last executing test programs: 25m28.159729336s ago: executing program 3 (id=1252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x0) pipe2$watch_queue(0x0, 0x80) r2 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002040)={0xc, 0x8b}, 0x0) ioctl$BLKROSET(r2, 0x125d, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000004c0), 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x124}, 0x1, 0x0, 0x0, 0x4c804}, 0x40c3) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 25m27.567274615s ago: executing program 3 (id=1253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x6000}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000180)) 25m26.828665119s ago: executing program 3 (id=1258): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0xfffffd0c) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x268180, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4008, 0x3, 0x218, 0x0, 0x32, 0x148, 0x0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010100, @rand_addr=0x64010102, 0xff, 0xff0000ff, 'syz_tun\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x14}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x1040, 0x224, 0x0, 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x1109, 0x0, 0x334}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x94}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x2, 0x3, 0x19}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000873797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00020009000000000000000600000006000000df3d93d861ae4703d0baacdd95dbfe9e21dcc1c41d263712fe625178d3dd04e98187b100b84852fa159fa8c98f8ab14a19d1822543b8753904230ed4b0a677736dd7e3030228afcb2101026ace09e327d82705870ce3909c1b06f2b912e030374fc2733c704323b5236b8ebc27b7b6feb16fdde95bc0857371e9f3f3a8daf2ccfc6cf3d423b046053dc54815b85de9a9c92f7adacebf1e54e562277d05e576d818a0ffc268bafefbe836be7597445bd781c1cd170e225ab8be8f11e7ebe2290293773ef9e7b221a49fae38941d184ad766639f9f96a8d875e673b5097e"], 0x1f5) setrlimit(0x1, &(0x7f0000000180)={0x6, 0xd54d}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000440), 0x80800, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f00000001c0)={0x9bd, 0x1, &(0x7f00000000c0)=[0xabd], 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, 0x0, 0x3100, 0x40, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r6, &(0x7f0000000640)={0xc1f, 0x80000001, 0x0, 0x5}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x18, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}, @IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r7}, @IFLA_BRPORT_FLUSH={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x4054) 25m25.730555329s ago: executing program 3 (id=1261): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) io_uring_setup(0x1ca1, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000840), r5) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4010) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 25m22.715118945s ago: executing program 3 (id=1267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="318300000000a6ff0000190000000c0001800800030001"], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) 25m22.537269214s ago: executing program 3 (id=1268): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000003b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x2f, 0x80, 0x10006, 0x4, 0x1, 0xcc7, 0x8, 0x17, 0xa, 0x249, 0xfff, 0x7, 0x5, 0x5, 0x44, 0x105, 0x2008, 0x8001, 0x2009, 0x1, 0x89, 0x2, 0x0, 0x20001e5a, 0x1020b, 0x7, 0x9, 0x8, 0x6, 0x401, 0xfffffffd]}) 25m5.63498046s ago: executing program 32 (id=1268): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000003b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x2f, 0x80, 0x10006, 0x4, 0x1, 0xcc7, 0x8, 0x17, 0xa, 0x249, 0xfff, 0x7, 0x5, 0x5, 0x44, 0x105, 0x2008, 0x8001, 0x2009, 0x1, 0x89, 0x2, 0x0, 0x20001e5a, 0x1020b, 0x7, 0x9, 0x8, 0x6, 0x401, 0xfffffffd]}) 13m22.608237859s ago: executing program 2 (id=3270): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0xfeffff07, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 13m22.475775798s ago: executing program 2 (id=3271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) fstatfs(r4, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0), 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r6, r6, 0x0, 0x4800000009) 13m20.66489714s ago: executing program 2 (id=3275): openat$dsp1(0xffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)={0x34, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x38, r6, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0x400c440}, 0x80) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000ac0)={0x1108, r3, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x80, 0x19}}}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "ab2cc41b464040fcebc102c5eed75f546f2cdc0063867aba6309e8b951e7594e050999e62d24fb575930cd3fc486c3d69ea345bcf54fe95791797289945270e68c5565cf7fc0010c0015f62d08d360f1567028713280ba7bd3bcbc96bd9aec0998fc25a850c04020f174f9b3da8ee1f809d58d82fe5d42fe0cc628a4cfdce916d9543a165a1098434276eed82bc27c93b64fcae54807e71b2287549141e70e3342d19a546b66ef96232c3d7d2aad4f0c177a6e4cba4568b5153b67d2eac9354b3406d3b6076acd30ce381897e111cea0552c1237d754e8b09b3f3dbab24851248da6639e026ecea766bc4c7129e3c88f2e6989c6ab07769a32e726b2f518f47d6954de6901741add1e9f13d4a768defb0453030f31d67c663f478479af728fa360e180e740049547a0d1ef85112c2ce4108ec2fe98a307a83aa3e364a9b265417200168f4a9827c545556350e5a989f8c7e22ddd11c7c1c6b2e99a433c7861fab486ba8aa09eaaaecd2c9f908da326ab2f1f16ab7e2b2d2a17c5bdc1466adbb0ae3a61827f7cd14e2de5854afc59689c2ff36dd3be3ac5fe3b6bb974e8dae81cf8131c68bd78b38105c4e3a5e8e9aea599aa3afa4269db490ed7e4217b8e0c736912e3eca1313091e919f67ad30eca953d789759a0505f4154d6c729ae9548356cbe1653507e0dc8357d0871dfe88ca4380d30dc9c10a1eadfbc97e69fbe72a4faf3ed3b9a06ae5fec15567d70c6620757fb7609f15c40ae4fb46f484f7b41995122cfca75a3cdfdb7a2deebdb1ad87dbb47c18f295a9b694745bf2d558ff07596aaf626c7fbc0bbcf9933a25d846b28536ce4f7ca772b4a71f3104377ab6634258bfd741d51c3ac88b5af891b9ccdd12691861d111b590db8b6e6f178e6f12bb5c90643cf7a83875ae50482470a417a53f4f656d269d363c79f6f199d6d40f4f194c2ec93c047c5143198c14849cc3e8d20844ee978f3863dc25ba140d4f246a1bf528bba828acdbd078abeaf5d861548f795e24ae4303d5712bdc657bd25a3e9778ff26a3894a1b742aef2ec2b29ff8536a35e5a37992f4f890e4a58ee1bcf75d2619c428ba6c5171d3ac294efca8a1f693fa78103bcc49a53e84146a511960e2bb17e73bf8c0ee7674b515a1e1b97c5645aa61e5d54683cf45c90342c3f66241fe6c3fef702012594b6e8101e1f1fdf1f71a22d3e95f3a2f64b28ba5202d47c32d5e56ce4554ae985c7b7ac55a66b88289a2f4a9ab802f40d2e5ffbaa402db2a778c721a663fadea73cf81ea5cb02b977c89fe7d723bd2b3e4aae34ad4bb47a698441eef92e19b92bef54c3266607d71f71d4b35486f9afaf74d539a94381c448ab25ed9326c1b3dd53e84466802266b86ad1b7e8ada1937bc8d1298b0d3550aa7a155e1c325d23dc5cba1fbf595497574a4d2c2f37cf0c70b696cdd4482112a19f61d60eb89ff4332ef7340793b579b0cda4051ed5b59dfc3eb551a062349c0255e0d9b194a5dd91cebb4f113a4f0fa58451cfd300e0e5af91fae6a3548755dcb7aa252c2689e645653c79c0d1777355fb83d4a0e2e1bebc7b56a682c31a13cc5b0ca8db9d8209f973bbee1d5a59d0f33bc741ac93a4fe59ce1733eeeef88e57f310d3189770a4d2f8097ad428fb757436a221bd0faa3f9ed492870f1a61adb09d909aa892f2575ee0a7339fd59e205e614eb81a43a00cca6f67ff2a5b8b93d4938f2677010fae5f389071077a6a124b65bc4047a1de7899cfcbcf369235ec6dfc3a4b3a70088798fe10dc6b05612946004d7e327ffafd92f6fa285fb44be85a43de0d74f54b01a531fedf9a12d64297f089d9ca94f6614fd46ecc274d3574cb3b87278feb93bc28bbee13d8b6ab2c32e4a0c509efecb79b57257874b524c79f97ee8a6374b72394a27d2610a2d9bef93b12e2be5c7612f590be2a948f464ad5f13e0f7b65fafff97f0f45710ce2835274dc1064a038d6f13aba6100b468848171af86cdba7a0c4aaa29364e85b45ce8fe126d2780d36501632c35b93b4d1a5c37349a24be343ff687e5b0a72efa811e52cbce309b35e8a2879af9357452d1f644cd320e642d26d3821cbca695e3b42e04de29df7af51cddbe343ab2342d118b138762a3418085b491ee719a