last executing test programs: 8m12.50270106s ago: executing program 2 (id=562): openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x640000, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r4, 0xc01070ce, 0x0) socket$kcm(0x2d, 0x2, 0x0) request_key(&(0x7f0000000280)='ceph\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='devtmpfs\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c000000000000004000000000000000020000000000000000000000060038000300feff0300010151e57464f90900000400000000000000040000000000000009000000000000000100000000000080000000000000000001000000000000000700000001000080040000000000000000000000e000000007000000000000000b000000000000000000000000000000000000000000000003"], 0xe8) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff, 0x2, 0x8000000, 0xb}, 0x10) 8m11.193045502s ago: executing program 2 (id=563): landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 8m10.655079715s ago: executing program 2 (id=566): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20000000) pselect6(0x0, 0x0, &(0x7f0000000000)={0x818, 0xfffffffffffffffc, 0x0, 0x0, 0x9c8a}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) 8m7.337785238s ago: executing program 2 (id=579): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x38728a2, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r4}}]}) (async) r5 = geteuid() mount$9p_xen(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x140020, &(0x7f0000000340)={'trans=xen,', {[{@afid={'afid', 0x3d, 0x3}}, {@access_client}, {@debug={'debug', 0x3d, 0xf06c}}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@access_user}], [{@hash}, {@uid_lt}, {@fowner_eq={'fowner', 0x3d, r5}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@dont_hash}, {@permit_directio}, {@smackfstransmute}]}}) (async) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89100) read$FUSE(r6, &(0x7f00000026c0)={0x2020}, 0x2020) (async) getgroups(0x28, &(0x7f0000000100)) (async) chown(&(0x7f0000000000)='./myproc\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) move_mount(r6, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 8m6.750130656s ago: executing program 2 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x102, 0x40001043, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000001040)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "ffffc1", 0xc, 0x11, 0x0, @local, @local, {[], {0x4e23, 0x7f, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}}}}}}}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000640), 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4c881}, 0x800) 8m2.652856695s ago: executing program 2 (id=600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f0000000080)={0x0}) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f0000000100)={r2}) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) 8m1.826043577s ago: executing program 32 (id=600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f0000000080)={0x0}) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f0000000100)={r2}) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) 58.475531789s ago: executing program 4 (id=1462): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)={0x20, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="c1"]}, @typed={0x4, 0x19}]}, 0x20}, 0x1, 0x0, 0x0, 0x42914}, 0x40000d4) 58.339103411s ago: executing program 4 (id=1463): mremap(&(0x7f00003af000/0x2000)=nil, 0x2000, 0x0, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./config/file0\x00', 0x22000, 0x1a0) fcntl$notify(r1, 0x402, 0x30) fcntl$notify(r1, 0x402, 0x100000020) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000240)=0x7f, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='mqueue\x00', 0x80021, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000180)=0x7f) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000002000)="53464f5a05abbf5900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099e98558e1b79cd70010b52b9b9800"/4093, 0xffd, 0x4) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='zonefs\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'pimreg0\x00', @ifru_addrs=@isdn={0x22, 0x1, 0x40, 0x16, 0x81}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) syz_open_dev$video(&(0x7f0000000100), 0x9, 0x0) 58.015097088s ago: executing program 4 (id=1465): r0 = semget(0x3, 0x0, 0x40) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0xffffffff}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x9) (async, rerun: 64) openat$mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) r4 = mq_open(&(0x7f0000000100)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8fOjY8vZD2$\x99M-\xa8\x8c\xaf\xef\xc7Z&', 0x6e93ebbbcc088cf2, 0x40, &(0x7f00000000c0)={0x0, 0x1, 0xec}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f0000000000)=""/71) (async, rerun: 64) r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 64) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) (async) pipe(&(0x7f0000000240)) (async, rerun: 64) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000004700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r8}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) accept4(r9, 0x0, 0x0, 0x80800) 47.607537084s ago: executing program 5 (id=1488): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @local, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "000000008040"}]}}}}}}, 0x0) (fail_nth: 1) 46.923242512s ago: executing program 5 (id=1489): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000001a40)={&(0x7f0000000180)=[{0x5b, 0x2010, 0x0, 0x0}, {0x5, 0x0, 0x0, 0x0}], 0x2}) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @empty, 0xb}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xc, 0x4, @tid=r4}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x3, 0x7ffffffe}}) syz_usb_control_io$uac3(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000001100)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x80000000000004, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xe0c0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) 45.292357911s ago: executing program 4 (id=1494): syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000019078ac1e0001ffffffff0703fd94040000000400907800000000491100060065000508320005ac1414bbac1414aa070f35000000007f000001ac1414bb001f983b1b584c9c29783b67ca8bcec3db3fbd0794fb6e"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async, rerun: 32) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1f7) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x3, 0x5003) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) (async) mkdir(&(0x7f0000000300)='./sys/module/usbcore/parameters/quirks\x00', 0x81) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 43.606427186s ago: executing program 5 (id=1498): openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x640000, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) request_key(&(0x7f0000000280)='ceph\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='devtmpfs\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c000000000000004000000000000000020000000000000000000000060038000300feff0300010151e57464f90900000400000000000000040000000000000009000000000000000100000000000080000000000000000001000000000000000700000001000080040000000000000000000000e000000007000000000000000b000000000000000000000000000000000000000000000003"], 0xe8) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x4008010}, 0x40041) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff, 0x2, 0x8000000, 0xb}, 0x10) 42.126423485s ago: executing program 5 (id=1500): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x8000) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00), 0x0, 0x4404c800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x7, 0x9}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x10}, 0xc) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x87b, 0x2, 0x3, 0x40000, r5, 0x4, '\x00', 0x0, r6, 0x4, 0x4, 0x4}, 0x50) 40.661387166s ago: executing program 5 (id=1505): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0}) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001c40)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@enum64={0xd, 0x4, 0x0, 0x13, 0x0, 0x1, [{0x5, 0x3, 0xf405}, {0x8, 0xc39, 0x8}, {0xd, 0x40000000, 0x2}, {0x5, 0x1, 0x8}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x30, 0x0, 0x2e]}}, &(0x7f0000000c00)=""/4096, 0x5c, 0x1000, 0x1, 0x3, 0x10000, @value=r2}, 0x28) r3 = syz_io_uring_setup(0x5fbd, &(0x7f0000000900)={0x0, 0x673e, 0x8, 0x2, 0x1e2}, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)) syz_io_uring_setup(0x808, &(0x7f0000000a40)={0x0, 0x3b5b, 0x1, 0x1, 0x22f, 0x0, r3}, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) rename(&(0x7f0000000040)='./file2\x00', &(0x7f0000000100)='./file0\x00') 40.35124681s ago: executing program 4 (id=1507): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_open_dev$mtd(0x0, 0x0, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000318000180140002006d61637674617030"], 0x3c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) syz_fuse_handle_req(r4, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000500)={&(0x7f0000000640)={0x50, 0x0, 0x465a, {0x7, 0x28, 0x4, 0x508818, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x24, 0xc1, 0x4f, 0x3, 0xbb, 0x80, 0x6, 0xfe, 0x8, 0x8, 0x6, 0x1}, {0x5, 0xa6f2, 0x6, 0x48, 0x8, 0xfb, 0x44, 0x87, 0xa, 0x9, 0xb, 0x6, 0xffffffffffffffff}, {0x1fd, 0x7, 0xd, 0x21, 0x25, 0x8, 0x1, 0x6, 0x3, 0x15, 0x1, 0x1, 0x80000000004}], 0x5}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ptrace$setregset(0x4205, r5, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) r6 = syz_io_uring_complete(0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000420020002a2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x42800}, 0x8000) syz_fuse_handle_req(r4, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) landlock_create_ruleset(&(0x7f0000000400)={0x2010, 0x8, 0x0, 0x0, 0xa}, 0x30, 0x2) prctl$PR_GET_UNALIGN(0x5, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f91e0e00000000", @ANYRES16=r7, @ANYBLOB="010000000000fb00000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003af3c92463d1827678da12303462d6bd407e0ff9b5af26a45c2c2fb210805cf2701c9b5cc099da0b3bd958c5a9a91aaf6be90c6deb06e05bbd492be9215af24f18ac1fb1a1c1542dd5cc717faceaabdf6a157dd18fde4d6a23b6faae8694ca2f12f0f11e2f858aea986707800"/184, @ANYRESDEC=r7, @ANYRES32, @ANYBLOB="38e862824fe8bb9c607c9b286d433100d5a36378abec0deb93895d59f6815f84650e63144e9831626f4925c79e328cc5f97d6c2b4349448a61e61e444e1bc1824751ee28fd71eadcc0f1854b12d028825244d524a5c246911416902ad121835e24e80111863b6fca35c777e3cfb5a044ee8cc3bf938634c4a6b99d9f5f8eb1839a0dcb8dc128aa8410b11a8e47db739a2c3432dfeabf239a17ed400638f121227c0a423adf404c307906fd755c36aef8411187de0de94f2a4a505ce2ce74f8ae8a0cc09d3ec9e9af24e97ac290680c6bb2897db3dd379f938890c8ad5a988035855d3fff48a250", @ANYRES64=r0], 0x84}}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 38.568230879s ago: executing program 4 (id=1510): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x14, 0x0, 0x1, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000696000/0x1000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f000068d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xdc, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xc8, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xdc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000080)) fanotify_init(0x1a, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4140, 0xa9) mount$afs(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) 37.117975419s ago: executing program 5 (id=1513): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x14, 0x0, 0x1, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000696000/0x1000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f000068d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xdc, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xc8, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xdc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000080)) fanotify_init(0x1a, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4140, 0xa9) mount$afs(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) 21.225316992s ago: executing program 33 (id=1510): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x14, 0x0, 0x1, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000696000/0x1000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f000068d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xdc, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xc8, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xdc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000080)) fanotify_init(0x1a, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4140, 0xa9) mount$afs(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) 20.066197546s ago: executing program 34 (id=1513): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x14, 0x0, 0x1, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000696000/0x1000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f000068d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xdc, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xc8, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xdc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000080)) fanotify_init(0x1a, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4140, 0xa9) mount$afs(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) 4.570523161s ago: executing program 0 (id=1560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\"'], 0x48) (fail_nth: 1) 4.500431051s ago: executing program 0 (id=1561): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0}) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001c40)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@enum64={0xd, 0x4, 0x0, 0x13, 0x0, 0x1, [{0x5, 0x3, 0xf405}, {0x8, 0xc39, 0x8}, {0xd, 0x40000000, 0x2}, {0x5, 0x1, 0x8}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x30, 0x0, 0x2e]}}, &(0x7f0000000c00)=""/4096, 0x5c, 0x1000, 0x1, 0x3, 0x10000, @value=r2}, 0x28) r3 = syz_io_uring_setup(0x5fbd, &(0x7f0000000900)={0x0, 0x673e, 0x8, 0x2, 0x1e2}, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)) syz_io_uring_setup(0x808, &(0x7f0000000a40)={0x0, 0x3b5b, 0x1, 0x1, 0x22f, 0x0, r3}, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004084) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) rename(&(0x7f0000000040)='./file2\x00', &(0x7f0000000100)='./file0\x00') 3.571351303s ago: executing program 1 (id=1564): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000018000000"], 0x0, 0x32}, 0x28) io_uring_enter(0xffffffffffffffff, 0x491e, 0x1ab6, 0xc8, &(0x7f0000001580)={[0x81]}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000180)='addr=127.0.0.1,port=2049,proto=udp,vers=3,mountport=2049,mountproto=udp,soft,timeo=1,retrans=1\x00') connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x28, 0x0, 0xefff}, 0x28) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000040)) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000580)={0xfffffffb, {{0xa, 0x4e21, 0x1ffc000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, {{0xa, 0x4c23, 0x3, @private0, 0x2}}}, 0x108) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x20006, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc6, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x48b, 0x7ff, 0x4, 0x4007c, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x9, 0x7ffd, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x486, 0x41, 0x26, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0x1, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0xffffffff, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0x80d500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7e, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7773, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x6000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0xa, 0x9, 0x1, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) 3.247742976s ago: executing program 0 (id=1565): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) 3.016971108s ago: executing program 3 (id=1566): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback=0xd}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') fanotify_init(0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_extract_tcp_res(0x0, 0x7594, 0x7fffffff) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r4, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000880)={'wg0\x00'}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)={0x4ac, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf7bc}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x263}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff3f3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x7, 0xc, 0xfffff828}, {0x40, 0xd, 0x9, 0x5}, {0x1800, 0x7, 0x1, 0x80000000}, {0x8, 0x40, 0x1, 0xdec2}, {0x9, 0xb, 0x3, 0x5}, {0x7ff, 0x81, 0xf}]}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x80, @empty}, 0x10) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x1000000000007d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.772618113s ago: executing program 0 (id=1567): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000001a40)={&(0x7f0000000180)=[{0x5b, 0x2010, 0x0, 0x0}, {0x5, 0x0, 0x0, 0x0}], 0x2}) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @empty, 0xb}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xc, 0x4, @tid=r4}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r5 = syz_io_uring_setup(0x3e7e, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x3, 0x7ffffffe}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000002640)=ANY=[@ANYBLOB="400b280000008027272218770ff4fed5937ef31a728e665ab8b7dca46f87cf1a270cb590f990d74252eef6e63aa13f3d6753e3995ae7eab83f202ebcfcc26509cc7dd552350e2d0f2c4ae7e8df330ce4600810a8793eb76cf6da4b7ab0546daa8feecc49ee97957fcb0ac0e993dac3278bdd1be3370bbc8db2408114ea0ed60f6a28b65143f84e8945fd38c161dc06e3e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000001100)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x1a, r4, 0xc, &(0x7f0000000000)) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) mmap(&(0x7f0000ad2000/0x10000)=nil, 0x10000, 0x2000003, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x80000000000004, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xe0c0, 0x0) 2.511471232s ago: executing program 1 (id=1568): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="00a30000602607001c0012800b0001"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 2.292936365s ago: executing