last executing test programs: 12.69885909s ago: executing program 3 (id=1502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x800006) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) rmdir(&(0x7f0000000100)='./control\x00') arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0x0) fsopen(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) get_mempolicy(&(0x7f0000000040), 0x0, 0x1, &(0x7f000001a000/0x4000)=nil, 0x1) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)) semget$private(0x0, 0x1, 0x201) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 12.62444152s ago: executing program 4 (id=1504): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={0x4, 0xffffffff, 0x22, 0xfffffff9, 0x1101}) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000140)=0x12) close(0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f0000000280), 0xffffffff, 0x40000) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000200)='lazytime\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000800)=ANY=[@ANYRES8=r3, @ANYBLOB="0ba41af5989301a0bca0610e08c9135e2f1cea951f516ff08df0a109502cf85c647b74368bb69d5be23a792fa5fae26be393526b8d3bb03c1f0d9a158439ebfbaf666652e3d22601285eade752ed78266e86c6dbece3ca5f55929868e439e4dc803f87b09329ae9965328ddc8475f38218336bdd3aeec10378803baf30e421939e8273a53ce670609e", @ANYRES32=0x0, @ANYRES64=r3, @ANYRESOCT, @ANYRES16, @ANYRES8=r5]) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r7 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000280)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) writev(r8, &(0x7f0000001780), 0x0) 11.115500384s ago: executing program 3 (id=1507): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x51}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x200080c2) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000010401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800fa0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf639d1f215ce3bb9ad809d5e1cace81", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x40094) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x80000001, 0x40c241) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001380)={0x0, 0x22, r7, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f00000012c0)={0x5c, r3, 'id1\x00'}) sendmmsg$inet6(r9, &(0x7f0000000180), 0x0, 0x4) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x2, 0x0, 0x0, 0x0, [0x0], [0x8, 0x5, 0xfffffffd, 0x546], [0x3, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x100000000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r10}) r11 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) 10.463600877s ago: executing program 4 (id=1509): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ptrace$ARCH_SHSTK_LOCK(0x1e, r3, 0x0, 0x5003) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{}, {r6, r7+60000000}}, &(0x7f0000000600)) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x3, 0xfffffffd}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) 10.269574363s ago: executing program 4 (id=1510): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x115080, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2}, 0x38) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0}) 9.986066871s ago: executing program 0 (id=1511): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r2, 0x4140, 0xac}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a008}, 0xeb64d656001b2f26) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) syslog(0x4, &(0x7f0000000000)=""/123, 0x7b) (async) setsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000580)=0x5, 0x4) 9.961188096s ago: executing program 0 (id=1512): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0x11, 0x6, "c9e024c4ed98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x23, 0xae, {0xae, 0x1, "10c5e96df34694ac74181961c1d1f897fbc07f13f802ca9f7fa3c4685a457d271fd5c1f721dcd5b14ec69afe917705070e6908d7a77a801f94c7663ce95350f6188506105ba04511f1beee0fda2a8193f083450c4a32066a48436f4aaee85d7e299dd114b9969534909e4b54df805b6757773bd30bb2cf7e1c856294cb482fdb39a168b3cb9a3693dbcaf56cb27c464e8189acbb64960aff7d9719aef9ef475f3e8b9088704c33e1847b355a"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x40, 0x17, 0x7e, "6add4b8f2b1f165cbeca80494756c00480fd56277b4df4065563aae044d7ceb29991e65d382e1ce8f230a339a243683296f428996051eb21e052c8fb2168acbf25197ef29f467361fb29193b10fe77360738762116f64d786a00ae1adf9ece3635825ce707e887a59744e4f23fc2782c0e67ecbc07bb06ebe10bbec61341"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x0, 0x16, {0x14, "46c0e750c1c953279974af9254c320e4f75ebd4f"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x3}}) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001440)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="a56041140d866dd8cdbf3c13648ba5db98d1d2b6a8e280bf743f160c4cb10b74397fee3c9ac24d8a76dcb54767198641da452d664746364a0e51", 0x3a}, {&(0x7f0000000500)='@', 0x1}, {&(0x7f00000006c0)="f1b4c7ce7a8d65d43ea13643098db6fed6802d89b96d16259e03c588d7c7aeaccc8dfb434c07bfe0af41f06c6163e243f2fbe4c6d3d2a95d555018f7e3ed536a9724891a220c0a62ea4e06b8c265214f6a71b48ee84888a6f72f93196aa2666e0facf83bea03a9957dd5cddec9c5b508e3df8647d9aa3d2cedc52ed11d928ef5f8c3f2d0a73307870ad4132ed55886f072a26af615c6a099106066f48632ad6c169ccf6816ba42c0cc0f0c168f533e34f6ac49787a8dbe08c7b042c5a533971ada511dc16cd02d590560eb38c2edf46426f432985393b70bd42a8456d3d654c4f550fb5479f6", 0xe6}, {&(0x7f0000000540)="73a7ab9705eaf595e7", 0x9}, {&(0x7f00000007c0)="96583c455ad2cdcaae51890a216707affa01e545e44c6ef7acad832c4035517a35f2fbde3e1ecd5cb887a64536bfb81a41de62597f8840bd312bef71d242291f347006fda65cc55a48e0c7b6bb22fbd2bb5eff2c6f561aecd1b26c4009ae396a954fabcdc79995e4e27b7d0d35f2fed53e088c27f485ba94b7976cc47256d880c1d25c2f0ebc2b17f7e19dfb1483c0ea1d126fc2e2edc7326e7dafd54b8ceef20fe0c7ad235305ce1bcbe8eb9cbba507133dd6a149d6880b7c8026d6174aea47b48978f64f6bf31d77dae4cc3a913bb73c06eb162f", 0xd5}], 0x5, &(0x7f00000008c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xf23e}], 0x30, 0x44}, {0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000900)="25eb4eaafb6fc87388a4be745eed97135868fb5855f69030a359fccb63dde9eb449ac97b9138ac8f468627da69bb4fdfbeb8298731520ec5414ebcbe5303b138f2a2a97338505978fcdea138d9b61d7965cc394c326baaddad6c0476a9ab4dbc440d764b9b2325f51c0269311dcaaf70d0719615f3b7a32008d828c6d06a8d4c030aa2229ae052fe3bbeab6beb64a690ec7d5d82436363fabfb6a3e03fa2829d1f7b1d8ff93bd498dfdb5692947a67bfdbd9d1b585d915d45e65affbfc71ca15b4db166bef6b36599f2aa4ed90b934063462402b71eb8fd3cf5234eef149064ec42d35b9d37fbdc453826ae5f569f3b04400", 0xf2}, {&(0x7f0000000a00)="563247eeb6b618dc35502a0b49f23984d0d9a03c529faae083ead8591a72815867866443f0ba79b71fbaa7206ff74f978aec3d791cd48a8a6ba4992e0940fd12ab13fdac08f3f807c2c1b0caf67a167b957902f7d9a150765fd7db", 0x5b}, {&(0x7f0000000a80)="7fc8fc46a974505898712fbf912010643e362700912362419acfe6f0a88f11d8249d252d465d24b26332030f93bc3e6843c277e4e45659535db8cb49cc6bd1675baa412589bef3d9ed4a4ebd26182d3a8fad32d4353ce9d5d850469f28fae5d5656fc1f28fbbdaae12f093a6d716f5c6a267f2191f82", 0x76}, {&(0x7f0000000b00)="4aa83e92ae49bff8e76d796b4b9dffe2f51ce1298ceff7f8c2deaf0229a8d2f6c04d79150aef442d9b707ad247136d87f8652cd69e0c32290f0b2c7ed3dda8c5f8a3e274", 0x44}, {&(0x7f0000000b80)="0d056cbc755ce259b2e8b72433afe125ee017e3e9daf2d38", 0x18}, {&(0x7f0000000bc0)="160913138d6e297b5727ceb5d310907681d3362dd6a13796a7f90c91dda03f5dbadccdabf45b7d7a68d58cdb198b2a", 0x2f}, {&(0x7f0000000c00)="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", 0xfc}, {&(0x7f0000000d00)="c526bfe5782c571ba4282b86fa0f14c7ab16398d4bd975f5b3bf07ac7cd540b06287f06b00432104d2c0bfabb8101c51003f82569f157147617cc07e06dedf33acc5c7fd42300ed333fed3638e053845c084e5940d9bf1ac2e73c0f89de162fae8345790b095fbe934e4e4dc2f65744692f50e95ce96b6db143444873fcfec32c0b5b2efcd303e", 0x87}, {&(0x7f0000000dc0)="4b08166cf8a55f1305ac169cfec32aa703e4543805c3c6fae1791e6d305b15588ea6d958386be57e668deeff5bffc4355caf9595a8373bfd751228aa1c456122b4c7234d765667e0108b6375f3a612f99fe3c5064d464a478de7cf7589947bb6c3d9dc77311f88ca7a7668d169b986be16bf932ea65ac5d20719cf", 0x7b}, {&(0x7f0000000e40)="b0735888a15eb90504d63ecdeae5e8cc788681de6eb13348768d3c288eca1713a4e0f776afaceb49c476155f957c9a48d28794d03b2f92f0872e15248d35bd6b54f25a61bd6398bc0058b9227bbc98e45f0f175fcc7757849e0bc0fa6139777fa6247af3049d10c577eda0d454128854e737a988eb8278f3194a2aa9993360a6c1b1ba7fa67b4c859d6d63217c93f269807034147458a5581a56212c8ad3b587bc0028b618734f74767db3fe57b90d29775c1ca156afd81683b66a91e842288c34981f80e7082f6c34bd3e3d0b815476fc41b8f3b94d6b649de1a7d00903892b62b41b0000000000", 0xe8}], 0xa, &(0x7f0000001000)=[@iv={0x110, 0x117, 0x2, 0xf5, "4ef84d493fd6721f62cab0b048b8ded8dac367246318c1f353ad0a3594c01cf41cafcc334cfdbf651750559852464625ab446c79566b4b8b6f8cde669ad3021f1c260488fc202fb92ac5800d43764d7cbc45f10a235d4ac05658c578ed481df712531b179b15384eeb5ee3bf3d324fd2d83d0c8b96116ea245024c4659c231fa94be7f010eb64cc0578702e4709e54e67bbf6093ffcb99713938e90b41218d6561aba76a173a3e86f45d8046a3bd7c9470a161f5df21f8a2c630b8fa0866414ac68594ed837097eab6e85c0ea923e46f60b198e233e8739ebeee11afeb7e6fcd5fca9fd67081f7786759d432d7d560ab2326b98913"}, @assoc={0x18, 0x117, 0x4, 0xa000000}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x0, 0x117, 0x4, 0xa}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x282}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x1f8, 0x40}, {0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001200)="ddc862d89861d9b28ffb83ac47b636420308cab78bf01b1b2bcc92bc8542dfc3c7739f3c74f153ef34218c2817389e51c48e6a05c3a2ebbc8f886ee88c490e399f7678bd6338091bfd1843051aef2e4d47f5633bfa2b62c166fe2fce574ad0b59e02ccd59dd643f4b639681f7a1478d0b179546c9f4fd7d3fd2f518d044c0ac0e7cd640317bb65aaedfa1f6e9bd2103406aa6b88d0ab48", 0x97}, {&(0x7f00000012c0)="28df97b9f70864d2361642a833e6ff507f5c72cd0e45a34d7b7d1831a3b515249ebe7e5e838d9723897513c259dc928a1d214eb3274fbb0ae819918bc72b9ef8ef54bb6ea568873bec602e4689ac76b2afb4f12977778953d4716c8beeaf387ed087539de29cc64195887e27b4beee8d34925e978401e11c9ed5f7fb2b8963d8b46284227a9d6767208babde9e2550bf8daeb1a1", 0x94}], 0x0, &(0x7f00000013c0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2f0}], 0x60, 0x4800}], 0x3, 0x40014) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001300)=""/102400, 0x19000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) syz_open_dev$dri(0x0, 0x1, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000400)=""/230, 0xe6) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000100)) ppoll(&(0x7f0000000240)=[{r2}], 0xd8, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) 9.282586027s ago: executing program 4 (id=1515): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0xffffffffffffffe3, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4004801}, 0x40800) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0xffffffffffffffdf) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="2784dcf4a2326ad838a4b32286af58db029bb2f107887b12ddd8ef4a8025526211649ebbfa8896ab162f72ee7ba61e6ae69e2c1229040623f91043161664748bed3a36e75170abff99ceaf34f41917962294624eba29b44a8065a8cc4864bbe1ca5cecd0330beb5eeebbeac12adb3f35bfd3aed5a76922d0099230073d47988c24078bdc448a2eb76c25740d0569151030ee810a2f5c1908236f9ffd0ea0daf7be14c3623641863eaf93921ed8700e79dd2d72da4f71d29e8418645c28466f09930c7f6386c3", 0xc6}, {&(0x7f00000004c0)="a32e6ec89361ae06c3df4d98a0cc567dbc9bd7cb4700c356513da062aaa8f0c5cdf0f1b18ac6ae4cd3e53a757ebdb643bf2f90363cdbc3b8dfa187cb2c5aa8df6a2a40eefcf4bb8dc5ac6bcb296fce8fb773b216f7f933e8e88f1740", 0x5c}, {&(0x7f0000000540)="58f1e912600ad9335155c74eced2086e7a0b1db7c860294c250cde408430216d9b7b137bd03aae490c34055b6ba9ba36459ff79d49349f06c05b3de53a61428fa7d061d6df2e1e67a9311818d0432e189ab39791479df0df84c642c731862255ab32021cc0f13d5622586950ef87709d34ef2d97da045a674517a84f17d092ec85683ce45ff8d62a235a3a105b63019993672336bd81c7c60c4ad55becb3ec99448c462ff6dd34d7b6d252a636ca6fe46d08bfa974f8581ec4744d9a8f", 0xbd}, {&(0x7f00000011c0)="43424b1804f3adfd366f95395760eefc15718e6d25dfd6a56e3500a5a4ac0cfaac9a0c510c23c4babc2bb55ec68707f96b240f3cbbabf73dfde4cc1fb7e43cd8a305bd9383a8a882f06120091de94f989553f0b9b4d2d50f71598b11d705bf68a3b09193d1234a756f17f27516223049d0c6b61d964e01d6cee828a78ed681f3daf8c17d4da110a2a1734d446db6742067971ae1fc31912fcb47ec13a166ee44470da213386607d77db0d86ccc38aa1c66ee491881347d2a91593fbbc09b86096ce42422b1f29a7cfca8666378cb1b12512d3585491bdaa086102a6e1c47c1f0547e284d12fcb6869aba207cc50e83f52c749384768e6a59df41af97306581dc09e116c5138a08890c467e7df6a9ed3127e2405ab8dfeb6c12fad1cb7bdd9e9d90a79066de3459b4d2e00f4f16764b901311f734977b2c57c73b8f3b21819d639d9a92d7cf1c59fd01dc3265bf833bb9953fdc88da846bffd42e0282b3c6da15668645a2447b8121e25693008f94bc0227d340c8cfade70255119ebda170cb10b4fa07a5198b0a8f9b7a54f4d1fda410aa4eaad87446d5f88b318b8db4a474cc1251a97becd565e2849395bbe6a9d5694f65c46a7361b22de35bf15d9ceda646987a6a19532f7e895f97b5aa647bd2cba963816d5650f85bd8398da1c4bb5bc3e3b30414b3678283d19f29fab24a605ba4ec1070eb02dc3b4ddd825103e8642e282e915375b4e58db149929f1fa003b6cb3778f0c96df14ea1b595954e8995729964c79f528e090fc64c0b2d2f7d773204b3de4de7a5fa65fea83cfb020310901c5a40ed11cc53e32a1ae2c60691650a6c5c4306d0283b1e714f77c149ce3b7efce158e17c8782a26e6a6759e2a2c3ef86f4f46b821b21ef56e2fb38ad9c8e689d33244dec9467a42e0a706445a96a3734c336c35010c8077468990bd90ed6481567e22e801dc9c55aab3aa876043d0920030b5e4ec2e4d63c10a46cc0a512791ae1f9968ebdd72244d6d10780cd37760d4f97016854054c71883f4380e66eadc36be1ce0f66f39ace257efa5738dcc35afd95004644964ecabeb3ca61a08fa76946ff48d6f3da59eb26494e8aad04ca1d71461388f2df77e6f004533aa5aa6f9af05929e264eaeef607180e616a9ce7a0cee910ba2c2f901ff1bb2774f06dcbb02d01f04a9e2c95201e25010985f93c04b0deb77c7b253224dab2122b876d6feb82225790d8b14865f0cc6e6a37ff62603c3b10c067f3949d3f36e33781405397175ad29fdbcff4d0653211aef92ca27a9468bbc918eb2fe0be4692e5e20c07d1c69b06e0aa0dcae4a6cd598f14c76b88f2f0bcb2ec1c9ef35c2eee6f5019a38f66a64fdad0e3c72ccf1134007ca7394c5aaac94375c02c33e29472784cdeec7114f4b08c72e4a1c7c67c104025f718fb6e435614e45f7fcb59b2329fcb05ee14037982d6ab271be160799974370adf0d2db173aa8920bdb5dd83e63c30f39c45888b9a43067b3e0e9b9b69ce0c7153d31b5db07adbbfc32784a9ddc9bc2d7f9ba5e29c773cb0003048ec6d72d44c11b8c09decf326d97972a37028e96eb4216a9603536b6208d67bb779d1b32e3d39a66472ebc5822753fdfb851bf700aa98c628dc8e9fca77bae1a86c6560aeb34506766442779a41cd9c0c603414bf8949fcba827a871cfb1649c2844c244bec786415cd6b2e1bc97f195c681727ca92c44de0d36c44358f8a085bb611903240a09884d1286afbbf39aa2707bfd08fe5456d71a7965dab19ef37a347d91be28312afa7d845c0557a580961d1551e176e0c80dd9cc473ddaab92a06022936ddd525f21f62c744ba82632c86cd3a3f86b024c006c43f3081ab649386e404b473a600ebdc89f3ee4853edc74dde1c4f3db934bfb5e96d176e758ee8a57e0016a57f877d30a629e10e8b7abfe4134d0e017cb557b70973e0cd7fc59fbbf1fad5ee39d293b1a98b464bdaefc7800ab3765d9ed829008e5550b0701e5b1609e78594e74a66af3896bbce5b96ab9cd0e156ce7a64720766aee0a32f61ecc10e6aba0efb8ef9da71fff5ad4f20f0fbd5afd491bad8fa866c5e44e0642e6fe6cad34e272df30188f193d438c92cca3f3fed92d085d7b7f25671043aef909fdc39b6b8fd315fdad52d71af49daf9ad7e362dbc28e955d94badb8efce1f5ffed6bb606ae683f7ff709a4fb18f7c9e1659f471795081658b986f3c982881ae333dbaceb7e7c0fd7f6bcf08b5f0addf4728f95c50925f1715e08d1666d3ea1ab3435e1f424655b5a3020bfe5276ed41e79bd81ecc1b94948bf7b37cd4082a6cdb387d878418e089e3082bb3fd018b35a223a12d2bc98b7e5a1e4bec92c189e88b62e9d9c0e7b172f387b009310f7398a204f4d3a3b21482f0494cb0d36bcf8bdf970a43b6a2df322510f45ad5ba1da2055deaf8d96f2f6624fd2edd62fe83cbd86acc88de12cb613d6d7232e06b336229f501c2d3f8bff31bdd16905d4bf2aad437a49f9c46168c4d1b34ce0b45088c9d00114e7641472d1a5d4fb48dab6023bc31cb5a78a9a14e6aa6b6dcd4b94e38bb67eee22bfcabd0d8d2dcdf84401984facc6a85a4b9f019e95dc1d93858622bd63bfd8b5d9d2c2d6e27022db3cedfe5838e01153fd3a40fbfed254e6be12bf47b85997c37b053d5933fc77edbfd301847eac40ffba14187b3eebff836576c57f2a873bd0d353da190a8485b34a8661fbb872755a1d2ca775be4123a35e5af51366a7f39167a1c7027dcf5c777a79e5b3e21040a78233a91b396722ebf5ee58e6ff2e51844335837ea2f84d5275480bc5df658c0e61241c318ce8974283cee4b4ce21e43e67deaf562cbc3c3e2508a8e7833dc8756bb4326a35474d15fb9e29e47a518fa6d16ab8894b4ca15723ba7f44eab6bcb5c72cf40088b5d4562ddcc501f91e19fec33819bd5d705fabc38e7bd1e853a3c0958f0ac58c966b1174d6ce4c339bafc562991a70b40cec51428e801080ff1b5888ffc06039b98b1768ec88d63b9bcbe3d29287e5a6da5151d8a402acb36e60363baa752462d8e780d589b46713c5b3e5f7c06cd1f222b5720b805a095ad762aa4ce32bc0d60b0fd4ce288ad47b4e477e801eadf57e8fa780d20ff63949489c17f6c2fbf7332da473e65e885f71640d0260db7c58966124737eacbc1c7ed7a6a3125bc3c4015e281d6b28a23e0ff24838971909ce163bb1b36b22579ae35bbde2a98efde7d13d5f5d255e92d926d067f3a6b3e3370f005473c2e44c23552e8cf9d4d48d098880ea0d08fddac5238a3443b8bd8f43e3769bf44e6a9a4bbeb19c0b2b794bf094809e566ef9a11b220470d34c94c0b896f5ac4fc09f8411b68d956436cb6dec3400eda0a1cb48501195d68f7cfbc16635250265cd6b285bf2e133467de779325104979ce6bc3fb91b91911000e8a7f25220c13b827dc9613dcc2fff85096ef2ae1fc63af82e4dcdb9238d3c7d0fba1e30f8d64cc2cc70b3c49ca234b8c10a9cd7d37655938147be82e11c171d242c2ff3ab0b6446e7d3070bb263b7268946bb3485f499ea341be693aaa889f6ec74de48871172a3cd245ab0755c65554e9ec80f49ef101e6035be32d6ed158470816bb72db4c9c70b1274f97777fa374fdf1c9e21ec5a622bcb4b51b6a2c02f68533ff1c5e36f4504c3ba3aaf88a567c4ef1c2c7ab91fc3231f586d92e003d9cadf68bcc0bec36f17d13448ea79ec977eff060fd41b97ddfa740e63363476ceef44a938e568115b21102316ce5badac610c5a2c098b2032827d116a0cd0067e97a4d6a2a0b05b1b628e181cbf5236af0bbe3498bd42461240ba0cfcdd9182989f7a12ff8a6118b9784ececcd48c162c4d7fe3c7bc104f295b92ac5f807074d740b6b17729354f09a63e0b2cf31757b192588f08eb2be0ee0b5ef6dcbfa86b87835b48ede9f7f01a444d66bdf654f56d22ad4ad9586bdf9b2ea19fa8f7f3dc73f3441d57a6dac11014998ef6deeee3d88067c4996ba19b185f6a83e8f689e8c5a3a8658dc2a55af71e383a22f859c52bf33c648e29e34e97f742c3bc72d81fbe71830557de3e24421acdf2b42b859982c7a2b0a60c1de411f1e10804b0ee10a07aa5fe065457de8c1a1dd92ce020195b5bf8dd3a12e2611f35e633bd5b12045b2ba4efc0c80dc98adcde3bd30617fb8fca88395740f72f54cc8db01c8d92aecb7fc4452a34fd02e59652609a8231c84e068bae23ed3b12d401d85064a353f911fdb3a518ca21edba51a7859d92d6fe6c507307c60ec62bfb395f499cbe1328306994aabfda16ae6eb76c9cb2fcbf2d64e685f958b424e02e6801f69a4b32d1f52730ee43af952e9c1be2762c4b3cbcad8e901be0ce0c7e5267c32c6012e60c1804b06b6f94cfe882fb6666464cbda0621c6eeceb725c8f9f12f4dbe4db8250a1a0c184fb9f9c871bbc41f34908e82d6e5d39925f36fe4c8487c8f0d991310a0a143359de5ad5e4ff2466da7f8cab25507f87442ff2aeba0a57656f8fdfb05f71ae8bfaa31d723775d2e010e335f079c94a47d16a89e7c0fcaa253bcec309e1c65f33450a0604663725f0d6aa967a3a1dca75c42935dccafd69a4b5a6cf0900a792afb4938bfe8633f434ef2eb040f05a1e57efbe93fa6470377311926d995586112725a88669e19e89516c08eef4b223ee9e2d57f21028ff28c4696a448f57bcef098583c9ccee686d36dedb16516f2f650b08aa53fece8a3ec83206acc003fd54400745260d06148062f01f876a97ae6083c9469b85bdf3e1e23325eea83533cd554cd6d36276d3dc79a2c249c0ef835efb9add577f37b5cd4beaeb3ce56c20a26a813929f80e512e06cfdfc885199a71d8ccb57ff5fe3469b84fd0f96570d908d51506c54da5d842918867e9a4ec42be031a14866c1a2eb8a6ac93bb55befb5c5f9fbfa8be29dbbaacd957445c8cb9790fd94127fa2658282df58798a71aa4c3c88c28811458d51b32d1a5d6d8545c907fe9d775ed0dcc2a37e23a30b4ac2c0f0e28a7cc5d85314e634627aa6919101e4a7e66afa5beae1c397df9ab8dc031e833b862450505cf51995efbac0ccd5e489d2d62beeca0f030cd9b722f0f636ce31a23d2cc31a91031c455d4dd9b2c54705c06060b42084f73c9ffae32af9af1331b33935d49f475508e953fe50c1d2bb9c6bdf0fbb390eed5d313fe052bb606b43d3f4a72861b539833783627e992fab0be5b5f45a84a76245a66d2b5d49d1e4add3861856888e9aadffe9c8e99d78d37e5c0876354ecb8dd1e7653ea3a468d0432feb9b11d87c660abefa57be8b40c34eebec6ade532a194bb767a985e66a0fcd2ee34271ce95acef29d7232be079a3c17f87ed74b2eb04a7ac2a1562659f2e88b22f759ad52e0bc3b1b182aba8de663d078a28f8d5a2f568a3219219c3f78435354847b05dcd4aef2d40473d5ab9aa7bc6cfe3f10026f6417401df4acb4600e0d20b961452095252ffc5bb32f6981b4c2d8b7cd20a1d0934366c36e23213d8b96048c7ffce08190efc2ee92e4d3899f507335b376391d39c9e8e9bf4cb8fc253f4a87cdea2bfe15b4ae2a4f744b2b11ccd7933941004a1bda4a24f63be6e73ab7f3715c5bbcdae91469fe3d5d730da20413d3f7436c6adbedf5dd34c3dd94e284bc93f9da28c9328fe0c014c9bda5789f105638f8c345125b971c9ae8095666c627d8cebc4660a8548b4effb1f8d879b9886e2a155143031ed396e7a387007f411ecdcc7d136141c2e2bc4632690805f2afa96363cc0b8758dec67de9b5ea45f39", 0x1000}, {&(0x7f0000000240)="96904cc2fd18665be55a87", 0xb}], 