384cadb40ce3116ef89b46d14632be271f80cbad87ef46ad4b3926ede6b9208e678b6a5a2ef732946da4fa757b6ba8231bd71eedbcde1d008c47d4b53819d54c49b4eedf9cf370d4317e0f85f9e479200d0655a74743bcf76713c9145676e5d1c94d7b12edc41ec1338128d92b6f526e31b57b5d5a11209a5e50aa41ecc4c5be4908f71779f65ce43002f73dafd0b0a8a6a9e5d9334e8ea40a7ec9a4ac8acb9c50c40d09d3408287aea0299d4491cc8ad6db911392233e94b16718cb3ddced0630aea216df0cd47d067df1ba4c2d6873c141c6dc2bfaa66bb2a42e5b5e75b7538e44450cbe8579c5b26286f5ebb50bab9e233aa73fd7f7c04f1fc815e6380863adaaa1482d3544714d811e5a4619fd8cfbe5fc4b44a78ca4604ffa26787ad293c640df2cfc40098a4d57039554e6e47b19fb60feea556f34a41c033305ed72228e2e2383a9fc25bedf04e1a381074f67813522ea1ae72de1dcb8160d96d64f7f82374d56f4c5753cf164a5bf0e7ed6991cb1a7bff0fb38130d34265ad80a0a6444734d6be734dcb591c0a07eb0b9eb13f4bed4339fa0864778ed2ab22cc2a86653d2dcc979f8577e91c11920ca25fe81c01763a5f85ea4f63ed134cb1a6aa16e6394d4cc2675e29a0ac45ca98a68717d4d7b839354ef873a77057670ca929f755645943bb83b5f47a488966815bf766bbc13c6b6bc44533440bead311e21049060fb0c38b9acff7894b5202b421bf143b0c806d97dc75903a58c77a640f7c12c867d044e1613d727d949f281c172af47e6973623fa2e4e6db8742a85b2108c7a5fce2a64dd1334e929c0f9c267409fa750a0b9360a0ba0673f64b87391f2a287b42fea2fce2c56267c23895d4054fd6fff4ee4d5453b73c07617528c792f0c3d25870cd6b7238fa6b708aaa1c5812e253c63600949043468fd6575d897860535c8e29e71261075b7c687732497a6e3b66ca979230c36f0bf915ad67097b0f6c7ce3c295069161fd77767ab5f3b6cd9d324def22fde470f40ebb406496d5027bb864592fd8ab0d3b73d6e4325407a3a451f3b1fc88947e06ac56d2d43f3e15cc730c91c9af73ecc01d46a5cf1c2eaabda6cf10f9f5cf840b0dfad805e08302222f252dee6e551455f809647c4d3a86a826d4d593049bd7f89cc07a550f778c63e8c2ba4f4a873f401d03e69153bbdbc2b9e9a75693bd4d48409f1d6e0fa6fa44c51f1e8e76c4f7ceee95ebfff8c8f7e9e6db07a2fd65ad0b775774902d713e8c3afde7be1154fc5c01779ada6725dab26388585f62b265734c2bb3bb08e38a4bd5360e709066fc3136dde09f7e0e7ee876bebccb95854f15270dd950afae62565edbaff6de98173e124361ae4ee6d49137975fb1a4ba12a2d0c9ec1846a45d11e46714ad963bbfca1008b33b60259641b7a5a78329e10f84ca568216fe7e9e18e18fb0499c1e1c5712bdf8ef868f1621dde936f15f89c350ad20836775c64590e6f41be35143e934b743b560ac779ad6f9d75e633d56d8cbc65f6071157731dc0c80288126ba90423126370bb106ee4835152e26039fca834c07d7087373f4e1c26aad32f153a4c6839291d18fcecb3541458ca65afc552227b6004fff64ebb041b72fe9042ad81aa0067f80a75875ace5be601750f64bd7d3542ff60b7ffd70af463ea6209601080f5bc7da2f12ddff45d0d97f214a6d6027825519be9836ea2b6551a9ae5af7a6e75fa3ad55ef85625b3d28f45a85c42e9f976c29313faab6f9a854bb33ddb47e236b6408605996b0e81a77b94de9823f9077664cb3c088e2cfd18cb9f4213c8bfd3188cb815ca9f4d37911e11cfb1a056cc014f25a85fb9305908e3d82b1873ad727d6872e435377eed62709c7c247e7e007b85c35aee3434b4307370e3a925c92ba81c488c91b83cfbe7cb125a4b13c9903fa6639c6d35144c6eecd99f05fd7c9f1c6f3372e219bb0e35492f2856eb2b16b98825481e0fa6a7f33eb0b7f425d2b9c225d8a760d0295175a2474dc2374eb2a5b8f0833cc5e6faffdaaae804668dbc9e583a1d742b75a56acc2536dee41972cb9d7812957a31e646f403419195bf613724de2a6821dc523085f0f4b666f0e5bffd12e847bc05042eb3a5946e1d5962a71d35f1be21e4f4207b77d9940f0a9d7267cebfa956bf6e68b08103a1ab90d8106d45b22a90f917c9d224f33365389c6822879f3b308c0837ff07934293c48ce6e63d93f27233a655222e7a5645804b3301d2b7b5547eef383cd45779c57f0a3331881dbe09af8f2d631180dcf5ca314c1803316d20d13700808cf41fbd3fa81f380e55ff8a14a8bc84e475d410d085d593cc98ccf189fccc6b5e6dbca260676cc44f9ff68ead1c8d26131e44b18ac9c0d47c4bc521992cda880df152e54ab12360c95e68bf1739dc6014a79138260b2c268f7a6c905120789ae26082471e438fe49965c6e98f89b1aba4c993b4102065371a2ce66d3d4e50c1c89e76616758dec97399431617eb06a4c30951ec529c6207d535c8c91547de8285d8ea1404c71b1458fc9e9eb3cc055ac528daa424b62aac57c821cc464f3264b8d46ea1db33d73e8180f561e35f977da863d52b8c3b4f79f9383f610db9f208600ac2387c378bba076c23c4d5256acc1a6c7b73ccf56fff6e90abeb06c75acda524499bc8e2be042eced1bb58635612503e94758940f845e06d0f30e41d8b94b0fce981824eee477701cf4adfeb6d68e882ec3aa2dbec301f3dd42a43de8ffd0abc430ddc33e508600e04021d80f7ede259041c768a5887fd36937c0c8625b6ff1aa40dd7437b60997194279e876aa7c3394bae5dd8cbb52cb8746c9182c7616398ee666dd3463edf7bfd0fbfb3f0980f8ad6c5130d10ce4db05f2a1017c6b18cc770dfa8f1f49d2549603e6e801304b964bc0387d0659427ed76cf84f9c1099c57bd9a065cdb09d7c0eafd1f77d423596e3a5e879a30e926c93cfb6512123c1217802f8e3458856ab85924552d356ae2f419cdd5ee9e5a79b1c2e2323ed6ecd0bc180c4cdd63b4b19920a503d09a7fc0d98a8137310546a46afe5ec38f635da592d159026f2735d9d2e043d63940ba0e06426acdb64fc0ff2d554e39172741c061486b45d60c744dde4683b97041a07ee6b10d3f294ce93acd2fd53a1e0183e1021643c595c266dcfcc1a824c80a0a2cd32a7493add747f865621d236af2c8157fdbab15ca9c1b54234622881fa9db7fa74979302ea7c38aa49d973b993cfe8a61702076366eda2cb5707763ed77db581d0096ebd518841791d9b15ee61af6643cabda4716b4fef9eed7065935a565d22f0bcebb6c93f636bd2d274c70389dc1cfd0a2b66564a3836adf54e76bb6d5466303d3ccf13b2eba33826f6b34b0bb42cd091e94f103f657184f76af38999b14ab613dc37689ba7cd36667f5353552542f7b66b50e6f87c699cbe2bd5b0d0cc17bbe5e9552e9216e1833edfcc942a0c4d03ebfa15971572d22f22b73a4e442ae3cd41561b4d57b05f9ca4d4b143ee6c5c7827af0fe2e7ab70c898739903051c27577a084bddaa2d4ec2da5c5b05dba071655adc281f44f49c8af410990d3da4b01b97e8602fabc58284d8900181db397c3b526ad153707d28ea7ba183287"}, @NL80211_ATTR_FRAME_MATCH={0xae, 0x5b, "cfbd6b11c0327dfe89a376f5fc2bd8da6735b1f6abb87839c88edd2fb0ea09b213cbe1b66e5b6888209708fec09679a102aa737134cceddb3d0947279794e3afc733b254e295f06bae1d439cb643acc4c18e60771a71f1ef7f39691fffd190eef9852ae3cee8d36f714235f2d24667999e80617b67d185deca588ec18e8d0201e5f89650029530f5cf971f2342ab4c92eed754dac83c891b31332594dd9d14ad3fb4ea08ef05256a4a90"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x22, 0x5b, "e594ffc05049b9abf644d2e4b56a4c179ceed6e493cf7a10abf3b374b52f"}]}, 0x1108}, 0x1, 0x0, 0x0, 0x40}, 0x80004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x80, 0x46, 0x2, 0x8, 0x7}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x41, 0x5, 0x75}]}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 13m16.351707839s ago: executing program 2 (id=3284): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000240)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x1) (async) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x5) (async, rerun: 64) r4 = fsopen(&(0x7f0000000200)='bdev\x00', 0x1) (rerun: 64) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x866dcec63619b689, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x3, 0x200}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x1) 13m16.021143434s ago: executing program 2 (id=3285): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080045f8001c00000000026790780022eff6feffffff120090780000000920511be8a58dcdfce7c944f07172d9176d261db0bd8fbab775abc254ddaf863e34bbc20270a5a4ad930de563ac4cd6af4b5ede094bef0fb02ddee4d6862dd3193cec0dca82a2ad3e2baad9631f0e4b196fc344c3da3e8feb64fe6731090d5aa0fe00000000000000"], 0x0) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0x9, &(0x7f00000003c0), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000a40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) write$binfmt_misc(r0, &(0x7f00000000c0)="b5118044b3e21afaf36ed3f27eae792d5933246baa0d9c68f0d8b5cdfa35d092f469b428b51c6b798af73752b11be8c4a30bb097ae210b8f1bb77395476bb1ef2827185a4103632335d984b79484ab757d3fd8eea0aa14172c9f330e3fc504327e063951fdaa2acbf4d229b1e553881f89d6d760ab1ea4590a7ad6603b881557503c06d95d2e5b8640b74f46cb8b2635a485b55351e269c1758851f18825cd36910720da77c545f3c38b635ba1ecb07a6424f92ad01a36c12e9b3158882adfb98be6f3e24e79a66fd32e81e3f07117195522538bbef0683da7eb36160294aafbb2693b7b04a3", 0xe6) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080045f8001c00000000026790780022eff6feffffff120090780000000920511be8a58dcdfce7c944f07172d9176d261db0bd8fbab775abc254ddaf863e34bbc20270a5a4ad930de563ac4cd6af4b5ede094bef0fb02ddee4d6862dd3193cec0dca82a2ad3e2baad9631f0e4b196fc344c3da3e8feb64fe6731090d5aa0fe00000000000000"], 