program 3 (id=1569): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) (fail_nth: 1) 2.120327092s ago: executing program 1 (id=1570): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x80801, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000200)=0x7) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e01") (async) listen(r0, 0x402) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @local, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x5, 0x0, 0xf500, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x5, @loopback, 0x1, "45673d923b56653c"}]}}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x28}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) 2.031160823s ago: executing program 3 (id=1571): syz_init_net_socket$llc(0x1a, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000) io_uring_enter(r1, 0x2219, 0x7721, 0x15, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0xed93228b7798012c) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000240)={0x9, 0x102, 0x1, {0x0, 0xfffffffe, 0x5, 0xe}}) 1.887714604s ago: executing program 1 (id=1572): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000180), 0x260c, 0x8a42) writev(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x1ff) ioctl$MEMREADOOB64(r0, 0xc0184d16, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0}) (fail_nth: 1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0xffffffffffffff84) 1.699419852s ago: executing program 0 (id=1573): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000180), 0x260c, 0x8a42) writev(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x1ff) ioctl$MEMREADOOB64(r0, 0xc0184d16, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0xffffffffffffff84) 1.636105366s ago: executing program 0 (id=1574): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x7) readlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000cc0)=""/4075, 0xfffffffffffffced) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x88, 0x30, 0x9, 0x0, 0x0, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1d, 0x0, 0x1}, {0x9c}, {0x3, 0xfd, 0x40}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0xf, 0x0, 0xf8}, {0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2441) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000200)=0xf0) close_range(r1, r1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'bond0\x00'}) 1.558042774s ago: executing program 3 (id=1575): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) 1.46982768s ago: executing program 3 (id=1576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000240)=0x531, 0x4) 1.322941007s ago: executing program 1 (id=1577): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback=0xd}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') fanotify_init(0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_extract_tcp_res(0x0, 0x7594, 0x7fffffff) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r4, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000880)={'wg0\x00'}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)={0x4ac, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf7bc}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x263}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff3f3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x7, 0xc, 0xfffff828}, {0x40, 0xd, 0x9, 0x5}, {0x1800, 0x7, 0x1, 0x80000000}, {0x8, 0x40, 0x1, 0xdec2}, {0x9, 0xb, 0x3, 0x5}, {0x7ff, 0x81, 0xf}]}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x80, @empty}, 0x10) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x1000000000007d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.203760906s ago: executing program 3 (id=1578): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="00a30000602607001c0012800b0001"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 0s ago: executing program 1 (id=1579): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r9, r7, &(0x7f0000000340)={0x0, 0x5a7a, 0x400, 0x2, 0x2ce}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x2, 0x30c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1887, 0x400, 0x3, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x4, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8860, 0x400, 0x0, 0x20a, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r6, '\x00', {0x4, 0xe52, 0x0, 0x0}}, &(0x7f0000000180)) kernel console output (not intermixed with test programs): .162046][T10231] RIP: 0033:0x7f1c9d69e159 [ 651.162091][T10231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.162135][T10231] RSP: 002b:00007f1c9b8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 651.162167][T10231] RAX: ffffffffffffffda RBX: 00007f1c9d925fa0 RCX: 00007f1c9d69e159 [ 651.162203][T10231] RDX: 000000000000004d RSI: 0000000000000001 RDI: 0000000000000003 [ 651.162237][T10231] RBP: 00007f1c9b8f6090 R08: 0000200000cab000 R09: 0000000000000000 [ 651.162266][T10231] R10: 0000200000caaffb R11: 0000000000000246 R12: 0000000000000001 [ 651.162299][T10231] R13: 00007f1c9d926038 R14: 00007f1c9d925fa0 R15: 00007ffd02884e98 [ 651.162402][T10231] [ 652.109837][T10241] FAULT_INJECTION: forcing a failure. [ 652.109837][T10241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.125771][T10241] CPU: 0 UID: 0 PID: 10241 Comm: syz.1.1098 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 652.125807][T10241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 652.125820][T10241] Call Trace: [ 652.125841][T10241] [ 652.125850][T10241] dump_stack_lvl+0xe8/0x150 [ 652.125890][T10241] should_fail_ex+0x46b/0x600 [ 652.125930][T10241] _copy_from_user+0x2d/0xb0 [ 652.125958][T10241] __sys_bpf+0x2e7/0xd90 [ 652.125995][T10241] ? __pfx___sys_bpf+0x10/0x10 [ 652.126027][T10241] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 652.126055][T10241] ? rt_mutex_slowunlock+0x219/0x460 [ 652.126103][T10241] ? ksys_write+0x248/0x270 [ 652.126129][T10241] ? __pfx_ksys_write+0x10/0x10 [ 652.126158][T10241] __x64_sys_bpf+0xba/0xd0 [ 652.126186][T10241] do_syscall_64+0x166/0x520 [ 652.126209][T10241] ? trace_irq_disable+0x3b/0x140 [ 652.126234][T10241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.126274][T10241] ? clear_bhb_loop+0x70/0xc0 [ 652.126303][T10241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.126325][T10241] RIP: 0033:0x7f075d35e159 [ 652.126345][T10241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.126366][T10241] RSP: 002b:00007f075b5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 652.126389][T10241] RAX: ffffffffffffffda RBX: 00007f075d5e5fa0 RCX: 00007f075d35e159 [ 652.126406][T10241] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 652.126420][T10241] RBP: 00007f075b5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 652.126435][T10241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.126448][T10241] R13: 00007f075d5e6038 R14: 00007f075d5e5fa0 R15: 00007ffed36f8ed8 [ 652.126483][T10241] [ 652.491762][T10242] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1097'. [ 653.524298][ T5845] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 653.677012][ T5845] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 653.693618][ T5845] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 653.693645][ T5845] usb 5-1: config 0 has no interface number 0 [ 653.716107][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.725521][ T5845] usb 5-1: Product: syz [ 653.727246][ T5845] usb 5-1: Manufacturer: syz [ 653.727263][ T5845] usb 5-1: SerialNumber: syz [ 654.077213][ T5845] usb 5-1: config 0 descriptor?? [ 654.497798][ T5845] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 654.519850][ T5845] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 654.532820][ T5845] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 654.532876][ T5845] usb 5-1: media controller created [ 654.603151][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 655.197067][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.214407][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.618877][ T5845] usb 5-1: USB disconnect, device number 44 [ 656.440878][ T9894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.957719][T10300] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1112'. [ 657.365820][T10307] FAULT_INJECTION: forcing a failure. [ 657.365820][T10307] name failslab, interval 1, probability 0, space 0, times 0 [ 657.380039][T10307] CPU: 0 UID: 0 PID: 10307 Comm: syz.0.1114 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 657.380063][T10307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 657.380074][T10307] Call Trace: [ 657.380081][T10307] [ 657.380090][T10307] dump_stack_lvl+0xe8/0x150 [ 657.380121][T10307] should_fail_ex+0x46b/0x600 [ 657.380144][T10307] should_failslab+0xa8/0x100 [ 657.380171][T10307] __kmalloc_noprof+0xfb/0x790 [ 657.380194][T10307] ? tomoyo_realpath_from_path+0xef/0x640 [ 657.380227][T10307] ? tomoyo_realpath_from_path+0xef/0x640 [ 657.380274][T10307] tomoyo_realpath_from_path+0xef/0x640 [ 657.380314][T10307] ? tomoyo_path_number_perm+0x219/0x5f0 [ 657.380336][T10307] tomoyo_path_number_perm+0x246/0x5f0 [ 657.380355][T10307] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 657.380372][T10307] ? __lock_acquire+0x6df/0x2e40 [ 657.380406][T10307] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 657.380425][T10307] ? hook_file_ioctl+0x1f5/0x610 [ 657.380465][T10307] ? __fget_files+0x2a/0x420 [ 657.380484][T10307] ? __fget_files+0x2a/0x420 [ 657.380499][T10307] ? __fget_files+0x3a8/0x420 [ 657.380515][T10307] ? __fget_files+0x2a/0x420 [ 657.380535][T10307] security_file_ioctl+0xc3/0x2a0 [ 657.380555][T10307] __se_sys_ioctl+0x47/0x170 [ 657.380579][T10307] do_syscall_64+0x166/0x520 [ 657.380598][T10307] ? trace_irq_disable+0x3b/0x140 [ 657.380620][T10307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.380638][T10307] ? clear_bhb_loop+0x70/0xc0 [ 657.380660][T10307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.380679][T10307] RIP: 0033:0x7f607617e159 [ 657.380697][T10307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.380714][T10307] RSP: 002b:00007f60743d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.380734][T10307] RAX: ffffffffffffffda RBX: 00007f6076405fa0 RCX: 00007f607617e159 [ 657.380748][T10307] RDX: 0000200000000100 RSI: 00000000c0585605 RDI: 0000000000000003 [ 657.380762][T10307] RBP: 00007f60743d6090 R08: 0000000000000000 R09: 0000000000000000 [ 657.380773][T10307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.380785][T10307] R13: 00007f6076406038 R14: 00007f6076405fa0 R15: 00007fff5b00e728 [ 657.380813][T10307] [ 657.382319][T10307] ERROR: Out of memory at tomoyo_realpath_from_path. [ 658.316352][T10321] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 658.362224][T10328] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5592] was attempted by " [ 659.967339][T10337] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1122'. [ 661.229397][ T9894] veth0_vlan: entered promiscuous mode [ 661.253959][ T9894] veth1_vlan: entered promiscuous mode [ 661.343890][ T9894] veth0_macvtap: entered promiscuous mode [ 661.357050][ T9894] veth1_macvtap: entered promiscuous mode [ 661.383831][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.461882][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.625344][ T3375] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.628821][ T3375] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.628919][ T3375] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.628970][ T3375] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.956222][T10347] FAULT_INJECTION: forcing a failure. [ 661.956222][T10347] name failslab, interval 1, probability 0, space 0, times 0 [ 661.956328][T10347] CPU: 0 UID: 0 PID: 10347 Comm: syz.0.1124 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 661.956363][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.956377][T10347] Call Trace: [ 661.956385][T10347] [ 661.956395][T10347] dump_stack_lvl+0xe8/0x150 [ 661.956497][T10347] should_fail_ex+0x46b/0x600 [ 661.956528][T10347] should_failslab+0xa8/0x100 [ 661.956563][T10347] __kmalloc_noprof+0xfb/0x790 [ 661.956629][T10347] ? tomoyo_realpath_from_path+0xef/0x640 [ 661.956683][T10347] ? tomoyo_realpath_from_path+0xef/0x640 [ 661.956719][T10347] tomoyo_realpath_from_path+0xef/0x640 [ 661.956825][T10347] ? tomoyo_path_number_perm+0x219/0x5f0 [ 661.956858][T10347] tomoyo_path_number_perm+0x246/0x5f0 [ 661.956885][T10347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 661.956921][T10347] ? __lock_acquire+0x6df/0x2e40 [ 661.957018][T10347] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 661.957043][T10347] ? hook_file_ioctl+0x1f5/0x610 [ 661.957136][T10347] ? __fget_files+0x2a/0x420 [ 661.957187][T10347] ? __fget_files+0x2a/0x420 [ 661.957207][T10347] ? __fget_files+0x3a8/0x420 [ 661.957228][T10347] ? __fget_files+0x2a/0x420 [ 661.957281][T10347] security_file_ioctl+0xc3/0x2a0 [ 661.957343][T10347] __se_sys_ioctl+0x47/0x170 [ 661.957375][T10347] do_syscall_64+0x166/0x520 [ 661.957401][T10347] ? trace_irq_disable+0x3b/0x140 [ 661.957475][T10347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.957517][T10347] ? clear_bhb_loop+0x70/0xc0 [ 661.957545][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.957576][T10347] RIP: 0033:0x7f607617e159 [ 661.957624][T10347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.957700][T10347] RSP: 002b:00007f60743d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.957726][T10347] RAX: ffffffffffffffda RBX: 00007f6076405fa0 RCX: 00007f607617e159 [ 661.957743][T10347] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 661.957759][T10347] RBP: 00007f60743d6090 R08: 0000000000000000 R09: 0000000000000000 [ 661.957796][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.957829][T10347] R13: 00007f6076406038 R14: 00007f6076405fa0 R15: 00007fff5b00e728 [ 661.957890][T10347] [ 661.964593][T10347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.059076][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.063639][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.713931][T10384] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 665.846217][T10384] batman_adv: batadv0: Adding interface: gretap1 [ 665.853004][T10384] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.853048][T10384] batman_adv: batadv0: Interface activated: gretap1 [ 667.327924][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.327948][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.851020][T10411] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1139'. [ 673.063084][T10425] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1145'. [ 673.355072][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1148'. [ 673.646952][T10439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.659414][T10439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.713916][T10442] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1151'. [ 677.228606][T10468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.238489][T10468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.239947][T10468] FAULT_INJECTION: forcing a failure. [ 677.239947][T10468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.239980][T10468] CPU: 0 UID: 0 PID: 10468 Comm: syz.0.1156 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 677.240005][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 677.240018][T10468] Call Trace: [ 677.240027][T10468] [ 677.240036][T10468] dump_stack_lvl+0xe8/0x150 [ 677.240073][T10468] should_fail_ex+0x46b/0x600 [ 677.240103][T10468] _copy_to_user+0x31/0xb0 [ 677.240132][T10468] simple_read_from_buffer+0xe1/0x170 [ 677.240161][T10468] proc_fail_nth_read+0x1be/0x230 [ 677.240191][T10468] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 677.240220][T10468] ? rw_verify_area+0x250/0x4d0 [ 677.240246][T10468] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 677.240272][T10468] vfs_read+0x219/0xa90 [ 677.240305][T10468] ? __pfx_vfs_read+0x10/0x10 [ 677.240331][T10468] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 677.240359][T10468] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 677.240384][T10468] ? mutex_lock_nested+0x152/0x1d0 [ 677.240418][T10468] ? fdget_pos+0x252/0x320 [ 677.240458][T10468] ksys_read+0x156/0x270 [ 677.240484][T10468] ? __pfx_ksys_read+0x10/0x10 [ 677.240520][T10468] do_syscall_64+0x166/0x520 [ 677.240550][T10468] ? trace_irq_disable+0x3b/0x140 [ 677.240577][T10468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.240618][T10468] ? clear_bhb_loop+0x70/0xc0 [ 677.240646][T10468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.240668][T10468] RIP: 0033:0x7f607613e98e [ 677.240689][T10468] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 677.240709][T10468] RSP: 002b:00007f60743d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 677.240733][T10468] RAX: ffffffffffffffda RBX: 00007f60743d66c0 RCX: 00007f607613e98e [ 677.240750][T10468] RDX: 000000000000000f RSI: 00007f60743d60a0 RDI: 0000000000000004 [ 677.240764][T10468] RBP: 00007f60743d6090 R08: 0000000000000000 R09: 0000000000000000 [ 677.240779][T10468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.240793][T10468] R13: 00007f6076406038 R14: 00007f6076405fa0 R15: 00007fff5b00e728 [ 677.240830][T10468] [ 677.593653][T10471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.603459][T10471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.675168][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 677.675215][T10470] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1154'. [ 677.675239][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 677.675255][T10470] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1154'. [ 677.675330][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 678.779971][T10488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.794905][T10488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.964348][ T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 679.094226][ T31] usb 2-1: device descriptor read/64, error -71 [ 679.137097][T10488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.147743][T10488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.190239][T10499] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1164'. [ 679.346035][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 679.484355][ T31] usb 2-1: device descriptor read/64, error -71 [ 679.608449][ T31] usb usb2-port1: attempt power cycle [ 679.944268][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 679.968223][ T31] usb 2-1: device descriptor read/8, error -71 [ 680.078051][T10521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.078664][T10521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.234514][ T31] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 680.257316][ T31] usb 2-1: device descriptor read/8, error -71 [ 680.366214][ T31] usb usb2-port1: unable to enumerate USB device [ 681.274001][T10554] fuse: Unknown parameter 'filter' [ 681.522345][T10564] FAULT_INJECTION: forcing a failure. [ 681.522345][T10564] name failslab, interval 1, probability 0, space 0, times 0 [ 681.538907][T10564] CPU: 0 UID: 0 PID: 10564 Comm: syz.5.1171 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 681.538934][T10564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 681.538946][T10564] Call Trace: [ 681.538954][T10564] [ 681.538980][T10564] dump_stack_lvl+0xe8/0x150 [ 681.539016][T10564] should_fail_ex+0x46b/0x600 [ 681.539050][T10564] should_failslab+0xa8/0x100 [ 681.539084][T10564] __kmalloc_noprof+0xfb/0x790 [ 681.539111][T10564] ? tomoyo_realpath_from_path+0xef/0x640 [ 681.539137][T10564] ? tomoyo_realpath_from_path+0xef/0x640 [ 681.539170][T10564] tomoyo_realpath_from_path+0xef/0x640 [ 681.539206][T10564] ? tomoyo_path_number_perm+0x219/0x5f0 [ 681.539228][T10564] tomoyo_path_number_perm+0x246/0x5f0 [ 681.539253][T10564] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 681.539274][T10564] ? __lock_acquire+0x6df/0x2e40 [ 681.539314][T10564] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 681.539336][T10564] ? hook_file_ioctl+0x1f5/0x610 [ 681.539385][T10564] ? __fget_files+0x2a/0x420 [ 681.539408][T10564] ? __fget_files+0x2a/0x420 [ 681.539427][T10564] ? __fget_files+0x3a8/0x420 [ 681.539446][T10564] ? __fget_files+0x2a/0x420 [ 681.539471][T10564] security_file_ioctl+0xc3/0x2a0 [ 681.539513][T10564] __se_sys_ioctl+0x47/0x170 [ 681.539545][T10564] do_syscall_64+0x166/0x520 [ 681.539571][T10564] ? trace_irq_disable+0x3b/0x140 [ 681.539598][T10564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.539621][T10564] ? clear_bhb_loop+0x70/0xc0 [ 681.539649][T10564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.539671][T10564] RIP: 0033:0x7ff23041e159 [ 681.539692][T10564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.539712][T10564] RSP: 002b:00007ff22e655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.539737][T10564] RAX: ffffffffffffffda RBX: 00007ff2306a6090 RCX: 00007ff23041e159 [ 681.539754][T10564] RDX: 0000000000000000 RSI: 000000000000af02 RDI: 0000000000000005 [ 681.539768][T10564] RBP: 00007ff22e655090 R08: 0000000000000000 R09: 0000000000000000 [ 681.539782][T10564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.539796][T10564] R13: 00007ff2306a6128 R14: 00007ff2306a6090 R15: 00007ffc70dc29b8 [ 681.539831][T10564] [ 681.541939][T10564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 681.956637][T10570] random: crng reseeded on system resumption [ 682.196917][T10575] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1174'. [ 682.364335][ T31] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 682.524417][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 682.536775][ T31] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 682.545645][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.545776][ T31] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 682.546033][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.596802][ T5710] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 682.608592][ T31] usb 2-1: config 0 descriptor?? [ 682.754223][ T5710] usb 6-1: Using ep0 maxpacket: 16 [ 682.759720][ T5710] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 682.763159][ T5710] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 682.763193][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 682.797878][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.802252][ T5710] usb 6-1: Product: syz [ 682.802272][ T5710] usb 6-1: Manufacturer: syz [ 682.802287][ T5710] usb 6-1: SerialNumber: syz [ 682.830009][ T5710] usb 6-1: config 0 descriptor?? [ 682.857208][ T5710] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 682.866598][ T5710] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 682.982161][T10570] macvlan3: entered promiscuous mode [ 683.216705][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.229098][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.279712][T10572] macvlan3: entered promiscuous mode [ 683.492606][ T5710] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 683.584267][ T5710] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 683.767386][ T5723] usb 2-1: USB disconnect, device number 37 [ 683.827026][T10594] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1180'. [ 684.197965][ T5710] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 684.199631][ T5710] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 684.201316][ T5710] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 684.207948][ T5710] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 684.551349][T10601] FAULT_INJECTION: forcing a failure. [ 684.551349][T10601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.551888][T10601] CPU: 0 UID: 0 PID: 10601 Comm: syz.4.1183 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 684.551943][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.551956][T10601] Call Trace: [ 684.551965][T10601] [ 684.551981][T10601] dump_stack_lvl+0xe8/0x150 [ 684.552074][T10601] should_fail_ex+0x46b/0x600 [ 684.552110][T10601] _copy_from_user+0x2d/0xb0 [ 684.552143][T10601] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 684.552214][T10601] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 684.552266][T10601] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 684.552322][T10601] ? __pfx_ksys_write+0x10/0x10 [ 684.552423][T10601] do_syscall_64+0x166/0x520 [ 684.552447][T10601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.552469][T10601] ? clear_bhb_loop+0x70/0xc0 [ 684.552534][T10601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.552585][T10601] RIP: 0033:0x7f1c9d69e159 [ 684.552604][T10601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.552623][T10601] RSP: 002b:00007f1c9b8f5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 684.552665][T10601] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f1c9d69e159 [ 684.552703][T10601] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000e26 [ 684.552741][T10601] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 684.552755][T10601] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 684.552770][T10601] R13: 0000200000000890 R14: 00007f1c9b8f5fd8 R15: 0000000000000000 [ 684.552833][T10601] [ 684.828253][ T5710] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 685.039604][T10580] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 685.040781][T10580] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 685.447465][ T5710] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 685.447534][ T5710] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 685.447551][ T5710] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 685.447565][ T5710] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 685.447581][ T5710] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 685.506770][ T5710] usb 6-1: USB disconnect, device number 2 [ 685.942208][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.383964][T10627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.398118][T10627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.614508][T10627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.618015][T10627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.676312][T10630] capability: warning: `syz.4.1190' uses deprecated v2 capabilities in a way that may be insecure [ 686.702313][T10636] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1191'. [ 687.169701][T10643] FAULT_INJECTION: forcing a failure. [ 687.169701][T10643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.183232][T10643] CPU: 1 UID: 0 PID: 10643 Comm: syz.1.1192 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 687.183259][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.183272][T10643] Call Trace: [ 687.183281][T10643] [ 687.183290][T10643] dump_stack_lvl+0xe8/0x150 [ 687.183327][T10643] should_fail_ex+0x46b/0x600 [ 687.183356][T10643] strncpy_from_user+0x36/0x2c0 [ 687.183380][T10643] __se_sys_add_key+0xdb/0x420 [ 687.183415][T10643] ? __pfx___se_sys_add_key+0x10/0x10 [ 687.183455][T10643] ? __x64_sys_add_key+0x20/0xc0 [ 687.183489][T10643] do_syscall_64+0x166/0x520 [ 687.183511][T10643] ? trace_irq_disable+0x3b/0x140 [ 687.183536][T10643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.183557][T10643] ? clear_bhb_loop+0x70/0xc0 [ 687.183583][T10643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.183604][T10643] RIP: 0033:0x7f075d35e159 [ 687.183623][T10643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.183647][T10643] RSP: 002b:00007f075b5b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 687.183670][T10643] RAX: ffffffffffffffda RBX: 00007f075d5e5fa0 RCX: 00007f075d35e159 [ 687.183685][T10643] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 687.183700][T10643] RBP: 00007f075b5b6090 R08: fffffffffffffffe R09: 0000000000000000 [ 687.183715][T10643] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 687.183728][T10643] R13: 00007f075d5e6038 R14: 00007f075d5e5fa0 R15: 00007ffed36f8ed8 [ 687.183760][T10643] [ 687.737232][ T31] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 688.025061][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 688.070000][ T31] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 688.180288][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 688.773824][ T31] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 688.782714][ T31] usb 2-1: Product: syz [ 688.783676][ T31] usb 2-1: Manufacturer: syz [ 688.783729][ T31] usb 2-1: SerialNumber: syz [ 689.296161][ T31] usb 2-1: config 0 descriptor?? [ 689.356861][ T31] hub 2-1:0.0: bad descriptor, ignoring hub [ 689.369979][ T31] hub 2-1:0.0: probe with driver hub failed with error -5 [ 689.604253][ T36] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 689.805874][ T36] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 689.848563][ T36] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 689.848655][ T36] usb 6-1: config 0 has no interface number 0 [ 689.865682][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.865710][ T36] usb 6-1: Product: syz [ 689.867028][ T36] usb 6-1: Manufacturer: syz [ 689.867067][ T36] usb 6-1: SerialNumber: syz [ 689.902352][ T36] usb 6-1: config 0 descriptor?? [ 690.131224][ T36] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 690.581637][ T36] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 690.597088][ T36] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 690.606165][ T36] usb 6-1: media controller created [ 690.767737][ T6296] usb 2-1: USB disconnect, device number 38 [ 690.942497][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 691.007282][T10651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.048257][T10651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.260398][ T36] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 691.909052][T10674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.913561][T10674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.605990][T10676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1204'. [ 692.735102][T10676] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 692.756744][ T36] usb 6-1: USB disconnect, device number 3 [ 692.770921][T10676] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 692.976133][T10683] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1207'. [ 693.514930][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 693.537308][ T5710] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 693.676528][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 693.701142][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 693.719610][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 693.727844][ T5710] usb 2-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=fe.96 [ 693.730734][ T5710] usb 2-1: config 243 has an invalid interface number: 8 but max is 0 [ 693.730895][ T5710] usb 2-1: config 243 has no interface number 0 [ 693.731064][ T5710] usb 2-1: config 243 interface 8 has no altsetting 0 [ 693.855312][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.855621][ T5710] usb 2-1: Product: syz [ 693.855640][ T5710] usb 2-1: Manufacturer: syz [ 693.855657][ T5710] usb 2-1: SerialNumber: syz [ 693.936068][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 693.952418][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 693.954169][ T10] usb 5-1: config 179 has no interface number 0 [ 693.954218][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 693.954246][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 693.972279][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 693.972313][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 693.972342][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 693.985296][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.121046][T10692] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 695.190156][ T5710] cypress_m8 2-1:243.8: HID->COM RS232 Adapter converter detected [ 696.647544][ T10] usb 5-1: USB disconnect, device number 45 [ 696.647624][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 696.647708][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 696.822585][ T5710] cyphidcom ttyUSB0: required endpoint is missing [ 696.823007][T10705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.823629][T10705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.860038][ T5710] usb 2-1: USB disconnect, device number 39 [ 696.895919][ T5710] cypress_m8 2-1:243.8: device disconnected [ 697.031635][T10708] /dev/nullb0: Can't lookup blockdev [ 697.108815][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input13 [ 697.649750][T10717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1220'. [ 697.673462][T10719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1218'. [ 697.716654][T10719] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 697.769989][T10719] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 697.835264][ T6296] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 697.960269][T10723] sctp: [Deprecated]: syz.4.1221 (pid 10723) Use of int in maxseg socket option. [ 697.960269][T10723] Use struct sctp_assoc_value instead [ 698.013047][T10726] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1222'. [ 698.031422][ T6296] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 698.049985][ T6296] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 698.050165][ T6296] usb 6-1: config 0 has no interface number 0 [ 698.099535][ T6296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.099706][ T6296] usb 6-1: Product: syz [ 698.099910][ T6296] usb 6-1: Manufacturer: syz [ 698.099944][ T6296] usb 6-1: SerialNumber: syz [ 698.291763][ T6296] usb 6-1: config 0 descriptor?? [ 698.508678][ T6296] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 698.639693][T10742] 9p: Bad value for 'wfdno' [ 699.807752][T10716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.854205][T10716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.543356][ T6296] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 700.546845][ T6296] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 700.546909][ T6296] usb 6-1: media controller created [ 700.586914][ T6296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 700.685809][ T6296] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 702.176285][ T6296] usb 6-1: USB disconnect, device number 4 [ 702.707602][T10758] bridge6: entered promiscuous mode [ 703.139023][T10772] binder: 10757:10772 ioctl 400454ca 200000000040 returned -22 [ 703.151526][T10758] input: syz1 as /devices/virtual/input/input14 [ 703.656394][T10776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1232'. [ 703.699017][T10777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1233'. [ 703.951386][T10781] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1235'. [ 704.134221][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 704.284450][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 704.290676][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 704.292559][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 704.325437][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 704.328772][ T10] usb 5-1: Product: syz [ 704.328791][ T10] usb 5-1: Manufacturer: syz [ 704.328807][ T10] usb 5-1: SerialNumber: syz [ 704.353397][ T10] usb 5-1: config 0 descriptor?? [ 704.376811][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 704.382944][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 704.459114][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 704.635071][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 704.647721][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 704.649293][ T9] usb 2-1: config 0 has no interface number 0 [ 704.668494][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.675358][ T9] usb 2-1: Product: syz [ 704.675378][ T9] usb 2-1: Manufacturer: syz [ 704.675395][ T9] usb 2-1: SerialNumber: syz [ 704.702473][ T9] usb 2-1: config 0 descriptor?? [ 704.961418][ T9] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 704.991021][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 705.002310][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 705.002367][ T9] usb 2-1: media controller created [ 705.042802][T10796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.061314][T10796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.114526][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 705.240545][T10796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.254838][T10796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.294902][ T10] usb 5-1: USB disconnect, device number 46 [ 705.352162][T10799] fuse: fd is not a fuse device [ 705.409355][T10787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.421481][T10787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.030635][ T37] kauditd_printk_skb: 77 callbacks suppressed [ 706.030731][ T37] audit: type=1800 audit(1788325336.180:130): pid=10807 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1244" name="nl80211" dev="sda1" ino=2054 res=0 errno=0 [ 706.157278][T10812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1246'. [ 706.173386][T10812] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 706.177711][T10812] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 