0x5, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="31242853b95af47f640d98e9e2e854f95ab5df2a9e39c49df856e78947e0dc0b67a29155e43e02c361dcdba3c7935fbec9bf914c01b7029b180e0d965c1d72222bf45e89521d5123b866ba2368c83fdb9bbcce5a13b1d46b3a516073c15197865be0498e23b53fada2d0adaa771fd4bc5ea665fd9d1d3c7be8aa0831879059ce17fff63087ec6ded71783498abd880d7376c7fe7b971238223b7f0697f4a9e7d3c09f142ff82f9f83f165b38f859b7d8027ddf98045f88a51db39337d42568d3ff807b8902852b09b346da3c8e59d5843d31628342b4719e080ae340ac6e740e5718d0e43a6e53b3cc76164d3dc3526e967b16e8", 0xf4}, {&(0x7f0000000b00)="adaea49a4f32703b0b62307f4f29df574397c6", 0x13}, {&(0x7f0000000b40)="b41be5397a1017f030e8422cf4247433e59da78b925b2d", 0x17}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="00000000e1000000000001000000010000000000d8428db04a4871c36455687f191759e72280c6c2f765d25e1a0e11f31dd46e3476aaced188ac5c72cd66b5d5e5d2ff", @ANYRES32, @ANYRES32=r3, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x140, 0xc050}}, {{&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000000e80)="eec4dae624a91e6e3368eb99fc4d6d394c811bf77f59a2ef7963f7b0b6ba37c0e3eb5f7fd2d9505e38436c65994f6661c662f850c5dc4a3ad8b4f30481b8515ad1c8c751fca75f1ad53621976d14219f9ddfb1f30c3d162cc5d2e90ff9ce6fa64441cab8edcb9075e12af2b3bc4fd547cef86c336d5f20868a8881b8f7819204e92be809a7e2d7df6476c721804d89aae4c9223808a8d63e803834abb231f16cb8ea67ac4cedc81ebb3c03498f6cd56540e378eb035a074908df1068556ba2ef3ed7fd92d0406e0154d8d845164bf1246213307a2a8130", 0xd7}, {&(0x7f0000000f80)="56b82ede08522e7dc76b50e110a8e123f7b56cbc7e606bb8077d85a3f7254c692de454e4de9bc7f7ba654188d7dfe040c5f54270e362c59aa2da004658019ef69b92d7091ed7615051191246d097e204259c04f479063e8ea90c237d3bda59094a27", 0x62}, {&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000001000)="3eeab0da567f0886eac7aa9000b6b79188906010ab689f00dfa2b325c402d4d2beeb3775eb3a47d80c864ed8fa12103f3e31cf82433f0d6a31ce029d786a26ce01c75b9f14b1a6215b88dc1a6a30a6be39f28ddc78607899a99f3be8d381501b66e85014d252d5bbc44d7dca5f40f7ababf4c3510a30a639b7d2374886e567f99a9fd6922b4675fb1758aafd480e4d47a5fe31e48e5957fccd2b0fa64e5c36e15f6020bec027ee37c4a64c05372fdef9ea76a73a9fabdc5272cb3d", 0xbb}, {&(0x7f00000010c0)="97bf4a826ce2b2a74d05710b03c395ae6fe0cab4e8b83eb1acef3bc81b1388506d5eed6b80c5b43cbfe6bcd17905f6fc5e4000b48cec60dddd1e1db66269930da73de6f34ebea41981bf9ec4a976534095d1ec1ed7aec066726228164f5fd9d124ed1fc3b1f2aa629c19e4e68d416e7d5ac47633a4aac9a1269a5b453d2240583db3b3b6218738401b116fb569bc95ed", 0x90}, {&(0x7f00000021c0)="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", 0xfa}], 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c1895276b6d000000000005000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r2, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32], 0x80, 0x8004}}, {{&(0x7f0000002440)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f00000025c0)=[{&(0x7f00000024c0)="dcd242f0c85409c356198a505f77b85a8572b21cac625ea1d380f623e65e2e00e37783aec5f624478dc1e92522ab9fe18ea66f25dd3f937851c15b64bcfdc335de53f1347fe70225930d73d5edeca0f05f12a76de2", 0x55}, {&(0x7f0000002540)="b832354536b258aa3c95559fb4cb29bb63481545d549f002063e7d9364331d11fa1135ca295ef81d29a5c7826fead1ae753f46e0a62e4d69056ad5ba52a48ab38763598a71bfc356587d2fc1b9b9431f6861015dfc1368b813f503d9a00984e1945a52681add", 0x66}], 0x2, &(0x7f00000056c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0, 0x44090}}, {{&(0x7f00000057c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005840)="8b8fc95b", 0x4}, {&(0x7f0000005880)="acf8b8a2b33663d0445f89531ebf455e9a509f937fc4b46f3464257479393dc22950b31f08415692997d8b550f95a168fc0b0d21b7ab8e9b50ccc03b11959df7756b0177c1350f0c571513e2d9902a454d517f05a29ea4b26c19083c59649a374b0244de52ba88e3ade9d1b485f10c865a5997856d050194325469a239c475fc527d8dd221189e1834eae6ddb1fe86ee6bf6bdbd2fac31bd6211c512276cbc3980ba00bd070f89c4faac5f08dc9da2a7c8734654bf3be01c1c7798b766a57bc16661776eaa72d5110d7370037e422282a2183b7d37647a8ae878f8538fee80bdbc5ae41005f01f048373a18a", 0xec}, {&(0x7f0000005980)="b22326c5d333e3a6c9a8d7ddcaf801a256b83644546e4e1d915ef3ec2cff6de945a6cc0f69fcdb3327001da7d11e691abd17e55a2e35d1ca5a000f6a45434129173df4b0b7e79307d60fb08b0d2c03208cc55ecf95fced84d50217c700dc044792202a9ca10fa949769c477fe327c440fe686e3cacec398298eb381a05bd45673dc0cb745368a64be0865bc1c1fd51f96b9b3bd2720d148037db0aa79f2e219cc43a971930d64d3f51d9f68cac967b26d1b0c15df5c87f1694e064cd9b830089c4d52cefd182becd0a0537fce94b4a05e011abea", 0xd4}], 0x3, 0x0, 0x0, 0x4}}, {{&(0x7f0000005ac0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005bc0)=[{&(0x7f0000005b40)="b6a8cc093d87abc5f7bb1a1d497ff849deba8bb9856c8869490e68e4749ebd90c6469472a211a54504ad54739331f4feb7ab2701b5bc65e56627dee85148dd40c12a7a66728a9092a44b82e51939441c2ec37df4bd00c1756a56e2cad54ade98079674053edf5810109c211d6998c03467e6036949f3c89c", 0x78}], 0x1, 0x0, 0x0, 0x2d152260d7090375}}, {{&(0x7f0000005c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006040)=[{&(0x7f0000005c80)="259a9da26c22da4f0801bb71a1a8b7fd11ad933ffb07908e73ea7c95be38e45d11b0d1569fb9f577a95c891d9bb0d1049c45b934cb19122f3b0eda66e6599666edd9663cc1c0732230c6ff946c3283ade9a126001d37d4c6190b418c0ba27bf4d6ec82db58d0603aa930578a5aa4cddd46709cf858ee292ef44c50c745716ceb3709c3015e67219e89c66c34dd825acce02f71ecb5835f758c778c7c122e44bbc7ed503c5f388fb9dac7614c86612024ed2bf9d76fc01d0c9e705f2e3bf6749b4feccf8bffc26343b6e4aaee0b1c8cc47b39a827c4", 0xd5}, {&(0x7f0000005d80)="6104c2f1e079eec98455583eb34a2bbd39d871c3ffdab873fee8619963", 0x1d}, {&(0x7f0000005dc0)="48bdb741e62ef07b4dbedf90059097c09b43ca2b0a9b7bab7df7b907", 0x1c}, {&(0x7f0000005e00)="bfa936378d3bfba9c76857f0d4681245853e2bd2109c954895e91fddd5762b7f54463e5876a271b2e8cb9c21bd7c5e3a3cccdc1e84af5df6dde6", 0x3a}, {&(0x7f0000005e40)="7cbf29e15eddb33817051ebbc7ee5f6c675bf89f3a6d73e7d8ec28d6b598e9d3d4c36b9b0c", 0x25}, {&(0x7f0000005e80)="e69ebe951c28c04725239d06964b6377e4a03f273018e3fb7f8eec4b7163be997cb2727579598c645dfa4b4a1c347bb7b1389a41404a3aa4602172e70f3eee88210eebae2027973b4d17b8663b47a0ad51c44741a88f6d803e8f6fe6c737aa0dfa32f2067f64a4a2ce8d2c3befe1d33d2312e905fade9e5f4a7eb7c7ad2f2b0730dc60510e", 0x85}, {&(0x7f0000005f40)}], 0x7, &(0x7f0000006400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, r0, 0xffffffffffffffff, r7]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130, 0x40008}}], 0x7, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xa}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r11, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) 7.525875028s ago: executing program 1 (id=1518): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 7.446719562s ago: executing program 2 (id=1519): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x4049, 0x4, 0x0, 0x4003}, 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 7.352517662s ago: executing program 3 (id=1520): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xbc, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x6, 0x3, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b60900000000003e4c30a5107b7b9aa6d8694be1422b107d99b978000010169a87617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r2, 0x118, 0x1, 0x0, &(0x7f00000003c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000840)=""/99, 0x63}, {0x0}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000000980)=""/74, 0x4a}], 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r5, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20090}, 0x20000000) 6.385724336s ago: executing program 2 (id=1521): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x200000000358, 0xffff8880b840e000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a000000030000000000000000040000000c000a"], 0x24}}, 0x0) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xc]}, 0x8, 0x80000) ioctl$int_in(r3, 0x5421, &(0x7f0000000480)=0x10000) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x9, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000540)='syzkaller\x00', 0x10000, 0xf1, &(0x7f0000000580)=""/241, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, &(0x7f0000000680)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x10, 0x0, 0x1}, 0x10, 0x28162, r4, 0x2, &(0x7f0000000700)=[r4], &(0x7f0000000740)=[{0x2, 0x3, 0x2, 0xc}, {0x4, 0x1, 0xa, 0x8}], 0x10, 0x2}, 0x94) sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="917c7969a9e3214b9eb5c6c7f50aa59b6e0efce1d9d17b2b88e425ff9907feac74adfec3f3d6f4933e1f033e69390c00588c0c257d7a64edf62422d40ebe4b654e0c4928aeb8f0bb80c92826f8cd95abed7d2ab56c10e2c7ba3187254d0e72c6bedd72c4d90ed58637b5e4c7a52f4f8dec41926c69618d6c63ada03ec6a66a6459159ec9a5d1b859ec46d2469600d2d31e7ccc682c468d0003444173484c078b9e98d689d692c566879b63f49eb0da9ba4239948eeeed3bb74a268", 0xbb}, {&(0x7f0000000100)="a436936320cb2154db0929c6dd138ce32000e5068faa02c2a8b15b70b16889bbe1fe0c07a1c801c2fc7115c7644c19a4c1a18c9bf6fe906a2fadaba737a1f4b0ece9e5a74048b86c998619b3c46ad839db47e4ae8a6f08c83017ffa2db551daedb5f02f3cb29862119f2ea6f305db0ec2602ee4bc041d1aa1424e77d95174f9101cbe675f56a9c7608a120645ad283eef157d397492cef1fdbaadd59c9b3954cd7a7e3b479fdfe0fbfb3b2", 0xab}, {&(0x7f0000000840)="7b716b833dc123bbe307fa1ad6c80b1a1c7a46aae8fd03483c9fdcef376e8d80aa42a5d197b4232bbdc24d839b16903c0a8dc8ac0e2c5d0d73e896863fdc7fc046947cb115fe0a125acc3718c61e77e5cfe085abd7b47870c3c96d4a58704397a1e6c2576ed6bf09f416906b9f45dfc77e3cfe1a37e1f7bd10e182ec4151fba53a2eae4ef62645f1c71773a606abbee19cebe8b5204f47eca142ac735f5646f12d30da2df22693e2800d2213508e262e6f215a9f6356c77e3a5e12ba858207a1c607869f26ace11a849045693a222539e64be2fe4c2c380feea2a4845f1f98a112ad1cd005dfd050485fefff8f933330e014a982d34d01", 0xf7}, {&(0x7f00000002c0)="6b7a60a320bfbe3ae746b5e09652cf793a", 0x11}], 0x4, &(0x7f0000000840), 0x0, 0x20080004}, 0x4000000) 6.31531192s ago: executing program 1 (id=1522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0x4018aee3, &(0x7f0000000280)={0x28729f328c688bb}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x149e82, 0x1) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1002000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$sndpcmc(0x0, 0x4, 0x200081) ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syslog(0x4, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) mlockall(0x7) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000840)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='\x00', &(0x7f0000002100), 0x4408, &(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006180)={0x2020}, 0x2020) 5.956779095s ago: executing program 3 (id=1523): syz_open_dev$dri(&(0x7f0000000140), 0x52e, 0xc0200) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x1}, r1, 0x6}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000100)={0x30, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1, &(0x7f0000000080)=""/79}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0xc, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) fallocate(0xffffffffffffffff, 0x26, 0x200, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000640)={0x20, 0x0, 0xfffffffffffffe88, 0x88fe, 0xfffffffffffffffe}) 5.783472107s ago: executing program 3 (id=1524): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0xffffffffffffffe3, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4004801}, 0x40800) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0xffffffffffffffdf) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="2784dcf4a2326ad838a4b32286af58db029bb2f107887b12ddd8ef4a8025526211649ebbfa8896ab162f72ee7ba61e6ae69e2c1229040623f91043161664748bed3a36e75170abff99ceaf34f41917962294624eba29b44a8065a8cc4864bbe1ca5cecd0330beb5eeebbeac12adb3f35bfd3aed5a76922d0099230073d47988c24078bdc448a2eb76c25740d0569151030ee810a2f5c1908236f9ffd0ea0daf7be14c3623641863eaf93921ed8700e79dd2d72da4f71d29e8418645c28466f09930c7f6386c3", 0xc6}, {&(0x7f00000004c0)="a32e6ec89361ae06c3df4d98a0cc567dbc9bd7cb4700c356513da062aaa8f0c5cdf0f1b18ac6ae4cd3e53a757ebdb643bf2f90363cdbc3b8dfa187cb2c5aa8df6a2a40eefcf4bb8dc5ac6bcb296fce8fb773b216f7f933e8e88f1740", 0x5c}, {&(0x7f0000000540)="58f1e912600ad9335155c74eced2086e7a0b1db7c860294c250cde408430216d9b7b137bd03aae490c34055b6ba9ba36459ff79d49349f06c05b3de53a61428fa7d061d6df2e1e67a9311818d0432e189ab39791479df0df84c642c731862255ab32021cc0f13d5622586950ef87709d34ef2d97da045a674517a84f17d092ec85683ce45ff8d62a235a3a105b63019993672336bd81c7c60c4ad55becb3ec99448c462ff6dd34d7b6d252a636ca6fe46d08bfa974f8581ec4744d9a8f", 0xbd}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f0000000240)="96904cc2fd18665be55a87", 0xb}], 0x5, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="31242853b95af47f640d98e9e2e854f95ab5df2a9e39c49df856e78947e0dc0b67a29155e43e02c361dcdba3c7935fbec9bf914c01b7029b180e0d965c1d72222bf45e89521d5123b866ba2368c83fdb9bbcce5a13b1d46b3a516073c15197865be0498e23b53fada2d0adaa771fd4bc5ea665fd9d1d3c7be8aa0831879059ce17fff63087ec6ded71783498abd880d7376c7fe7b971238223b7f0697f4a9e7d3c09f142ff82f9f83f165b38f859b7d8027ddf98045f88a51db39337d42568d3ff807b8902852b09b346da3c8e59d5843d31628342b4719e080ae340ac6e740e5718d0e43a6e53b3cc76164d3dc3526e967b16e8", 0xf4}, {&(0x7f0000000b00)="adaea49a4f32703b0b62307f4f29df574397c6", 0x13}, {&(0x7f0000000b40)="b41be5397a1017f030e8422cf4247433e59da78b925b2d", 0x17}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="00000000e1000000000001000000010000000000d8428db04a4871c36455687f191759e72280c6c2f765d25e1a0e11f31dd46e3476aaced188ac5c72cd66b5d5e5d2ff", @ANYRES32, @ANYRES32=r3, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x140, 0xc050}}, {{&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000000e80)="eec4dae624a91e6e3368eb99fc4d6d394c811bf77f59a2ef7963f7b0b6ba37c0e3eb5f7fd2d9505e38436c65994f6661c662f850c5dc4a3ad8b4f30481b8515ad1c8c751fca75f1ad53621976d14219f9ddfb1f30c3d162cc5d2e90ff9ce6fa64441cab8edcb9075e12af2b3bc4fd547cef86c336d5f20868a8881b8f7819204e92be809a7e2d7df6476c721804d89aae4c9223808a8d63e803834abb231f16cb8ea67ac4cedc81ebb3c03498f6cd56540e378eb035a074908df1068556ba2ef3ed7fd92d0406e0154d8d845164bf1246213307a2a8130", 0xd7}, {&(0x7f0000000f80)="56b82ede08522e7dc76b50e110a8e123f7b56cbc7e606bb8077d85a3f7254c692de454e4de9bc7f7ba654188d7dfe040c5f54270e362c59aa2da004658019ef69b92d7091ed7615051191246d097e204259c04f479063e8ea90c237d3bda59094a27", 0x62}, {&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000001000)="3eeab0da567f0886eac7aa9000b6b79188906010ab689f00dfa2b325c402d4d2beeb3775eb3a47d80c864ed8fa12103f3e31cf82433f0d6a31ce029d786a26ce01c75b9f14b1a6215b88dc1a6a30a6be39f28ddc78607899a99f3be8d381501b66e85014d252d5bbc44d7dca5f40f7ababf4c3510a30a639b7d2374886e567f99a9fd6922b4675fb1758aafd480e4d47a5fe31e48e5957fccd2b0fa64e5c36e15f6020bec027ee37c4a64c05372fdef9ea76a73a9fabdc5272cb3d", 0xbb}, {&(0x7f00000010c0)="97bf4a826ce2b2a74d05710b03c395ae6fe0cab4e8b83eb1acef3bc81b1388506d5eed6b80c5b43cbfe6bcd17905f6fc5e4000b48cec60dddd1e1db66269930da73de6f34ebea41981bf9ec4a976534095d1ec1ed7aec066726228164f5fd9d124ed1fc3b1f2aa629c19e4e68d416e7d5ac47633a4aac9a1269a5b453d2240583db3b3b6218738401b116fb569bc95ed", 0x90}, {&(0x7f00000021c0)="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", 0xfa}], 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c1895276b6d000000000005000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r2, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32], 0x80, 0x8004}}, {{&(0x7f0000002440)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f00000025c0)=[{&(0x7f00000024c0)="dcd242f0c85409c356198a505f77b85a8572b21cac625ea1d380f623e65e2e00e37783aec5f624478dc1e92522ab9fe18ea66f25dd3f937851c15b64bcfdc335de53f1347fe70225930d73d5edeca0f05f12a76de2", 0x55}, {&(0x7f0000002540)="b832354536b258aa3c95559fb4cb29bb63481545d549f002063e7d9364331d11fa1135ca295ef81d29a5c7826fead1ae753f46e0a62e4d69056ad5ba52a48ab38763598a71bfc356587d2fc1b9b9431f6861015dfc1368b813f503d9a00984e1945a52681add", 0x66}], 0x2, &(0x7f00000056c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0, 0x44090}}, {{&(0x7f00000057c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005840)="8b8fc95b", 0x4}, {&(0x7f0000005880)="acf8b8a2b33663d0445f89531ebf455e9a509f937fc4b46f3464257479393dc22950b31f08415692997d8b550f95a168fc0b0d21b7ab8e9b50ccc03b11959df7756b0177c1350f0c571513e2d9902a454d517f05a29ea4b26c19083c59649a374b0244de52ba88e3ade9d1b485f10c865a5997856d050194325469a239c475fc527d8dd221189e1834eae6ddb1fe86ee6bf6bdbd2fac31bd6211c512276cbc3980ba00bd070f89c4faac5f08dc9da2a7c8734654bf3be01c1c7798b766a57bc16661776eaa72d5110d7370037e422282a2183b7d37647a8ae878f8538fee80bdbc5ae41005f01f048373a18a", 0xec}, {&(0x7f0000005980)="b22326c5d333e3a6c9a8d7ddcaf801a256b83644546e4e1d915ef3ec2cff6de945a6cc0f69fcdb3327001da7d11e691abd17e55a2e35d1ca5a000f6a45434129173df4b0b7e79307d60fb08b0d2c03208cc55ecf95fced84d50217c700dc044792202a9ca10fa949769c477fe327c440fe686e3cacec398298eb381a05bd45673dc0cb745368a64be0865bc1c1fd51f96b9b3bd2720d148037db0aa79f2e219cc43a971930d64d3f51d9f68cac967b26d1b0c15df5c87f1694e064cd9b830089c4d52cefd182becd0a0537fce94b4a05e011abea", 0xd4}], 0x3, 0x0, 0x0, 0x4}}, {{&(0x7f0000005ac0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005bc0)=[{&(0x7f0000005b40)="b6a8cc093d87abc5f7bb1a1d497ff849deba8bb9856c8869490e68e4749ebd90c6469472a211a54504ad54739331f4feb7ab2701b5bc65e56627dee85148dd40c12a7a66728a9092a44b82e51939441c2ec37df4bd00c1756a56e2cad54ade98079674053edf5810109c211d6998c03467e6036949f3c89c", 0x78}], 0x1, 0x0, 0x0, 0x2d152260d7090375}}, {{&(0x7f0000005c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006040)=[{&(0x7f0000005c80)="259a9da26c22da4f0801bb71a1a8b7fd11ad933ffb07908e73ea7c95be38e45d11b0d1569fb9f577a95c891d9bb0d1049c45b934cb19122f3b0eda66e6599666edd9663cc1c0732230c6ff946c3283ade9a126001d37d4c6190b418c0ba27bf4d6ec82db58d0603aa930578a5aa4cddd46709cf858ee292ef44c50c745716ceb3709c3015e67219e89c66c34dd825acce02f71ecb5835f758c778c7c122e44bbc7ed503c5f388fb9dac7614c86612024ed2bf9d76fc01d0c9e705f2e3bf6749b4feccf8bffc26343b6e4aaee0b1c8cc47b39a827c4", 0xd5}, {&(0x7f0000005d80)="6104c2f1e079eec98455583eb34a2bbd39d871c3ffdab873fee8619963", 0x1d}, {&(0x7f0000005dc0)="48bdb741e62ef07b4dbedf90059097c09b43ca2b0a9b7bab7df7b907", 0x1c}, {&(0x7f0000005e00)="bfa936378d3bfba9c76857f0d4681245853e2bd2109c954895e91fddd5762b7f54463e5876a271b2e8cb9c21bd7c5e3a3cccdc1e84af5df6dde6", 0x3a}, {&(0x7f0000005e40)="7cbf29e15eddb33817051ebbc7ee5f6c675bf89f3a6d73e7d8ec28d6b598e9d3d4c36b9b0c", 0x25}, {&(0x7f0000005e80)="e69ebe951c28c04725239d06964b6377e4a03f273018e3fb7f8eec4b7163be997cb2727579598c645dfa4b4a1c347bb7b1389a41404a3aa4602172e70f3eee88210eebae2027973b4d17b8663b47a0ad51c44741a88f6d803e8f6fe6c737aa0dfa32f2067f64a4a2ce8d2c3befe1d33d2312e905fade9e5f4a7eb7c7ad2f2b0730dc60510e", 0x85}, {&(0x7f0000005f40)}], 0x7, &(0x7f0000006400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, r0, 0xffffffffffffffff, r7]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130, 0x40008}}], 0x7, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xa}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r11, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) 5.608232535s ago: executing program 2 (id=1525): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x115080, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2}, 0x38) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0}) 5.604719544s ago: executing program 4 (id=1526): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$ax25(r4, &(0x7f0000000000)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 5.282580407s ago: executing program 0 (id=1527): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0x25dfdbfd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x3, 0x0, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0xffe}, 0x40084c0) (fail_nth: 7) 4.564441283s ago: executing program 2 (id=1528): read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) 4.550250377s ago: executing program 4 (id=1529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000001a40)=ANY=[@ANYRESOCT=r2, @ANYBLOB="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"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "4074e2f0", {0x3, 0x101, 0x0, 0xdd, 0xd, 0x4, 0x2}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="660fe9d4d8c966b91b0800000f32660f6ab30a000f20e06635000100000f22e066b97f03000066b80100000066ba000000000f308fe91801260018f00fc1363514ba4200b8d338ef64660ff9b90300", 0x4f}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x24000095}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r8, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffffffffff00, 0x2) 4.409741557s