0x0) (async) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0x9, &(0x7f00000003c0), 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000a40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) write$binfmt_misc(r0, &(0x7f00000000c0)="b5118044b3e21afaf36ed3f27eae792d5933246baa0d9c68f0d8b5cdfa35d092f469b428b51c6b798af73752b11be8c4a30bb097ae210b8f1bb77395476bb1ef2827185a4103632335d984b79484ab757d3fd8eea0aa14172c9f330e3fc504327e063951fdaa2acbf4d229b1e553881f89d6d760ab1ea4590a7ad6603b881557503c06d95d2e5b8640b74f46cb8b2635a485b55351e269c1758851f18825cd36910720da77c545f3c38b635ba1ecb07a6424f92ad01a36c12e9b3158882adfb98be6f3e24e79a66fd32e81e3f07117195522538bbef0683da7eb36160294aafbb2693b7b04a3", 0xe6) (async) 13m15.892773363s ago: executing program 2 (id=3288): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x400c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1803081e29126ae010541105a5ffff00000000ffffffcfe1712cb7a97a4e000000003f1fff2e14a81483fa9cf3ed56bd4829da0167a54d75a3ab86c63a783e9ac7bfe29c80814569b324639ba392027d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r6}) close_range(r3, r4, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000000)={0x6, 0xf}) 13m0.359296989s ago: executing program 33 (id=3288): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x400c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1803081e29126ae010541105a5ffff00000000ffffffcfe1712cb7a97a4e000000003f1fff2e14a81483fa9cf3ed56bd4829da0167a54d75a3ab86c63a783e9ac7bfe29c80814569b324639ba392027d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r6}) close_range(r3, r4, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000000)={0x6, 0xf}) 14.492517521s ago: executing program 4 (id=5620): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000001900101e04003100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, 0x0, 0x72b, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x60094) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eaec0bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r6, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) syz_usb_control_io(r0, 0x0, 0x0) 11.364837565s ago: executing program 6 (id=5630): landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prlimit64(0x0, 0xb, &(0x7f0000000200)={0x807, 0x40}, &(0x7f0000000240)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x10040) 9.948666098s ago: executing program 4 (id=5637): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000001900101e04003100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, 0x0, 0x72b, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x60094) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eaec8bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r6, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) syz_usb_control_io(r0, 0x0, 0x0) 8.212617393s ago: executing program 6 (id=5641): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x625b3224, 0x141) r1 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x80201) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) write(r2, 0x0, 0x0) gettid() ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000380)={0xe1dc, 0x1, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd2(0x0, 0x0) dup2(r7, 0xffffffffffffffff) 7.316542843s ago: executing program 0 (id=5643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a310000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7.267786758s ago: executing program 6 (id=5644): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000b90000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 6.892873152s ago: executing program 6 (id=5645): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x5, 0x9, 0x9, 0x5, 0x14, "29692a40744d5dddf5ddcfe1ecf438fdce91bd"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000001840)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x0}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0}]}, 0x8}, 0x1) r6 = creat(&(0x7f0000000840)='./file0\x00', 0x142) dup2(r0, r6) sendto$inet(r6, 0x0, 0x0, 0x4054, 0x0, 0x0) 6.884501514s ago: executing program 0 (id=5646): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x11, 0x8, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x600) 6.754969281s ago: executing program 0 (id=5647): r0 = socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002a25c640b0070700c617000000010902240001000000000904aa000274ce91000905030100021f03080905050110"], 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f00000000c0)) 5.737170115s ago: executing program 4 (id=5649): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, 0x0) 5.664923391s ago: executing program 4 (id=5650): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r7, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x24004981}, 0x4040800) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) 5.6261512s ago: executing program 5 (id=5651): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) socket$igmp(0x2, 0x3, 0x2) socket(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000000fffff02e900000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 5.558779395s ago: executing program 1 (id=5652): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4005}, 0x4014) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x24044011) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000980)=[{{&(0x7f0000000280)=@rc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/35, 0x23}], 0x1, &(0x7f00000003c0)=""/37, 0x25}, 0x8}, {{&(0x7f0000000400)=@rc, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000680)=""/136, 0x88}, {&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/233, 0xe9}], 0x6}, 0x7}], 0x2, 0x40010082, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000040)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100, 0x0, 0x0, 0x100000c00, 0x38, 0x24, 0x42, 0x6e}) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, 0x0, 0x0) 5.333225029s ago: executing program 0 (id=5653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a400)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9a7e5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c64e2645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fa421a39943513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b70fa8eae6fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r3) 5.26693825s ago: executing program 6 (id=5654): landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe12, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) 3.898386699s ago: executing program 6 (id=5655): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="6aa6bcf414c89222141ffd6e3e0fee102e9d9772441fc60ce66d7f1c697456e500d6483dc075eac161fd5e4b93f919bd659621ce33b0de8c9d7a9ce08facf651ff0e07e0097110aa0a993e5b4a0c75b2a3ce02d21a7aea6c05b69e7e948f00d7153d42ead4bdb3eb38c7755129f53424a0144d8a5f673849314c166c2fd393595e12e1fef9a3dba456c1a6b36c74f3d520de6a5841d259e0abfd2297735558b0eb001295f78d7dccc703b154b9cb3052e91713a5f0ca9127ed08eba9a24f4605b0c3be3cdc9bdc8430545b465052fc4cbf360ea070455d691af90ded22f98528ddd64bbd70ba7c103abba61dc95714fcedfcdad372288cf27409731a14c9baaefcfbaacffdc50b353b43b79de31f9db9ab378f464f63fbfb4f0cfa3f7b037077f3069f04501dceabd334ff7fa65bc3847e5fc29a2827f950040d91c5c90192e0b9304cf2740f20b6d84593fa50a5a63b06ef078f86f478e3fde6dc98b64138bdbbb0bb3c594c0518579d26f1e694e5f449a2bf2c3fd37fe1814e3b1de331f6866dc951a9b40b1ac58ab951d046a88e4e870024bc375ee1a9dee616504e12a2e4914960632a3db9b6897f7a10f763939ad309392a31aef396da1de95dbbaddb1eb30537a1cf201f48058421d010650ed8042a906293c477a18ae8c412038bf1880f932b25effe8c06a786ec1522211a8fb2962bd92943ee9d684752ed3e5e8e0023f8c40f7cd97a6071f73cc25fe534d41a05e4bbf2e3063567e6b910515bd436dfd856e8811943ca0fb52438acf2", 