706.279555][T10814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1247'. [ 706.525628][T10818] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1249'. [ 706.935400][T10828] jffs2: notice: (10828) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 706.973172][T10829] overlayfs: failed to clone upperpath [ 711.604597][T10850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1258'. [ 711.619269][T10850] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 711.635637][T10850] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 714.022947][T10867] FAULT_INJECTION: forcing a failure. [ 714.022947][T10867] name failslab, interval 1, probability 0, space 0, times 0 [ 714.047941][T10867] CPU: 0 UID: 0 PID: 10867 Comm: syz.5.1263 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 714.047970][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 714.047982][T10867] Call Trace: [ 714.047991][T10867] [ 714.048000][T10867] dump_stack_lvl+0xe8/0x150 [ 714.048038][T10867] should_fail_ex+0x46b/0x600 [ 714.048066][T10867] should_failslab+0xa8/0x100 [ 714.048100][T10867] kmem_cache_alloc_node_noprof+0xac/0x660 [ 714.048126][T10867] ? __alloc_skb+0x1db/0x7a0 [ 714.048221][T10867] ? __alloc_skb+0x1db/0x7a0 [ 714.048248][T10867] __alloc_skb+0x1db/0x7a0 [ 714.048273][T10867] kcm_sendmsg+0x25cc/0x2ad0 [ 714.048295][T10867] ? is_bpf_text_address+0x292/0x2b0 [ 714.048325][T10867] ? is_bpf_text_address+0x26/0x2b0 [ 714.048356][T10867] ? kernel_text_address+0xa5/0xe0 [ 714.048379][T10867] ? __kernel_text_address+0xd/0x30 [ 714.048405][T10867] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 714.048432][T10867] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 714.048458][T10867] ? _parse_integer_limit+0x18f/0x1e0 [ 714.048506][T10867] ? __pfx_kcm_sendmsg+0x10/0x10 [ 714.048525][T10867] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 714.048553][T10867] ? __pfx_kcm_sendmsg+0x10/0x10 [ 714.048570][T10867] sock_sendmsg_nosec+0x13a/0x180 [ 714.048590][T10867] sock_write_iter+0x2e4/0x3f0 [ 714.048630][T10867] ? __pfx_sock_write_iter+0x10/0x10 [ 714.048663][T10867] ? bpf_lsm_file_permission+0x9/0x20 [ 714.048680][T10867] ? security_file_permission+0x75/0x260 [ 714.048707][T10867] vfs_write+0x61e/0xbb0 [ 714.048735][T10867] ? __pfx_vfs_write+0x10/0x10 [ 714.048767][T10867] ? __fget_files+0x2a/0x420 [ 714.048794][T10867] ksys_write+0x156/0x270 [ 714.048814][T10867] ? __pfx_ksys_write+0x10/0x10 [ 714.048855][T10867] do_syscall_64+0x166/0x520 [ 714.048873][T10867] ? trace_irq_disable+0x3b/0x140 [ 714.048895][T10867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.048913][T10867] ? clear_bhb_loop+0x70/0xc0 [ 714.048934][T10867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.048950][T10867] RIP: 0033:0x7ff23041e159 [ 714.048967][T10867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.048982][T10867] RSP: 002b:00007ff22e676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 714.049001][T10867] RAX: ffffffffffffffda RBX: 00007ff2306a5fa0 RCX: 00007ff23041e159 [ 714.049014][T10867] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000003 [ 714.049025][T10867] RBP: 00007ff22e676090 R08: 0000000000000000 R09: 0000000000000000 [ 714.049035][T10867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.049046][T10867] R13: 00007ff2306a6038 R14: 00007ff2306a5fa0 R15: 00007ffc70dc29b8 [ 714.049075][T10867] [ 714.140706][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 714.140767][T10872] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1264'. [ 714.140847][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 714.140881][T10872] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1264'. [ 714.141400][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 715.466629][T10876] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1265'. [ 720.792116][T10907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1273'. [ 720.798695][T10902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1272'. [ 721.020413][T10908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.024293][ T5723] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 721.139668][T10908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.196633][ T5723] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 721.209430][ T5723] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 721.209464][ T5723] usb 6-1: config 0 has no interface number 0 [ 721.238347][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.246459][ T5723] usb 6-1: Product: syz [ 721.246526][ T5723] usb 6-1: Manufacturer: syz [ 721.246582][ T5723] usb 6-1: SerialNumber: syz [ 721.550434][ T5723] usb 6-1: config 0 descriptor?? [ 722.036199][ T5723] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 722.548003][ T5723] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 722.584121][ T5723] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 722.598227][ T5723] usb 6-1: media controller created [ 722.684498][T10923] FAULT_INJECTION: forcing a failure. [ 722.684498][T10923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.699858][T10923] CPU: 0 UID: 0 PID: 10923 Comm: syz.4.1277 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 722.699888][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.699903][T10923] Call Trace: [ 722.699911][T10923] [ 722.699921][T10923] dump_stack_lvl+0xe8/0x150 [ 722.699965][T10923] should_fail_ex+0x46b/0x600 [ 722.699997][T10923] _copy_to_user+0x31/0xb0 [ 722.700026][T10923] simple_read_from_buffer+0xe1/0x170 [ 722.700055][T10923] proc_fail_nth_read+0x1be/0x230 [ 722.700086][T10923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 722.700116][T10923] ? rw_verify_area+0x250/0x4d0 [ 722.700142][T10923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 722.700168][T10923] vfs_read+0x219/0xa90 [ 722.700200][T10923] ? __pfx_vfs_read+0x10/0x10 [ 722.700227][T10923] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 722.700255][T10923] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 722.700279][T10923] ? mutex_lock_nested+0x152/0x1d0 [ 722.700309][T10923] ? fdget_pos+0x252/0x320 [ 722.700339][T10923] ksys_read+0x156/0x270 [ 722.700367][T10923] ? __pfx_ksys_read+0x10/0x10 [ 722.700404][T10923] do_syscall_64+0x166/0x520 [ 722.700428][T10923] ? trace_irq_disable+0x3b/0x140 [ 722.700455][T10923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.700478][T10923] ? clear_bhb_loop+0x70/0xc0 [ 722.700505][T10923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.700528][T10923] RIP: 0033:0x7f1c9d65e98e [ 722.700548][T10923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 722.700568][T10923] RSP: 002b:00007f1c9b892fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 722.700591][T10923] RAX: ffffffffffffffda RBX: 00007f1c9b8936c0 RCX: 00007f1c9d65e98e [ 722.700608][T10923] RDX: 000000000000000f RSI: 00007f1c9b8930a0 RDI: 0000000000000004 [ 722.700623][T10923] RBP: 00007f1c9b893090 R08: 0000000000000000 R09: 0000000000000000 [ 722.700637][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.700650][T10923] R13: 00007f1c9d926308 R14: 00007f1c9d926270 R15: 00007ffd02884e98 [ 722.700686][T10923] [ 723.576300][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 723.576325][T10919] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1278'. [ 723.576338][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 723.576347][T10919] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1278'. [ 723.576397][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 723.656019][ T5723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 723.847926][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.873461][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.151238][ T5723] usb 6-1: USB disconnect, device number 5 [ 724.531807][T10934] FAULT_INJECTION: forcing a failure. [ 724.531807][T10934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.550483][T10934] CPU: 0 UID: 0 PID: 10934 Comm: syz.0.1281 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 724.550511][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.550524][T10934] Call Trace: [ 724.550531][T10934] [ 724.550538][T10934] dump_stack_lvl+0xe8/0x150 [ 724.550574][T10934] should_fail_ex+0x46b/0x600 [ 724.550603][T10934] _copy_from_user+0x2d/0xb0 [ 724.550628][T10934] ___sys_sendmsg+0x1c6/0x360 [ 724.550666][T10934] ? __lock_acquire+0x6df/0x2e40 [ 724.550696][T10934] ? __pfx____sys_sendmsg+0x10/0x10 [ 724.550758][T10934] ? __fget_files+0x2a/0x420 [ 724.550778][T10934] ? __fget_files+0x3a8/0x420 [ 724.550807][T10934] __x64_sys_sendmsg+0x1b7/0x290 [ 724.550837][T10934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 724.550885][T10934] do_syscall_64+0x166/0x520 [ 724.550909][T10934] ? trace_irq_disable+0x3b/0x140 [ 724.550935][T10934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.550955][T10934] ? clear_bhb_loop+0x70/0xc0 [ 724.550982][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.551000][T10934] RIP: 0033:0x7f607617e159 [ 724.551017][T10934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.551035][T10934] RSP: 002b:00007f60743d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.551069][T10934] RAX: ffffffffffffffda RBX: 00007f6076405fa0 RCX: 00007f607617e159 [ 724.551084][T10934] RDX: 0000000000048000 RSI: 0000200000000040 RDI: 0000000000000003 [ 724.551097][T10934] RBP: 00007f60743d6090 R08: 0000000000000000 R09: 0000000000000000 [ 724.551109][T10934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.551121][T10934] R13: 00007f6076406038 R14: 00007f6076405fa0 R15: 00007fff5b00e728 [ 724.551150][T10934] [ 725.054203][ T5723] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 725.217165][ T5723] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 725.227908][ T5723] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 725.227936][ T5723] usb 6-1: config 0 has no interface number 0 [ 725.232014][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.232040][ T5723] usb 6-1: Product: syz [ 725.232056][ T5723] usb 6-1: Manufacturer: syz [ 725.232089][ T5723] usb 6-1: SerialNumber: syz [ 725.278708][ T5723] usb 6-1: config 0 descriptor?? [ 725.500847][ T5723] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 725.516265][ T5723] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 725.527635][ T5723] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 725.527710][ T5723] usb 6-1: media controller created [ 725.557637][ T5723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 725.727747][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 725.907346][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 725.918511][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 725.918609][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.962888][ T10] usb 5-1: config 0 descriptor?? [ 726.123076][T10937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.136881][T10937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.369448][ T5723] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 726.701832][ T10] hid (null): unknown global tag 0xfd [ 727.137633][ T10] wacom 0003:056A:0084.0007: unexpected long global item [ 727.151237][ T10] wacom 0003:056A:0084.0007: parse failed [ 727.151348][ T10] wacom 0003:056A:0084.0007: probe with driver wacom failed with error -22 [ 727.213134][ T10] usb 5-1: USB disconnect, device number 47 [ 727.353359][ T5723] usb 6-1: USB disconnect, device number 6 [ 727.788985][T10975] netlink: 'syz.4.1293': attribute type 11 has an invalid length. [ 728.244961][T10979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.247588][T10979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.291609][T10980] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1294'. [ 728.374737][T10979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.385213][T10979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.012647][T10991] FAULT_INJECTION: forcing a failure. [ 729.012647][T10991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.025892][T10991] CPU: 0 UID: 0 PID: 10991 Comm: syz.0.1300 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 729.025933][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 729.025947][T10991] Call Trace: [ 729.025956][T10991] [ 729.025965][T10991] dump_stack_lvl+0xe8/0x150 [ 729.026004][T10991] should_fail_ex+0x46b/0x600 [ 729.026043][T10991] _copy_from_user+0x2d/0xb0 [ 729.026070][T10991] ___sys_sendmsg+0x1c6/0x360 [ 729.026098][T10991] ? __lock_acquire+0x6df/0x2e40 [ 729.026129][T10991] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.026190][T10991] ? __fget_files+0x2a/0x420 [ 729.026210][T10991] ? __fget_files+0x3a8/0x420 [ 729.026240][T10991] __x64_sys_sendmsg+0x1b7/0x290 [ 729.026272][T10991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.026322][T10991] do_syscall_64+0x166/0x520 [ 729.026343][T10991] ? trace_irq_disable+0x3b/0x140 [ 729.026369][T10991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.026390][T10991] ? clear_bhb_loop+0x70/0xc0 [ 729.026416][T10991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.026437][T10991] RIP: 0033:0x7f607617e159 [ 729.026456][T10991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.026473][T10991] RSP: 002b:00007f60743d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.026495][T10991] RAX: ffffffffffffffda RBX: 00007f6076405fa0 RCX: 00007f607617e159 [ 729.026510][T10991] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 729.026523][T10991] RBP: 00007f60743d6090 R08: 0000000000000000 R09: 0000000000000000 [ 729.026536][T10991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.026548][T10991] R13: 00007f6076406038 R14: 00007f6076405fa0 R15: 00007fff5b00e728 [ 729.026580][T10991] [ 730.489725][T11007] FAULT_INJECTION: forcing a failure. [ 730.489725][T11007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.490912][T11007] CPU: 0 UID: 0 PID: 11007 Comm: syz.4.1304 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 730.490940][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.490953][T11007] Call Trace: [ 730.490962][T11007] [ 730.490972][T11007] dump_stack_lvl+0xe8/0x150 [ 730.491077][T11007] should_fail_ex+0x46b/0x600 [ 730.491106][T11007] _copy_from_user+0x2d/0xb0 [ 730.491131][T11007] copy_from_sockptr+0x45/0x50 [ 730.491191][T11007] rxrpc_setsockopt+0x47c/0x970 [ 730.491252][T11007] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 730.491287][T11007] ? __fget_files+0x2a/0x420 [ 730.491306][T11007] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 730.491350][T11007] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 730.491412][T11007] do_sock_setsockopt+0x17c/0x1b0 [ 730.491445][T11007] __x64_sys_setsockopt+0x143/0x1b0 [ 730.491522][T11007] do_syscall_64+0x166/0x520 [ 730.491568][T11007] ? trace_irq_disable+0x3b/0x140 [ 730.491593][T11007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.491634][T11007] ? clear_bhb_loop+0x70/0xc0 [ 730.491724][T11007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.491745][T11007] RIP: 0033:0x7f1c9d69e159 [ 730.491765][T11007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.491788][T11007] RSP: 002b:00007f1c9b8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 730.491848][T11007] RAX: ffffffffffffffda RBX: 00007f1c9d925fa0 RCX: 00007f1c9d69e159 [ 730.491880][T11007] RDX: 0000000000000004 RSI: 0000000000000110 RDI: 0000000000000003 [ 730.491898][T11007] RBP: 00007f1c9b8f6090 R08: 0000000000000004 R09: 0000000000000000 [ 730.491912][T11007] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 730.491925][T11007] R13: 00007f1c9d926038 R14: 00007f1c9d925fa0 R15: 00007ffd02884e98 [ 730.491982][T11007] [ 730.544631][ T5723] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 730.714415][ T5723] usb 6-1: Using ep0 maxpacket: 8 [ 730.720874][ T5723] usb 6-1: unable to get BOS descriptor or descriptor too short [ 730.720925][ T5723] usb 6-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=fe.96 [ 730.722734][ T5723] usb 6-1: config 243 has an invalid interface number: 8 but max is 0 [ 730.722760][ T5723] usb 6-1: config 243 has no interface number 0 [ 730.722809][ T5723] usb 6-1: config 243 interface 8 has no altsetting 0 [ 730.831750][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.831826][ T5723] usb 6-1: Product: syz [ 730.831844][ T5723] usb 6-1: Manufacturer: syz [ 730.832372][ T5723] usb 6-1: SerialNumber: syz [ 731.322735][ T5723] cypress_m8 6-1:243.8: HID->COM RS232 Adapter converter detected [ 731.349855][ T5723] cyphidcom ttyUSB0: required endpoint is missing [ 731.373177][ T5723] usb 6-1: USB disconnect, device number 7 [ 731.417862][T11015] fuse: fd is not a fuse device [ 731.418574][ T5723] cypress_m8 6-1:243.8: device disconnected [ 732.384268][ T5723] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 732.427158][T11033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.447239][T11033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.190681][T11037] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1314'. [ 733.247790][T11033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.261556][T11033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.466865][ T5723] usb 5-1: Using ep0 maxpacket: 8 [ 733.471406][ T5723] usb 5-1: unable to get BOS descriptor or descriptor too short [ 733.471468][ T5723] usb 5-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=fe.96 [ 733.473480][ T5723] usb 5-1: config 243 has an invalid interface number: 8 but max is 0 [ 733.473564][ T5723] usb 5-1: config 243 has no interface number 0 [ 733.473617][ T5723] usb 5-1: config 243 interface 8 has no altsetting 0 [ 733.491574][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.491663][ T5723] usb 5-1: Product: syz [ 733.491688][ T5723] usb 5-1: Manufacturer: syz [ 733.491705][ T5723] usb 5-1: SerialNumber: syz [ 733.803849][ T5723] cypress_m8 5-1:243.8: HID->COM RS232 Adapter converter detected [ 733.815432][ T5723] cyphidcom ttyUSB0: required endpoint is missing [ 733.855746][ T5723] usb 5-1: USB disconnect, device number 48 [ 733.890300][ T5723] cypress_m8 5-1:243.8: device disconnected [ 734.775465][T11063] FAULT_INJECTION: forcing a failure. [ 734.775465][T11063] name failslab, interval 1, probability 0, space 0, times 0 [ 734.775550][T11063] CPU: 0 UID: 0 PID: 11063 Comm: syz.5.1321 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 734.775578][T11063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 734.775593][T11063] Call Trace: [ 734.775602][T11063] [ 734.775612][T11063] dump_stack_lvl+0xe8/0x150 [ 734.775651][T11063] should_fail_ex+0x46b/0x600 [ 734.775681][T11063] should_failslab+0xa8/0x100 [ 734.775712][T11063] ? do_getname+0x2e/0x250 [ 