ago: executing program 0 (id=1530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x7) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001d000800098004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000040b0dea45c9f383a000000000000000a20000000000a03"], 0xb0}}, 0x0) 3.198441874s ago: executing program 2 (id=1531): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000040)=0xc) shutdown(0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000000)=0x1, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0xc0) creat(&(0x7f0000000640)='./file0\x00', 0xecf86c37d53049cc) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000021) r1 = io_uring_setup(0x6e1, &(0x7f0000000180)={0x0, 0xa80b, 0x80, 0x0, 0xffffeffc}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) open$dir(&(0x7f0000000480)='./file0\x00', 0x20000, 0xe0) 3.147597014s ago: executing program 0 (id=1532): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x20000000000002b7, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRESDEC=r0], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfcf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a00)={&(0x7f00000019c0)='block_bio_complete\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000001980)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000001940)=ANY=[@ANYBLOB="120100009ac0b620110f211066010902c15bf7c5a679a9b547c9ea42eaf01b00000000"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r5, &(0x7f000000b1c0)={0x2020}, 0x2020) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040044) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pwritev(r6, &(0x7f0000000300), 0x0, 0x81, 0x3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000000c0)=""/41, 0x29}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f00000060c0)=""/4112, 0x1010}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000001540)=""/168, 0xa8}, {&(0x7f0000000240)}, {&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000001600)=""/144, 0x90}, {&(0x7f00000016c0)=""/80, 0x50}], 0xa, &(0x7f0000002080)=""/237, 0xed}, 0x2}, {{&(0x7f00000018c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001800)=""/49, 0x31}, {&(0x7f0000001a40)=""/235, 0xeb}, {&(0x7f0000001b40)=""/92, 0x5c}], 0x3, &(0x7f0000001c00)=""/164, 0xa4}, 0x9}, {{&(0x7f0000001cc0)=@nfc_llcp, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d40)=""/159, 0x9f}, {&(0x7f0000001e00)=""/124, 0x7c}], 0x2, &(0x7f0000004080)=""/4096, 0x1000}, 0x7}], 0x3, 0x2, &(0x7f00000001c0)={0x77359400}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f0000000140)='\x00\x00\x00\x00\x80\x00\xbe\xd1\xf5|`\xd9T+\x00\x00\x00\x00') 3.008582697s ago: executing program 3 (id=1533): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x20004094) socket$igmp6(0xa, 0x3, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async, rerun: 64) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) (rerun: 64) clock_settime(0x0, &(0x7f0000000040)) (async) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) 2.482575708s ago: executing program 1 (id=1534): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x0, "ecbd1bdfebccf13e429db82a372363ef9664e280f05a65b68d275f018303499e", 0x0, 0x0, 0x1000000}) 2.436067475s ago: executing program 1 (id=1535): vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "4ec97e01", "12772541f8eb02bb"}, 0x28) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffdffffe) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0xf7, 0x8, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x20, 0x2e8e, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x3, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa7f}, @jmp={0x5, 0x1, 0x0, 0x8, 0x1, 0xfffffffffffffff4, 0x8}], &(0x7f0000000200)='syzkaller\x00', 0x9, 0xa4, &(0x7f0000000240)=""/164, 0x41000, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x6, 0x1, 0x1}, 0x10, r1, r2, 0x3, &(0x7f00000003c0)=[r3, 0xffffffffffffffff, r5], &(0x7f0000000400)=[{0x2, 0x1, 0xd, 0x9}, {0x4, 0x4, 0x5, 0x1}, {0x4, 0x3, 0xc, 0x2}], 0x10, 0xd22}, 0x94) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000400000008000000010000008405"], 0x50) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r7, 0x708, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e140589a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) close(r6) 1.460880152s ago: executing program 1 (id=1536): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000001c0)={0x0, 0x8dff, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000040) 1.365578633s ago: executing program 1 (id=1537): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x113, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001340)={0x0, 0xc88, 0x7, 0x1}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x20000, 0x344, 0x30}, 0x18) 140.729849ms ago: executing program 2 (id=1538): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f00008cc000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0xc831, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af83, &(0x7f00000000c0)) 0s ago: executing program 0 (id=1539): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) kernel console output (not intermixed with test programs): d001 [ 467.828092][ T49] gspca_nw80x: reg_w err -110 [ 467.833821][ T49] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 467.895738][ T791] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 467.920099][ T791] usb 2-1: MIDIStreaming interface descriptor not found [ 468.356190][T11075] syzkaller0: entered promiscuous mode [ 468.383964][T11075] syzkaller0: entered allmulticast mode [ 468.640515][ T791] usb 2-1: USB disconnect, device number 24 [ 468.898554][T11097] udevd[11097]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.947321][ T5924] usb 1-1: USB disconnect, device number 21 [ 469.537849][T11093] slcan: can't register candev [ 470.989886][T11142] can0: slcan on ttyS3. [ 471.040866][T11154] FAULT_INJECTION: forcing a failure. [ 471.040866][T11154] name failslab, interval 1, probability 0, space 0, times 0 [ 471.043556][T11142] can0 (unregistered): slcan off ttyS3. [ 471.079394][T11158] FAULT_INJECTION: forcing a failure. [ 471.079394][T11158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.095765][T11154] CPU: 1 UID: 0 PID: 11154 Comm: syz.0.1053 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.095794][T11154] Tainted: [L]=SOFTLOCKUP [ 471.095800][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.095811][T11154] Call Trace: [ 471.095817][T11154] [ 471.095823][T11154] dump_stack_lvl+0x16c/0x1f0 [ 471.095852][T11154] should_fail_ex+0x512/0x640 [ 471.095879][T11154] ? __kmalloc_noprof+0xca/0x910 [ 471.095909][T11154] should_failslab+0xc2/0x120 [ 471.095933][T11154] __kmalloc_noprof+0xeb/0x910 [ 471.095961][T11154] ? ethnl_default_doit+0x1c0/0xe30 [ 471.095986][T11154] ? ethnl_default_doit+0x1c0/0xe30 [ 471.096004][T11154] ethnl_default_doit+0x1c0/0xe30 [ 471.096024][T11154] ? __nla_parse+0x40/0x60 [ 471.096043][T11154] ? __pfx_ethnl_default_doit+0x10/0x10 [ 471.096067][T11154] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 471.096093][T11154] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 471.096125][T11154] genl_family_rcv_msg_doit+0x209/0x2f0 [ 471.096151][T11154] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 471.096177][T11154] ? genl_get_cmd+0x194/0x580 [ 471.096209][T11154] ? __radix_tree_lookup+0x21f/0x2c0 [ 471.096234][T11154] genl_rcv_msg+0x55c/0x800 [ 471.096261][T11154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.096287][T11154] ? __pfx_ethnl_default_doit+0x10/0x10 [ 471.096316][T11154] netlink_rcv_skb+0x158/0x420 [ 471.096338][T11154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.096363][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.096394][T11154] ? netlink_deliver_tap+0x1ae/0xd30 [ 471.096424][T11154] genl_rcv+0x28/0x40 [ 471.096444][T11154] netlink_unicast+0x5aa/0x870 [ 471.096468][T11154] ? __pfx_netlink_unicast+0x10/0x10 [ 471.096498][T11154] netlink_sendmsg+0x8c8/0xdd0 [ 471.096525][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.096554][T11154] ____sys_sendmsg+0xa5d/0xc30 [ 471.096579][T11154] ? copy_msghdr_from_user+0x10a/0x160 [ 471.096596][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.096629][T11154] ___sys_sendmsg+0x134/0x1d0 [ 471.096648][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.096695][T11154] __sys_sendmsg+0x16d/0x220 [ 471.096713][T11154] ? __pfx___sys_sendmsg+0x10/0x10 [ 471.096749][T11154] do_syscall_64+0xcd/0xf80 [ 471.096774][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.096791][T11154] RIP: 0033:0x7f3e1a58f749 [ 471.096806][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.096822][T11154] RSP: 002b:00007f3e1b3eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.096840][T11154] RAX: ffffffffffffffda RBX: 00007f3e1a7e5fa0 RCX: 00007f3e1a58f749 [ 471.096852][T11154] RDX: 0000000020048080 RSI: 0000200000002a00 RDI: 0000000000000003 [ 471.096863][T11154] RBP: 00007f3e1b3eb090 R08: 0000000000000000 R09: 0000000000000000 [ 471.096873][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.096884][T11154] R13: 00007f3e1a7e6038 R14: 00007f3e1a7e5fa0 R15: 00007fff8eec54d8 [ 471.096909][T11154] [ 471.096981][T11158] CPU: 1 UID: 0 PID: 11158 Comm: syz.2.1052 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.097006][T11158] Tainted: [L]=SOFTLOCKUP [ 471.097012][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.097022][T11158] Call Trace: [ 471.097027][T11158] [ 471.097033][T11158] dump_stack_lvl+0x16c/0x1f0 [ 471.097056][T11158] should_fail_ex+0x512/0x640 [ 471.097085][T11158] _copy_from_user+0x2e/0xd0 [ 471.097110][T11158] memdup_user+0x6b/0xe0 [ 471.097127][T11158] _autofs_dev_ioctl+0x212/0xb40 [ 471.097149][T11158] ? hook_file_ioctl_common+0x144/0x410 [ 471.097176][T11158] ? __pfx__autofs_dev_ioctl+0x10/0x10 [ 471.097200][T11158] ? selinux_file_ioctl+0x180/0x270 [ 471.097222][T11158] ? selinux_file_ioctl+0xb4/0x270 [ 471.097246][T11158] autofs_dev_ioctl+0x1a/0x30 [ 471.097266][T11158] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 471.097288][T11158] __x64_sys_ioctl+0x18e/0x210 [ 471.097310][T11158] do_syscall_64+0xcd/0xf80 [ 471.097341][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.097359][T11158] RIP: 0033:0x7fad8458f749 [ 471.097372][T11158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.097387][T11158] RSP: 002b:00007fad853ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.097410][T11158] RAX: ffffffffffffffda RBX: 00007fad847e5fa0 RCX: 00007fad8458f749 [ 471.097421][T11158] RDX: 00002000000053c0 RSI: 00000000c018937e RDI: 0000000000000003 [ 471.097431][T11158] RBP: 00007fad853ce090 R08: 0000000000000000 R09: 0000000000000000 [ 471.097442][T11158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.097451][T11158] R13: 00007fad847e6038 R14: 00007fad847e5fa0 R15: 00007ffcf60224f8 [ 471.097475][T11158] [ 471.766535][ T30] audit: type=1400 audit(1767984975.796:997): avc: denied { bind } for pid=11172 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 472.503955][ T7211] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 472.542953][ T30] audit: type=1400 audit(1767984976.516:998): avc: denied { getopt } for pid=11162 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 472.578199][ T5924] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 472.989192][ T7211] usb 2-1: Using ep0 maxpacket: 16 [ 472.996915][ T7211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.009761][ T7211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.023365][ T7211] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 473.189749][ T7211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.203049][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.215718][ T7211] usb 2-1: config 0 descriptor?? [ 473.237795][T11184] can0: slcan on ttyS3. [ 473.246913][ T5924] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 473.265738][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.275210][ T5924] usb 3-1: Product: syz [ 473.279413][ T5924] usb 3-1: Manufacturer: syz [ 473.292572][T11184] can0 (unregistered): slcan off ttyS3. [ 473.302579][ T5924] usb 3-1: SerialNumber: syz [ 473.312461][ T5924] usb 3-1: config 0 descriptor?? [ 474.054424][T11164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.108017][T11164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.172031][ T5924] usb 3-1: USB disconnect, device number 32 [ 474.646484][ T5925] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 474.647025][ T7211] usbhid 2-1:0.0: can't add hid device: -71 [ 474.664319][ T7211] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 474.694408][ T7211] usb 2-1: USB disconnect, device number 25 [ 474.991462][ T5924] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 475.007748][T11265] can0: slcan on ttyS3. [ 475.011406][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 475.025256][ T5925] usb 4-1: config 0 has no interfaces? [ 475.030760][ T5925] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 475.040340][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.073380][ T5925] usb 4-1: config 0 descriptor?? [ 475.142698][ T30] audit: type=1400 audit(1767984979.166:999): avc: granted { setsecparam } for pid=11280 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 475.181466][T11265] can0 (unregistered): slcan off ttyS3. [ 475.253229][ T5924] usb 3-1: config 8 has an invalid interface number: 102 but max is 0 [ 475.261658][ T5924] usb 3-1: config 8 has no interface number 0 [ 475.267763][ T5924] usb 3-1: config 8 interface 102 has no altsetting 0 [ 475.275068][ T5924] usb 3-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=df.60 [ 475.284194][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.307101][T11239] FAULT_INJECTION: forcing a failure. [ 475.307101][T11239] name failslab, interval 1, probability 0, space 0, times 0 [ 475.320984][T11239] CPU: 1 UID: 0 PID: 11239 Comm: syz.3.1066 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.321013][T11239] Tainted: [L]=SOFTLOCKUP [ 475.321019][T11239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.321030][T11239] Call Trace: [ 475.321036][T11239] [ 475.321042][T11239] dump_stack_lvl+0x16c/0x1f0 [ 475.321069][T11239] should_fail_ex+0x512/0x640 [ 475.321096][T11239] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 475.321117][T11239] should_failslab+0xc2/0x120 [ 475.321140][T11239] kmem_cache_alloc_node_noprof+0x86/0x800 [ 475.321158][T11239] ? __alloc_skb+0x156/0x410 [ 475.321190][T11239] ? __alloc_skb+0x156/0x410 [ 475.321214][T11239] __alloc_skb+0x156/0x410 [ 475.321237][T11239] ? __alloc_skb+0x35d/0x410 [ 475.321263][T11239] ? __pfx___alloc_skb+0x10/0x10 [ 475.321290][T11239] ? netlink_autobind.isra.0+0x158/0x370 [ 475.321321][T11239] netlink_alloc_large_skb+0x69/0x140 [ 475.321344][T11239] netlink_sendmsg+0x698/0xdd0 [ 475.321367][T11239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.321396][T11239] ____sys_sendmsg+0xa5d/0xc30 [ 475.321419][T11239] ? copy_msghdr_from_user+0x10a/0x160 [ 475.321437][T11239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.321473][T11239] ___sys_sendmsg+0x134/0x1d0 [ 475.321492][T11239] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.321538][T11239] __sys_sendmsg+0x16d/0x220 [ 475.321556][T11239] ? __pfx___sys_sendmsg+0x10/0x10 [ 475.321588][T11239] do_syscall_64+0xcd/0xf80 [ 475.321612][T11239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.321631][T11239] RIP: 0033:0x7fa77078f749 [ 475.321645][T11239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.321661][T11239] RSP: 002b:00007fa77163b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.321677][T11239] RAX: ffffffffffffffda RBX: 00007fa7709e5fa0 RCX: 00007fa77078f749 [ 475.321688][T11239] RDX: 0000000004008004 RSI: 0000200000000180 RDI: 000000000000000e [ 475.321699][T11239] RBP: 00007fa77163b090 R08: 0000000000000000 R09: 0000000000000000 [ 475.321708][T11239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.321717][T11239] R13: 00007fa7709e6038 R14: 00007fa7709e5fa0 R15: 00007fff1ddf3cb8 [ 475.321741][T11239] [ 475.549372][T11291] can0: slcan on ttyS3. [ 475.712914][ T5925] usb 4-1: USB disconnect, device number 19 [ 475.774713][T11287] can0 (unregistered): slcan off ttyS3. [ 476.120667][ T5924] usb 3-1: string descriptor 0 read error: -71 [ 476.138291][ T5924] HFC-S_USB 3-1:8.102: probe with driver HFC-S_USB failed with error -5 [ 476.161861][ T5924] usb 3-1: USB disconnect, device number 33 [ 476.174961][ T30] audit: type=1400 audit(1767984980.206:1000): avc: denied { read write } for pid=11335 comm="syz.1.1079" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 476.201638][ T7211] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 476.204814][ T30] audit: type=1400 audit(1767984980.206:1001): avc: denied { ioctl open } for pid=11335 comm="syz.1.1079" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 476.481564][ T7211] usb 1-1: Using ep0 maxpacket: 16 [ 476.493944][ T7211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.512293][ T7211] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.528484][ T7211] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 476.539333][ T7211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.580457][T11350] veth0_to_team: entered promiscuous mode [ 476.695791][ T7211] usb 1-1: config 0 descriptor?? [ 477.558082][ T5945] kernel write not supported for file bpf-map (pid: 5945 comm: kworker/0:6) [ 477.998826][T11384] can0: slcan on ttyS3. [ 478.068058][T11384] can0 (unregistered): slcan off ttyS3. [ 478.116693][T11384] can0: slcan on ttyS3. [ 479.507759][ T7211] usbhid 1-1:0.0: can't add hid device: -71 [ 479.538007][ T7211] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 479.987290][ T7211] usb 1-1: USB disconnect, device number 22 [ 480.093061][T11380] can0 (unregistered): slcan off ttyS3. [ 480.176683][T11413] FAULT_INJECTION: forcing a failure. [ 480.176683][T11413] name failslab, interval 1, probability 0, space 0, times 0 [ 480.191500][T11413] CPU: 1 UID: 0 PID: 11413 Comm: syz.1.1092 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.191529][T11413] Tainted: [L]=SOFTLOCKUP [ 480.191534][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.191545][T11413] Call Trace: [ 480.191551][T11413] [ 480.191557][T11413] dump_stack_lvl+0x16c/0x1f0 [ 480.191586][T11413] should_fail_ex+0x512/0x640 [ 480.191613][T11413] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 480.191635][T11413] should_failslab+0xc2/0x120 [ 480.191670][T11413] kmem_cache_alloc_node_noprof+0x86/0x800 [ 480.191687][T11413] ? __alloc_skb+0x156/0x410 [ 480.191719][T11413] ? __alloc_skb+0x156/0x410 [ 480.191745][T11413] __alloc_skb+0x156/0x410 [ 480.191774][T11413] ? __alloc_skb+0x35d/0x410 [ 480.191800][T11413] ? __pfx___alloc_skb+0x10/0x10 [ 480.191826][T11413] ? check_irq_usage+0xb0/0xbc0 [ 480.191855][T11413] __ip6_append_data+0x2b74/0x4740 [ 480.191890][T11413] ? __pfx_raw6_getfrag+0x10/0x10 [ 480.191927][T11413] ? __pfx___ip6_append_data+0x10/0x10 [ 480.191954][T11413] ? __pfx_ip6_mtu+0x10/0x10 [ 480.191975][T11413] ? ip6_setup_cork+0xc51/0x1530 [ 480.192005][T11413] ip6_append_data+0x1ba/0x4c0 [ 480.192032][T11413] ? __pfx_raw6_getfrag+0x10/0x10 [ 480.192060][T11413] rawv6_sendmsg+0x163e/0x4860 [ 480.192098][T11413] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 480.192122][T11413] ? avc_has_perm_noaudit+0x149/0x3b0 [ 480.192155][T11413] ? avc_has_perm+0x144/0x1f0 [ 480.192173][T11413] ? __pfx_avc_has_perm+0x10/0x10 [ 480.192229][T11413] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 480.192256][T11413] ? inet_sendmsg+0x11c/0x140 [ 480.192272][T11413] inet_sendmsg+0x11c/0x140 [ 480.192290][T11413] sock_sendmsg+0x37f/0x470 [ 480.192313][T11413] ? __lock_acquire+0x436/0x2890 [ 480.192334][T11413] ? __pfx_sock_sendmsg+0x10/0x10 [ 480.192369][T11413] ? iov_iter_advance+0x380/0x6c0 [ 480.192394][T11413] ? __local_bh_enable_ip+0xa4/0x120 [ 480.192419][T11413] kcm_write_msgs+0x4c3/0x1720 [ 480.192447][T11413] ? __pfx_kcm_write_msgs+0x10/0x10 [ 480.192465][T11413] ? __build_skb_around+0x278/0x390 [ 480.192501][T11413] ? sk_page_frag_refill+0x6c/0x340 [ 480.192529][T11413] kcm_sendmsg+0x2562/0x2ca0 [ 480.192568][T11413] ? __pfx_kcm_sendmsg+0x10/0x10 [ 480.192587][T11413] ? __import_iovec+0x1dd/0x650 [ 480.192613][T11413] ? __might_fault+0xe3/0x190 [ 480.192629][T11413] ? __might_fault+0x13b/0x190 [ 480.192659][T11413] ____sys_sendmsg+0xa5d/0xc30 [ 480.192684][T11413] ? copy_msghdr_from_user+0x10a/0x160 [ 480.192702][T11413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.192737][T11413] ? __pfx__kstrtoull+0x10/0x10 [ 480.192762][T11413] ___sys_sendmsg+0x134/0x1d0 [ 480.192783][T11413] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.192814][T11413] ? find_held_lock+0x2b/0x80 [ 480.192866][T11413] __sys_sendmmsg+0x200/0x420 [ 480.192890][T11413] ? __pfx___sys_sendmmsg+0x10/0x10 [ 480.192918][T11413] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 480.192955][T11413] ? fput+0x70/0xf0 [ 480.192970][T11413] ? ksys_write+0x1ac/0x250 [ 480.192993][T11413] ? __pfx_ksys_write+0x10/0x10 [ 480.193020][T11413] __x64_sys_sendmmsg+0x9c/0x100 [ 480.193037][T11413] ? lockdep_hardirqs_on+0x7c/0x110 [ 480.193058][T11413] do_syscall_64+0xcd/0xf80 [ 480.193084][T11413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.193103][T11413] RIP: 0033:0x7f168618f749 [ 480.193118][T11413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.193135][T11413] RSP: 002b:00007f1686ffa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 480.193152][T11413] RAX: ffffffffffffffda RBX: 00007f16863e5fa0 RCX: 00007f168618f749 [ 480.193164][T11413] RDX: 0000000000000001 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 480.193175][T11413] RBP: 00007f1686ffa090 R08: 0000000000000000 R09: 0000000000000000 [ 480.193186][T11413] R10: 0000000004000050 R11: 0000000000000246 R12: 0000000000000001 [ 480.193196][T11413] R13: 00007f16863e6038 R14: 00007f16863e5fa0 R15: 00007ffd8cf30f48 [ 480.193223][T11413] [ 483.081246][T11445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.965024][ T30] audit: type=1400 audit(1767984987.996:1002): avc: denied { read } for pid=11464 comm="syz.3.1104" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 484.026457][ T30] audit: type=1400 audit(1767984988.026:1003): avc: denied { open } for pid=11464 comm="syz.3.1104" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 484.093919][ T30] audit: type=1400 audit(1767984988.026:1004): avc: denied { ioctl } for pid=11464 comm="syz.3.1104" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x5510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 484.321770][T11475] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 484.328589][T11475] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 484.344507][T11475] vhci_hcd vhci_hcd.0: Device attached [ 484.360503][T11475] vhci_hcd vhci_hcd.0: port 0 already used [ 484.924361][ T5945] usb 40-1: SetAddress Request (2) to port 0 [ 484.932261][ T5945] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 484.991522][ T7211] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 485.956691][ T7211] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 486.044270][ T7211] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.152594][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 486.152822][ T7211] usb 4-1: config 0 has no interface number 0 [ 486.172978][ T7211] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 486.184361][ T7211] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 486.201316][ T7211] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 486.213324][ T7211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.221871][ T7211] usb 4-1: Product: syz [ 486.226219][ T7211] usb 4-1: Manufacturer: syz [ 486.258604][ T7211] usb 4-1: SerialNumber: syz [ 486.263855][ T30] audit: type=1400 audit(1767984990.286:1005): avc: denied { write } for pid=11510 comm="syz.4.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 486.286329][ T7211] usb 4-1: config 0 descriptor?? [ 486.293548][ T7211] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 486.303804][ T7211] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 486.312366][ T7211] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 486.367975][T11521] 9p: Bad value for 'wfdno' [ 486.367975][T11522] 9p: Bad value for 'wfdno' [ 486.520330][ T3960] Bluetooth: Error in BCSP hdr checksum [ 486.582858][ T30] audit: type=1400 audit(1767984990.616:1006): avc: denied { read } for pid=11525 comm="syz.1.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 486.630972][T11527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.639811][T11527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.761584][ T1156] Bluetooth: Error in BCSP hdr checksum [ 486.911507][ T7211] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 486.921173][ T5925] usb 4-1: USB disconnect, device number 20 [ 486.931956][T11479] vhci_hcd: connection reset by peer [ 486.946570][T11077] vhci_hcd vhci_hcd.3: stop threads [ 486.956599][T11077] vhci_hcd vhci_hcd.3: release socket [ 486.968313][T11077] vhci_hcd vhci_hcd.3: disconnect device [ 486.981171][ T5925] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 487.017452][ T5925] cyberjack 4-1:0.69: device disconnected [ 487.021674][T11077] Bluetooth: Error in BCSP hdr checksum [ 487.063027][ T7211] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 487.089725][ T7211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.103530][ T7211] usb 3-1: config 0 descriptor?? [ 487.281978][ T997] Bluetooth: Error in BCSP hdr checksum [ 487.325407][ T7211] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 487.341962][ T7211] [drm:udl_init] *ERROR* Selecting channel failed [ 487.369746][ T7211] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 487.384013][ T7211] [drm] Initialized udl on minor 2 [ 487.390158][ T7211] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 487.401866][ T7211] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 487.410538][ T5949] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 487.422519][ T7211] usb 3-1: USB disconnect, device number 34 [ 487.423376][ T5949] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 487.541710][ T997] Bluetooth: Error in BCSP hdr checksum [ 487.902722][ T30] audit: type=1326 audit(1767984991.926:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168618f749 code=0x7ffc0000 [ 487.960729][ T30] audit: type=1326 audit(1767984991.926:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f168618f749 code=0x7ffc0000 [ 487.985746][ T30] audit: type=1326 audit(1767984991.936:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168618f749 code=0x7ffc0000 [ 488.041634][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 488.053262][ T30] audit: type=1326 audit(1767984991.956:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f168618f749 code=0x7ffc0000 [ 488.076981][ T30] audit: type=1326 audit(1767984991.956:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168618f749 code=0x7ffc0000 [ 488.616463][T11617] netlink: 'syz.4.1128': attribute type 12 has an invalid length. [ 488.761937][ T7211] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 488.882073][ T791] IPVS: starting estimator thread 0... [ 488.952872][ T7211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.963838][ T7211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.990568][ T5925] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 489.065709][T11642] IPVS: using max 76 ests per chain, 182400 per kthread [ 489.090575][ T7211] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 489.105320][ T7211] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 489.119577][ T7211] usb 1-1: Manufacturer: syz [ 489.135272][ T7211] usb 1-1: config 0 descriptor?? [ 489.241850][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 489.254396][ T5925] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 489.262973][ T5925] usb 2-1: config 0 has no interface number 0 [ 489.269147][ T5925] usb 2-1: config 0 interface 55 has no altsetting 0 [ 489.280709][ T5925] usb 2-1: New USB device found, idVendor=2001, idProduct=3a02, bcdDevice=6e.31 [ 489.290265][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.299941][ T5925] usb 2-1: Product: syz [ 489.304275][ T5925] usb 2-1: Manufacturer: syz [ 489.309534][ T5925] usb 2-1: SerialNumber: syz [ 489.360442][ T5925] usb 2-1: config 0 descriptor?? [ 489.403354][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'. [ 489.430759][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'. [ 489.578736][ T5925] usb 2-1: Could not find all expected endpoints [ 489.611725][ T5925] usb 2-1: USB disconnect, device number 26 [ 489.768751][ T7211] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71 [ 489.805973][ T7211] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 489.826371][ T7211] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 489.848099][ T7211] usb 1-1: USB disconnect, device number 23 [ 490.742048][ T5945] usb 40-1: device descriptor read/8, error -110 [ 490.934791][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 490.934810][ T30] audit: type=1326 audit(1767984994.826:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11693 comm="syz.1.1139" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f168618f749 code=0x0 [ 491.015345][T11702] FAULT_INJECTION: forcing a failure. [ 491.015345][T11702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.017847][T11700] can0: slcan on ttyS3. [ 491.052634][T11698] loop8: detected capacity change from 0 to 7 [ 491.064887][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 491.074497][ C0] buffer_io_error: 11 callbacks suppressed [ 491.074508][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 491.094988][T11702] CPU: 0 UID: 0 PID: 11702 Comm: syz.2.1141 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.095018][T11702] Tainted: [L]=SOFTLOCKUP [ 491.095024][T11702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.095034][T11702] Call Trace: [ 491.095040][T11702] [ 491.095047][T11702] dump_stack_lvl+0x16c/0x1f0 [ 491.095076][T11702] should_fail_ex+0x512/0x640 [ 491.095099][T11702] _copy_to_user+0x32/0xd0 [ 491.095117][T11702] simple_read_from_buffer+0xcb/0x170 [ 491.095134][T11702] proc_fail_nth_read+0x197/0x240 [ 491.095146][T11702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.095158][T11702] ? rw_verify_area+0xcf/0x6c0 [ 491.095170][T11702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.095181][T11702] vfs_read+0x1e4/0xcf0 [ 491.095195][T11702] ? __pfx___mutex_lock+0x10/0x10 [ 491.095211][T11702] ? __pfx_vfs_read+0x10/0x10 [ 491.095227][T11702] ? __fget_files+0x20e/0x3c0 [ 491.095247][T11702] ksys_read+0x12a/0x250 [ 491.095260][T11702] ? __pfx_ksys_read+0x10/0x10 [ 491.095272][T11702] ? v4l2_ioctl+0x1c5/0x250 [ 491.095284][T11702] ? fput+0x70/0xf0 [ 491.095295][T11702] do_syscall_64+0xcd/0xf80 [ 491.095311][T11702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.095322][T11702] RIP: 0033:0x7fad8458e15c [ 491.095331][T11702] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 491.095341][T11702] RSP: 002b:00007fad853ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 491.095353][T11702] RAX: ffffffffffffffda RBX: 00007fad847e5fa0 RCX: 00007fad8458e15c [ 491.095361][T11702] RDX: 000000000000000f RSI: 00007fad853ce0a0 RDI: 0000000000000004 [ 491.095367][T11702] RBP: 00007fad853ce090 R08: 0000000000000000 R09: 0000000000000000 [ 491.095373][T11702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.095379][T11702] R13: 00007fad847e6038 R14: 00007fad847e5fa0 R15: 00007ffcf60224f8 [ 491.095393][T11702] [ 491.292712][ T5945] usb usb40-port1: attempt power cycle [ 491.301628][T11700] can0 (unregistered): slcan off ttyS3. [ 491.312503][T11711] can0: slcan on ttyS3. [ 491.332015][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 491.341675][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 491.349777][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 491.359394][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 491.368685][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 491.378303][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 491.389761][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 491.399411][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 491.410723][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 491.420445][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 491.429778][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 491.439379][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 491.447897][T11698] ldm_validate_partition_table(): Disk read failed. [ 491.458573][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 491.468231][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 491.476869][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 491.481665][T11699] can0 (unregistered): slcan off ttyS3. [ 491.486473][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 491.500625][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 491.510233][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 491.518942][T11698] Dev loop8: unable to read RDB block 0 [ 491.536053][T11698] loop8: unable to read partition table [ 491.543308][T11698] loop8: partition table beyond EOD, truncated [ 491.549867][T11698] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œë) failed (rc=-5) [ 491.733405][T11730] pim6reg9: entered allmulticast mode [ 491.909167][ T5945] usb usb40-port1: unable to enumerate USB device [ 492.532294][ T30] audit: type=1400 audit(1767984996.556:1033): avc: denied { map } for pid=11745 comm="syz.4.1147" path="socket:[26796]" dev="sockfs" ino=26796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 493.646996][T11767] can0: slcan on ttyS3. [ 493.761806][T11772] can0 (unregistered): slcan off ttyS3. [ 493.896206][T11782] 8021q: VLANs not supported on sit0 [ 494.146676][T11791] comedi comedi2: comedi_config --init_data is deprecated [ 494.739929][ T5945] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 495.003145][T11814] syzkaller0: entered promiscuous mode [ 495.008676][T11814] syzkaller0: entered allmulticast mode [ 495.050768][ T5945] usb 3-1: device descriptor read/64, error -71 [ 495.371605][ T5945] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 495.536568][ T5945] usb 3-1: device descriptor read/64, error -71 [ 495.721841][ T5945] usb usb3-port1: attempt power cycle [ 495.740652][ T5821] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 496.166827][ T5945] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 496.641500][ T5945] usb 3-1: device descriptor read/8, error -71 [ 496.966021][ T5945] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 498.046033][ T5945] usb 3-1: device descriptor read/8, error -71 [ 498.143251][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 498.164843][ T5945] usb usb3-port1: unable to enumerate USB device [ 498.240467][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1170'. [ 498.284328][T11873] openvswitch: netlink: IP tunnel dst address not specified [ 498.529283][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1169'. [ 499.083803][ T30] audit: type=1400 audit(1767985002.956:1034): avc: denied { bind } for pid=11883 comm="syz.3.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 499.734179][ T5949] IPVS: starting estimator thread 0... [ 500.268681][ T30] audit: type=1400 audit(1767985004.296:1035): avc: denied { write } for pid=11901 comm="syz.1.1175" path="socket:[26275]" dev="sockfs" ino=26275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 500.362586][T11899] IPVS: using max 76 ests per chain, 182400 per kthread [ 500.512169][T11909] FAULT_INJECTION: forcing a failure. [ 500.512169][T11909] name failslab, interval 1, probability 0, space 0, times 0 [ 500.534675][T11909] CPU: 1 UID: 0 PID: 11909 Comm: syz.2.1176 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.534705][T11909] Tainted: [L]=SOFTLOCKUP [ 500.534712][T11909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.534723][T11909] Call Trace: [ 500.534729][T11909] [ 500.534736][T11909] dump_stack_lvl+0x16c/0x1f0 [ 500.534765][T11909] should_fail_ex+0x512/0x640 [ 500.534792][T11909] ? fs_reclaim_acquire+0xae/0x150 [ 500.534819][T11909] should_failslab+0xc2/0x120 [ 500.534843][T11909] __kmalloc_noprof+0xeb/0x910 [ 500.534872][T11909] ? tomoyo_encode2+0x100/0x3e0 [ 500.534902][T11909] ? tomoyo_encode2+0x100/0x3e0 [ 500.534925][T11909] tomoyo_encode2+0x100/0x3e0 [ 500.534953][T11909] tomoyo_encode+0x29/0x50 [ 500.534976][T11909] tomoyo_realpath_from_path+0x18f/0x6e0 [ 500.535009][T11909] tomoyo_path_number_perm+0x245/0x580 [ 500.535029][T11909] ? tomoyo_path_number_perm+0x237/0x580 [ 500.535052][T11909] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 500.535075][T11909] ? find_held_lock+0x2b/0x80 [ 500.535125][T11909] ? find_held_lock+0x2b/0x80 [ 500.535151][T11909] ? hook_file_ioctl_common+0x144/0x410 [ 500.535186][T11909] ? __fget_files+0x20e/0x3c0 [ 500.535215][T11909] security_file_ioctl+0x9b/0x240 [ 500.535242][T11909] __x64_sys_ioctl+0xb7/0x210 [ 500.535265][T11909] do_syscall_64+0xcd/0xf80 [ 500.535291][T11909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.535309][T11909] RIP: 0033:0x7fad8458f749 [ 500.535325][T11909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.535342][T11909] RSP: 002b:00007fad853ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.535360][T11909] RAX: ffffffffffffffda RBX: 00007fad847e5fa0 RCX: 00007fad8458f749 [ 500.535372][T11909] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 500.535383][T11909] RBP: 00007fad853ce090 R08: 0000000000000000 R09: 0000000000000000 [ 500.535393][T11909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.535404][T11909] R13: 00007fad847e6038 R14: 00007fad847e5fa0 R15: 00007ffcf60224f8 [ 500.535430][T11909] [ 500.581592][T11909] ERROR: Out of memory at tomoyo_realpath_from_path. [ 500.912052][T11913] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 500.930859][T11913] overlayfs: missing 'lowerdir' [ 500.984698][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.991160][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.101290][T11924] binder: 11914:11924 ioctl c018620c 0 returned -14 [ 501.361634][ T5925] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 501.574284][ T5925] usb 3-1: device descriptor read/64, error -71 [ 501.594308][T11938] FAULT_INJECTION: forcing a failure. [ 501.594308][T11938] name failslab, interval 1, probability 0, space 0, times 0 [ 501.607062][T11938] CPU: 1 UID: 0 PID: 11938 Comm: syz.3.1184 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.607080][T11938] Tainted: [L]=SOFTLOCKUP [ 501.607084][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.607090][T11938] Call Trace: [ 501.607094][T11938] [ 501.607098][T11938] dump_stack_lvl+0x16c/0x1f0 [ 501.607117][T11938] should_fail_ex+0x512/0x640 [ 501.607133][T11938] ? fs_reclaim_acquire+0xae/0x150 [ 501.607150][T11938] should_failslab+0xc2/0x120 [ 501.607164][T11938] __kmalloc_noprof+0xeb/0x910 [ 501.607182][T11938] ? tomoyo_encode2+0x100/0x3e0 [ 501.607200][T11938] ? tomoyo_encode2+0x100/0x3e0 [ 501.607214][T11938] tomoyo_encode2+0x100/0x3e0 [ 501.607230][T11938] tomoyo_encode+0x29/0x50 [ 501.607244][T11938] tomoyo_realpath_from_path+0x18f/0x6e0 [ 501.607263][T11938] tomoyo_path_number_perm+0x245/0x580 [ 501.607275][T11938] ? tomoyo_path_number_perm+0x237/0x580 [ 501.607289][T11938] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 501.607303][T11938] ? find_held_lock+0x2b/0x80 [ 501.607332][T11938] ? find_held_lock+0x2b/0x80 [ 501.607347][T11938] ? hook_file_ioctl_common+0x144/0x410 [ 501.607368][T11938] ? __fget_files+0x20e/0x3c0 [ 501.607386][T11938] security_file_ioctl+0x9b/0x240 [ 501.607402][T11938] __x64_sys_ioctl+0xb7/0x210 [ 501.607415][T11938] do_syscall_64+0xcd/0xf80 [ 501.607431][T11938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.607443][T11938] RIP: 0033:0x7fa77078f749 [ 501.607452][T11938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.607463][T11938] RSP: 002b:00007fa77163b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.607474][T11938] RAX: ffffffffffffffda RBX: 00007fa7709e5fa0 RCX: 00007fa77078f749 [ 501.607480][T11938] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 501.607487][T11938] RBP: 00007fa77163b090 R08: 0000000000000000 R09: 0000000000000000 [ 501.607493][T11938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.607499][T11938] R13: 00007fa7709e6038 R14: 00007fa7709e5fa0 R15: 00007fff1ddf3cb8 [ 501.607513][T11938] [ 501.607524][T11938] ERROR: Out of memory at tomoyo_realpath_from_path. [ 501.855817][T11940] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 