0x22e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000001c0)={'wg1\x00', @local}) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl']) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f0000000180)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x6f94, 0x5, 0xa45a2b2e, 0x7fff}) 3.805467852s ago: executing program 1 (id=5656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000007c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c050000", @ANYRES16=r1, @ANYBLOB="0100000000000001000001000000080007000000000014000200776730000000000000000000000000001c05088068000080380004000a004e2100000007fc000000000003000000000000000000570100001400040002004e207f000001000000000000000004000980240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x54c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3.599410742s ago: executing program 1 (id=5657): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) r2 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0xc0403d11, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r6, r7, 0x7, 0x0, @val=@tcx={@void, @value=r6}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000740)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\a\x00\x00\x00\x00\x00\x00\x00\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x04\x00\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\x00\xfc\xd1\xb5\xfd\xec@\xe5\x91\x8e\xd4\x89\xef\x95\x17\x16\xfc\x91\xa0\xbbE\x80)mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\a0{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb\xb7mLY#)\xc2\xa4\x8a\xc5\xca\xf5;W:-\xb4(\xce\x02y\x04\'\xbcY\xb0%\xea|\xbf\xc9\xda\xaet\xac\xee\xd5\xcb\xe8\xfc\xa8\xe9\xff\x06\x8d\x1f\xdf\xf7\x80+\xcc\x1e\nmt\x1d\xdf\xe0\x17\r\b\xc1)\x8b\x99O\xbc\x18\xf5\xcd\x81\x82\xe98\xdb\xe4\x9d\r\x9e\xd2\x93O\xc0\xbf\xda/\x05\xa8\xa8\xf7\xdf\x101<\x03\xd8\xccu8w\x93\xf5U\xde\x1f8\xe2\xafX+\'\xad\xbd\aH\xc0\xf4\xc6\xfd\x86+X\xbai\x02\nw\x97\x92R\x8d\xcb8\x16O(sz\xf5', 0x7) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000, 0x1000000}, 0x0, 0x0) accept4$inet(r2, &(0x7f0000000100), 0x0, 0x80800) writev(r0, &(0x7f00000025c0)=[{0x0}, {0x0}], 0x2) 3.502777646s ago: executing program 5 (id=5658): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac000000120001050000000000000000000000000000000000000000000000004e2100"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feff"], 0xac}}, 0x4004) 2.752678065s ago: executing program 5 (id=5659): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000040)={0xc0, 0x13, 0x400, 0x70bd08, 0x25dfdbff, "", [@generic="51d6f038", @generic="2efbe8058984e797a8228bb8e1f6800a1789bdceec842bc5dc8989998e1dc1636e7de0e07081ea9fb1d48b04f8884249238c13d8f174d7e622cb3da23dbf8d8436ab1f0565157b0f0a94868cfd122fa9b46da9256c11b6dcacae688a301f8eb86cec655cb5b47f233c17b40d234f56498cf8eaa626c4907719ac23be2ba988fc8a484a44afabfa266269729f56660aa93b043de8572d7a14177df24bd92435bec81ecee13db1d3b0e5d59555"]}, 0xc0}], 0x1, 0x0, 0x0, 0x849c4}, 0x48054) 2.653212099s ago: executing program 4 (id=5660): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, 0x0) 2.569840343s ago: executing program 5 (id=5661): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt6_stats\x00') r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000080)=0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x4}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'team0\x00', {0x7, 0x40, 0x41, 0x8, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x78}, {0xc5}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) close(0x3) syz_io_uring_setup(0x356, &(0x7f0000000200)={0x0, 0xd87, 0x80, 0x2, 0x149}, 0x0, 0x0) syz_io_uring_setup(0x203, &(0x7f0000000400)={0x0, 0xd392, 0x10000, 0x1, 0xffeffc03, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000000)) 2.491613256s ago: executing program 1 (id=5662): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x488, r6, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_SETUP={0x10c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_IE={0xda, 0x3, "f52f5d0d9fb04f90e7f7684742e6fa96b87ad87ee4de17605c33c995f0b7c12f423e42803ecd4e70535e23a141ffc62bc5d5220dbaec9e62c84fa99207ff5ecd8664f3aa38f1997407612670c65c05abc180da5be996d8d941bfe93a6dd510335915a8cd5d192062ef305d72495a58431c05dab5e2039039040b1cda2e21ef0ad66ba80923d379f6cd467ddb27470bc6c6484f4f4a518e1386abeefbd9cdf9e427b74481c08b74233ba82c71978365e37d3c4b0a6d30bb412b52952873c002995520089fdf3825d9c0046e4e93b8f09c44ebec534dd2"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9d}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x5, 0x46, 0x9, 0xb, 0x4, 0x16, 0x6c, 0x4, 0x6c, 0x4, 0x1b, 0x2, 0x0, 0x48, 0x5, 0x16, 0x5, 0x5, 0x9, 0x18, 0x30, 0x36, 0x36, 0x0, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x401, 0x800, 0x7f, 0x41, 0x1, 0x61, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x7b27, 0x7, 0x4, 0x7, 0xad28, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x6, 0xf, 0x21, 0x7f, 0x6, 0x8af]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x8000, 0x4, 0x400, 0x3, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x200, 0x5d8, 0x1, 0x5fd, 0x4]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x0, 0x1, 0xf, 0x16, 0x48, 0x16, 0xb, 0x30, 0x12, 0x4, 0x5, 0x48, 0xb, 0x18, 0x12, 0x4, 0x4, 0x1b, 0xb, 0x1b, 0x6, 0x60, 0x15, 0x48, 0x24, 0x9, 0x3, 0x12, 0x2a, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x400, 0xfffb, 0xffef, 0x6, 0x0, 0xf]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x8}, {0x4, 0xa}, {0x0, 0x4}, {0x6, 0x7}, {0x1, 0x4}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0xa}, {0x6}, {0x0, 0x7}, {0x5, 0x9}, {0x4, 0x9}, {0x4, 0x9}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x1b, 0x12, 0x60, 0x16]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0xa}, {0x5, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x4}, {0x2, 0x1}]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x1bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd18, 0xe, 0x3ff, 0x9773, 0x7, 0x3, 0x7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x3, 0x5, 0x7, 0x6, 0x3, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe01, 0x0, 0x2010, 0x5, 0x5, 0x101, 0x5, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x7ff, 0x5800, 0x7f, 0x2, 0x5, 0x1]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x4, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x7}, {0x3, 0x4}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x1, 0x6}, {0x6, 0x4}, {0x6, 0x9}, {0x2, 0x8}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0x3}, {0x4, 0xa}, {0x1, 0x4}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x2}, {0x5, 0x5}, {0x5, 0x4}, {0x6}, {0x0, 0x8}, {0x2, 0x9}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x3}, {0x0, 0xa}, {0x1}, {0x2, 0x1}, {0x1, 0xa}, {}, {0x4, 0x5}, {0x0, 0x2}, {0x1}, {0x2, 0x1}, {0x7, 0x3}, {0x3, 0x2}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x3, 0x60, 0x1, 0x1b, 0x48, 0xb, 0xc, 0x1, 0xb, 0x6, 0x1b, 0x1, 0x3, 0x48, 0x60, 0x1b, 0x30, 0x24, 0xc, 0x48, 0x5, 0x48]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x5, 0x9, 0x9, 0xd, 0x60, 0x1, 0xe45dd90d01cfe676, 0x48, 0x43d16f047d86de64, 0x16, 0x2, 0x60, 0x16, 0x3, 0x16, 0x60, 0x4, 0xb, 0x3, 0x24, 0x1, 0x30, 0xb, 0x1, 0x6c, 0x16, 0x0, 0x24, 0x4, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x9, 0xf, 0xfffc, 0x4, 0x50a, 0x6, 0x22]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x800, 0x9b9a, 0x5, 0x6b7c, 0xe9c, 0x5]}}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0xf58, 0x5, 0x4, 0x1, 0x3, 0x80, 0x1]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x8}, {0x3, 0x4}, {0x3, 0x3}, {0x0, 0x7}, {0x5, 0x3}, {0x2, 0x4}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0xa}, {0x6}, {0x7, 0x9}, {0x6, 0x6}, {0x2, 0xa}, {0x4, 0x3}, {0x2, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x6}, {0x6, 0x9}, {0x6}, {0x6, 0x8}, {0x6}, {0x4, 