734.775743][T11063] kmem_cache_alloc_noprof+0x9e/0x690 [ 734.775779][T11063] ? do_getname+0x2e/0x250 [ 734.775812][T11063] ? rt_mutex_slowunlock+0x219/0x460 [ 734.775850][T11063] do_getname+0x2e/0x250 [ 734.775879][T11063] ? getname_flags+0x11/0x20 [ 734.775913][T11063] do_sys_openat2+0xcc/0x200 [ 734.775950][T11063] ? __pfx_do_sys_openat2+0x10/0x10 [ 734.775986][T11063] ? ksys_write+0x248/0x270 [ 734.776023][T11063] ? __pfx_ksys_write+0x10/0x10 [ 734.776051][T11063] __x64_sys_openat+0x138/0x170 [ 734.776087][T11063] do_syscall_64+0x166/0x520 [ 734.776110][T11063] ? trace_irq_disable+0x3b/0x140 [ 734.776138][T11063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.776161][T11063] ? clear_bhb_loop+0x70/0xc0 [ 734.776188][T11063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.776210][T11063] RIP: 0033:0x7ff2303de98e [ 734.776229][T11063] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 734.776247][T11063] RSP: 002b:00007ff22e654b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 734.776271][T11063] RAX: ffffffffffffffda RBX: 00007ff22e6556c0 RCX: 00007ff2303de98e [ 734.776287][T11063] RDX: 000000000014b082 RSI: 00007ff22e654c00 RDI: ffffffffffffff9c [ 734.776304][T11063] RBP: 00007ff22e654c00 R08: 0000000000000000 R09: 0000000000000000 [ 734.776319][T11063] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 734.776334][T11063] R13: 00007ff2306a6128 R14: 00007ff2306a6090 R15: 00007ffc70dc29b8 [ 734.776365][T11063] [ 735.744428][ T5723] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 735.906851][ T5723] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 735.909010][ T5723] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 735.909039][ T5723] usb 5-1: config 0 has no interface number 0 [ 735.912975][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.913004][ T5723] usb 5-1: Product: syz [ 735.913022][ T5723] usb 5-1: Manufacturer: syz [ 735.913038][ T5723] usb 5-1: SerialNumber: syz [ 735.926021][ T5723] usb 5-1: config 0 descriptor?? [ 736.799187][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 736.954381][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 736.961106][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 736.969532][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.974727][ T5723] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 736.994990][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 737.017991][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.019056][ T10] usb 6-1: Product: syz [ 737.019085][ T10] usb 6-1: Manufacturer: syz [ 737.019100][ T10] usb 6-1: SerialNumber: syz [ 737.093568][ T10] usb 6-1: 0:2 : does not exist [ 737.389244][ T10] usb 6-1: USB disconnect, device number 8 [ 737.425749][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.437385][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.586799][T11088] FAULT_INJECTION: forcing a failure. [ 737.586799][T11088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.600205][T11088] CPU: 0 UID: 0 PID: 11088 Comm: syz.0.1327 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 737.600236][T11088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 737.600249][T11088] Call Trace: [ 737.600258][T11088] [ 737.600268][T11088] dump_stack_lvl+0xe8/0x150 [ 737.600307][T11088] should_fail_ex+0x46b/0x600 [ 737.600339][T11088] _copy_from_user+0x2d/0xb0 [ 737.600368][T11088] __sys_bpf+0x2e7/0xd90 [ 737.600408][T11088] ? __pfx___sys_bpf+0x10/0x10 [ 737.600442][T11088] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 737.600473][T11088] ? rt_mutex_slowunlock+0x219/0x460 [ 737.600534][T11088] ? ksys_write+0x248/0x270 [ 737.600564][T11088] ? __pfx_ksys_write+0x10/0x10 [ 737.600595][T11088] __x64_sys_bpf+0xba/0xd0 [ 737.600628][T11088] do_syscall_64+0x166/0x520 [ 737.600652][T11088] ? trace_irq_disable+0x3b/0x140 [ 737.600681][T11088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.600706][T11088] ? clear_bhb_loop+0x70/0xc0 [ 737.600734][T11088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.600759][T11088] RIP: 0033:0x7f607617e159 [ 737.600780][T11088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.600800][T11088] RSP: 002b:00007f60743d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 737.600825][T11088] RAX: ffffffffffffffda RBX: 00007f6076405fa0 RCX: 00007f607617e159 [ 737.600842][T11088] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000015 [ 737.600857][T11088] RBP: 00007f60743d6090 R08: 0000000000000000 R09: 0000000000000000 [ 737.600871][T11088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.600885][T11088] R13: 00007f6076406038 R14: 00007f6076405fa0 R15: 00007fff5b00e728 [ 737.600921][T11088] [ 737.947991][T11096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.953511][T11096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.283863][T11099] bridge4: entered promiscuous mode [ 738.289769][T11099] bridge4: entered allmulticast mode [ 738.317105][T11099] team0: Port device bridge4 added [ 738.402574][T11101] bridge0: port 3(team0) entered blocking state [ 738.411131][T11101] bridge0: port 3(team0) entered disabled state [ 738.437551][T11101] team0: entered allmulticast mode [ 738.437762][T11101] team_slave_0: entered allmulticast mode [ 738.456112][T11101] team_slave_1: entered allmulticast mode [ 738.573715][T11101] team0: entered promiscuous mode [ 738.592009][T11101] team_slave_0: entered promiscuous mode [ 738.592473][T11101] team_slave_1: entered promiscuous mode [ 738.633460][T11103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.646461][T11103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.706800][T11101] bridge0: port 3(team0) entered blocking state [ 738.711516][T11101] bridge0: port 3(team0) entered forwarding state [ 738.840133][T11107] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1334'. [ 738.966560][ T5319] usb 5-1: USB disconnect, device number 49 [ 739.214759][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 740.387417][T11117] ntfs3(nullb0): Primary boot signature is not NTFS. [ 740.497756][T11117] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 742.698290][T11136] FAULT_INJECTION: forcing a failure. [ 742.698290][T11136] name failslab, interval 1, probability 0, space 0, times 0 [ 742.719579][T11136] CPU: 0 UID: 0 PID: 11136 Comm: syz.0.1339 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 742.719611][T11136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 742.719626][T11136] Call Trace: [ 742.719635][T11136] [ 742.719646][T11136] dump_stack_lvl+0xe8/0x150 [ 742.719680][T11136] should_fail_ex+0x46b/0x600 [ 742.719730][T11136] should_failslab+0xa8/0x100 [ 742.719768][T11136] __kvmalloc_node_noprof+0x176/0x890 [ 742.719805][T11136] ? traverse+0xf1/0x620 [ 742.719833][T11136] ? traverse+0xf1/0x620 [ 742.719864][T11136] traverse+0xf1/0x620 [ 742.719907][T11136] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 742.719936][T11136] ? seq_read_iter+0xa5/0xcb0 [ 742.719969][T11136] seq_read_iter+0xb6b/0xcb0 [ 742.720019][T11136] seq_read+0x36a/0x490 [ 742.720039][T11136] ? kstrtoull+0x137/0x1d0 [ 742.720091][T11136] ? __pfx_seq_read+0x10/0x10 [ 742.720128][T11136] ? __import_iovec+0x5d7/0x7e0 [ 742.720164][T11136] ? __pfx_seq_read+0x10/0x10 [ 742.720195][T11136] proc_reg_read+0x1f6/0x2f0 [ 742.720221][T11136] vfs_readv+0x588/0x850 [ 742.720264][T11136] ? __pfx_proc_reg_read+0x10/0x10 [ 742.720299][T11136] ? __pfx_vfs_readv+0x10/0x10 [ 742.720345][T11136] ? __fget_files+0x2a/0x420 [ 742.720377][T11136] ? __fget_files+0x3a8/0x420 [ 742.720392][T11136] ? __fget_files+0x2a/0x420 [ 742.720414][T11136] __x64_sys_preadv+0x19f/0x2c0 [ 742.720458][T11136] ? __pfx___x64_sys_preadv+0x10/0x10 [ 742.720499][T11136] do_syscall_64+0x166/0x520 [ 742.720522][T11136] ? trace_irq_disable+0x3b/0x140 [ 742.720560][T11136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.720577][T11136] ? clear_bhb_loop+0x70/0xc0 [ 742.720610][T11136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.720634][T11136] RIP: 0033:0x7f607617e159 [ 742.720655][T11136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.720676][T11136] RSP: 002b:00007f60743d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 742.720699][T11136] RAX: ffffffffffffffda RBX: 00007f6076405fa0 RCX: 00007f607617e159 [ 742.720716][T11136] RDX: 0000000000000001 RSI: 0000200000001880 RDI: 0000000000000003 [ 742.720732][T11136] RBP: 00007f60743d6090 R08: 0000000000000000 R09: 0000000000000000 [ 742.720748][T11136] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.720758][T11136] R13: 00007f6076406038 R14: 00007f6076405fa0 R15: 00007fff5b00e728 [ 742.720800][T11136] [ 743.982418][T11159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.995156][T11159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.024231][ T6296] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 744.164899][ T6296] usb 6-1: device descriptor read/64, error -71 [ 744.405106][ T6296] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 744.544234][ T6296] usb 6-1: device descriptor read/64, error -71 [ 744.681966][T11176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.682723][T11176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.753420][T11176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.764449][T11176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.794810][ T6296] usb usb6-port1: attempt power cycle [ 744.898719][T11179] FAULT_INJECTION: forcing a failure. [ 744.898719][T11179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.898815][T11179] CPU: 0 UID: 0 PID: 11179 Comm: syz.1.1351 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 744.898842][T11179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 744.898856][T11179] Call Trace: [ 744.898865][T11179] [ 744.898875][T11179] dump_stack_lvl+0xe8/0x150 [ 744.898914][T11179] should_fail_ex+0x46b/0x600 [ 744.898945][T11179] _copy_from_user+0x2d/0xb0 [ 744.898974][T11179] do_ip_vs_set_ctl+0x35d/0xaf0 [ 744.899081][T11179] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 744.899130][T11179] ? lockdep_hardirqs_on+0x7b/0x110 [ 744.899155][T11179] ? irqentry_exit+0x218/0x910 [ 744.899192][T11179] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 744.899234][T11179] nf_setsockopt+0x26f/0x290 [ 744.899312][T11179] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 744.899340][T11179] do_sock_setsockopt+0x17c/0x1b0 [ 744.899375][T11179] __x64_sys_setsockopt+0x143/0x1b0 [ 744.899419][T11179] do_syscall_64+0x166/0x520 [ 744.899443][T11179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.899467][T11179] ? clear_bhb_loop+0x70/0xc0 [ 744.899495][T11179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.899519][T11179] RIP: 0033:0x7f075d35e159 [ 744.899539][T11179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.899559][T11179] RSP: 002b:00007f075b574028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 744.899584][T11179] RAX: ffffffffffffffda RBX: 00007f075d5e6180 RCX: 00007f075d35e159 [ 744.899601][T11179] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005 [ 744.899615][T11179] RBP: 00007f075b574090 R08: 000000000000002c R09: 0000000000000000 [ 744.899630][T11179] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 744.899645][T11179] R13: 00007f075d5e6218 R14: 00007f075d5e6180 R15: 00007ffed36f8ed8 [ 744.899682][T11179] [ 745.451826][ T37] audit: type=1326 audit(1788325375.610:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11180 comm="syz.0.1353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607617e159 code=0x7ffc0000 [ 745.484319][ T37] audit: type=1326 audit(1788325375.640:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11180 comm="syz.0.1353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607617e159 code=0x7ffc0000 [ 745.512180][ T37] audit: type=1326 audit(1788325375.670:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11180 comm="syz.0.1353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f607617e159 code=0x7ffc0000 [ 745.540092][ T37] audit: type=1326 audit(1788325375.700:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11180 comm="syz.0.1353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607617e159 code=0x7ffc0000 [ 745.567265][ T37] audit: type=1326 audit(1788325375.730:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11180 comm="syz.0.1353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f607617e159 code=0x7ffc0000 [ 745.593729][ T37] audit: type=1326 audit(1788325375.750:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11180 comm="syz.0.1353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607617e159 code=0x7ffc0000 [ 745.624199][ T37] audit: type=1326 audit(1788325375.780:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11180 comm="syz.0.1353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607617e159 code=0x7ffc0000 [ 745.651528][ T37] audit: type=1326 audit(1788325375.810:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11180 comm="syz.0.1353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f607617e159 code=0x7ffc0000 [ 745.664830][ T37] audit: type=1326 audit(1788325375.830:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11180 comm="syz.0.1353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607617e159 code=0x7ffc0000 [ 745.664887][ T37] audit: type=1326 audit(1788325375.830:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11180 comm="syz.0.1353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607617e159 code=0x7ffc0000 [ 745.789577][T11181] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1353'. [ 745.851172][ T5319] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 746.064989][ T5319] usb 5-1: Using ep0 maxpacket: 8 [ 746.076978][ T5319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 746.097414][ T5319] usb 5-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=fe.96 [ 746.111137][ T5319] usb 5-1: config 243 has an invalid interface number: 8 but max is 0 [ 746.111891][ T5319] usb 5-1: config 243 has no interface number 0 [ 746.113486][ T5319] usb 5-1: config 243 interface 8 has no altsetting 0 [ 746.139891][ T5319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.139965][ T5319] usb 5-1: Product: syz [ 746.140130][ T5319] usb 5-1: Manufacturer: syz [ 746.140959][ T5319] usb 5-1: SerialNumber: syz [ 746.144766][ T6296] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 746.188884][ T6296] usb 6-1: device descriptor read/8, error -71 [ 746.424566][ T6296] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 746.447578][ T6296] usb 6-1: device descriptor read/8, error -71 [ 747.186142][ T6296] usb usb6-port1: unable to enumerate USB device [ 747.517145][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.513642][ T5319] cypress_m8 5-1:243.8: HID->COM RS232 Adapter converter detected [ 749.557808][ T5319] cyphidcom ttyUSB0: required endpoint is missing [ 749.703500][ T5319] usb 5-1: USB disconnect, device number 50 [ 749.752125][ T5319] cypress_m8 5-1:243.8: device disconnected [ 749.839200][T11210] FAULT_INJECTION: forcing a failure. [ 749.839200][T11210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.840389][T11210] CPU: 1 UID: 0 PID: 11210 Comm: syz.5.1361 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 749.840484][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.840518][T11210] Call Trace: [ 749.840540][T11210] [ 749.840570][T11210] dump_stack_lvl+0xe8/0x150 [ 749.840665][T11210] should_fail_ex+0x46b/0x600 [ 749.840745][T11210] _copy_from_user+0x2d/0xb0 [ 749.840791][T11210] ___sys_sendmsg+0x1c6/0x360 [ 749.840822][T11210] ? __lock_acquire+0x6df/0x2e40 [ 749.840872][T11210] ? __pfx____sys_sendmsg+0x10/0x10 [ 749.840940][T11210] ? __fget_files+0x2a/0x420 [ 749.840963][T11210] ? __fget_files+0x3a8/0x420 [ 749.841026][T11210] __x64_sys_sendmsg+0x1b7/0x290 [ 749.841135][T11210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 749.841254][T11210] do_syscall_64+0x166/0x520 [ 749.841331][T11210] ? trace_irq_disable+0x3b/0x140 [ 749.841404][T11210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.841479][T11210] ? clear_bhb_loop+0x70/0xc0 [ 749.841546][T11210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.841625][T11210] RIP: 0033:0x7ff23041e159 [ 749.841680][T11210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.841744][T11210] RSP: 002b:00007ff22e676028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.841807][T11210] RAX: ffffffffffffffda RBX: 00007ff2306a5fa0 RCX: 00007ff23041e159 [ 749.841849][T11210] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 749.841882][T11210] RBP: 00007ff22e676090 R08: 0000000000000000 R09: 0000000000000000 [ 749.841921][T11210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.841941][T11210] R13: 00007ff2306a6038 R14: 00007ff2306a5fa0 R15: 00007ffc70dc29b8 [ 749.842029][T11210] [ 750.410128][T11221] netlink: 'syz.1.1366': attribute type 2 has an invalid length. [ 750.424616][T11221] netlink: 'syz.1.1366': attribute type 2 has an invalid length. [ 750.424636][T11221] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 750.464691][ T5319] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 750.625305][ T5319] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 750.636504][ T5319] usb 5-1: config 0 interface 0 has no altsetting 0 [ 750.636635][ T5319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.721775][ T5319] usb 5-1: config 0 descriptor?? [ 750.934702][ T5723] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 751.074761][T11232] fuse: fd is not a fuse device [ 751.104257][ T5723] usb 6-1: Using ep0 maxpacket: 32 [ 751.110984][ T5723] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 751.118010][ T5723] usb 6-1: config index 0 descriptor too short (expected 27632, got 27) [ 751.118040][ T5723] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 751.118064][ T5723] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 751.118088][ T5723] usb 6-1: config 1 has no interface number 0 [ 751.118134][ T5723] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 751.118162][ T5723] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 1028, setting to 1024 [ 751.118190][ T5723] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 751.118243][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.231705][T11225] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 751.246625][ T5723] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 751.251888][ T5319] hid (null): unknown global tag 0xfd [ 751.420941][ T5319] wacom 0003:056A:0084.0008: unexpected long global item [ 751.433530][ T5319] wacom 0003:056A:0084.0008: parse failed [ 751.436269][ T5319] wacom 0003:056A:0084.0008: probe with driver wacom failed