501.874323][T11940] audit: out of memory in audit_log_start [ 502.178932][ T5925] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 502.181609][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 502.635730][ T30] audit: type=1326 audit(1767985006.666:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 502.672123][ T5925] usb 3-1: device descriptor read/64, error -71 [ 502.733210][ T30] audit: type=1326 audit(1767985006.666:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 502.793764][ T30] audit: type=1326 audit(1767985006.666:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 502.872683][ T5925] usb usb3-port1: attempt power cycle [ 502.919805][ T30] audit: type=1326 audit(1767985006.666:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 502.943785][ T30] audit: type=1326 audit(1767985006.666:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 502.971014][ T30] audit: type=1326 audit(1767985006.696:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 503.513172][ T5925] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 503.564567][ T5925] usb 3-1: device descriptor read/8, error -71 [ 503.602327][T11969] FAULT_INJECTION: forcing a failure. [ 503.602327][T11969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.615883][T11969] CPU: 1 UID: 0 PID: 11969 Comm: syz.1.1192 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.615912][T11969] Tainted: [L]=SOFTLOCKUP [ 503.615918][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 503.615929][T11969] Call Trace: [ 503.615935][T11969] [ 503.615942][T11969] dump_stack_lvl+0x16c/0x1f0 [ 503.615972][T11969] should_fail_ex+0x512/0x640 [ 503.616003][T11969] _copy_from_user+0x2e/0xd0 [ 503.616032][T11969] core_sys_select+0x35b/0xc20 [ 503.616064][T11969] ? __pfx_core_sys_select+0x10/0x10 [ 503.616113][T11969] ? set_user_sigmask+0x21b/0x2b0 [ 503.616139][T11969] ? __pfx_set_user_sigmask+0x10/0x10 [ 503.616168][T11969] do_pselect.constprop.0+0x19f/0x1e0 [ 503.616194][T11969] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 503.616229][T11969] __x64_sys_pselect6+0x182/0x240 [ 503.616255][T11969] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 503.616288][T11969] do_syscall_64+0xcd/0xf80 [ 503.616313][T11969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.616345][T11969] RIP: 0033:0x7f168618f749 [ 503.616361][T11969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.616379][T11969] RSP: 002b:00007f1686fd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 503.616398][T11969] RAX: ffffffffffffffda RBX: 00007f16863e6090 RCX: 00007f168618f749 [ 503.616411][T11969] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 503.616421][T11969] RBP: 00007f1686fd9090 R08: 0000000000000000 R09: 0000000000000000 [ 503.616432][T11969] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 503.616443][T11969] R13: 00007f16863e6128 R14: 00007f16863e6090 R15: 00007ffd8cf30f48 [ 503.616468][T11969] [ 504.132033][ T5925] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 504.384421][ T5925] usb 3-1: device descriptor read/8, error -71 [ 504.471417][T11971] can0: slcan on ttyS3. [ 504.492053][ T5925] usb usb3-port1: unable to enumerate USB device [ 504.712179][T11971] can0 (unregistered): slcan off ttyS3. [ 504.742445][T11988] can0: slcan on ttyS3. [ 504.812097][T11970] can0 (unregistered): slcan off ttyS3. [ 507.246214][ T5925] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 507.964869][ T5925] usb 4-1: device descriptor read/64, error -71 [ 508.239296][T12043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.652634][ T5925] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 508.667752][T12043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.994206][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 508.994222][ T30] audit: type=1326 audit(1767985013.026:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12053 comm="syz.3.1212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa77078f749 code=0x0 [ 509.136852][T12060] can0: slcan on ttyS3. [ 509.137385][ T30] audit: type=1400 audit(1767985013.146:1059): avc: denied { read } for pid=12028 comm="syz.1.1206" dev="sockfs" ino=27112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 509.222243][T12066] can0 (unregistered): slcan off ttyS3. [ 509.252051][T12060] can0: slcan on ttyS3. [ 509.493065][ T30] audit: type=1400 audit(1767985013.506:1060): avc: denied { getopt } for pid=12081 comm="syz.4.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 509.644521][T12089] Driver unsupported XDP return value 0 on prog (id 421) dev N/A, expect packet loss! [ 509.883123][T12053] can0 (unregistered): slcan off ttyS3. [ 511.099776][T12112] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 511.180648][T12112] macvtap1: entered promiscuous mode [ 511.238960][T12112] macvtap1: entered allmulticast mode [ 511.246552][T12119] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1222'. [ 511.298165][T12112] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 511.681870][ T30] audit: type=1326 audit(1767985015.686:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 512.149823][ T30] audit: type=1326 audit(1767985015.686:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 512.218260][ T30] audit: type=1326 audit(1767985015.686:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 512.360169][ T30] audit: type=1326 audit(1767985015.686:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 512.384782][ T30] audit: type=1326 audit(1767985015.686:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 512.430366][ T30] audit: type=1326 audit(1767985015.686:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 512.955700][ T30] audit: type=1326 audit(1767985015.686:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 514.543302][T12119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.126097][T12119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.153099][T12119] bond0 (unregistering): Released all slaves [ 517.319681][ T5925] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 517.524028][ T5925] usb 4-1: device descriptor read/64, error -71 [ 518.311930][ T5925] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 518.441908][ T5925] usb 4-1: device descriptor read/64, error -71 [ 518.756849][ T5925] usb usb4-port1: attempt power cycle [ 518.980444][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 519.239300][T11097] buffer_io_error: 5 callbacks suppressed [ 519.239314][T11097] Buffer I/O error on dev loop7, logical block 0, async page read [ 519.268875][T11097] Buffer I/O error on dev loop7, logical block 0, async page read [ 519.295262][T11097] Buffer I/O error on dev loop7, logical block 0, async page read [ 519.318732][T11097] Buffer I/O error on dev loop7, logical block 0, async page read [ 519.366004][T11097] Buffer I/O error on dev loop7, logical block 0, async page read [ 519.544510][T11097] Buffer I/O error on dev loop7, logical block 0, async page read [ 519.559600][T11097] Buffer I/O error on dev loop7, logical block 0, async page read [ 519.571901][T11097] Buffer I/O error on dev loop7, logical block 0, async page read [ 519.721946][T11097] Buffer I/O error on dev loop7, logical block 0, async page read [ 519.730722][T11097] Buffer I/O error on dev loop7, logical block 0, async page read [ 519.782082][ T791] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 520.192177][ T5925] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 520.224901][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.244876][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.277397][ T5925] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 520.297344][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.308090][ T791] usb 2-1: Using ep0 maxpacket: 16 [ 520.319852][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.337094][ T5925] usb 4-1: config 0 descriptor?? [ 520.362174][ T791] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.547019][ T791] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 520.556998][ T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.577108][ T791] usb 2-1: config 0 descriptor?? [ 520.687378][T12314] can0: slcan on ttyS3. [ 521.013004][T12314] can0 (unregistered): slcan off ttyS3. [ 521.427554][ T5925] cypress 0003:04B4:ED81.0007: item fetching failed at offset 3/6 [ 521.444851][ T5925] cypress 0003:04B4:ED81.0007: parse failed [ 521.450849][ T5925] cypress 0003:04B4:ED81.0007: probe with driver cypress failed with error -22 [ 522.244127][ T5925] usb 4-1: USB disconnect, device number 25 [ 522.453676][ T791] usbhid 2-1:0.0: can't add hid device: -71 [ 522.459688][ T791] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 522.578918][ T791] usb 2-1: USB disconnect, device number 27 [ 522.645860][T12375] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 522.723900][T12375] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 524.383067][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 524.383084][ T30] audit: type=1400 audit(1767985028.416:1078): avc: denied { relabelfrom } for pid=12423 comm="syz.2.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 524.550811][ T30] audit: type=1400 audit(1767985028.416:1079): avc: denied { relabelto } for pid=12423 comm="syz.2.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 528.779716][T12472] batadv_slave_1: entered promiscuous mode [ 528.824319][T12479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40209 sclass=netlink_route_socket pid=12479 comm=syz.0.1275 [ 529.388766][T12477] FAULT_INJECTION: forcing a failure. [ 529.388766][T12477] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 529.402364][T12477] CPU: 0 UID: 0 PID: 12477 Comm: syz.3.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.402383][T12477] Tainted: [L]=SOFTLOCKUP [ 529.402387][T12477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.402394][T12477] Call Trace: [ 529.402398][T12477] [ 529.402403][T12477] dump_stack_lvl+0x16c/0x1f0 [ 529.402421][T12477] should_fail_ex+0x512/0x640 [ 529.402440][T12477] should_fail_alloc_page+0xe7/0x130 [ 529.402457][T12477] prepare_alloc_pages+0x401/0x670 [ 529.402476][T12477] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 529.402489][T12477] ? find_held_lock+0x2b/0x80 [ 529.402510][T12477] ? __lock_acquire+0x436/0x2890 [ 529.402524][T12477] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 529.402542][T12477] ? __pfx___might_resched+0x10/0x10 [ 529.402562][T12477] ? find_held_lock+0x2b/0x80 [ 529.402578][T12477] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 529.402592][T12477] ? policy_nodemask+0xea/0x4e0 [ 529.402608][T12477] alloc_pages_mpol+0x1fb/0x550 [ 529.402623][T12477] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 529.402641][T12477] folio_alloc_mpol_noprof+0x36/0x2f0 [ 529.402664][T12477] vma_alloc_folio_noprof+0xed/0x1e0 [ 529.402683][T12477] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 529.402707][T12477] do_anonymous_page+0xc81/0x2190 [ 529.402738][T12477] __handle_mm_fault+0x1ecf/0x2bb0 [ 529.402771][T12477] ? __pfx___handle_mm_fault+0x10/0x10 [ 529.402798][T12477] ? find_vma+0xbf/0x140 [ 529.402811][T12477] ? __pfx_find_vma+0x10/0x10 [ 529.402830][T12477] handle_mm_fault+0x3fe/0xad0 [ 529.402853][T12477] do_user_addr_fault+0x7a6/0x1370 [ 529.402870][T12477] ? rcu_is_watching+0x12/0xc0 [ 529.402883][T12477] exc_page_fault+0x64/0xc0 [ 529.402897][T12477] asm_exc_page_fault+0x26/0x30 [ 529.402908][T12477] RIP: 0010:filldir64+0x1e1/0x620 [ 529.402927][T12477] Code: 08 7d ff 4c 89 e6 4c 89 f7 e8 9b 02 7d ff 48 83 7c 24 28 00 0f 85 54 02 00 00 e8 7a 08 7d ff 0f 01 cb 0f ae e8 48 8b 44 24 08 <49> 89 46 08 e8 66 08 7d ff 4c 8b 74 24 30 48 8b 44 24 10 49 89 06 [ 529.402937][T12477] RSP: 0018:ffffc9000bea7c50 EFLAGS: 00050293 [ 529.402947][T12477] RAX: 0000000000000000 RBX: ffffc9000bea7e70 RCX: ffffffff8241e025 [ 529.402954][T12477] RDX: ffff88801e37a4c0 RSI: ffffffff8241e036 RDI: 0000000000000006 [ 529.402961][T12477] RBP: ffffffff8ba40100 R08: 0000000000000006 R09: 00002000000010c0 [ 529.402968][T12477] R10: 00002000000010d8 R11: ffff88801e37aff0 R12: 00002000000010d8 [ 529.402974][T12477] R13: ffffc9000bea7e94 R14: 00002000000010c0 R15: 0000000000000001 [ 529.402985][T12477] ? filldir64+0x1c5/0x620 [ 529.402997][T12477] ? filldir64+0x1d6/0x620 [ 529.403015][T12477] ? __pfx_filldir64+0x10/0x10 [ 529.403027][T12477] proc_readfd_common+0x3fc/0x5f0 [ 529.403038][T12477] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 529.403050][T12477] ? __pfx_proc_readfd_common+0x10/0x10 [ 529.403061][T12477] ? down_read_killable+0x313/0x4c0 [ 529.403079][T12477] ? __pfx_down_read_killable+0x10/0x10 [ 529.403095][T12477] ? avc_policy_seqno+0x9/0x20 [ 529.403106][T12477] ? selinux_file_permission+0x126/0x660 [ 529.403125][T12477] iterate_dir+0x296/0xaf0 [ 529.403140][T12477] __x64_sys_getdents64+0x13c/0x2c0 [ 529.403154][T12477] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 529.403167][T12477] ? fput+0x70/0xf0 [ 529.403177][T12477] ? __pfx_filldir64+0x10/0x10 [ 529.403194][T12477] do_syscall_64+0xcd/0xf80 [ 529.403209][T12477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.403220][T12477] RIP: 0033:0x7fa77078f749 [ 529.403229][T12477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.403239][T12477] RSP: 002b:00007fa77163b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 529.403248][T12477] RAX: ffffffffffffffda RBX: 00007fa7709e5fa0 RCX: 00007fa77078f749 [ 529.403255][T12477] RDX: 0000000000000fe3 RSI: 00002000000010c0 RDI: 0000000000000003 [ 529.403262][T12477] RBP: 00007fa77163b090 R08: 0000000000000000 R09: 0000000000000000 [ 529.403268][T12477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.403274][T12477] R13: 00007fa7709e6038 R14: 00007fa7709e5fa0 R15: 00007fff1ddf3cb8 [ 529.403289][T12477] [ 529.876017][ T30] audit: type=1400 audit(1767985033.866:1080): avc: denied { mount } for pid=12457 comm="syz.4.1272" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 530.499539][T12509] bond0: entered promiscuous mode [ 530.505420][T12509] bond_slave_0: entered promiscuous mode [ 530.514063][T12509] bond_slave_1: entered promiscuous mode [ 530.528924][T12509] dummy0: entered promiscuous mode [ 530.542628][T12509] hsr1: entered promiscuous mode [ 530.547647][T12509] hsr1: entered allmulticast mode [ 530.553306][T12509] bond0: entered allmulticast mode [ 530.558445][T12509] bond_slave_0: entered allmulticast mode [ 530.564807][T12509] bond_slave_1: entered allmulticast mode [ 530.570607][T12509] dummy0: entered allmulticast mode [ 532.031522][ T5949] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 532.191520][ T5945] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 532.213151][ T5949] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 532.247135][ T5949] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 532.272240][ T5949] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.304147][ T5949] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 532.321516][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 532.343041][ T5949] usb 3-1: Product: syz [ 532.347199][ T5949] usb 3-1: Manufacturer: syz [ 532.361882][ T5949] usb 3-1: SerialNumber: syz [ 532.394278][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.679561][ T5945] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 532.692796][T12514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.700318][ T5945] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 532.739997][T12514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.753945][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.776288][ T5949] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 532.795931][ T5945] usb 2-1: config 0 descriptor?? [ 532.818076][ T5945] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 532.839830][ T5945] dvb-usb: bulk message failed: -22 (3/0) [ 532.931676][ T5945] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 532.944315][ T5945] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 533.024481][ T30] audit: type=1400 audit(1767985037.056:1081): avc: denied { read write } for pid=12513 comm="syz.2.1280" name="lp0" dev="devtmpfs" ino=3171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 533.050105][ T5945] usb 2-1: media controller created [ 533.521134][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.541596][ T30] audit: type=1400 audit(1767985037.086:1082): avc: denied { open } for pid=12513 comm="syz.2.1280" path="/dev/usb/lp0" dev="devtmpfs" ino=3171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 533.572372][ T5945] dvb-usb: bulk message failed: -22 (6/0) [ 533.581896][ T5949] usb 3-1: USB disconnect, device number 43 [ 533.592898][ T5945] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 533.606425][ T5949] usblp0: removed [ 533.630366][ T5945] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 533.682156][ T5945] dvb-usb: schedule remote query interval to 150 msecs. [ 533.693304][ T5945] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 533.709923][ T5945] usb 2-1: USB disconnect, device number 28 [ 533.821843][ T5945] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 534.234617][ T30] audit: type=1400 audit(1767985038.266:1083): avc: denied { write } for pid=12589 comm="syz.3.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 534.295897][T12591] binder: 12586:12591 ioctl c018620c 0 returned -14 [ 534.327359][ T30] audit: type=1400 audit(1767985038.356:1084): avc: denied { ioctl } for pid=12589 comm="syz.3.1290" path="socket:[28710]" dev="sockfs" ino=28710 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 534.424307][T12595] fuse: Bad value for 'user_id' [ 534.429577][T12595] fuse: Bad value for 'user_id' [ 536.338494][ T30] audit: type=1326 audit(1767985040.366:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.3.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 536.367866][ T30] audit: type=1326 audit(1767985040.366:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.3.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 536.418448][ T30] audit: type=1326 audit(1767985040.366:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.3.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 536.590196][ T30] audit: type=1326 audit(1767985040.366:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.3.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 536.670678][ T30] audit: type=1326 audit(1767985040.366:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.3.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 536.733699][ T30] audit: type=1326 audit(1767985040.366:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.3.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 536.759394][ T30] audit: type=1326 audit(1767985040.366:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.3.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 536.796360][ T30] audit: type=1326 audit(1767985040.366:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.3.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 536.827792][ T30] audit: type=1326 audit(1767985040.396:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.3.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 536.852571][ T30] audit: type=1326 audit(1767985040.396:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.3.