0x1}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x7}, {0x5, 0x2}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0x7}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0xa}, {0x1, 0x2}, {0x3, 0x5}, {0x4, 0x6}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x1}, {0x4, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x5, 0xa}, {0x6, 0x3}, {0x4, 0x7}, {0x1, 0x2}, {0x2, 0xa}, {0x1, 0x8}, {0x5, 0x9}, {0x2}, {0x0, 0xa}, {0x5, 0x7}, {0x3, 0x7}, {0x4, 0x9}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x36, 0x36, 0x18, 0x36, 0x18, 0x6, 0xb, 0x9, 0x17, 0x1b, 0xb, 0x3, 0x12, 0x30, 0x6c, 0xc, 0x3, 0x1e, 0x36, 0x4, 0x1, 0x24, 0x2, 0x12, 0xc, 0x0, 0x6, 0x3, 0x1, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x24, 0x1b, 0x0, 0x1b, 0x18, 0x12, 0x24, 0x6c, 0x3, 0xc, 0xe, 0x1b, 0x16, 0x36, 0x30, 0x6, 0xb, 0x3, 0x0, 0x6, 0x4, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x6, 0x5, 0x5, 0x4, 0x16d, 0x1e2]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x9, 0x3, 0x16, 0x9, 0x48, 0x9, 0x18, 0xc, 0x6c, 0x9, 0x3, 0x42, 0x6c]}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x12, 0x0, 0x30, 0x24, 0x3, 0x6c, 0x24]}]}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x400c044}, 0x4000041) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff1}, {0xffe0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.490402526s ago: executing program 4 (id=5663): syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRES16], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xfffefffd}}], 0x18}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a000100", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r7, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x4000041, 0xff92, 0x0, 0x1, 0x3}]}) 1.572578536s ago: executing program 5 (id=5664): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000000900)=""/102382, 0xfffffeb6) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000003b40)=""/58) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x6, @mcast2, 0x4b}}, 0x0, 0x0, 0x19, 0x0, "36410e562c7d5d1c6495dbd8c37c6a7b91dd91a698772a8f98f4a9c964ca4b888f0eb8cac14357fd5ce7ef076144bdf3e423273bb6c39fba6fef6c5e1886e0e4bc75518078892ef0ef7041a92bf02304"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) 1.564786685s ago: executing program 1 (id=5665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x10000, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x7}) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000020000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONNECTINFO(r4, 0x80045505, &(0x7f0000002a40)) 1.513669888s ago: executing program 0 (id=5666): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000002d000a0e6d3e7b95dfdb000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)}], 0x1}}], 0x1, 0x4088) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 456.789672ms ago: executing program 1 (id=5667): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x60094) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r6, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400c1f000000fe"], 0x0, 0x0, 0x0, 0x0}, 0x0) 445.141653ms ago: executing program 0 (id=5668): mount(0x0, 0x0, &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 0s ago: executing program 5 (id=5669): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x0) syz_usb_control_io(r0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) recvmmsg(r3, &(0x7f0000002a40)=[{{&(0x7f0000000380)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000440)=""/111, 0x6f}, {&(0x7f0000002bc0)=""/123, 0x7b}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/119, 0x77}, {&(0x7f00000004c0)=""/61, 0x3d}, {&(0x7f0000000740)=""/219, 0xdb}], 0x6, &(0x7f00000008c0)=""/32, 0x20}, 0x3}, {{&(0x7f0000000940)=@nfc, 0x80, &(0x7f0000000a00)=[{&(0x7f00000009c0)=""/12, 0xc}], 0x1, &(0x7f0000000a40)=""/249, 0xf9}}, {{&(0x7f0000000b40)=@tipc=@name, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/58, 0x3a}, {&(0x7f0000001200)=""/200, 0xc8}, {&(0x7f0000000d80)=""/125, 0x7d}], 0x3, &(0x7f0000000e00)=""/175, 0xaf}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/178, 0xb2}, {&(0x7f0000000f80)=""/61, 0x3d}, {0xfffffffffffffffc}], 0x3, &(0x7f0000001000)=""/21, 0x15}, 0x100}, {{&(0x7f0000001040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002400)=[{&(0x7f00000010c0)=""/143, 0x8f}, {&(0x7f0000001180)=""/101, 0x65}, {&(0x7f0000002c40)=""/4110, 0x100e}, {&(0x7f0000002200)=""/195, 0xc3}, {&(0x7f0000002300)=""/210, 0xd2}], 0x5, &(0x7f0000002480)=""/87, 0x57}, 0x3}, {{&(0x7f0000002500)=@ethernet={0x0, @random}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002580)=""/164, 0xa4}, {&(0x7f0000002640)=""/70, 0x46}, {&(0x7f00000026c0)=""/4, 0x4}, {&(0x7f0000002700)=""/62, 0x3e}, {&(0x7f0000002740)=""/207, 0xcf}, {&(0x7f0000002840)=""/193, 0xc1}, {&(0x7f0000002940)=""/114, 0x72}], 0x7}, 0x7}], 0x6, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000300)=ANY=[@ANYBLOB="9f4a1d11aada00000200"/29], 0x0, 0x1a, 0x0, 0x1, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r5, 0x38, 0xfffffffffffffffe}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, 0x0, 0x72b, 0x70bd2b}, 0x12}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x60094) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) ptrace(0x10, r7) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={&(0x7f0000000180)="c945b941eb6a3f6dedf11f1508685636", 0x10}) kernel console output (not intermixed with test programs): wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1816.165150][T25311] hsr_slave_0: entered promiscuous mode [ 1816.182761][T25311] hsr_slave_1: entered promiscuous mode [ 1816.197382][T25311] debugfs: 'hsr0' already exists in 'hsr' [ 1816.221897][T25311] Cannot create hsr debugfs directory [ 1816.317875][T25481] xt_policy: output policy not valid in PREROUTING and INPUT [ 1816.375799][T25482] xt_policy: output policy not valid in PREROUTING and INPUT [ 1816.801143][ T5927] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1817.030946][ T5927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.048906][ T5927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1817.072678][ T5927] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1817.143949][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1817.152057][ T5927] usb 2-1: SerialNumber: syz [ 1817.537188][ T5927] usb 2-1: 0:2 : does not exist [ 1817.542639][ T5927] usb 2-1: unit 5 not found! [ 1817.723323][ T5927] usb 2-1: USB disconnect, device number 84 [ 1817.774939][T25201] udevd[25201]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1817.873814][T25311] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1817.896402][T25311] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1817.917627][T25311] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1817.940247][T25311] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1818.207104][T25311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.247739][T25311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.261585][T21480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.268753][T21480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.318811][T21480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.325954][T21480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.375107][T25311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1818.389617][T25311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1818.613663][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1818.662603][ T30] audit: type=1400 audit(1771281356.831:2051): avc: denied { bind } for pid=25542 comm="syz.1.5123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1818.817997][ T30] audit: type=1400 audit(1771281356.863:2052): avc: denied { setopt } for pid=25542 comm="syz.1.5123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1819.158974][ T30] audit: type=1400 audit(1771281357.198:2053): avc: denied { read open } for pid=25542 comm="syz.1.5123" path="/468/file0" dev="configfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1819.687925][T25311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1820.019717][ T30] audit: type=1400 audit(1771281358.269:2054): avc: denied { getattr } for pid=25556 comm="syz.6.5124" path="cgroup:[4026533942]" dev="nsfs" ino=4026533942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1820.519123][ T30] audit: type=1400 audit(1771281358.784:2055): avc: denied { unmount } for pid=16444 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1820.631788][T25311] veth0_vlan: entered promiscuous mode [ 1821.195806][T25311] veth1_vlan: entered promiscuous mode [ 1821.268301][T25311] veth0_macvtap: entered promiscuous mode [ 1821.289963][T25311] veth1_macvtap: entered promiscuous mode [ 1821.362669][T25311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1821.451757][T25311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1821.480721][T21480] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.531729][T21480] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.780502][T21482] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.789208][T21482] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.094081][T21482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.127494][T21482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.303597][T21482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.322658][T21482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.544232][T25613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.652468][T25613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.771118][T22500] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1822.779725][T11759] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1822.932165][T22500] usb 6-1: Using ep0 maxpacket: 16 [ 1822.938739][T22500] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.010223][T22500] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1823.031033][T22500] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1823.060536][T22500] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1823.200826][T22500] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1823.220729][T22500] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1823.247103][T22500] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1823.255931][T22500] usb 6-1: Manufacturer: syz [ 1823.355071][T25630] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1823.692670][ T30] audit: type=1400 audit(1771281361.734:2056): avc: denied { mounton } for pid=25625 comm="syz.1.5134" path="/472/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1823.720030][T20724] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1823.737674][T22500] usb 6-1: config 0 descriptor?? [ 1823.971582][ T30] audit: type=1400 audit(1771281362.417:2057): avc: denied { unmount } for pid=16444 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1824.110818][T25637] binder: binder_mmap: 25633 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1824.351548][T20724] usb 5-1: Using ep0 maxpacket: 16 [ 1824.367978][T20724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.380343][T20724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1824.390396][T20724] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1824.399885][T20724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.405723][T22500] rc_core: IR keymap rc-hauppauge not found [ 1824.433423][T22500] Registered IR keymap rc-empty [ 1824.439955][T20724] usb 5-1: config 0 descriptor?? [ 1824.447084][T22500] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1824.466682][T22500] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1824.504524][T22500] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1824.531280][T22500] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input90 [ 1824.573799][T22500] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1824.646478][T22500] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1824.666248][T22500] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1824.687192][T22500] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1824.751234][T22500] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1824.776317][T22500] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1824.817984][T22500] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1824.818007][T11759] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1824.856017][T22500] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1824.913282][T22500] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1824.942894][T22500] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1825.017756][T22500] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1825.045764][T11759] usb 2-1: Using ep0 maxpacket: 16 [ 1825.245922][T11759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.256042][T22500] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1825.275866][T11759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.307074][T22500] usb 6-1: USB disconnect, device number 90 [ 1825.325796][T11759] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1825.341754][T11759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.652311][T11759] usb 2-1: config 0 descriptor?? [ 1825.890417][T20724] usbhid 5-1:0.0: can't add hid device: -71 [ 1825.898591][T20724] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1825.950805][T20724] usb 5-1: USB disconnect, device number 127 [ 1826.397038][T25684] fuse: Unknown parameter 'grou00000000000000000000' [ 1826.442560][T25686] netlink: 'syz.1.5137': attribute type 21 has an invalid length. [ 1826.691336][T25696] FAULT_INJECTION: forcing a failure. [ 1826.691336][T25696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1826.753442][T25696] CPU: 0 UID: 0 PID: 25696 Comm: syz.4.5147 Tainted: G L syzkaller #0 PREEMPT(full) [ 1826.753477][T25696] Tainted: [L]=SOFTLOCKUP [ 1826.753483][T25696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1826.753493][T25696] Call Trace: [ 1826.753499][T25696] [ 1826.753506][T25696] dump_stack_lvl+0x100/0x190 [ 1826.753538][T25696] should_fail_ex.cold+0x5/0xa [ 1826.753561][T25696] _copy_from_iter+0x1f4/0x1690 [ 1826.753589][T25696] ? __asan_memset+0x23/0x50 [ 1826.753610][T25696] ? __pfx__copy_from_iter+0x10/0x10 [ 1826.753628][T25696] ? __pfx___alloc_skb+0x10/0x10 [ 1826.753658][T25696] netlink_sendmsg+0x808/0xda0 [ 1826.753687][T25696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1826.753709][T25696] ? __might_fault+0x20/0x140 [ 1826.753739][T25696] ____sys_sendmsg+0xa54/0xc30 [ 1826.753767][T25696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1826.753803][T25696] ___sys_sendmsg+0x190/0x1e0 [ 1826.753831][T25696] ? __pfx____sys_sendmsg+0x10/0x10 [ 1826.753887][T25696] __sys_sendmsg+0x170/0x220 [ 1826.753908][T25696] ? __pfx___sys_sendmsg+0x10/0x10 [ 1826.753946][T25696] do_syscall_64+0x106/0xf80 [ 1826.753966][T25696] ? clear_bhb_loop+0x40/0x90 [ 1826.753988][T25696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.754006][T25696] RIP: 0033:0x7f7171f9bf79 [ 1826.754022][T25696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.754039][T25696] RSP: 002b:00007f7172f0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1826.754057][T25696] RAX: ffffffffffffffda RBX: 00007f7172215fa0 RCX: 00007f7171f9bf79 [ 1826.754069][T25696] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1826.754079][T25696] RBP: 00007f7172f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1826.754090][T25696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1826.754101][T25696] R13: 00007f7172216038 R14: 00007f7172215fa0 R15: 00007ffef2f177e8 [ 1826.754126][T25696] [ 