with error -22 [ 751.471501][T11219] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 751.508904][ T5723] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 751.560919][T11234] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1368'. [ 751.561103][T11234] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1368'. [ 751.685830][ T5319] usb 5-1: USB disconnect, device number 51 [ 752.670946][ T5723] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 753.174970][T11248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.191971][T11248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.605856][T11263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.618406][T11263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.059060][T11263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.088306][T11263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.428771][T11284] netlink: 13439 bytes leftover after parsing attributes in process `syz.5.1381'. [ 761.450041][T11283] netlink: 13439 bytes leftover after parsing attributes in process `syz.5.1381'. [ 762.358733][T11305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.405923][T11305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.575569][T11311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 764.181137][T11320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1392'. [ 767.231589][ T4953] udevd[4953]: worker [10429] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 768.394240][ T6296] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 768.585940][ T6296] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 768.603971][ T6296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.614592][ T6296] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 768.614661][ T6296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.675940][ T6296] usb 5-1: config 0 descriptor?? [ 768.792447][ T6296] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 768.813811][ T6296] dvb-usb: bulk message failed: -22 (3/0) [ 768.908770][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 768.911497][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'. [ 768.930484][ T6296] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 768.946042][ T6296] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 768.954122][ T6296] usb 5-1: media controller created [ 768.993883][ T6296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 769.035392][ T31] usb 6-1: USB disconnect, device number 13 [ 769.044772][T11339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.055067][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 769.055156][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'. [ 769.071155][T11339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.188829][ T31] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 769.220272][ T6296] dvb-usb: bulk message failed: -22 (6/0) [ 769.239430][ T6296] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 769.287243][ T6296] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 769.606768][ T6296] dvb-usb: schedule remote query interval to 150 msecs. [ 769.614198][ T6296] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 770.020857][ T6296] dvb-usb: bulk message failed: -22 (1/0) [ 770.045556][ T6296] dvb-usb: error while querying for an remote control event. [ 770.207265][ T6296] dvb-usb: bulk message failed: -22 (1/0) [ 770.207318][ T6296] dvb-usb: error while querying for an remote control event. [ 770.286247][ T5845] usb 5-1: USB disconnect, device number 52 [ 770.643672][ T5845] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 771.539500][T11376] netlink: Failed to add batadv0 helper -22 [ 771.539561][T11376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.744269][ T5845] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 772.074955][ T5845] usb 5-1: not running at top speed; connect to a high speed hub [ 772.075065][ T5845] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 772.124766][ T5845] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.249008][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.249092][ T5845] usb 5-1: Product: syz [ 772.249110][ T5845] usb 5-1: Manufacturer: syz [ 772.249143][ T5845] usb 5-1: SerialNumber: syz [ 772.600676][ T5845] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 772.602634][ T5845] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 772.602798][ T5845] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 772.607875][ T5845] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 772.612979][ T5845] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 772.618655][ T5845] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 772.626391][ T5845] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 772.632619][ T5845] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 772.740647][ T5845] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 772.946472][ T5845] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 772.980582][ T5845] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 773.042198][ T5845] usb 5-1: USB disconnect, device number 53 [ 773.122972][ T5845] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 773.317234][T11374] netlink: Failed to add batadv0 helper -22 [ 773.326510][T11374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.346055][ T5845] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 773.401795][ T5845] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 773.447643][ T5845] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 773.466759][ T5845] keyspan 5-1:1.0: device disconnected [ 773.652291][T11395] 9pnet: p9_errstr2errno: server reported unknown error ¶ [ 773.754791][T11399] random: crng reseeded on system resumption [ 773.844922][ T5319] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 773.862819][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.864668][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.920844][T11399] macvlan2: entered promiscuous mode [ 774.004758][ T5319] usb 6-1: Using ep0 maxpacket: 8 [ 774.016721][ T5319] usb 6-1: unable to get BOS descriptor or descriptor too short [ 774.018999][ T5319] usb 6-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=fe.96 [ 774.036067][ T5319] usb 6-1: config 243 has an invalid interface number: 8 but max is 0 [ 774.036094][ T5319] usb 6-1: config 243 has no interface number 0 [ 774.037050][ T5319] usb 6-1: config 243 interface 8 has no altsetting 0 [ 774.071205][ T5319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.071394][ T5319] usb 6-1: Product: syz [ 774.072907][ T5319] usb 6-1: Manufacturer: syz [ 774.072926][ T5319] usb 6-1: SerialNumber: syz [ 774.371392][ T5319] cypress_m8 6-1:243.8: HID->COM RS232 Adapter converter detected [ 774.392383][ T5319] cyphidcom ttyUSB0: required endpoint is missing [ 774.416006][ T5319] usb 6-1: USB disconnect, device number 14 [ 774.437380][ T5319] cypress_m8 6-1:243.8: device disconnected [ 774.664819][T11408] FAULT_INJECTION: forcing a failure. [ 774.664819][T11408] name failslab, interval 1, probability 0, space 0, times 0 [ 774.699521][T11408] CPU: 0 UID: 0 PID: 11408 Comm: syz.4.1420 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 774.699556][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 774.699578][T11408] Call Trace: [ 774.699586][T11408] [ 774.699594][T11408] dump_stack_lvl+0xe8/0x150 [ 774.699646][T11408] should_fail_ex+0x46b/0x600 [ 774.699679][T11408] should_failslab+0xa8/0x100 [ 774.699716][T11408] __kmalloc_noprof+0xfb/0x790 [ 774.699744][T11408] ? kernfs_fop_write_iter+0x158/0x540 [ 774.699775][T11408] ? kernfs_fop_write_iter+0x158/0x540 [ 774.699823][T11408] kernfs_fop_write_iter+0x158/0x540 [ 774.699863][T11408] vfs_write+0x61e/0xbb0 [ 774.699899][T11408] ? __pfx_vfs_write+0x10/0x10 [ 774.699926][T11408] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 774.699976][T11408] ? mutex_lock_nested+0x152/0x1d0 [ 774.700006][T11408] ? fdget_pos+0x252/0x320 [ 774.700037][T11408] ksys_write+0x156/0x270 [ 774.700064][T11408] ? __pfx_ksys_write+0x10/0x10 [ 774.700101][T11408] do_syscall_64+0x166/0x520 [ 774.700125][T11408] ? trace_irq_disable+0x3b/0x140 [ 774.700155][T11408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.700181][T11408] ? clear_bhb_loop+0x70/0xc0 [ 774.700210][T11408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.700234][T11408] RIP: 0033:0x7f1c9d69e159 [ 774.700254][T11408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.700279][T11408] RSP: 002b:00007f1c9b8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 774.700303][T11408] RAX: ffffffffffffffda RBX: 00007f1c9d925fa0 RCX: 00007f1c9d69e159 [ 774.700315][T11408] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 774.700344][T11408] RBP: 00007f1c9b8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 774.700359][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.700373][T11408] R13: 00007f1c9d926038 R14: 00007f1c9d925fa0 R15: 00007ffd02884e98 [ 774.700409][T11408] [ 776.603477][T11422] FAULT_INJECTION: forcing a failure. [ 776.603477][T11422] name failslab, interval 1, probability 0, space 0, times 0 [ 776.604646][T11422] CPU: 0 UID: 0 PID: 11422 Comm: syz.5.1424 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 776.604703][T11422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 776.604717][T11422] Call Trace: [ 776.604727][T11422] [ 776.604737][T11422] dump_stack_lvl+0xe8/0x150 [ 776.604833][T11422] should_fail_ex+0x46b/0x600 [ 776.604872][T11422] should_failslab+0xa8/0x100 [ 776.604909][T11422] __kvmalloc_node_noprof+0x176/0x890 [ 776.604987][T11422] ? seq_read_iter+0x1eb/0xcb0 [ 776.605040][T11422] ? seq_read_iter+0x1eb/0xcb0 [ 776.605072][T11422] ? seq_read_iter+0xa5/0xcb0 [ 776.605107][T11422] seq_read_iter+0x1eb/0xcb0 [ 776.605149][T11422] ? kernfs_fop_read_iter+0x145/0x6a0 [ 776.605188][T11422] do_iter_readv_writev+0x624/0x8d0 [ 776.605221][T11422] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 776.605299][T11422] ? rw_verify_area+0x250/0x4d0 [ 776.605363][T11422] vfs_readv+0x293/0x850 [ 776.605406][T11422] ? __pfx_vfs_readv+0x10/0x10 [ 776.605530][T11422] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 776.605564][T11422] ? mutex_lock_nested+0x152/0x1d0 [ 776.605623][T11422] ? fdget_pos+0x252/0x320 [ 776.605682][T11422] do_readv+0x15a/0x2e0 [ 776.605717][T11422] ? __pfx_do_readv+0x10/0x10 [ 776.605762][T11422] do_syscall_64+0x166/0x520 [ 776.605787][T11422] ? trace_irq_disable+0x3b/0x140 [ 776.605845][T11422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.605877][T11422] ? clear_bhb_loop+0x70/0xc0 [ 776.605906][T11422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.605946][T11422] RIP: 0033:0x7ff23041e159 [ 776.606014][T11422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.606042][T11422] RSP: 002b:00007ff22e676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 776.606065][T11422] RAX: ffffffffffffffda RBX: 00007ff2306a5fa0 RCX: 00007ff23041e159 [ 776.606081][T11422] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 776.606122][T11422] RBP: 00007ff22e676090 R08: 0000000000000000 R09: 0000000000000000 [ 776.606156][T11422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.606188][T11422] R13: 00007ff2306a6038 R14: 00007ff2306a5fa0 R15: 00007ffc70dc29b8 [ 776.606225][T11422] [ 776.966274][T11427] 9pnet: p9_errstr2errno: server reported unknown error ¶ [ 778.454212][ T5319] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 778.853871][T11450] FAULT_INJECTION: forcing a failure. [ 778.853871][T11450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.853970][T11450] CPU: 1 UID: 0 PID: 11450 Comm: syz.0.1434 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 778.853998][T11450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.854011][T11450] Call Trace: [ 778.854021][T11450] [ 778.854030][T11450] dump_stack_lvl+0xe8/0x150 [ 778.854074][T11450] should_fail_ex+0x46b/0x600 [ 778.854105][T11450] _copy_from_user+0x2d/0xb0 [ 778.854135][T11450] __sys_bpf+0x2e7/0xd90 [ 778.854173][T11450] ? irqentry_exit+0x120/0x910 [ 778.854200][T11450] ? __pfx___sys_bpf+0x10/0x10 [ 778.854253][T11450] ? preempt_schedule_thunk+0x16/0x40 [ 778.854300][T11450] ? ksys_write+0x248/0x270 [ 778.854328][T11450] ? __pfx_ksys_write+0x10/0x10 [ 778.854360][T11450] __x64_sys_bpf+0xba/0xd0 [ 778.854393][T11450] do_syscall_64+0x166/0x520 [ 778.854418][T11450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.854443][T11450] ? clear_bhb_loop+0x70/0xc0 [ 778.854471][T11450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.854494][T11450] RIP: 0033:0x7f607617e159 [ 778.854515][T11450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.854535][T11450] RSP: 002b:00007f6074394028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 778.854561][T11450] RAX: ffffffffffffffda RBX: 00007f6076406180 RCX: 00007f607617e159 [ 778.854578][T11450] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 000000000000001a [ 778.854593][T11450] RBP: 00007f6074394090 R08: 0000000000000000 R09: 0000000000000000 [ 778.854609][T11450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.854623][T11450] R13: 00007f6076406218 R14: 00007f6076406180 R15: 00007fff5b00e728 [ 778.854660][T11450] [ 779.455264][ T5319] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 779.467211][ T5319] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 779.469155][ T5319] usb 6-1: config 0 has no interface number 0 [ 779.529783][ T5319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.538005][ T5319] usb 6-1: Product: syz [ 779.538025][ T5319] usb 6-1: Manufacturer: syz [ 779.538042][ T5319] usb 6-1: SerialNumber: syz [ 779.587366][ T5319] usb 6-1: config 0 descriptor?? [ 779.863042][ T5319] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 779.949397][ T5319] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 779.960223][ T5319] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 779.960272][ T5319] usb 6-1: media controller created [ 780.003043][ T5319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.246902][T11430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.248932][T11430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.257444][ T5710] usb 6-1: USB disconnect, device number 15 [ 782.166385][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 782.166420][T11474] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1438'. [ 782.166441][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 782.166456][T11474] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1438'. [ 782.166544][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 785.392548][T11479] 9pnet: p9_errstr2errno: server reported unknown error ¶ [ 786.103143][T11493] FAULT_INJECTION: forcing a failure. [ 786.103143][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.133280][T11493] CPU: 1 UID: 0 PID: 11493 Comm: syz.5.1446 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 786.133309][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 786.133327][T11493] Call Trace: [ 786.133335][T11493] [ 786.133344][T11493] dump_stack_lvl+0xe8/0x150 [ 786.133381][T11493] should_fail_ex+0x46b/0x600 [ 786.133409][T11493] _copy_to_user+0x31/0xb0 [ 786.133438][T11493] simple_read_from_buffer+0xe1/0x170 [ 786.133466][T11493] proc_fail_nth_read+0x1be/0x230 [ 786.133495][T11493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 786.133523][T11493] ? rw_verify_area+0x250/0x4d0 [ 786.133548][T11493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 786.133572][T11493] vfs_read+0x219/0xa90 [ 786.133603][T11493] ? __pfx_vfs_read+0x10/0x10 [ 786.133628][T11493] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 786.133654][T11493] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 786.133678][T11493] ? mutex_lock_nested+0x152/0x1d0 [ 786.133706][T11493] ? fdget_pos+0x252/0x320 [ 786.133736][T11493] ksys_read+0x156/0x270 [ 786.133761][T11493] ? __pfx_ksys_read+0x10/0x10 [ 786.133796][T11493] do_syscall_64+0x166/0x520 [ 786.133819][T11493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.133841][T11493] ? clear_bhb_loop+0x70/0xc0 [ 786.133868][T11493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.133890][T11493] RIP: 0033:0x7ff2303de98e [ 786.133909][T11493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 786.133928][T11493] RSP: 002b:00007ff22e654fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 786.133951][T11493] RAX: ffffffffffffffda RBX: 00007ff22e6556c0 RCX: 00007ff2303de98e [ 786.133967][T11493] RDX: 000000000000000f RSI: 00007ff22e6550a0 RDI: 0000000000000006 [ 786.133980][T11493] RBP: 00007ff22e655090 R08: 0000000000000000 R09: 0000000000000000 [ 786.133994][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.134006][T11493] R13: 00007ff2306a6128 R14: 00007ff2306a6090 R15: 00007ffc70dc29b8 [ 786.134045][T11493] [ 790.290430][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 790.290525][ T37] audit: type=1326 audit(1788325420.450:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.3.1448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbf1ee159 code=0x7ffc0000 [ 790.290661][ T37] audit: type=1326 audit(1788325420.450:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.3.1448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbf1ee159 code=0x7ffc0000 [ 790.290727][ T37] audit: type=1326 audit(1788325420.450:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.3.1448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbf1ee159 code=0x7ffc0000 [ 790.290789][ T37] audit: type=1326 audit(1788325420.450:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.3.1448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbf1ee159 code=0x7ffc0000 [ 790.290894][ T37] audit: type=1326 audit(1788325420.450:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.3.1448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fcdbf1ee159 code=0x7ffc0000 [ 790.290965][ T37] audit: type=1326 audit(1788325420.450:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.3.1448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbf1ee159 code=0x7ffc0000 [ 790.291057][ T37] audit: type=1326 audit(1788325420.450:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.3.1448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbf1ee159 code=0x7ffc0000 [ 790.291121][ T37] audit: type=1326 audit(1788325420.450:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.3.1448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbf1ee159 code=0x7ffc0000 [ 790.291226][ T37] audit: type=1326 audit(1788325420.450:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.3.1448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdbf1ee159 