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77078f749 code=0x7ffc0000 [ 539.022123][ T5925] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 539.030673][ T791] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 539.631352][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 539.640369][ T5925] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 539.649155][ T5925] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 539.794083][T12664] syzkaller0: entered promiscuous mode [ 539.799639][T12664] syzkaller0: entered allmulticast mode [ 539.882709][ T5925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 539.896390][ T5925] usb 3-1: config 1 has no interface number 0 [ 539.903936][ T5925] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 539.922735][ T5925] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 539.937373][ T791] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 539.959915][ T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.198976][ T791] usb 4-1: Product: syz [ 540.220662][ T791] usb 4-1: Manufacturer: syz [ 540.235565][ T5925] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 540.283786][ T791] usb 4-1: SerialNumber: syz [ 540.406793][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.416445][ T791] usb 4-1: config 0 descriptor?? [ 540.432837][ T791] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 026 [ 540.932649][ T5925] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 541.030046][T12683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1309'. [ 541.693251][ T791] (null): failure setting delay to 10us [ 541.703206][ T791] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 541.736888][ T791] usb 4-1: USB disconnect, device number 26 [ 541.930528][ T5925] snd_usb_pod 3-1:1.1: set_interface failed [ 541.954027][ T5925] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 541.962811][ T5925] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 542.016278][ T5925] usb 3-1: USB disconnect, device number 44 [ 543.124670][ T7211] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 543.281892][ T7211] usb 4-1: Using ep0 maxpacket: 16 [ 543.299830][ T7211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.311870][ T7211] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.324953][ T7211] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 543.342235][ T7211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.357429][ T7211] usb 4-1: config 0 descriptor?? [ 543.587664][T12683] tipc: Started in network mode [ 543.593076][T12683] tipc: Node identity ac1414aa, cluster identity 4711 [ 543.600669][T12683] tipc: Enabled bearer , priority 10 [ 543.632513][T12688] syzkaller0: entered promiscuous mode [ 543.638045][T12688] syzkaller0: entered allmulticast mode [ 543.984842][T12734] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1313'. [ 545.161995][ T49] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 545.311958][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 545.318596][ T49] usb 1-1: config 6 has an invalid interface number: 148 but max is 0 [ 545.328314][ T49] usb 1-1: config 6 has no interface number 0 [ 545.334989][ T49] usb 1-1: config 6 interface 148 altsetting 129 endpoint 0xE has an invalid bInterval 243, changing to 11 [ 545.347762][ T49] usb 1-1: config 6 interface 148 altsetting 129 endpoint 0x3 has an invalid bInterval 129, changing to 11 [ 545.360703][ T49] usb 1-1: config 6 interface 148 has no altsetting 0 [ 545.369818][ T49] usb 1-1: New USB device found, idVendor=050d, idProduct=0109, bcdDevice= f.17 [ 545.379599][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.388204][ T49] usb 1-1: Product: syz [ 545.392939][ T49] usb 1-1: Manufacturer: syz [ 545.397541][ T49] usb 1-1: SerialNumber: syz [ 545.543384][ T791] tipc: Node number set to 2886997162 [ 545.617559][ T49] mct_u232 1-1:6.148: MCT U232 converter detected [ 545.635706][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'. [ 545.645912][ T49] mct_u232 ttyUSB0: expected endpoint missing [ 545.673474][ T49] usb 1-1: USB disconnect, device number 24 [ 545.697439][ T49] mct_u232 1-1:6.148: device disconnected [ 545.926421][T12781] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60 sclass=netlink_xfrm_socket pid=12781 comm=syz.1.1320 [ 546.022842][T12786] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1322'. [ 546.034027][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 546.041109][ T30] audit: type=1400 audit(1767985050.066:1108): avc: denied { getopt } for pid=12779 comm="syz.2.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 546.213000][T12793] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1322'. [ 546.619267][ T7211] usbhid 4-1:0.0: can't add hid device: -71 [ 546.823301][ T7211] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 546.982173][ T7211] usb 4-1: USB disconnect, device number 27 [ 550.246799][T12899] syzkaller0: entered promiscuous mode [ 550.258363][T12899] syzkaller0: entered allmulticast mode [ 551.588219][T12924] binder: 12910:12924 ioctl c018620c 0 returned -14 [ 551.804666][ T7211] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 551.961830][ T7211] usb 1-1: Using ep0 maxpacket: 16 [ 551.969172][ T7211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.984962][ T7211] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.024513][ T7211] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 552.076972][ T7211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.115315][ T7211] usb 1-1: config 0 descriptor?? [ 553.414752][T12965] nfs: Unknown parameter 'fsc2ÕÅuß' [ 553.687922][ T30] audit: type=1400 audit(1767985057.716:1109): avc: denied { ioctl } for pid=12959 comm="syz.4.1336" path="/295/file0" dev="tmpfs" ino=1557 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 554.534224][T12989] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 554.546017][T12988] IPVS: stopping master sync thread 12989 ... [ 554.954232][ T30] audit: type=1400 audit(1767985058.986:1110): avc: denied { ioctl } for pid=13007 comm="syz.3.1339" path="socket:[29825]" dev="sockfs" ino=29825 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 554.954460][T13008] syzkaller0: entered promiscuous mode [ 555.032655][T13008] syzkaller0: entered allmulticast mode [ 555.101488][ T5945] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 555.152522][T13008] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1339'. [ 555.241471][ T5945] usb 2-1: device descriptor read/64, error -71 [ 555.996217][ T7211] usbhid 1-1:0.0: can't add hid device: -71 [ 556.023727][ T7211] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 556.063049][ T7211] usb 1-1: USB disconnect, device number 25 [ 556.091405][ T5945] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 556.233665][ T5945] usb 2-1: device descriptor read/64, error -71 [ 556.361922][ T5945] usb usb2-port1: attempt power cycle [ 556.721395][ T5945] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 556.731810][ T49] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 556.794659][ T5945] usb 2-1: device descriptor read/8, error -71 [ 556.977207][ T49] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 557.126836][ T5945] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 557.170768][ T5945] usb 2-1: device descriptor read/8, error -71 [ 557.180065][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.638602][ T5945] usb usb2-port1: unable to enumerate USB device [ 557.672357][ T49] usb 1-1: Product: syz [ 557.690206][ T49] usb 1-1: Manufacturer: syz [ 557.702231][ T49] usb 1-1: SerialNumber: syz [ 557.798795][ T49] usb 1-1: config 0 descriptor?? [ 557.885871][ T49] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 026 [ 558.242004][ T791] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 558.412397][ T791] usb 2-1: Using ep0 maxpacket: 8 [ 558.426575][ T791] usb 2-1: config 68 has an invalid interface number: 198 but max is 0 [ 558.459561][ T791] usb 2-1: config 68 has no interface number 0 [ 558.493940][ T791] usb 2-1: config 68 interface 198 has no altsetting 0 [ 558.526441][ T791] usb 2-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=34.4e [ 558.556288][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.580008][ T791] usb 2-1: Product: syz [ 558.595478][ T791] usb 2-1: Manufacturer: syz [ 558.611741][ T791] usb 2-1: SerialNumber: syz [ 558.984126][ T49] (null): failure setting delay to 10us [ 558.989863][ T49] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 559.088462][ T49] usb 1-1: USB disconnect, device number 26 [ 559.228835][ T791] gspca_main: tv8532-2.14.0 probing 0545:808b [ 559.290370][ T791] usb 2-1: USB disconnect, device number 33 [ 559.391521][ T5945] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 559.571435][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 559.593739][ T5945] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 559.619919][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.645148][ T5945] usb 3-1: config 0 has no interface number 0 [ 559.653290][ T5945] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 559.664842][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.673227][ T5945] usb 3-1: Product: syz [ 559.677442][ T5945] usb 3-1: Manufacturer: syz [ 559.682821][ T5945] usb 3-1: SerialNumber: syz [ 559.690646][ T5945] usb 3-1: config 0 descriptor?? [ 559.714123][ T5945] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 559.731428][ T5945] uvcvideo 3-1:0.31: No valid video chain found. [ 560.752428][ T30] audit: type=1400 audit(1767985064.266:1111): avc: denied { bind } for pid=13144 comm="syz.3.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 561.420170][ T30] audit: type=1400 audit(1767985065.446:1112): avc: denied { ioctl } for pid=13174 comm="syz.0.1356" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 562.054973][T13200] can0: slcan on ttyS3. [ 562.422976][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.429376][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.480591][ T30] audit: type=1326 audit(1767985066.506:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13109 comm="syz.2.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8458f749 code=0x7fc00000 [ 562.553137][T13200] can0 (unregistered): slcan off ttyS3. [ 562.598647][ T791] usb 3-1: USB disconnect, device number 45 [ 565.021056][T13261] ip6t_srh: unknown srh match flags FF3F [ 565.108334][T13252] lo speed is unknown, defaulting to 1000 [ 565.792691][T13297] can0: slcan on ttyS3. [ 566.492632][T13303] can0 (unregistered): slcan off ttyS3. [ 567.946125][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 567.956151][ T30] audit: type=1400 audit(1767985071.916:1114): avc: denied { bind } for pid=13338 comm="syz.3.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 568.033144][T13351] FAULT_INJECTION: forcing a failure. [ 568.033144][T13351] name failslab, interval 1, probability 0, space 0, times 0 [ 568.083689][T13351] CPU: 1 UID: 0 PID: 13351 Comm: syz.1.1381 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.083721][T13351] Tainted: [L]=SOFTLOCKUP [ 568.083727][T13351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.083738][T13351] Call Trace: [ 568.083744][T13351] [ 568.083752][T13351] dump_stack_lvl+0x16c/0x1f0 [ 568.083781][T13351] should_fail_ex+0x512/0x640 [ 568.083808][T13351] ? fs_reclaim_acquire+0xae/0x150 [ 568.083836][T13351] should_failslab+0xc2/0x120 [ 568.083860][T13351] __kmalloc_noprof+0xeb/0x910 [ 568.083895][T13351] ? tomoyo_encode2+0x100/0x3e0 [ 568.083924][T13351] ? tomoyo_encode2+0x100/0x3e0 [ 568.083945][T13351] tomoyo_encode2+0x100/0x3e0 [ 568.083973][T13351] tomoyo_encode+0x29/0x50 [ 568.083996][T13351] tomoyo_mount_acl+0x144/0x850 [ 568.084020][T13351] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 568.084043][T13351] ? kernel_text_address+0x8d/0x100 [ 568.084068][T13351] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 568.084091][T13351] ? arch_stack_walk+0xa6/0x100 [ 568.084142][T13351] ? tomoyo_domain+0xba/0x150 [ 568.084168][T13351] ? tomoyo_profile+0x47/0x60 [ 568.084197][T13351] tomoyo_mount_permission+0x16d/0x420 [ 568.084219][T13351] ? tomoyo_mount_permission+0x14f/0x420 [ 568.084243][T13351] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 568.084282][T13351] security_sb_mount+0x9b/0x260 [ 568.084311][T13351] path_mount+0x158/0x23a0 [ 568.084329][T13351] ? rcu_is_watching+0x12/0xc0 [ 568.084350][T13351] ? __pfx_path_mount+0x10/0x10 [ 568.084367][T13351] ? kmem_cache_free+0x2d8/0x770 [ 568.084386][T13351] ? putname+0xf5/0x1a0 [ 568.084418][T13351] ? putname+0xf5/0x1a0 [ 568.084442][T13351] ? putname+0xf5/0x1a0 [ 568.084471][T13351] ? __x64_sys_mount+0x293/0x310 [ 568.084491][T13351] __x64_sys_mount+0x293/0x310 [ 568.084515][T13351] ? __pfx___x64_sys_mount+0x10/0x10 [ 568.084541][T13351] do_syscall_64+0xcd/0xf80 [ 568.084567][T13351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.084585][T13351] RIP: 0033:0x7f168618f749 [ 568.084602][T13351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.084619][T13351] RSP: 002b:00007f1686ffa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 568.084638][T13351] RAX: ffffffffffffffda RBX: 00007f16863e5fa0 RCX: 00007f168618f749 [ 568.084650][T13351] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 568.084662][T13351] RBP: 00007f1686ffa090 R08: 0000200000000100 R09: 0000000000000000 [ 568.084673][T13351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.084684][T13351] R13: 00007f16863e6038 R14: 00007f16863e5fa0 R15: 00007ffd8cf30f48 [ 568.084710][T13351] [ 568.667644][ T5139] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 569.322100][ T5945] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 569.350844][T13380] lo speed is unknown, defaulting to 1000 [ 569.726806][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 569.769460][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 569.892453][ T5945] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 569.984735][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.026079][ T5945] usb 2-1: Product: syz [ 570.030274][ T5945] usb 2-1: Manufacturer: syz [ 570.078623][ T5945] usb 2-1: SerialNumber: syz [ 570.169805][ T5945] usb 2-1: config 0 descriptor?? [ 570.279319][T13417] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 570.406802][T13426] binder: 13419:13426 ioctl c018620c 0 returned -14 [ 570.466324][ T5945] usb 2-1: USB disconnect, device number 34 [ 570.508983][T13003] udevd[13003]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.581960][ T791] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 570.800373][ T791] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 570.831710][ T791] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 570.862578][ T791] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 570.938668][ T791] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 570.952462][ T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 570.982442][ T791] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 571.022831][ T791] usb 4-1: string descriptor 0 read error: -22 [ 571.030626][ T791] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 571.045901][ T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.068511][ T791] usb 4-1: config 0 descriptor?? [ 571.088451][ T791] hub 4-1:0.0: bad descriptor, ignoring hub [ 571.122672][ T791] hub 4-1:0.0: probe with driver hub failed with error -5 [ 571.928899][ T5949] usb 4-1: USB disconnect, device number 28 [ 572.783024][ T30] audit: type=1800 audit(1767985076.816:1115): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1399" name="SYSV00000000" dev="tmpfs" ino=12 res=0 errno=0 [ 573.142528][ T30] audit: type=1326 audit(1767985077.156:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 573.371441][ T30] audit: type=1326 audit(1767985077.156:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 573.581627][ T30] audit: type=1326 audit(1767985077.156:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 573.639252][ T30] audit: type=1326 audit(1767985077.156:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 573.676959][ T30] audit: type=1326 audit(1767985077.156:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 573.719436][ T30] audit: type=1326 audit(1767985077.156:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 574.071895][ T30] audit: type=1326 audit(1767985077.166:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 574.144223][ T30] audit: type=1326 audit(1767985077.166:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 574.201946][ T30] audit: type=1326 audit(1767985077.166:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 574.264451][ T30] audit: type=1326 audit(1767985077.166:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1a58f749 code=0x7ffc0000 [ 576.709401][T13560] macvlan2: entered promiscuous mode [ 576.771390][T13560] bridge0: entered promiscuous mode [ 576.778254][T13572] binder: 13558:13572 ioctl 40087543 200000000240 returned -22 [ 577.759591][T13579] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 577.766183][T13579] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 577.794514][T13579] vhci_hcd vhci_hcd.0: Device attached [ 577.836853][T13580] vhci_hcd: connection closed [ 577.962872][ T12] vhci_hcd vhci_hcd.3: stop threads [ 577.973204][ T12] vhci_hcd vhci_hcd.3: release socket [ 578.013529][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 578.343075][ T791] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 578.534551][ T791] usb 2-1: Using ep0 maxpacket: 8 [ 578.547679][ T76] Bluetooth: Error in BCSP hdr checksum [ 578.564105][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 578.599240][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 578.635836][ T791] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 578.682326][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 578.695086][ T791] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 578.812042][ T76] Bluetooth: Error in BCSP hdr checksum [ 578.842254][ T791] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 578.862403][ T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.891426][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 578.891437][ T30] audit: type=1400 audit(1767985082.916:1139): avc: denied { lock } for pid=13610 comm="syz.2.1426" path="socket:[30951]" dev="sockfs" ino=30951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 578.975055][ T791] usb 2-1: config 0 descriptor?? [ 578.987468][T13589] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 579.081636][ T9765] Bluetooth: Error in BCSP hdr checksum [ 579.095692][T13614] FAULT_INJECTION: forcing a failure. [ 579.095692][T13614] name failslab, interval 1, probability 0, space 0, times 0 [ 579.113864][T13614] CPU: 0 UID: 0 PID: 13614 Comm: syz.2.1426 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.113895][T13614] Tainted: [L]=SOFTLOCKUP [ 579.113904][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.113915][T13614] Call Trace: [ 579.113921][T13614] [ 579.113928][T13614] dump_stack_lvl+0x16c/0x1f0 [ 579.113956][T13614] should_fail_ex+0x512/0x640 [ 579.113983][T13614] ? kmem_cache_alloc_noprof+0x62/0x770 [ 579.114004][T13614] should_failslab+0xc2/0x120 [ 579.114029][T13614] kmem_cache_alloc_noprof+0x83/0x770 [ 579.114051][T13614] ? __pfx_avc_has_perm+0x10/0x10 [ 579.114079][T13614] ? posix_lock_inode+0x1b7/0x2260 [ 579.114111][T13614] ? posix_lock_inode+0x1b7/0x2260 [ 579.114135][T13614] posix_lock_inode+0x1b7/0x2260 [ 579.114165][T13614] ? file_has_perm+0x27b/0x350 [ 579.114186][T13614] ? __pfx_posix_lock_inode+0x10/0x10 [ 579.114214][T13614] ? lockdep_init_map_type+0x5c/0x270 [ 579.114236][T13614] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 579.114260][T13614] vfs_lock_file+0xfb/0x150 [ 579.114286][T13614] fcntl_setlk+0x3ff/0xdf0 [ 579.114315][T13614] ? __pfx_fcntl_setlk+0x10/0x10 [ 579.114345][T13614] ? __might_fault+0xe3/0x190 [ 579.114361][T13614] ? __might_fault+0xe3/0x190 [ 579.114376][T13614] ? __might_fault+0x13b/0x190 [ 579.114403][T13614] do_fcntl+0x43d/0x1660 [ 579.114422][T13614] ? __pfx_do_fcntl+0x10/0x10 [ 579.114446][T13614] ? selinux_file_fcntl+0x93/0x170 [ 579.114468][T13614] __x64_sys_fcntl+0x163/0x200 [ 579.114489][T13614] do_syscall_64+0xcd/0xf80 [ 579.114514][T13614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.114533][T13614] RIP: 0033:0x7fad8458f749 [ 579.114548][T13614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.114565][T13614] RSP: 002b:00007fad853ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 579.114583][T13614] RAX: ffffffffffffffda RBX: 00007fad847e6090 RCX: 00007fad8458f749 [ 579.114594][T13614] RDX: 0000200000000280 RSI: 0000000000000007 RDI: 0000000000000003 [ 579.114605][T13614] RBP: 00007fad853ad090 R08: 0000000000000000 R09: 0000000000000000 [ 579.114615][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.114626][T13614] R13: 00007fad847e6128 R14: 00007fad847e6090 R15: 00007ffcf60224f8 [ 579.114650][T13614] [ 579.455458][ T3514] Bluetooth: Error in BCSP hdr checksum [ 579.549476][T13605] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 579.549688][ T791] usb 2-1: USB disconnect, device number 35 [ 579.781226][T11077] Bluetooth: Error in BCSP hdr checksum [ 579.820949][T13647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=13647 comm=syz.3.1431 [ 