1829.088426][T25735] binder: binder_mmap: 25729 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1829.291501][T11759] usbhid 2-1:0.0: can't add hid device: -71 [ 1829.313539][T11759] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1829.376866][T11759] usb 2-1: USB disconnect, device number 86 [ 1830.125836][T25710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25710 comm=syz.4.5148 [ 1830.465996][ T10] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1830.964406][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1830.990096][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.052768][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1831.093944][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1831.139498][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.146040][ T24] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1831.232974][ T10] usb 1-1: config 0 descriptor?? [ 1831.321607][T25769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5161'. [ 1831.369718][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1831.555266][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1831.789133][ T24] usb 7-1: can't read configurations, error -61 [ 1831.971334][ T24] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1832.128018][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1832.238249][T25784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5163'. [ 1832.313761][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1832.362534][ T24] usb 7-1: can't read configurations, error -61 [ 1832.437882][ T24] usb usb7-port1: attempt power cycle [ 1832.570987][T22500] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1832.734476][T22500] usb 6-1: Using ep0 maxpacket: 16 [ 1832.766019][T22500] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.786901][T22500] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1832.799136][ T24] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1832.823163][T22500] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1832.844384][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1832.856427][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1832.875740][T22500] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.893881][ T24] usb 7-1: can't read configurations, error -61 [ 1832.907328][T22500] usb 6-1: config 0 descriptor?? [ 1833.049105][ T24] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1833.257360][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1833.324019][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1833.331615][ T24] usb 7-1: can't read configurations, error -61 [ 1833.365133][ T24] usb usb7-port1: unable to enumerate USB device [ 1833.373555][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1833.379524][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1833.524683][T25790] fuse: Unknown parameter 'grou00000000000000000000' [ 1833.554876][ T10] usb 1-1: USB disconnect, device number 124 [ 1833.800914][T25796] netlink: 'syz.5.5164': attribute type 21 has an invalid length. [ 1835.714486][T19711] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1835.915151][T25806] ubi31: attaching mtd0 [ 1835.925986][T25806] ubi31: scanning is finished [ 1835.930671][T25806] ubi31: empty MTD device detected [ 1835.935933][T19711] usb 7-1: Using ep0 maxpacket: 16 [ 1835.959649][T19711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.998198][T19711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.028364][T19711] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1836.049448][T19711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.103932][T19711] usb 7-1: config 0 descriptor?? [ 1836.191267][T22500] usbhid 6-1:0.0: can't add hid device: -71 [ 1836.199907][T22500] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1836.243738][T22500] usb 6-1: USB disconnect, device number 91 [ 1836.381581][T25806] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1836.397803][T25806] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1836.431355][T25806] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1836.461514][T25806] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1836.483813][T25806] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1836.491418][T25806] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1836.666378][T25806] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 695007225 [ 1836.704640][T25806] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1836.932882][ T24] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 1837.186784][T19711] creative-sb0540 0003:041E:3100.0088: item fetching failed at offset 0/5 [ 1837.195945][T19711] creative-sb0540 0003:041E:3100.0088: parse failed [ 1837.229581][T25811] ubi31: background thread "ubi_bgt31d" started, PID 25811 [ 1837.230761][T19711] creative-sb0540 0003:041E:3100.0088: probe with driver creative-sb0540 failed with error -22 [ 1837.371315][ T24] usb 6-1: device descriptor read/64, error -71 [ 1837.647922][ T24] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1838.271404][ T24] usb 6-1: device descriptor read/64, error -71 [ 1838.281689][T19711] usb 7-1: USB disconnect, device number 39 [ 1838.431897][ T24] usb usb6-port1: attempt power cycle [ 1838.823871][ T24] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 1839.908468][ T24] usb 6-1: device descriptor read/8, error -71 [ 1839.933987][ T5964] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1840.175781][ T5964] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1840.183888][ T5964] usb 1-1: can't read configurations, error -22 [ 1840.847839][ T5964] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1841.144384][ T5964] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1841.221620][ T5964] usb 1-1: can't read configurations, error -22 [ 1841.334061][ T5964] usb usb1-port1: attempt power cycle [ 1841.714616][T20724] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1841.941416][T20724] usb 7-1: Using ep0 maxpacket: 16 [ 1841.961521][T20724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.277221][T20724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.345221][T20724] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1842.372516][T20724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.398234][T20724] usb 7-1: config 0 descriptor?? [ 1842.472522][T25897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5186'. [ 1842.935663][T19711] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1843.086354][T19711] usb 2-1: Using ep0 maxpacket: 32 [ 1843.123043][T19711] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1843.172564][T25910] netlink: 'syz.6.5184': attribute type 21 has an invalid length. [ 1843.187389][T19711] usb 2-1: config 0 has no interface number 0 [ 1843.212787][T19711] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1843.275185][T19711] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1843.301741][T19711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.314704][T19711] usb 2-1: Product: syz [ 1843.318913][T19711] usb 2-1: Manufacturer: syz [ 1843.324535][T11759] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1843.338688][T19711] usb 2-1: SerialNumber: syz [ 1843.387005][T19711] usb 2-1: config 0 descriptor?? [ 1843.409417][T19711] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1843.427919][T19711] em28xx 2-1:0.132: Video interface 132 found: [ 1843.495676][T11759] usb 5-1: Using ep0 maxpacket: 32 [ 1843.509971][T11759] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1843.519675][T11759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.630762][T11759] usb 5-1: Product: syz [ 1843.650969][T11759] usb 5-1: Manufacturer: syz [ 1843.674569][T11759] usb 5-1: SerialNumber: syz [ 1843.711180][T11759] usb 5-1: config 0 descriptor?? [ 