code=0x7ffc0000 [ 790.291289][ T37] audit: type=1326 audit(1788325420.450:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.3.1448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbf1ee159 code=0x7ffc0000 [ 790.458316][T11503] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 790.651334][T11504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.654369][T11504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.756192][T11504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.756838][T11504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.894255][ T5734] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 791.091933][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 791.092018][T11513] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1452'. [ 791.092115][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 791.092155][T11513] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1452'. [ 791.092855][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 792.075089][ T5734] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 792.081899][ T5734] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.081924][ T5734] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 792.112115][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.112191][ T5734] usb 5-1: Product: syz [ 792.112209][ T5734] usb 5-1: Manufacturer: syz [ 792.112271][ T5734] usb 5-1: SerialNumber: syz [ 792.188553][ T5734] usb 5-1: 0:2 : does not exist [ 792.188711][ T5734] usb 5-1: unit 9 not found! [ 792.523971][T11520] 9pnet: p9_errstr2errno: server reported unknown error ¶ [ 792.963787][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 793.072928][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.086991][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.099274][ T5734] usb 5-1: USB disconnect, device number 54 [ 793.148862][ T5319] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 793.174340][T11532] hsr_slave_0: left promiscuous mode [ 793.194230][T11532] hsr_slave_1: left promiscuous mode [ 793.710311][ T5319] usb 6-1: device descriptor read/64, error -71 [ 793.984226][ T5319] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 794.145059][ T5319] usb 6-1: device descriptor read/64, error -71 [ 794.280525][ T5319] usb usb6-port1: attempt power cycle [ 794.644245][ T5319] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 794.664895][ T5319] usb 6-1: device descriptor read/8, error -71 [ 794.914298][ T5319] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 794.935491][ T5319] usb 6-1: device descriptor read/8, error -71 [ 795.049972][ T5319] usb usb6-port1: unable to enumerate USB device [ 795.341048][T11551] af_packet: tpacket_rcv: packet too big, clamped from 604 to 4294967272. macoff=96 [ 796.152519][T11569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1468'. [ 796.152600][T11569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1468'. [ 796.152624][T11569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1468'. [ 800.068531][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 800.633595][T11595] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1476'. [ 800.903628][T11565] syz.4.1465 (11565) used greatest stack depth: 18152 bytes left [ 801.664166][ T5734] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 802.419644][ T5734] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.422961][ T5734] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.422987][ T5734] usb 6-1: config 0 has no interfaces? [ 802.430275][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.430335][ T5734] usb 6-1: Product: Д [ 802.430353][ T5734] usb 6-1: Manufacturer: Д [ 802.430369][ T5734] usb 6-1: SerialNumber: syz [ 802.528108][ T5734] usb 6-1: config 0 descriptor?? [ 802.705055][T11610] FAULT_INJECTION: forcing a failure. [ 802.705055][T11610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.719799][T11610] CPU: 0 UID: 0 PID: 11610 Comm: syz.0.1480 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 802.719829][T11610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 802.719844][T11610] Call Trace: [ 802.719853][T11610] [ 802.719862][T11610] dump_stack_lvl+0xe8/0x150 [ 802.719899][T11610] should_fail_ex+0x46b/0x600 [ 802.719930][T11610] _copy_to_user+0x31/0xb0 [ 802.719959][T11610] simple_read_from_buffer+0xe1/0x170 [ 802.719999][T11610] proc_fail_nth_read+0x1be/0x230 [ 802.720027][T11610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 802.720055][T11610] ? rw_verify_area+0x250/0x4d0 [ 802.720079][T11610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 802.720102][T11610] vfs_read+0x219/0xa90 [ 802.720131][T11610] ? __pfx_vfs_read+0x10/0x10 [ 802.720156][T11610] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 802.720183][T11610] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 802.720204][T11610] ? mutex_lock_nested+0x152/0x1d0 [ 802.720232][T11610] ? fdget_pos+0x252/0x320 [ 802.720261][T11610] ksys_read+0x156/0x270 [ 802.720285][T11610] ? __pfx_ksys_read+0x10/0x10 [ 802.720322][T11610] do_syscall_64+0x166/0x520 [ 802.720344][T11610] ? trace_irq_disable+0x3b/0x140 [ 802.720370][T11610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.720391][T11610] ? clear_bhb_loop+0x70/0xc0 [ 802.720416][T11610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.720437][T11610] RIP: 0033:0x7f607613e98e [ 802.720456][T11610] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 802.720474][T11610] RSP: 002b:00007f6074393fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 802.720496][T11610] RAX: ffffffffffffffda RBX: 00007f60743946c0 RCX: 00007f607613e98e [ 802.720511][T11610] RDX: 000000000000000f RSI: 00007f60743940a0 RDI: 0000000000000005 [ 802.720524][T11610] RBP: 00007f6074394090 R08: 0000000000000000 R09: 0000000000000000 [ 802.720537][T11610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.720549][T11610] R13: 00007f6076406218 R14: 00007f6076406180 R15: 00007fff5b00e728 [ 802.720582][T11610] [ 802.944900][ T5734] usb 6-1: USB disconnect, device number 20 [ 804.251449][T11627] 9pnet: p9_errstr2errno: server reported unknown error ¶ [ 805.601563][T11637] FAULT_INJECTION: forcing a failure. [ 805.601563][T11637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.601755][T11637] CPU: 1 UID: 0 PID: 11637 Comm: syz.5.1488 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 805.601787][T11637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 805.601801][T11637] Call Trace: [ 805.601811][T11637] [ 805.601821][T11637] dump_stack_lvl+0xe8/0x150 [ 805.601869][T11637] should_fail_ex+0x46b/0x600 [ 805.601900][T11637] _copy_from_iter+0x1d3/0x1660 [ 805.601928][T11637] ? __lock_acquire+0x6df/0x2e40 [ 805.601972][T11637] ? lock_acquire+0x115/0x350 [ 805.601999][T11637] ? __pfx__copy_from_iter+0x10/0x10 [ 805.602024][T11637] ? lock_acquire+0x115/0x350 [ 805.602079][T11637] copy_page_from_iter+0x219/0x2d0 [ 805.602108][T11637] tun_get_user+0x1c16/0x44e0 [ 805.602203][T11637] ? is_bpf_text_address+0x292/0x2b0 [ 805.602238][T11637] ? tun_get_user+0x70a/0x44e0 [ 805.602278][T11637] ? __lock_acquire+0x6df/0x2e40 [ 805.602307][T11637] ? __pfx_tun_get_user+0x10/0x10 [ 805.602333][T11637] ? __lock_acquire+0x6df/0x2e40 [ 805.602375][T11637] ? ref_tracker_alloc+0x353/0x4c0 [ 805.602404][T11637] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 805.602432][T11637] ? lock_acquire+0x115/0x350 [ 805.602460][T11637] ? tun_get+0x1c/0x2f0 [ 805.602489][T11637] ? tun_get+0x1c/0x2f0 [ 805.602513][T11637] ? tun_get+0x1c/0x2f0 [ 805.602542][T11637] tun_chr_write_iter+0x119/0x200 [ 805.602571][T11637] vfs_write+0x61e/0xbb0 [ 805.602605][T11637] ? __pfx_vfs_write+0x10/0x10 [ 805.602641][T11637] ? __fget_files+0x2a/0x420 [ 805.602671][T11637] ksys_write+0x156/0x270 [ 805.602698][T11637] ? __pfx_ksys_write+0x10/0x10 [ 805.602734][T11637] do_syscall_64+0x166/0x520 [ 805.602757][T11637] ? trace_irq_disable+0x3b/0x140 [ 805.602785][T11637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.602809][T11637] ? clear_bhb_loop+0x70/0xc0 [ 805.602838][T11637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.602860][T11637] RIP: 0033:0x7ff2303de98e [ 805.602888][T11637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 805.602907][T11637] RSP: 002b:00007ff22e675fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 805.602931][T11637] RAX: ffffffffffffffda RBX: 00007ff22e6766c0 RCX: 00007ff2303de98e [ 805.602948][T11637] RDX: 0000000000000056 RSI: 0000200000000880 RDI: 00000000000000c8 [ 805.602963][T11637] RBP: 00007ff22e676090 R08: 0000000000000000 R09: 0000000000000000 [ 805.602977][T11637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.602992][T11637] R13: 00007ff2306a6038 R14: 00007ff2306a5fa0 R15: 00007ffc70dc29b8 [ 805.603028][T11637] [ 806.494154][ T5710] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 806.708970][ T5710] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 806.727735][ T5710] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 806.739679][ T5710] usb 6-1: config 0 has no interface number 0 [ 806.754266][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.762448][ T5710] usb 6-1: Product: syz [ 806.762473][ T5710] usb 6-1: Manufacturer: syz [ 806.762489][ T5710] usb 6-1: SerialNumber: syz [ 806.789953][ T5710] usb 6-1: config 0 descriptor?? [ 806.809052][T11648] netlink: 'syz.1.1491': attribute type 4 has an invalid length. [ 807.572347][ T5710] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 807.628740][ T5710] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 807.632403][ T5710] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 807.632460][ T5710] usb 6-1: media controller created [ 807.691093][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 807.943177][T11641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.953254][T11641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.320415][ T37] kauditd_printk_skb: 39 callbacks suppressed [ 808.322009][ T37] audit: type=1326 audit(1788325438.480:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11660 comm="syz.4.1494" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c9d69e159 code=0x0 [ 808.447745][ T36] usb 6-1: USB disconnect, device number 21 [ 808.841557][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.402720][T11679] 9pnet: p9_errstr2errno: server reported unknown error ¶ [ 809.669128][T11684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.681549][T11684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.513051][T11702] macvlan2: entered promiscuous mode [ 812.816044][ T37] audit: type=1800 audit(1788325442.980:233): pid=11703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1505" name="nl80211" dev="sda1" ino=2052 res=0 errno=0 [ 812.883951][T11705] block nbd1: shutting down sockets [ 813.268604][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 813.277736][T11720] bond0: Unable to set up delay as MII monitoring is disabled [ 831.825030][T11766] FAULT_INJECTION: forcing a failure. [ 831.825030][T11766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.825142][T11766] CPU: 1 UID: 0 PID: 11766 Comm: syz.1.1518 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 831.825170][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 831.825184][T11766] Call Trace: [ 831.825194][T11766] [ 831.825204][T11766] dump_stack_lvl+0xe8/0x150 [ 831.825243][T11766] should_fail_ex+0x46b/0x600 [ 831.825273][T11766] _copy_from_user+0x2d/0xb0 [ 831.825302][T11766] do_fcntl+0x949/0x19e0 [ 831.825334][T11766] ? smack_file_fcntl+0x152/0x320 [ 831.825369][T11766] ? __pfx_do_fcntl+0x10/0x10 [ 831.825402][T11766] ? __pfx_smack_file_fcntl+0x10/0x10 [ 831.825446][T11766] ? __fget_files+0x2a/0x420 [ 831.825476][T11766] ? bpf_lsm_file_fcntl+0x9/0x20 [ 831.825504][T11766] __se_sys_fcntl+0xcb/0x160 [ 831.825533][T11766] do_syscall_64+0x166/0x520 [ 831.825559][T11766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.825583][T11766] ? clear_bhb_loop+0x70/0xc0 [ 831.825612][T11766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.825635][T11766] RIP: 0033:0x7f075d35e159 [ 831.825655][T11766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.825676][T11766] RSP: 002b:00007f075b574028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 831.825700][T11766] RAX: ffffffffffffffda RBX: 00007f075d5e6180 RCX: 00007f075d35e159 [ 831.825717][T11766] RDX: 0000200000000080 RSI: 0000000000000026 RDI: 0000000000000007 [ 831.825732][T11766] RBP: 00007f075b574090 R08: 0000000000000000 R09: 0000000000000000 [ 831.825747][T11766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.825760][T11766] R13: 00007f075d5e6218 R14: 00007f075d5e6180 R15: 00007ffed36f8ed8 [ 831.825797][T11766] [ 833.212682][T11770] random: crng reseeded on system resumption [ 835.978597][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 836.092232][T11794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 836.106988][T11794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 836.125801][T11794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 836.149428][T11794] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 836.204144][T11791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 836.304227][T11791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 836.323897][T11791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 836.358016][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 836.448454][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 838.991049][T11808] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 839.161574][ T5609] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 839.770276][ T5609] Bluetooth: hci5: command tx timeout [ 839.854249][ T5609] Bluetooth: hci6: command tx timeout [ 840.120781][T11807] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 841.859730][ T5609] Bluetooth: hci5: command tx timeout [ 841.934369][ T5609] Bluetooth: hci6: command tx timeout [ 842.356029][ T37] audit: type=1800 audit(1788325472.510:234): pid=11849 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1534" name="nl80211" dev="sda1" ino=2056 res=0 errno=0 [ 842.689984][ T152] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.214356][ T5609] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 843.226422][ T5609] Bluetooth: hci1: Injecting HCI hardware error event [ 843.227306][ T59] Bluetooth: hci1: hardware error 0x00 [ 843.496470][ T152] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.691741][T11877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.934329][ T5609] Bluetooth: hci5: command tx timeout [ 844.020511][ T5609] Bluetooth: hci6: command tx timeout [ 845.310669][ T37] audit: type=1800 audit(1788325475.470:235): pid=11906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1547" name="nl80211" dev="sda1" ino=2052 res=0 errno=0 [ 845.457476][ T59] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 845.478866][ T152] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.503869][T11910] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 845.570307][T11910] VFS: Can't find a romfs filesystem on dev nullb0. [ 845.570307][T11910] [ 845.910946][T11915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.920708][T11915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.014374][ T59] Bluetooth: hci5: command tx timeout [ 846.094285][ T59] Bluetooth: hci6: command tx timeout [ 846.201103][ T152] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.742451][T11930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.771407][T11930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.867677][T11783] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.868062][T11783] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.868345][T11783] bridge_slave_0: entered allmulticast mode [ 847.906960][T11783] bridge_slave_0: entered promiscuous mode [ 848.132766][T11783] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.133091][T11783] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.133497][T11783] bridge_slave_1: entered allmulticast mode [ 848.145677][T11783] bridge_slave_1: entered promiscuous mode [ 848.223731][T11952] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1559'. [ 848.378671][T11783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.433827][T11956] FAULT_INJECTION: forcing a failure. [ 848.433827][T11956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.433913][T11956] CPU: 0 UID: 0 PID: 11956 Comm: syz.0.1560 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 848.433939][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.433952][T11956] Call Trace: [ 848.433960][T11956] [ 848.433968][T11956] dump_stack_lvl+0xe8/0x150 [ 848.434023][T11956] should_fail_ex+0x46b/0x600 [ 848.434084][T11956] _copy_from_user+0x2d/0xb0 [ 848.434111][T11956] __sys_bpf+0x2e7/0xd90 [ 848.434148][T11956] ? __pfx___sys_bpf+0x10/0x10 [ 848.434241][T11956] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 848.434279][T11956] ? rt_mutex_slowunlock+0x219/0x460 [ 848.434405][T11956] ? ksys_write+0x248/0x270 [ 848.434457][T11956] ? __pfx_ksys_write+0x10/0x10 [ 848.434486][T11956] __x64_sys_bpf+0xba/0xd0 [ 848.434563][T11956] do_syscall_64+0x166/0x520 [ 848.434606][T11956] ? trace_irq_disable+0x3b/0x140 [ 848.434633][T11956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.434670][T11956] ? clear_bhb_loop+0x70/0xc0 [ 848.434742][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.434777][T11956] RIP: 0033:0x7f607617e159 [ 848.434821][T11956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.434842][T11956] RSP: 002b:00007f60743d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 848.434914][T11956] RAX: ffffffffffffffda RBX: 00007f6076405fa0 RCX: 00007f607617e159 [ 848.434953][T11956] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000000 [ 848.434968][T11956] RBP: 00007f60743d6090 R08: 0000000000000000 R09: 0000000000000000 [ 848.434983][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.434997][T11956] R13: 00007f6076406038 R14: 00007f6076405fa0 R15: 00007fff5b00e728 [ 848.435073][T11956] [ 848.514822][T11783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.874284][ T37] audit: type=1800 audit(1788325478.990:236): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1561" name="nl80211" dev="sda1" ino=2056 res=0 errno=0 [ 849.833811][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.845760][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.846999][T11786] bridge_slave_0: entered allmulticast mode [ 849.856913][T11786] bridge_slave_0: entered promiscuous mode [ 