580.338132][T11077] Bluetooth: Error in BCSP hdr checksum [ 580.344431][ T5139] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 580.353202][T13605] Bluetooth: hci5: command 0x1003 tx timeout [ 581.699251][T13677] FAULT_INJECTION: forcing a failure. [ 581.699251][T13677] name failslab, interval 1, probability 0, space 0, times 0 [ 581.712132][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz.2.1437 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.712160][T13677] Tainted: [L]=SOFTLOCKUP [ 581.712164][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 581.712171][T13677] Call Trace: [ 581.712179][T13677] [ 581.712184][T13677] dump_stack_lvl+0x16c/0x1f0 [ 581.712203][T13677] should_fail_ex+0x512/0x640 [ 581.712220][T13677] ? __kmalloc_cache_noprof+0x5f/0x800 [ 581.712240][T13677] should_failslab+0xc2/0x120 [ 581.712255][T13677] __kmalloc_cache_noprof+0x80/0x800 [ 581.712273][T13677] ? irqentry_exit+0x1dd/0x8c0 [ 581.712286][T13677] ? bpf_prog_alloc_no_stats+0x122/0x610 [ 581.712302][T13677] ? bpf_prog_alloc_no_stats+0x122/0x610 [ 581.712313][T13677] bpf_prog_alloc_no_stats+0x122/0x610 [ 581.712327][T13677] bpf_prog_alloc+0x3b/0x230 [ 581.712339][T13677] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 581.712353][T13677] bpf_prog_load+0x19bc/0x2cc0 [ 581.712373][T13677] ? __pfx_bpf_prog_load+0x10/0x10 [ 581.712389][T13677] ? rcu_is_watching+0x12/0xc0 [ 581.712400][T13677] ? irqentry_exit+0x1dd/0x8c0 [ 581.712414][T13677] ? lockdep_hardirqs_on+0x7c/0x110 [ 581.712428][T13677] ? irqentry_exit+0x1dd/0x8c0 [ 581.712447][T13677] ? __sys_bpf+0x288/0x4980 [ 581.712463][T13677] ? __sanitizer_cov_trace_switch+0x34/0x90 [ 581.712477][T13677] __sys_bpf+0x3e72/0x4980 [ 581.712492][T13677] ? rcu_is_watching+0x12/0xc0 [ 581.712504][T13677] ? __pfx___sys_bpf+0x10/0x10 [ 581.712526][T13677] ? __pfx___schedule+0x10/0x10 [ 581.712547][T13677] ? fput+0xe2/0xf0 [ 581.712556][T13677] ? ksys_write+0x1ac/0x250 [ 581.712570][T13677] ? __pfx_ksys_write+0x10/0x10 [ 581.712586][T13677] __x64_sys_bpf+0x78/0xc0 [ 581.712601][T13677] ? lockdep_hardirqs_on+0x7c/0x110 [ 581.712615][T13677] do_syscall_64+0xcd/0xf80 [ 581.712631][T13677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.712642][T13677] RIP: 0033:0x7fad8458f749 [ 581.712653][T13677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.712664][T13677] RSP: 002b:00007fad853ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 581.712676][T13677] RAX: ffffffffffffffda RBX: 00007fad847e6090 RCX: 00007fad8458f749 [ 581.712683][T13677] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 581.712690][T13677] RBP: 00007fad853ad090 R08: 0000000000000000 R09: 0000000000000000 [ 581.712696][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.712702][T13677] R13: 00007fad847e6128 R14: 00007fad847e6090 R15: 00007ffcf60224f8 [ 581.712718][T13677] [ 582.344589][ T30] audit: type=1326 audit(1767985086.006:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.2.1437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad8458f749 code=0x0 [ 583.191423][T13605] Bluetooth: hci3: command 0x0406 tx timeout [ 585.253725][T13605] Bluetooth: hci3: command 0x0406 tx timeout [ 585.457869][T13725] FAULT_INJECTION: forcing a failure. [ 585.457869][T13725] name failslab, interval 1, probability 0, space 0, times 0 [ 585.496573][T13732] xt_bpf: check failed: parse error [ 585.496573][ T30] audit: type=1400 audit(1767985089.526:1141): avc: denied { ioctl } for pid=13724 comm="syz.1.1446" path="socket:[31067]" dev="sockfs" ino=31067 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 585.545474][T13725] CPU: 0 UID: 0 PID: 13725 Comm: syz.0.1445 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.545506][T13725] Tainted: [L]=SOFTLOCKUP [ 585.545512][T13725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 585.545523][T13725] Call Trace: [ 585.545529][T13725] [ 585.545536][T13725] dump_stack_lvl+0x16c/0x1f0 [ 585.545564][T13725] should_fail_ex+0x512/0x640 [ 585.545590][T13725] ? fs_reclaim_acquire+0xae/0x150 [ 585.545614][T13725] should_failslab+0xc2/0x120 [ 585.545638][T13725] __kmalloc_noprof+0xeb/0x910 [ 585.545667][T13725] ? tomoyo_encode2+0x100/0x3e0 [ 585.545693][T13725] ? tomoyo_encode2+0x100/0x3e0 [ 585.545714][T13725] tomoyo_encode2+0x100/0x3e0 [ 585.545740][T13725] tomoyo_encode+0x29/0x50 [ 585.545761][T13725] tomoyo_mount_acl+0x314/0x850 [ 585.545784][T13725] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 585.545806][T13725] ? kernel_text_address+0x8d/0x100 [ 585.545830][T13725] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 585.545850][T13725] ? arch_stack_walk+0xa6/0x100 [ 585.545898][T13725] ? tomoyo_domain+0xba/0x150 [ 585.545925][T13725] ? tomoyo_profile+0x47/0x60 [ 585.545953][T13725] tomoyo_mount_permission+0x16d/0x420 [ 585.545974][T13725] ? tomoyo_mount_permission+0x14f/0x420 [ 585.545995][T13725] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 585.546031][T13725] security_sb_mount+0x9b/0x260 [ 585.546050][T13725] path_mount+0x158/0x23a0 [ 585.546064][T13725] ? rcu_is_watching+0x12/0xc0 [ 585.546100][T13725] ? __pfx_path_mount+0x10/0x10 [ 585.546114][T13725] ? kmem_cache_free+0x2d8/0x770 [ 585.546131][T13725] ? putname+0xf5/0x1a0 [ 585.546157][T13725] ? putname+0xf5/0x1a0 [ 585.546177][T13725] ? putname+0xf5/0x1a0 [ 585.546201][T13725] ? __x64_sys_mount+0x293/0x310 [ 585.546214][T13725] __x64_sys_mount+0x293/0x310 [ 585.546229][T13725] ? __pfx___x64_sys_mount+0x10/0x10 [ 585.546251][T13725] do_syscall_64+0xcd/0xf80 [ 585.546272][T13725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.546287][T13725] RIP: 0033:0x7f3e1a58f749 [ 585.546299][T13725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.546313][T13725] RSP: 002b:00007f3e1b3eb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 585.546328][T13725] RAX: ffffffffffffffda RBX: 00007f3e1a7e5fa0 RCX: 00007f3e1a58f749 [ 585.546338][T13725] RDX: 0000000000000000 RSI: 00002000000020c0 RDI: 0000000000000000 [ 585.546346][T13725] RBP: 00007f3e1b3eb090 R08: 0000000000000000 R09: 0000000000000000 [ 585.546355][T13725] R10: 0000000000100080 R11: 0000000000000246 R12: 0000000000000001 [ 585.546364][T13725] R13: 00007f3e1a7e6038 R14: 00007f3e1a7e5fa0 R15: 00007fff8eec54d8 [ 585.546385][T13725] [ 586.150254][ T30] audit: type=1400 audit(1767985090.176:1142): avc: denied { ioctl } for pid=13742 comm="syz.0.1448" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 587.033647][T13776] FAULT_INJECTION: forcing a failure. [ 587.033647][T13776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.265922][ T5139] Bluetooth: hci4: command 0x2016 tx timeout [ 588.403795][T13776] CPU: 1 UID: 0 PID: 13776 Comm: syz.1.1453 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.403827][T13776] Tainted: [L]=SOFTLOCKUP [ 588.403834][T13776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 588.403844][T13776] Call Trace: [ 588.403851][T13776] [ 588.403857][T13776] dump_stack_lvl+0x16c/0x1f0 [ 588.403883][T13776] should_fail_ex+0x512/0x640 [ 588.403914][T13776] _copy_from_user+0x2e/0xd0 [ 588.403942][T13776] copy_msghdr_from_user+0x98/0x160 [ 588.403962][T13776] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 588.403992][T13776] ___sys_sendmsg+0xfe/0x1d0 [ 588.404012][T13776] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.404060][T13776] __sys_sendmsg+0x16d/0x220 [ 588.404080][T13776] ? __pfx___sys_sendmsg+0x10/0x10 [ 588.404114][T13776] do_syscall_64+0xcd/0xf80 [ 588.404141][T13776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.404160][T13776] RIP: 0033:0x7f168618f749 [ 588.404175][T13776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.404191][T13776] RSP: 002b:00007f1686ffa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.404209][T13776] RAX: ffffffffffffffda RBX: 00007f16863e5fa0 RCX: 00007f168618f749 [ 588.404227][T13776] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 588.404238][T13776] RBP: 00007f1686ffa090 R08: 0000000000000000 R09: 0000000000000000 [ 588.404248][T13776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.404258][T13776] R13: 00007f16863e6038 R14: 00007f16863e5fa0 R15: 00007ffd8cf30f48 [ 588.404283][T13776] [ 588.772407][T13792] netlink: 'syz.0.1458': attribute type 1 has an invalid length. [ 588.782672][ T30] audit: type=1400 audit(1767985092.816:1143): avc: denied { ioctl } for pid=13791 comm="syz.0.1458" path="socket:[31119]" dev="sockfs" ino=31119 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 589.062046][ T5945] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 589.082959][ T30] audit: type=1400 audit(1767985092.816:1144): avc: denied { read write } for pid=13791 comm="syz.0.1458" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 589.176798][ T30] audit: type=1400 audit(1767985092.816:1145): avc: denied { open } for pid=13791 comm="syz.0.1458" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 589.291721][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 589.316892][ T5945] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 589.416380][ T5945] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 589.485063][ T30] audit: type=1400 audit(1767985092.966:1146): avc: denied { kexec_image_load } for pid=13797 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 589.531521][ T5945] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 589.593664][ T5945] usb 3-1: config 1 has no interface number 0 [ 589.636380][ T5945] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 589.663597][T13808] FAULT_INJECTION: forcing a failure. [ 589.663597][T13808] name failslab, interval 1, probability 0, space 0, times 0 [ 589.676504][T13808] CPU: 0 UID: 0 PID: 13808 Comm: syz.0.1460 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.676533][T13808] Tainted: [L]=SOFTLOCKUP [ 589.676539][T13808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.676549][T13808] Call Trace: [ 589.676557][T13808] [ 589.676565][T13808] dump_stack_lvl+0x16c/0x1f0 [ 589.676595][T13808] should_fail_ex+0x512/0x640 [ 589.676628][T13808] should_failslab+0xc2/0x120 [ 589.676655][T13808] __kmalloc_noprof+0xeb/0x910 [ 589.676683][T13808] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 589.676711][T13808] ? ___neigh_create+0x14ec/0x2920 [ 589.676742][T13808] ? ___neigh_create+0x14ec/0x2920 [ 589.676766][T13808] ___neigh_create+0x14ec/0x2920 [ 589.676798][T13808] ? find_held_lock+0x2b/0x80 [ 589.676828][T13808] ? nf_hook+0x48d/0x780 [ 589.676855][T13808] ? __pfx____neigh_create+0x10/0x10 [ 589.676886][T13808] ip6_finish_output2+0x11aa/0x1cf0 [ 589.676916][T13808] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 589.676951][T13808] __ip6_finish_output+0x3cd/0x1010 [ 589.676984][T13808] ip6_output+0x253/0x710 [ 589.677016][T13808] ip6_xmit+0x1512/0x23f0 [ 589.677055][T13808] ? __pfx_ip6_xmit+0x10/0x10 [ 589.677086][T13808] ? xfrm_lookup_route+0x6a/0x200 [ 589.677111][T13808] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 589.677147][T13808] tcp_v6_send_response+0x122d/0x2480 [ 589.677189][T13808] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 589.677228][T13808] ? lock_acquire+0x179/0x330 [ 589.677255][T13808] tcp_v6_send_reset+0x625/0x15f0 [ 589.677297][T13808] ? inet6_lhash2_lookup+0x40f/0x4c0 [ 589.677321][T13808] ? __pfx_tcp_v6_send_reset+0x10/0x10 [ 589.677357][T13808] ? inet6_lookup_listener+0x286/0x860 [ 589.677383][T13808] ? __asan_memmove+0x3c/0x60 [ 589.677407][T13808] tcp_v6_rcv+0x1721/0x48f0 [ 589.677451][T13808] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 589.677475][T13808] ? __pfx_ipvlan_skb_to_addr+0x10/0x10 [ 589.677501][T13808] ? __pfx_raw6_local_deliver+0x10/0x10 [ 589.677524][T13808] ? find_held_lock+0x2b/0x80 [ 589.677555][T13808] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 589.677582][T13808] ip6_protocol_deliver_rcu+0x188/0x1520 [ 589.677615][T13808] ip6_input_finish+0x1e4/0x4b0 [ 589.677636][T13808] ip6_input+0x105/0x2f0 [ 589.677654][T13808] ipv6_rcv+0x264/0x650 [ 589.677672][T13808] ? __pfx_ipv6_rcv+0x10/0x10 [ 589.677688][T13808] __netif_receive_skb_one_core+0x12d/0x1e0 [ 589.677718][T13808] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 589.677748][T13808] ? lock_acquire+0x179/0x330 [ 589.677778][T13808] __netif_receive_skb+0x1d/0x160 [ 589.677807][T13808] netif_receive_skb+0x137/0x760 [ 589.677849][T13808] ? __pfx_netif_receive_skb+0x10/0x10 [ 589.677879][T13808] ? __pfx___schedule+0x10/0x10 [ 589.677907][T13808] tun_rx_batched.isra.0+0x3ee/0x740 [ 589.677931][T13808] ? irqentry_exit+0x1dd/0x8c0 [ 589.677957][T13808] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 589.677991][T13808] ? tun_get_user+0x1ded/0x3cc0 [ 589.678016][T13808] ? rcu_is_watching+0x12/0xc0 [ 589.678038][T13808] tun_get_user+0x28b2/0x3cc0 [ 589.678079][T13808] ? __pfx_tun_get_user+0x10/0x10 [ 589.678105][T13808] ? file_has_perm+0x27b/0x350 [ 589.678125][T13808] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 589.678153][T13808] ? find_held_lock+0x2b/0x80 [ 589.678181][T13808] ? tun_get+0x191/0x370 [ 589.678212][T13808] tun_chr_write_iter+0xdc/0x210 [ 589.678242][T13808] vfs_write+0x7d3/0x11d0 [ 589.678267][T13808] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 589.678303][T13808] ? __pfx_vfs_write+0x10/0x10 [ 589.678325][T13808] ? find_held_lock+0x2b/0x80 [ 589.678370][T13808] ksys_write+0x12a/0x250 [ 589.678395][T13808] ? __pfx_ksys_write+0x10/0x10 [ 589.678420][T13808] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 589.678449][T13808] do_syscall_64+0xcd/0xf80 [ 589.678475][T13808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.678494][T13808] RIP: 0033:0x7f3e1a58e1ff [ 589.678510][T13808] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 589.678527][T13808] RSP: 002b:00007f3e1b3eb000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 589.678544][T13808] RAX: ffffffffffffffda RBX: 00007f3e1a7e5fa0 RCX: 00007f3e1a58e1ff [ 589.678555][T13808] RDX: 000000000000004a RSI: 0000200000000240 RDI: 00000000000000c8 [ 589.678566][T13808] RBP: 00007f3e1b3eb090 R08: 0000000000000000 R09: 0000000000000000 [ 589.678576][T13808] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 589.678587][T13808] R13: 00007f3e1a7e6038 R14: 00007f3e1a7e5fa0 R15: 00007fff8eec54d8 [ 589.678614][T13808] [ 589.680478][ T30] audit: type=1400 audit(1767985093.316:1147): avc: denied { getopt } for pid=13797 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 590.192128][ T5945] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 590.268544][ T5945] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 590.312744][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.343617][ T5139] Bluetooth: hci4: command 0x2016 tx timeout [ 590.486234][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 590.811719][ T5945] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 591.044484][ T5945] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 591.444428][T13824] FAULT_INJECTION: forcing a failure. [ 591.444428][T13824] name failslab, interval 1, probability 0, space 0, times 0 [ 591.457225][T13824] CPU: 0 UID: 0 PID: 13824 Comm: syz.0.1463 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.457244][T13824] Tainted: [L]=SOFTLOCKUP [ 591.457248][T13824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.457254][T13824] Call Trace: [ 591.457261][T13824] [ 591.457265][T13824] dump_stack_lvl+0x16c/0x1f0 [ 591.457283][T13824] should_fail_ex+0x512/0x640 [ 591.457300][T13824] ? fs_reclaim_acquire+0xae/0x150 [ 591.457317][T13824] should_failslab+0xc2/0x120 [ 591.457332][T13824] __kmalloc_noprof+0xeb/0x910 [ 591.457349][T13824] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 591.457369][T13824] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 591.457383][T13824] tomoyo_realpath_from_path+0xc2/0x6e0 [ 591.457400][T13824] ? tomoyo_profile+0x47/0x60 [ 591.457417][T13824] tomoyo_path_number_perm+0x245/0x580 [ 591.457430][T13824] ? tomoyo_path_number_perm+0x237/0x580 [ 591.457444][T13824] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 591.457457][T13824] ? find_held_lock+0x2b/0x80 [ 591.457487][T13824] ? find_held_lock+0x2b/0x80 [ 591.457502][T13824] ? hook_file_ioctl_common+0x144/0x410 [ 591.457523][T13824] ? __fget_files+0x20e/0x3c0 [ 591.457541][T13824] security_file_ioctl+0x9b/0x240 [ 591.457557][T13824] __x64_sys_ioctl+0xb7/0x210 [ 591.457571][T13824] do_syscall_64+0xcd/0xf80 [ 591.457586][T13824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.457597][T13824] RIP: 0033:0x7f3e1a58f749 [ 591.457606][T13824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.457617][T13824] RSP: 002b:00007f3e1b3eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.457627][T13824] RAX: ffffffffffffffda RBX: 00007f3e1a7e5fa0 RCX: 00007f3e1a58f749 [ 591.457634][T13824] RDX: 0000200000000080 RSI: 0000000000003b87 RDI: 0000000000000003 [ 591.457641][T13824] RBP: 00007f3e1b3eb090 R08: 0000000000000000 R09: 0000000000000000 [ 591.457652][T13824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.457658][T13824] R13: 00007f3e1a7e6038 R14: 00007f3e1a7e5fa0 R15: 00007fff8eec54d8 [ 591.457673][T13824] [ 591.457724][T13824] ERROR: Out of memory at tomoyo_realpath_from_path. [ 592.156334][ T5945] usb 3-1: USB disconnect, device number 46 [ 592.162368][ T5949] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 592.176103][ T5945] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 593.962670][ T30] audit: type=1400 audit(1767985097.986:1148): avc: denied { append } for pid=13852 comm="syz.3.1470" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 594.932706][T13894] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 594.940610][T13894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1481'. [ 594.951158][T13894] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 595.855692][T13903] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 595.914229][T13903] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 595.920773][T13903] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 595.973249][T13903] vhci_hcd vhci_hcd.0: Device attached [ 596.260834][T13907] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1487'. [ 596.261007][T13917] xt_connbytes: Forcing CT accounting to be enabled [ 596.283735][ T5925] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 596.625884][T13914] lo speed is unknown, defaulting to 1000 [ 598.153328][T13605] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 598.168218][T13605] CPU: 1 UID: 0 PID: 13605 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.168252][T13605] Tainted: [L]=SOFTLOCKUP [ 598.168259][T13605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.168269][T13605] Workqueue: hci0 hci_rx_work [ 598.168287][T13605] Call Trace: [ 598.168291][T13605] [ 598.168296][T13605] dump_stack_lvl+0x16c/0x1f0 [ 598.168314][T13605] sysfs_warn_dup+0x7f/0xa0 [ 598.168329][T13605] sysfs_create_dir_ns+0x24b/0x2b0 [ 598.168343][T13605] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 598.168356][T13605] ? find_held_lock+0x2b/0x80 [ 598.168376][T13605] ? do_raw_spin_unlock+0x172/0x230 [ 598.168393][T13605] kobject_add_internal+0x2c4/0x9d0 [ 598.168413][T13605] kobject_add+0x16e/0x240 [ 598.168429][T13605] ? __pfx_kobject_add+0x10/0x10 [ 598.168447][T13605] ? kobject_put+0xaf/0x6f0 [ 598.168461][T13605] ? _raw_spin_unlock+0x28/0x50 [ 598.168479][T13605] device_add+0x288/0x1980 [ 598.168493][T13605] ? __pfx_dev_set_name+0x10/0x10 [ 598.168507][T13605] ? __pfx_device_add+0x10/0x10 [ 598.168519][T13605] ? mgmt_send_event_skb+0x2fb/0x460 [ 598.168535][T13605] hci_conn_add_sysfs+0x1a8/0x260 [ 598.168550][T13605] le_conn_complete_evt+0x11ed/0x1fa0 [ 598.168567][T13605] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 598.168583][T13605] hci_le_conn_complete_evt+0x23c/0x3a0 [ 598.168605][T13605] hci_le_meta_evt+0x357/0x610 [ 598.168636][T13605] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 598.168659][T13605] hci_event_packet+0x685/0x1210 [ 598.168673][T13605] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 598.168688][T13605] ? __pfx_hci_event_packet+0x10/0x10 [ 598.168703][T13605] ? kcov_remote_start+0x399/0x680 [ 598.168716][T13605] ? lockdep_hardirqs_on+0x7c/0x110 [ 598.168734][T13605] hci_rx_work+0x2c9/0x1020 [ 598.168749][T13605] process_one_work+0x9ba/0x1b20 [ 598.168769][T13605] ? __pfx_process_one_work+0x10/0x10 [ 598.168787][T13605] ? assign_work+0x1a0/0x250 [ 598.168802][T13605] worker_thread+0x6c8/0xf10 [ 598.168820][T13605] ? __kthread_parkme+0x19e/0x250 [ 598.168833][T13605] ? __pfx_worker_thread+0x10/0x10 [ 598.168847][T13605] kthread+0x3c5/0x780 [ 598.168860][T13605] ? __pfx_kthread+0x10/0x10 [ 598.168874][T13605] ? rcu_is_watching+0x12/0xc0 [ 598.168885][T13605] ? __pfx_kthread+0x10/0x10 [ 598.168899][T13605] ret_from_fork+0x983/0xb10 [ 598.168912][T13605] ? __pfx_ret_from_fork+0x10/0x10 [ 598.168926][T13605] ? __switch_to+0x7af/0x10d0 [ 598.168940][T13605] ? __pfx_kthread+0x10/0x10 [ 598.168954][T13605] ret_from_fork_asm+0x1a/0x30 [ 598.168983][T13605] [ 598.168997][T13605] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 598.284218][ T5949] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 598.452202][T13605] Bluetooth: hci0: failed to register connection device [ 598.512567][ T49] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 598.639713][ T30] audit: type=1400 audit(1767985102.536:1149): avc: denied { mount } for pid=13985 comm="syz.4.1504" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 598.691877][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 598.701381][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.717995][ T5949] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 598.740955][ T49] usb 3-1: config 0 has no interfaces? [ 598.795591][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.817013][ T5949] usb 2-1: Product: syz [ 598.832007][ T5949] usb 2-1: Manufacturer: syz [ 598.840552][ T49] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 598.989404][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.065407][ T5949] usb 2-1: SerialNumber: syz [ 599.065820][ T49] usb 3-1: Product: syz [ 599.094922][ T49] usb 3-1: Manufacturer: syz [ 599.118628][ T49] usb 3-1: SerialNumber: syz [ 599.142342][ T49] usb 3-1: config 0 descriptor?? [ 599.148817][ T5949] usb 2-1: config 0 descriptor?? [ 599.174629][ T5949] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 036 [ 599.335084][T14012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14012 comm=syz.3.1507 [ 599.510529][T14013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.519150][T14013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.668013][ T5949] (null): failure setting delay to 10us [ 599.688449][ T5949] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 599.718319][ T5949] usb 2-1: USB disconnect, device number 36 [ 600.274674][T13904] vhci_hcd: connection reset by peer [ 600.281322][ T1331] vhci_hcd vhci_hcd.3: stop threads [ 600.288033][ T1331] vhci_hcd vhci_hcd.3: release socket [ 600.295091][ T1331] vhci_hcd vhci_hcd.3: disconnect device [ 600.861522][ T5945] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 601.021731][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 601.086550][T14047] binder: 14046:14047 ioctl c0306201 0 returned -14 [ 601.092358][ T5949] usb 3-1: USB disconnect, device number 47 [ 601.100496][ T5945] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 601.118093][ T5945] usb 1-1: config 1 has no interface number 0 [ 601.120998][ T30] audit: type=1400 audit(1767985105.146:1150): avc: denied { ioctl } for pid=14046 comm="syz.1.1513" path="socket:[31517]" dev="sockfs" ino=31517 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 601.265242][ T5945] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 601.277098][ T5945] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 601.287320][ T5945] usb 1-1: config 1 interface 105 has no altsetting 0 [ 601.296203][ T5945] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 601.305720][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.314014][ T5945] usb 1-1: Product: syz [ 601.324646][T14056] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 601.442234][ T5945] usb 1-1: Manufacturer: syz [ 601.951340][ T30] audit: type=1326 audit(1767985105.966:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1d18f749 code=0x7ffc0000 [ 601.985990][ T5945] usb 1-1: SerialNumber: syz [ 601.991669][ T5925] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 601.999718][T14042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 602.001525][ T30] audit: type=1326 audit(1767985105.966:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1d18f749 code=0x7ffc0000 [ 602.138741][T14042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 602.178187][ T30] audit: type=1326 audit(1767985105.966:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8b1d18f749 code=0x7ffc0000 [ 602.798363][ T30] audit: type=1326 audit(1767985105.966:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1d18f749 code=0x7ffc0000 [ 602.822887][ T30] audit: type=1326 audit(1767985105.966:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b1d18f749 code=0x7ffc0000 [ 602.848008][ T30] audit: type=1326 audit(1767985105.966:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1d18f749 code=0x7ffc0000 [ 602.872507][ T30] audit: type=1326 audit(1767985105.966:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b1d18f749 code=0x7ffc0000 [ 602.896716][ T30] audit: type=1326 audit(1767985105.966:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1d18f749 code=0x7ffc0000 [ 603.103238][ T30] audit: type=1326 audit(1767985105.966:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8b1d18f749 code=0x7ffc0000 [ 603.172074][T14089] bond0: entered promiscuous mode [ 603.177863][T14092] loop5: detected capacity change from 0 to 3103 [ 603.204540][T14089] bond_slave_0: entered promiscuous mode [ 603.220476][T14089] bond_slave_1: entered promiscuous mode [ 603.292178][T14092] loop5: detected capacity change from 3103 to 4135 [ 603.292978][T14042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 603.365351][T14042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 603.477011][T14089] batadv0: entered promiscuous mode [ 603.477211][T13076] buffer_io_error: 6 callbacks suppressed [ 603.477238][T13076] Buffer I/O error on dev loop5, logical block 516, async page read [ 603.506883][T14089] debugfs: 'hsr1' already exists in 'hsr' [ 603.526858][T14089] Cannot create hsr debugfs directory [ 603.569184][T14089] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 603.987417][T13076] Buffer I/O error on dev loop5, logical block 516, async page read [ 604.003602][T14089] bond0: left promiscuous mode [ 604.008450][T14089] bond_slave_0: left promiscuous mode [ 604.028300][T14089] bond_slave_1: left promiscuous mode [ 604.061876][T14089] batadv0: left promiscuous mode [ 604.576922][ T5945] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 604.592447][ T5945] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 604.660473][ T5945] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, aa:34:89:cc:f9:89 [ 604.712100][ T5945] usb 1-1: USB disconnect, device number 27 [ 604.774691][T14126] netlink: 'syz.2.1521': attribute type 10 has an invalid length. [ 604.790177][ T5945] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 604.821993][ T5139] Bluetooth: hci0: command 0x0c1a tx timeout [ 605.171485][ T5945] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 605.199086][ T5945] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 605.951564][ T5945] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 606.033278][T14161] FAULT_INJECTION: forcing a failure. [ 606.033278][T14161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.062039][T14161] CPU: 1 UID: 0 PID: 14161 Comm: syz.0.1527 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.062068][T14161] Tainted: [L]=SOFTLOCKUP [ 606.062074][T14161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.062085][T14161] Call Trace: [ 606.062089][T14161] [ 606.062096][T14161] dump_stack_lvl+0x16c/0x1f0 [ 606.062123][T14161] should_fail_ex+0x512/0x640 [ 606.062163][T14161] _copy_to_user+0x32/0xd0 [ 606.062191][T14161] simple_read_from_buffer+0xcb/0x170 [ 606.062218][T14161] proc_fail_nth_read+0x197/0x240 [ 606.062237][T14161] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.062257][T14161] ? rw_verify_area+0xcf/0x6c0 [ 606.062277][T14161] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.062294][T14161] vfs_read+0x1e4/0xcf0 [ 606.062312][T14161] ? __pfx___mutex_lock+0x10/0x10 [ 606.062328][T14161] ? __pfx_vfs_read+0x10/0x10 [ 606.062346][T14161] ? __fget_files+0x20e/0x3c0 [ 606.062365][T14161] ksys_read+0x12a/0x250 [ 606.062378][T14161] ? __pfx_ksys_read+0x10/0x10 [ 606.062395][T14161] do_syscall_64+0xcd/0xf80 [ 606.062411][T14161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.062423][T14161] RIP: 0033:0x7f3e1a58e15c [ 606.062432][T14161] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 606.062443][T14161] RSP: 002b:00007f3e1b3eb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 606.062454][T14161] RAX: ffffffffffffffda RBX: 00007f3e1a7e5fa0 RCX: 00007f3e1a58e15c [ 606.062460][T14161] RDX: 000000000000000f RSI: 00007f3e1b3eb0a0 RDI: 0000000000000005 [ 606.062467][T14161] RBP: 00007f3e1b3eb090 R08: 0000000000000000 R09: 0000000000000000 [ 606.062473][T14161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.062479][T14161] R13: 00007f3e1a7e6038 R14: 00007f3e1a7e5fa0 R15: 00007fff8eec54d8 [ 606.062493][T14161] [ 606.729568][T14169] can0: slcan on ttyS3. [ 607.254911][T14169] can0 (unregistered): slcan off ttyS3. [ 607.701463][ T5949] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 607.841375][ T5945] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 607.854284][ T5949] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 607.882113][ T5949] usb 3-1: config 0 has no interface number 0 [ 607.898441][ T5949] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 607.922010][ T5949] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 607.997053][ T5949] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 608.021632][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 608.026899][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.035300][ T5945] usb 1-1: too many configurations: 91, using maximum allowed: 8 [ 608.052122][ T5949] usb 3-1: Product: syz [ 608.057956][ T5949] usb 3-1: Manufacturer: syz [ 608.064435][ T5949] usb 3-1: SerialNumber: syz [ 608.069157][ T5945] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 608.083092][ T5945] usb 1-1: can't read configurations, error -61 [ 608.090749][ T5949] usb 3-1: config 0 descriptor?? [ 608.151800][T14190] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 608.161037][ T5949] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 608.175950][ T5949] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 608.231529][ T5945] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 608.411392][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 608.717265][ T5945] usb 1-1: too many configurations: 91, using maximum allowed: 8 [ 608.748908][ T5945] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 608.769131][ T5945] usb 1-1: can't read configurations, error -61 [ 608.799068][ T5945] usb usb1-port1: attempt power cycle [ 608.805574][ T791] usb 3-1: USB disconnect, device number 48 [ 608.832443][ T791] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 608.904259][ T791] cyberjack 3-1:0.69: device disconnected [ 609.151499][ T5945] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 609.252176][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 609.264019][ T5945] usb 1-1: too many configurations: 91, using maximum allowed: 8 [ 609.276105][ T5945] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 609.285625][ T5945] usb 1-1: can't read configurations, error -61 [ 610.330563][ T5945] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 610.374927][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 610.383830][ T5945] usb 1-1: too many configurations: 91, using maximum allowed: 8 [ 611.341915][ T5945] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 611.349559][ T5945] usb 1-1: can't read configurations, error -71 [ 611.356147][ T5945] usb usb1-port1: unable to enumerate USB device [ 612.515839][T14273] can0: slcan on ttyS3. [ 716.391250][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 716.398206][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14200/1:b..l [ 716.406585][ C0] rcu: (detected by 0, t=10502 jiffies, g=45005, q=299 ncpus=2) [ 716.414285][ C0] task:syz.3.1533 state:R running task stack:26248 pid:14200 tgid:14198 ppid:5813 task_flags:0x400140 flags:0x00080003 [ 716.428591][ C0] Call Trace: [ 716.431857][ C0] [ 716.434769][ C0] ? __schedule+0x10b9/0x6150 [ 716.439425][ C0] __schedule+0x1139/0x6150 [ 716.443909][ C0] ? __pfx___schedule+0x10/0x10 [ 716.448734][ C0] preempt_schedule_irq+0x51/0x90 [ 716.453760][ C0] irqentry_exit+0x1d8/0x8c0 [ 716.458356][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.464324][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 716.469674][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 4b 4d b0 f5 cc [ 716.489259][ C0] RSP: 0018:ffffc90003747260 EFLAGS: 00000293 [ 716.495299][ C0] RAX: 0000000000000000 RBX: ffff88801e888630 RCX: ffffffff82335508 [ 716.503244][ C0] RDX: ffff888082d74980 RSI: ffffffff8233531f RDI: 0000000000000007 [ 716.511185][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 716.519127][ C0] R10: 0000000000001b48 R11: ffff888082d754b0 R12: 00000000068804a6 [ 716.527070][ C0] R13: 0000000000000001 R14: 0000000000069b48 R15: 0000000000001b48 [ 716.535018][ C0] ? __update_page_owner_free_handle.constprop.0+0x2c8/0x4a0 [ 716.542365][ C0] ? __update_page_owner_free_handle.constprop.0+0xdf/0x4a0 [ 716.549622][ C0] __update_page_owner_free_handle.constprop.0+0xdf/0x4a0 [ 716.556707][ C0] __reset_page_owner+0x93/0x1a0 [ 716.561621][ C0] free_unref_folios+0xa22/0x1610 [ 716.566621][ C0] ? rcu_is_watching+0x12/0xc0 [ 716.571354][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 716.577135][ C0] folios_put_refs+0x4be/0x750 [ 716.581872][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 716.587129][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 716.593437][ C0] shmem_undo_range+0x58f/0x1140 [ 716.598351][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 716.603701][ C0] ? update_se+0x43f/0x6f0 [ 716.608101][ C0] ? percpu_counter_add_batch+0xca/0x200 [ 716.613710][ C0] shmem_evict_inode+0x39e/0xbe0 [ 716.618616][ C0] ? inode_wait_for_writeback+0x170/0x390 [ 716.624347][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 716.629795][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 716.635852][ C0] ? find_held_lock+0x2b/0x80 [ 716.640534][ C0] ? evict+0x37e/0xad0 [ 716.644580][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 716.650015][ C0] evict+0x3c2/0xad0 [ 716.653899][ C0] ? find_held_lock+0x2b/0x80 [ 716.658561][ C0] ? __pfx_evict+0x10/0x10 [ 716.662955][ C0] ? iput.part.0+0x619/0x1190 [ 716.667608][ C0] iput.part.0+0x621/0x1190 [ 716.672083][ C0] iput+0x35/0x40 [ 716.675686][ C0] dentry_unlink_inode+0x29c/0x480 [ 716.680774][ C0] __dentry_kill+0x1d0/0x600 [ 716.685339][ C0] finish_dput+0x76/0x480 [ 716.689640][ C0] dput.part.0+0x451/0x570 [ 716.694031][ C0] dput+0x1f/0x30 [ 716.697655][ C0] __fput+0x51c/0xb70 [ 716.701616][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 716.706796][ C0] task_work_run+0x150/0x240 [ 716.711358][ C0] ? __pfx_task_work_run+0x10/0x10 [ 716.716452][ C0] ? __pfx___up_read+0x10/0x10 [ 716.721209][ C0] ? __mm_populate+0x323/0x380 [ 716.725959][ C0] get_signal+0x1d0/0x26d0 [ 716.730362][ C0] ? __mm_populate+0x299/0x380 [ 716.735100][ C0] ? __pfx___mm_populate+0x10/0x10 [ 716.740185][ C0] ? up_write+0x282/0x4e0 [ 716.744489][ C0] ? __pfx_get_signal+0x10/0x10 [ 716.749403][ C0] ? vm_mmap_pgoff+0x103/0x470 [ 716.754234][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 716.759754][ C0] ? sched_setaffinity+0xe0/0x400 [ 716.764754][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 716.770886][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 716.776145][ C0] do_syscall_64+0x4ee/0xf80 [ 716.780711][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.786589][ C0] RIP: 0033:0x7fa77078f749 [ 716.790976][ C0] RSP: 002b:00007fa77163b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 716.799357][ C0] RAX: 0000200000000000 RBX: 00007fa7709e5fa0 RCX: 00007fa77078f749 [ 716.807299][ C0] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 716.815263][ C0] RBP: 00007fa770813f91 R08: ffffffffffffffff R09: 0000000000000000 [ 716.823213][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 716.831159][ C0] R13: 00007fa7709e6038 R14: 00007fa7709e5fa0 R15: 00007fff1ddf3cb8 [ 716.839106][ C0] [ 716.842098][ C0] rcu: rcu_preempt kthread starved for 10521 jiffies! g45005 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 716.853261][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 716.863198][ C0] rcu: RCU grace-period kthread stack dump: [ 716.869062][ C0] task:rcu_preempt state:R running task stack:27792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 716.882501][ C0] Call Trace: [ 716.885752][ C0] [ 716.888663][ C0] ? __schedule+0x10b9/0x6150 [ 716.893491][ C0] __schedule+0x1139/0x6150 [ 716.897972][ C0] ? __pfx___schedule+0x10/0x10 [ 716.902809][ C0] ? find_held_lock+0x2b/0x80 [ 716.907469][ C0] ? schedule+0x2d7/0x3a0 [ 716.911770][ C0] schedule+0xe7/0x3a0 [ 716.915809][ C0] schedule_timeout+0x123/0x290 [ 716.920627][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 716.925981][ C0] ? __pfx_process_timeout+0x10/0x10 [ 716.931248][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 716.937034][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 716.942473][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 716.947301][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 716.952557][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.957740][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 716.962649][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 716.967489][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 716.973286][ C0] rcu_gp_kthread+0x26d/0x380 [ 716.977950][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 716.983122][ C0] ? rcu_is_watching+0x12/0xc0 [ 716.987869][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.993043][ C0] ? __kthread_parkme+0x19e/0x250 [ 716.998044][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 717.003216][ C0] kthread+0x3c5/0x780 [ 717.007260][ C0] ? __pfx_kthread+0x10/0x10 [ 717.011821][ C0] ? rcu_is_watching+0x12/0xc0 [ 717.016552][ C0] ? __pfx_kthread+0x10/0x10 [ 717.021113][ C0] ret_from_fork+0x983/0xb10 [ 717.025676][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 717.030780][ C0] ? __switch_to+0x7af/0x10d0 [ 717.035444][ C0] ? __pfx_kthread+0x10/0x10 [ 717.040022][ C0] ret_from_fork_asm+0x1a/0x30 [ 717.044784][ C0] [ 717.047793][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 717.054085][ C0] Sending NMI from CPU 0 to CPUs 1: [ 717.059290][ C1] NMI backtrace for cpu 1 [ 717.059307][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.059327][ C1] Tainted: [L]=SOFTLOCKUP [ 717.059332][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 717.059340][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 717.059362][ C1] Code: a6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 29 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 717.059375][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 717.059386][ C1] RAX: 0000000001f9f9db RBX: 0000000000000001 RCX: ffffffff8b7836d9 [ 717.059395][ C1] RDX: 0000000000000000 RSI: ffffffff8dace187 RDI: ffffffff8bf2b380 [ 717.059404][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 717.059412][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 717.059421][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b8d0 R15: 0000000000000000 [ 717.059430][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 717.059444][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 717.059453][ C1] CR2: 0000555570a495c8 CR3: 000000003b392000 CR4: 00000000003526f0 [ 717.059462][ C1] Call Trace: [ 717.059468][ C1] [ 717.059473][ C1] default_idle+0x13/0x20 [ 717.059492][ C1] default_idle_call+0x6c/0xb0 [ 717.059510][ C1] do_idle+0x38d/0x510 [ 717.059533][ C1] ? __pfx_do_idle+0x10/0x10 [ 717.059553][ C1] ? do_idle+0x12/0x510 [ 717.059572][ C1] cpu_startup_entry+0x4f/0x60 [ 717.059591][ C1] start_secondary+0x21d/0x2d0 [ 717.059606][ C1] ? __pfx_start_secondary+0x10/0x10 [ 717.059621][ C1] common_startup_64+0x13e/0x148 [ 717.059643][ C1]