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.483626][T17108] RAX: ffffffffffffffda RBX: 00007fc58dbb5fa0 RCX: 00007fc58d98ebe9 [ 698.483638][T17108] RDX: 0000000004004800 RSI: 0000200000000000 RDI: 0000000000000003 [ 698.483649][T17108] RBP: 00007fc58e8c8090 R08: 0000000000000000 R09: 0000000000000000 [ 698.483660][T17108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.483666][T17108] R13: 00007fc58dbb6038 R14: 00007fc58dbb5fa0 R15: 00007ffe88a7bf78 [ 698.483677][T17108] [ 698.743553][T17097] chnl_net:caif_netlink_parms(): no params data found [ 698.764852][ T974] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 698.764882][ T974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.764902][ T974] usb 9-1: Product: syz [ 698.764917][ T974] usb 9-1: Manufacturer: syz [ 698.764970][ T974] usb 9-1: SerialNumber: syz [ 698.821117][T17097] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.821186][T17097] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.821268][T17097] bridge_slave_0: entered allmulticast mode [ 698.821959][T17097] bridge_slave_0: entered promiscuous mode [ 698.849147][T17097] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.856283][T17097] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.856472][T17097] bridge_slave_1: entered allmulticast mode [ 698.857234][T17097] bridge_slave_1: entered promiscuous mode [ 698.893216][T17097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.894852][T17097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.904926][T17119] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 698.935044][T17097] team0: Port device team_slave_0 added [ 698.936765][T17097] team0: Port device team_slave_1 added [ 698.963519][T17097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.963536][T17097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.998555][T17097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.999939][T17097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.999953][T17097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.999974][T17097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.008812][ T974] hub 9-1:1.0: Invalid hub with more than one config or interface [ 699.008837][ T974] hub 9-1:1.0: probe with driver hub failed with error -22 [ 699.013123][ T974] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 699.039739][T17097] hsr_slave_0: entered promiscuous mode [ 699.107206][ T974] usb 9-1: USB disconnect, device number 14 [ 699.128007][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 699.139757][T14040] udevd[14040]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.156903][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3047'. [ 699.159922][T17097] hsr_slave_1: entered promiscuous mode [ 699.160273][T17097] debugfs: 'hsr0' already exists in 'hsr' [ 699.160287][T17097] Cannot create hsr debugfs directory [ 699.264872][T17097] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 699.273873][T17097] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 699.276211][T17097] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 699.278464][T17097] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 699.383146][T16633] Bluetooth: hci7: command tx timeout [ 699.436879][T17097] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.444015][T17097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.444160][T17097] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.444209][T17097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.498488][T17097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.509969][T10414] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.517288][T10414] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.533787][T17097] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.537068][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.547604][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.560867][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.560922][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.587287][T17097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 699.719990][ T974] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 699.812883][T17150] netlink: 'syz.5.3053': attribute type 10 has an invalid length. [ 699.821000][T17150] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3053'. [ 700.014789][ T974] usb 8-1: Using ep0 maxpacket: 32 [ 700.422290][ T974] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 700.479559][ T974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.512462][T17097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.621852][T17097] veth0_vlan: entered promiscuous mode [ 700.642429][ T974] usb 8-1: config 0 descriptor?? [ 700.646678][T17097] veth1_vlan: entered promiscuous mode [ 700.700504][T17097] veth0_macvtap: entered promiscuous mode [ 700.710188][T17097] veth1_macvtap: entered promiscuous mode [ 700.725893][T17097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.736941][T17097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.748189][ T75] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.759629][ T75] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.780800][ T75] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.800149][ T75] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.848268][T11016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.860332][ T974] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 700.861730][T11016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.880950][ T974] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 700.891327][T11016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.895788][ T974] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 700.907168][ T974] usb 8-1: media controller created [ 700.915602][T11016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.922788][ T974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 701.375061][ T974] az6027: usb out operation failed. (-71) [ 701.442167][ T974] az6027: usb out operation failed. (-71) [ 701.447985][ T974] stb0899_attach: Driver disabled by Kconfig [ 701.456183][ T974] az6027: no front-end attached [ 701.456183][ T974] [ 701.465243][ T974] az6027: usb out operation failed. (-71) [ 701.471861][ T974] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 701.475595][T16633] Bluetooth: hci7: command tx timeout [ 701.480272][ T974] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input20 [ 701.509990][ T974] dvb-usb: schedule remote query interval to 400 msecs. [ 701.517904][ T974] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 701.597481][ T974] usb 8-1: USB disconnect, device number 43 [ 701.657432][ T974] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 701.988815][ T43] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 702.180489][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 702.180526][ T43] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 702.180560][ T43] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 702.180582][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.181772][ T43] usb 9-1: config 0 descriptor?? [ 702.182258][T17191] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 702.392452][T17191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.392652][T17191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.397167][ T43] usbhid 9-1:0.0: can't add hid device: -71 [ 702.397245][ T43] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 702.399300][ T43] usb 9-1: USB disconnect, device number 15 [ 702.599597][ T24] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 702.752201][ T24] usb 10-1: config 252 has an invalid interface number: 107 but max is 0 [ 702.761824][ T24] usb 10-1: config 252 has no interface number 0 [ 702.769274][ T24] usb 10-1: config 252 interface 107 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB [ 702.781961][ T24] usb 10-1: config 252 interface 107 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 702.808945][ T24] usb 10-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 702.828943][ T24] usb 10-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 702.839210][ T974] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 702.879210][T17225] netlink: 'syz.5.3075': attribute type 41 has an invalid length. [ 702.879258][ T24] usb 10-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 702.899172][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.908531][ T24] usb 10-1: Product: syz [ 702.913807][ T24] usb 10-1: Manufacturer: syz [ 702.918811][ T24] usb 10-1: SerialNumber: syz [ 702.935491][ T24] usbtouchscreen 10-1:252.107: probe with driver usbtouchscreen failed with error -90 [ 703.038704][ T974] usb 9-1: Using ep0 maxpacket: 32 [ 703.073576][ T974] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 703.086261][ T974] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 703.220900][ T974] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 703.245043][ T974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.268033][ T974] usb 9-1: config 0 descriptor?? [ 703.294809][ T974] hub 9-1:0.0: bad descriptor, ignoring hub [ 703.306719][ T974] hub 9-1:0.0: probe with driver hub failed with error -5 [ 703.339050][ T24] usb 10-1: USB disconnect, device number 2 [ 703.372823][T17240] overlayfs: missing 'lowerdir' [ 703.528985][T16633] Bluetooth: hci7: command tx timeout [ 703.580269][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3080'. [ 703.692066][ T974] hid-multitouch 0003:0EEF:72C4.0007: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.8-1/input0 [ 703.988509][T16633] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 704.017551][ T31] INFO: task syz.1.2505:15005 blocked for more than 143 seconds. [ 704.038773][ T31] Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 [ 704.067556][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 704.078837][ T974] usb 9-1: USB disconnect, device number 16 [ 704.105335][ T31] task:syz.1.2505 state:D stack:29336 pid:15005 tgid:15000 ppid:5842 task_flags:0x400040 flags:0x00004004 [ 704.126041][ T31] Call Trace: [ 704.134530][ T31] [ 704.137479][ T31] __schedule+0x1190/0x5de0 [ 704.144448][ T31] ? bpf_trace_run4+0x284/0x5b0 [ 704.149579][ T31] ? lock_release+0x201/0x2f0 [ 704.154584][ T31] ? bpf_trace_run4+0x2c4/0x5b0 [ 704.160875][ T31] ? __pfx___schedule+0x10/0x10 [ 704.165918][ T31] ? schedule+0x2d7/0x3a0 [ 704.171379][ T31] ? rcu_is_watching+0x12/0xc0 [ 704.176585][ T31] ? lock_release+0x201/0x2f0 [ 704.181981][ T31] schedule+0xe7/0x3a0 [ 704.187555][ T31] io_schedule+0xbf/0x130 [ 704.193165][ T31] folio_wait_bit_common+0x3d6/0x9e0 [ 704.198815][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 704.205048][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 704.213143][ T31] ? filemap_get_folios_tag+0x46a/0xae0 [ 704.219038][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 704.225370][ T31] folio_wait_writeback+0x3c/0x90 [ 704.231443][ T31] __filemap_fdatawait_range+0x11f/0x200 [ 704.238544][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 704.249702][ T31] ? rcu_is_watching+0x12/0xc0 [ 704.259816][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 704.265072][ T31] ? sync_inodes_sb+0x5e1/0xa70 [ 704.270228][ T31] ? rcu_is_watching+0x12/0xc0 [ 704.276139][ T31] filemap_fdatawait_keep_errors+0x21/0x30 [ 704.285530][ T31] sync_inodes_sb+0x5fa/0xa70 [ 704.290285][ T31] ? sync_inodes_sb+0x5e1/0xa70 [ 704.295433][ T31] ? __pfx_sync_inodes_sb+0x10/0x10 [ 704.301912][ T31] ? __iterate_supers+0x1b6/0x360 [ 704.309338][ T31] ? rcu_is_watching+0x12/0xc0 [ 704.314332][ T31] ? lock_release+0x201/0x2f0 [ 704.320534][ T31] sync_inodes_one_sb+0x52/0x60 [ 704.326334][ T31] __iterate_supers+0x20d/0x360 [ 704.331489][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 704.337360][ T31] ksys_sync+0x89/0x150 [ 704.341623][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 704.346397][ T31] ? rcu_is_watching+0x12/0xc0 [ 704.351302][ T31] __do_sys_sync+0xe/0x20 [ 704.355711][ T31] do_syscall_64+0xcd/0x4c0 [ 704.361506][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.367470][ T31] RIP: 0033:0x7f0cd638ebe9 [ 704.371920][ T31] RSP: 002b:00007f0cd7184038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 704.381115][ T31] RAX: ffffffffffffffda RBX: 00007f0cd65b6270 RCX: 00007f0cd638ebe9 [ 704.389295][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.397260][ T31] RBP: 00007f0cd65b6270 R08: 0000000000000000 R09: 0000000000000000 [ 704.405484][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.413547][ T31] R13: 00007f0cd65b6308 R14: 00007f0cd65b6270 R15: 00007fff998207e8 [ 704.421712][ T31] [ 704.424775][ T31] INFO: lockdep is turned off. [ 704.430092][ T31] NMI backtrace for cpu 0 [ 704.430106][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 704.430128][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 704.430139][ T31] Call Trace: [ 704.430145][ T31] [ 704.430153][ T31] dump_stack_lvl+0x116/0x1f0 [ 704.430183][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 704.430207][ T31] ? watchdog+0xd17/0x1260 [ 704.430227][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 704.430253][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 704.430277][ T31] watchdog+0xf0e/0x1260 [ 704.430297][ T31] ? __pfx_watchdog+0x10/0x10 [ 704.430314][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 704.430332][ T31] ? __kthread_parkme+0x19e/0x250 [ 704.430357][ T31] ? __pfx_watchdog+0x10/0x10 [ 704.430376][ T31] kthread+0x3c5/0x780 [ 704.430393][ T31] ? __pfx_kthread+0x10/0x10 [ 704.430410][ T31] ? rcu_is_watching+0x12/0xc0 [ 704.430431][ T31] ? __pfx_kthread+0x10/0x10 [ 704.430448][ T31] ret_from_fork+0x5d7/0x6f0 [ 704.430465][ T31] ? __pfx_kthread+0x10/0x10 [ 704.430481][ T31] ret_from_fork_asm+0x1a/0x30 [ 704.430507][ T31] [ 704.430514][ T31] Sending NMI from CPU 0 to CPUs 1: [ 704.554827][ C1] NMI backtrace for cpu 1 [ 704.554843][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 704.554860][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 704.554868][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 704.554888][ C1] Code: 7c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 92 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 704.554902][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 704.554914][ C1] RAX: 0000000001a6e1a4 RBX: 0000000000000001 RCX: ffffffff8b937c29 [ 704.554923][ C1] RDX: ffffed10170a6656 RSI: ffffffff8c162680 RDI: ffffffff819133c1 [ 704.554932][ C1] RBP: ffffed1003c5d488 R08: 0000000000000000 R09: ffffed10170a6655 [ 704.554940][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 704.554948][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab3b90 R15: 0000000000000000 [ 704.554957][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 704.554970][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 704.554979][ C1] CR2: 0000001b2dcefff8 CR3: 0000000041e20000 CR4: 00000000003526f0 [ 704.554988][ C1] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 704.554996][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 704.555004][ C1] Call Trace: [ 704.555010][ C1] [ 704.555015][ C1] default_idle+0x13/0x20 [ 704.555031][ C1] default_idle_call+0x6d/0xb0 [ 704.555046][ C1] do_idle+0x391/0x510 [ 704.555065][ C1] ? __pfx_do_idle+0x10/0x10 [ 704.555079][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 704.555096][ C1] cpu_startup_entry+0x4f/0x60 [ 704.555110][ C1] start_secondary+0x21d/0x2b0 [ 704.555130][ C1] ? __pfx_start_secondary+0x10/0x10 [ 704.555149][ C1] common_startup_64+0x13e/0x148 [ 704.555176][ C1] [ 704.749598][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 704.756473][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 704.768273][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 704.778320][ T31] Call Trace: [ 704.781581][ T31] [ 704.784491][ T31] dump_stack_lvl+0x3d/0x1f0 [ 704.789066][ T31] vpanic+0x6e8/0x7a0 [ 704.793037][ T31] ? __pfx_vpanic+0x10/0x10 [ 704.797534][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 704.803504][ T31] panic+0xca/0xd0 [ 704.807209][ T31] ? __pfx_panic+0x10/0x10 [ 704.811699][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 704.817071][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 704.823211][ T31] ? watchdog+0xd78/0x1260 [ 704.827607][ T31] ? watchdog+0xd6b/0x1260 [ 704.832023][ T31] watchdog+0xd89/0x1260 [ 704.836246][ T31] ? __pfx_watchdog+0x10/0x10 [ 704.840913][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 704.846092][ T31] ? __kthread_parkme+0x19e/0x250 [ 704.851103][ T31] ? __pfx_watchdog+0x10/0x10 [ 704.855759][ T31] kthread+0x3c5/0x780 [ 704.859806][ T31] ? __pfx_kthread+0x10/0x10 [ 704.864372][ T31] ? rcu_is_watching+0x12/0xc0 [ 704.869117][ T31] ? __pfx_kthread+0x10/0x10 [ 704.873689][ T31] ret_from_fork+0x5d7/0x6f0 [ 704.878256][ T31] ? __pfx_kthread+0x10/0x10 [ 704.882823][ T31] ret_from_fork_asm+0x1a/0x30 [ 704.887571][ T31] [ 704.890760][ T31] Kernel Offset: disabled [ 704.895057][ T31] Rebooting in 86400 seconds..