850.289013][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.290249][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.502252][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.502532][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.502900][T11786] bridge_slave_1: entered allmulticast mode [ 850.537538][T11786] bridge_slave_1: entered promiscuous mode [ 850.633412][T11783] team0: Port device team_slave_0 added [ 850.710805][T11783] team0: Port device team_slave_1 added [ 850.719305][T11979] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1568'. [ 850.864592][ T152] team0: left allmulticast mode [ 850.864669][ T152] team_slave_0: left allmulticast mode [ 850.864744][ T152] team_slave_1: left allmulticast mode [ 850.926949][T11986] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 851.007384][ T152] team0: left promiscuous mode [ 851.007521][ T152] team_slave_0: left promiscuous mode [ 851.007902][ T152] team_slave_1: left promiscuous mode [ 851.009450][ T152] bridge0: port 3(team0) entered disabled state [ 851.466309][ T152] bridge_slave_1: left allmulticast mode [ 851.467875][ T152] bridge_slave_1: left promiscuous mode [ 851.468311][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.510620][T12000] FAULT_INJECTION: forcing a failure. [ 851.510620][T12000] name failslab, interval 1, probability 0, space 0, times 0 [ 851.511094][T12000] CPU: 0 UID: 0 PID: 12000 Comm: syz.1.1572 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 851.511135][T12000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 851.511149][T12000] Call Trace: [ 851.511157][T12000] [ 851.511166][T12000] dump_stack_lvl+0xe8/0x150 [ 851.511245][T12000] should_fail_ex+0x46b/0x600 [ 851.511299][T12000] should_failslab+0xa8/0x100 [ 851.511335][T12000] __kmalloc_noprof+0xfb/0x790 [ 851.511406][T12000] ? tomoyo_realpath_from_path+0xef/0x640 [ 851.511469][T12000] ? tomoyo_realpath_from_path+0xef/0x640 [ 851.511504][T12000] tomoyo_realpath_from_path+0xef/0x640 [ 851.511597][T12000] ? tomoyo_path_number_perm+0x219/0x5f0 [ 851.511634][T12000] tomoyo_path_number_perm+0x246/0x5f0 [ 851.511661][T12000] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 851.511698][T12000] ? __lock_acquire+0x6df/0x2e40 [ 851.511794][T12000] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 851.511818][T12000] ? hook_file_ioctl+0x1f5/0x610 [ 851.511923][T12000] ? __fget_files+0x2a/0x420 [ 851.511971][T12000] ? __fget_files+0x2a/0x420 [ 851.512009][T12000] ? __fget_files+0x3a8/0x420 [ 851.512046][T12000] ? __fget_files+0x2a/0x420 [ 851.512121][T12000] security_file_ioctl+0xc3/0x2a0 [ 851.512154][T12000] __se_sys_ioctl+0x47/0x170 [ 851.512186][T12000] do_syscall_64+0x166/0x520 [ 851.512249][T12000] ? trace_irq_disable+0x3b/0x140 [ 851.512310][T12000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.512334][T12000] ? clear_bhb_loop+0x70/0xc0 [ 851.512382][T12000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.512449][T12000] RIP: 0033:0x7f075d35e159 [ 851.512476][T12000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.512496][T12000] RSP: 002b:00007f075b5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.512540][T12000] RAX: ffffffffffffffda RBX: 00007f075d5e5fa0 RCX: 00007f075d35e159 [ 851.512582][T12000] RDX: 0000200000000300 RSI: 00000000c0184d16 RDI: 0000000000000003 [ 851.512603][T12000] RBP: 00007f075b5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 851.512617][T12000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.512630][T12000] R13: 00007f075d5e6038 R14: 00007f075d5e5fa0 R15: 00007ffed36f8ed8 [ 851.512666][T12000] [ 851.520920][T12000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 851.821289][T12006] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1578'. [ 851.835858][ T152] bridge_slave_0: left allmulticast mode [ 851.841633][ T152] bridge_slave_0: left promiscuous mode [ 851.841937][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.984192][ T38] INFO: task kworker/0:0:9 blocked for more than 144 seconds. [ 852.984258][ T38] Not tainted syzkaller #0 [ 852.984272][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. ** replaying previous printk message ** [ 852.984272][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 852.984283][ T38] task:kworker/0:0 state:D stack:21544 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 852.984411][ T38] Workqueue: usb_hub_wq hub_event [ 852.984572][ T38] Call Trace: [ 852.984581][ T38] [ 852.984595][ T38] __schedule+0x16d9/0x5700 [ 852.984621][ T38] ? __lock_acquire+0x6df/0x2e40 [ 852.984695][ T38] ? __lock_acquire+0x6df/0x2e40 [ 852.984754][ T38] ? driver_probe_device+0x4f/0x240 [ 852.984935][ T38] ? __pfx___schedule+0x10/0x10 [ 852.984970][ T38] ? schedule+0x90/0x2b0 [ 852.984997][ T38] schedule+0x164/0x2b0 [ 852.985062][ T38] schedule_timeout+0xc0/0x2c0 [ 852.985121][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 852.985167][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 852.985256][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 852.985289][ T38] ? wait_for_completion+0x272/0x5e0 [ 852.985315][ T38] wait_for_completion+0x2ca/0x5e0 [ 852.985400][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 852.985452][ T38] ? kobject_put+0x50f/0x550 [ 852.985504][ T38] i2c_del_adapter+0x292/0x440 [ 852.985613][ T38] ? __pfx_i2c_del_adapter+0x10/0x10 [ 852.985642][ T38] ? dvb_usbv2_exit+0x94d/0xb80 [ 852.985840][ T38] dvb_usbv2_probe+0x4bb/0x3950 [ 852.985969][ T38] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 852.986013][ T38] ? __pm_runtime_set_status+0x977/0xc40 [ 852.986152][ T38] usb_probe_interface+0x788/0xe50 [ 852.986236][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 852.986326][ T38] ? sysfs_do_create_link_sd+0xe0/0x110 [ 852.986354][ T38] ? driver_sysfs_add+0x1fe/0x210 [ 852.986412][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 852.986456][ T38] really_probe+0x254/0xae0 [ 852.986508][ T38] __driver_probe_device+0x1e8/0x360 [ 852.986542][ T38] driver_probe_device+0x4f/0x240 [ 852.986636][ T38] __device_attach_driver+0x270/0x410 [ 852.986680][ T38] bus_for_each_drv+0x25b/0x2f0 [ 852.986705][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 852.986793][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 852.986828][ T38] ? rt_spin_unlock+0x165/0x200 [ 852.986867][ T38] __device_attach+0x2c7/0x450 [ 852.986935][ T38] ? rt_spin_unlock+0x159/0x200 [ 852.986984][ T38] ? __pfx___device_attach+0x10/0x10 [ 852.987021][ T38] device_initial_probe+0xa1/0xd0 [ 852.987093][ T38] bus_probe_device+0x12d/0x220 [ 852.987155][ T38] device_add+0x7d7/0xb80 [ 852.987184][ T38] usb_set_configuration+0x1ad8/0x2180 [ 852.987313][ T38] usb_generic_driver_probe+0x8d/0x150 [ 852.987371][ T38] usb_probe_device+0x1c3/0x3b0 [ 852.987460][ T38] ? __pfx_usb_probe_device+0x10/0x10 [ 852.987504][ T38] really_probe+0x254/0xae0 [ 852.987550][ T38] __driver_probe_device+0x1e8/0x360 [ 852.987629][ T38] driver_probe_device+0x4f/0x240 [ 852.987669][ T38] __device_attach_driver+0x270/0x410 [ 852.987721][ T38] bus_for_each_drv+0x25b/0x2f0 [ 852.987774][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 852.987821][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 852.987843][ T38] ? rt_spin_unlock+0x165/0x200 [ 852.987920][ T38] __device_attach+0x2c7/0x450 [ 852.987974][ T38] ? __pfx___device_attach+0x10/0x10 [ 852.988014][ T38] device_initial_probe+0xa1/0xd0 [ 852.988069][ T38] bus_probe_device+0x12d/0x220 [ 852.988112][ T38] device_add+0x7d7/0xb80 [ 852.988142][ T38] usb_new_device+0x99a/0x1680 [ 852.988166][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 852.988241][ T38] ? __pfx_usb_new_device+0x10/0x10 [ 852.988302][ T38] hub_event+0x28cf/0x4cf0 [ 852.988440][ T38] ? __pfx_hub_event+0x10/0x10 [ 852.988493][ T38] ? rcu_is_watching+0x16/0xb0 [ 852.988592][ T38] ? process_scheduled_works+0x97a/0x1630 [ 852.988655][ T38] process_scheduled_works+0xc3d/0x1630 [ 852.988797][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 852.988838][ T38] ? assign_work+0x3cf/0x5d0 [ 852.988916][ T38] worker_thread+0xa47/0xfb0 [ 852.989006][ T38] kthread+0x38b/0x470 [ 852.989046][ T38] ? __pfx_worker_thread+0x10/0x10 [ 852.989131][ T38] ? __pfx_kthread+0x10/0x10 [ 852.989157][ T38] ret_from_fork+0x514/0xb70 [ 852.989184][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 852.989236][ T38] ? __switch_to+0xc89/0x1420 [ 852.989313][ T38] ? __pfx_kthread+0x10/0x10 [ 852.989339][ T38] ret_from_fork_asm+0x1a/0x30 [ 852.989429][ T38] [ 852.989853][ T38] [ 852.989853][ T38] Showing all locks held in the system: [ 852.989902][ T38] locks held by kworker/0:0/9: 5, on CPU#0: [ 852.989937][ T38] #0: ffff88801ea8a138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.990020][ T38] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.990131][ T38] #2: ffff88802a9b6210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 852.990257][ T38] #3: ffff888027cc4210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 852.990327][ T38] #4: ffff88804188e1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 852.990421][ T38] locks held by kworker/0:1/10: 3, on CPU#0: [ 852.990436][ T38] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.990552][ T38] #1: ffffc900000f7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.990629][ T38] #2: ffffffff8f5d1c38 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x72/0x7f0 [ 852.990799][ T38] locks held by pr/ttyS0/17: 3, last CPU#1: [ 852.990816][ T38] #0: ffffffff8e09d578 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 852.990948][ T38] #1: ffffffff99e971f8 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 852.991032][ T38] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 852.991137][ T38] locks held by ktimers/1/29: 5, last CPU#1: [ 852.991152][ T38] #0: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 852.991279][ T38] #1: ffff8880b8728558 (hrtimer_bases.lock){-...}-{2:2}, at: __local_bh_disable_ip+0x3d/0x420 [ 852.991381][ T38] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 852.991476][ T38] #3: ffff8880b87285b8 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 852.991799][ T38] #4: ffff8880b8728558 (hrtimer_bases.lock){-...}-{2:2}, at: __hrtimer_run_queues+0x495/0xaf0 [ 852.991907][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 852.991940][ T38] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 852.992017][ T38] locks held by kworker/u8:6/152: 4, on CPU#0: [ 852.992055][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.992158][ T38] #1: ffffc9000410fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.992295][ T38] #2: ffffffff8f5c33e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 852.992420][ T38] #3: ffffffff8f5d1c38 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 852.992564][ T38] locks held by kworker/u8:16/3386: 3, on CPU#0: [ 852.992607][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.992678][ T38] #1: ffffc9000fb87c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.992800][ T38] #2: ffffffff8f5d1c38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 852.992963][ T38] locks held by dhcpcd/5248: 2, on CPU#0: [ 852.992979][ T38] #0: ffff8880413dc928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 852.993120][ T38] #1: ffffffff8f5d1c38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 852.993180][ T38] locks held by getty/5340: 2, on CPU#1: [ 852.993216][ T38] #0: ffff8880362590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 852.993450][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 852.993541][ T38] locks held by syz-executor/5595: 9, last CPU#1: [ 852.993576][ T38] #0: ffffffff8e29eaf0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 852.993654][ T38] #1: ffff888033333a30 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18e/0x1d80 [ 852.993786][ T38] #2: ffff888035742cb0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x27d/0x1d80 [ 852.993879][ T38] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 852.993974][ T38] #4: ffff888077acb418 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 852.994345][ T38] #5: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 852.994478][ T38] #6: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 852.994568][ T38] #7: ffff888058943118 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x569/0x58f0 [ 852.994681][ T38] #8: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1e0/0x400 [ 852.994843][ T38] locks held by kworker/0:4/5710: 3, on CPU#0: [ 852.994860][ T38] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.995000][ T38] #1: ffffc90005b7fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.995092][ T38] #2: ffffffff8f5d1c38 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 852.995198][ T38] locks held by udevd/10429: 4, on CPU#1: [ 852.997568][ T38] #0: ffff8880368f5838 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 852.997666][ T38] #1: ffff888061338c78 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 852.997772][ T38] #2: ffff88805ddacf08 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 852.997910][ T38] #3: ffff888027cc4210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 852.998027][ T38] locks held by syz-executor/11783: 2, on CPU#0: [ 852.998060][ T38] #0: ffffffff8ed319c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 852.998122][ T38] #1: ffffffff8f5d1c38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 852.998241][ T38] locks held by syz-executor/11786: 1, on CPU#0: [ 852.998257][ T38] #0: ffffffff8f5d1c38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 852.998394][ T38] locks held by syz.0.1574/11993: 2, on CPU#1: [ 852.998417][ T38] #0: ffff8880607453b8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 852.998579][ T38] #1: ffffffff8f5d1c38 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bb/0xa10 [ 852.998657][ T38] locks held by syz.3.1578/12006: 1, on CPU#0: [ 852.998699][ T38] #0: ffffffff8f5d1c38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4ac/0x810 [ 852.998777][ T38] [ 852.998784][ T38] ============================================= [ 852.998784][ T38] [ 852.998809][ T38] NMI backtrace for cpu 0 [ 852.998850][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 852.998916][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 852.998928][ T38] Call Trace: [ 852.998937][ T38] [ 852.998945][ T38] dump_stack_lvl+0xe8/0x150 [ 852.998995][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 852.999078][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 852.999117][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 852.999189][ T38] sys_info+0x135/0x170 [ 852.999249][ T38] watchdog+0xfd7/0x1030 [ 852.999286][ T38] ? watchdog+0x1c7/0x1030 [ 852.999360][ T38] kthread+0x38b/0x470 [ 852.999410][ T38] ? __pfx_watchdog+0x10/0x10 [ 852.999447][ T38] ? __pfx_kthread+0x10/0x10 [ 852.999483][ T38] ret_from_fork+0x514/0xb70 [ 852.999562][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 852.999597][ T38] ? __switch_to+0xc89/0x1420 [ 852.999629][ T38] ? __pfx_kthread+0x10/0x10 [ 852.999677][ T38] ret_from_fork_asm+0x1a/0x30 [ 852.999757][ T38] [ 852.999781][ T38] Sending NMI from CPU 0 to CPUs 1: [ 852.999817][ C1] NMI backtrace for cpu 1 [ 852.999830][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 852.999849][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 852.999859][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 852.999940][ C1] Code: f3 65 fc 44 89 f9 d3 e5 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5c a2 d1 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 852.999955][ C1] RSP: 0018:ffffc90000167900 EFLAGS: 00000202 [ 852.999975][ C1] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000000000000000 [ 852.999985][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000000 [ 852.999995][ C1] RBP: 00000000000003f8 R08: 0000000000000000 R09: 0000000000000000 [ 853.000005][ C1] R10: dffffc0000000000 R11: ffffffff856085b0 R12: dffffc0000000000 [ 853.000018][ C1] R13: 0000000000000020 R14: ffffffff99e97220 R15: 0000000000000000 [ 853.000029][ C1] FS: 0000000000000000(0000) GS:ffff888125cd6000(0000) knlGS:0000000000000000 [ 853.000042][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 853.000054][ C1] CR2: 00007f075e1156c8 CR3: 0000000037b62000 CR4: 00000000003526f0 [ 853.000069][ C1] Call Trace: [ 853.000076][ C1] [ 853.000084][ C1] __serial8250_console_fifo_write+0x1ec/0x3f0 [ 853.000110][ C1] serial8250_console_write+0xac5/0x1230 [ 853.000131][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 853.000156][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 853.000185][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 853.000210][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 853.000241][ C1] nbcon_kthread_func+0x679/0x880 [ 853.000265][ C1] ? nbcon_kthread_func+0x163/0x880 [ 853.000285][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 853.000309][ C1] ? __kthread_parkme+0x71/0x1f0 [ 853.000351][ C1] ? __kthread_parkme+0x199/0x1f0 [ 853.000378][ C1] kthread+0x38b/0x470 [ 853.000394][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 853.000415][ C1] ? __pfx_kthread+0x10/0x10 [ 853.000431][ C1] ret_from_fork+0x514/0xb70 [ 853.000460][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 853.000476][ C1] ? __switch_to+0xc89/0x1420 [ 853.000499][ C1] ? __pfx_kthread+0x10/0x10 [ 853.000515][ C1] ret_from_fork_asm+0x1a/0x30 [ 853.000538][ C1] [ 853.005634][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 854.373577][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 854.383214][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 854.393287][ T38] Call Trace: [ 854.396588][ T38] [ 854.399528][ T38] vpanic+0x56d/0xa60 [ 854.403615][ T38] ? __pfx___schedule+0x10/0x10 [ 854.408479][ T38] ? __pfx_vpanic+0x10/0x10 [ 854.413001][ T38] panic+0xc5/0xd0 [ 854.416743][ T38] ? __pfx_panic+0x10/0x10 [ 854.421185][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 854.426658][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 854.432045][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 854.438212][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 854.444390][ T38] watchdog+0x1030/0x1030 [ 854.448743][ T38] ? watchdog+0x1c7/0x1030 [ 854.453197][ T38] kthread+0x38b/0x470 [ 854.457297][ T38] ? __pfx_watchdog+0x10/0x10 [ 854.461997][ T38] ? __pfx_kthread+0x10/0x10 [ 854.466602][ T38] ret_from_fork+0x514/0xb70 [ 854.471238][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 854.476364][ T38] ? __switch_to+0xc89/0x1420 [ 854.481069][ T38] ? __pfx_kthread+0x10/0x10 [ 854.485698][ T38] ret_from_fork_asm+0x1a/0x30 [ 854.490487][ T38] [ 854.493671][ T38] Kernel Offset: disabled [ 854.498013][ T38] Rebooting in 86400 seconds..