1843.757563][T11759] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1843.770891][T11759] dvb-usb: bulk message failed: -22 (4/0) [ 1843.808605][T11759] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1843.850408][T19711] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1843.871691][T11759] dvb-usb: bulk message failed: -22 (5/0) [ 1843.895923][T11759] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1843.919643][T11759] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1843.941816][T11759] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1844.020107][T25912] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5189'. [ 1844.232610][ T30] audit: type=1400 audit(1771281383.509:2058): avc: denied { read } for pid=25903 comm="syz.4.5189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1844.266208][T19711] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1844.287319][T11759] usb 5-1: media controller created [ 1844.298612][T19711] em28xx 2-1:0.132: board has no eeprom [ 1844.311063][T11759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1844.393920][T19711] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1844.412538][T19711] em28xx 2-1:0.132: analog set to bulk mode. [ 1844.418546][ T10] em28xx 2-1:0.132: Registering V4L2 extension [ 1844.456062][T19711] usb 2-1: USB disconnect, device number 87 [ 1844.483383][T11759] usb 5-1: selecting invalid altsetting 3 [ 1844.603132][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 1844.620497][T19711] em28xx 2-1:0.132: Disconnecting em28xx [ 1845.090634][T11759] ttusb2: set interface to alts=3 failed [ 1845.103219][T20724] usbhid 7-1:0.0: can't add hid device: -71 [ 1845.114408][T20724] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1845.154911][T20724] usb 7-1: USB disconnect, device number 40 [ 1845.216617][ T10] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1845.242331][T11759] DVB: Unable to find symbol tda10086_attach() [ 1845.316995][ T10] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1845.324099][ T10] em28xx 2-1:0.132: No AC97 audio processor [ 1845.344357][T11759] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1845.367798][T11759] dvb-usb: bulk message failed: -22 (4/0) [ 1846.375502][ T10] usb 2-1: Decoder not found [ 1846.380121][ T10] em28xx 2-1:0.132: failed to create media graph [ 1846.391371][T11759] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1846.435829][ T10] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1846.442748][T11759] dvb-usb: bulk message failed: -22 (5/0) [ 1846.448463][T11759] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1846.466704][ T10] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1846.691578][T25275] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1846.711864][ T30] audit: type=1400 audit(1771281386.260:2059): avc: denied { ioctl } for pid=25931 comm="syz.4.5194" path="socket:[99546]" dev="sockfs" ino=99546 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1846.738865][T11759] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1846.747780][T19711] em28xx 2-1:0.132: Closing input extension [ 1846.784358][T19711] em28xx 2-1:0.132: Freeing device [ 1846.801558][T11759] usb 5-1: USB disconnect, device number 2 [ 1846.836956][ T30] audit: type=1400 audit(1771281386.270:2060): avc: denied { bind } for pid=25931 comm="syz.4.5194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1846.996167][T11759] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1847.895187][ T30] audit: type=1400 audit(1771281387.509:2061): avc: denied { read } for pid=25940 comm="syz.0.5197" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1848.024786][T25942] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1848.035111][T25942] block device autoloading is deprecated and will be removed. [ 1848.110399][ T30] audit: type=1400 audit(1771281387.509:2062): avc: denied { open } for pid=25940 comm="syz.0.5197" path="/466/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1848.685727][T25949] FAULT_INJECTION: forcing a failure. [ 1848.685727][T25949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1848.704270][T25949] CPU: 1 UID: 0 PID: 25949 Comm: syz.0.5200 Tainted: G L syzkaller #0 PREEMPT(full) [ 1848.704290][T25949] Tainted: [L]=SOFTLOCKUP [ 1848.704294][T25949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1848.704306][T25949] Call Trace: [ 1848.704311][T25949] [ 1848.704315][T25949] dump_stack_lvl+0x100/0x190 [ 1848.704338][T25949] should_fail_ex.cold+0x5/0xa [ 1848.704353][T25949] _copy_from_user+0x2e/0xd0 [ 1848.704366][T25949] sctp_getsockopt_peer_addr_info+0xc6/0x460 [ 1848.704385][T25949] ? __pfx_sctp_getsockopt_peer_addr_info+0x10/0x10 [ 1848.704412][T25949] ? __local_bh_enable_ip+0x9e/0x120 [ 1848.704429][T25949] sctp_getsockopt+0x8ad/0x7100 [ 1848.704448][T25949] ? find_held_lock+0x2b/0x80 [ 1848.704462][T25949] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1848.704474][T25949] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1848.704487][T25949] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1848.704505][T25949] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1848.704519][T25949] ? avc_has_perm+0x135/0x1e0 [ 1848.704530][T25949] ? __pfx_avc_has_perm+0x10/0x10 [ 1848.704544][T25949] ? __lock_acquire+0x4a5/0x2630 [ 1848.704565][T25949] ? sock_has_perm+0x258/0x2f0 [ 1848.704582][T25949] ? find_held_lock+0x2b/0x80 [ 1848.704595][T25949] ? __might_fault+0xc5/0x140 [ 1848.704609][T25949] ? __might_fault+0xc5/0x140 [ 1848.704626][T25949] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1848.704643][T25949] do_sock_getsockopt+0x259/0x3d0 [ 1848.704663][T25949] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1848.704686][T25949] __sys_getsockopt+0x148/0x260 [ 1848.704703][T25949] ? __x64_sys_getsockopt+0xbd/0x160 [ 1848.704715][T25949] __x64_sys_getsockopt+0xbd/0x160 [ 1848.704727][T25949] ? do_syscall_64+0x95/0xf80 [ 1848.704741][T25949] ? lockdep_hardirqs_on+0x78/0x100 [ 1848.704755][T25949] do_syscall_64+0x106/0xf80 [ 1848.704768][T25949] ? clear_bhb_loop+0x40/0x90 [ 1848.704782][T25949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1848.704793][T25949] RIP: 0033:0x7fdc56f9bf79 [ 1848.704804][T25949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1848.704815][T25949] RSP: 002b:00007fdc57f1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1848.704827][T25949] RAX: ffffffffffffffda RBX: 00007fdc57215fa0 RCX: 00007fdc56f9bf79 [ 1848.704834][T25949] RDX: 000000000000000f RSI: 0000000000000084 RDI: 0000000000000004 [ 1848.704840][T25949] RBP: 00007fdc57f1f090 R08: 0000200000000000 R09: 0000000000000000 [ 1848.704847][T25949] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1848.704853][T25949] R13: 00007fdc57216038 R14: 00007fdc57215fa0 R15: 00007ffe27f8ba58 [ 1848.704868][T25949] [ 1849.312655][ T30] audit: type=1400 audit(1771281389.000:2063): avc: denied { bind } for pid=25955 comm="syz.0.5202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1849.452141][T25954] lo speed is unknown, defaulting to 1000 [ 1849.475236][T25961] bond0: entered promiscuous mode [ 1849.541383][ T30] audit: type=1400 audit(1771281389.200:2064): avc: denied { audit_read } for pid=25955 comm="syz.0.5202" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1849.577986][T25947] FAULT_INJECTION: forcing a failure. [ 1849.577986][T25947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1849.685025][T25961] bond_slave_0: entered promiscuous mode [ 1849.819750][T25961] bond_slave_1: entered promiscuous mode [ 1849.849715][T25954] wlan1 speed is unknown, defaulting to 1000 [ 1849.860813][T25954] vxcan1 speed is unknown, defaulting to 1000 [ 1850.012335][T25973] binder: binder_mmap: 25969 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1850.268572][T25947] CPU: 1 UID: 0 PID: 25947 Comm: syz.6.5198 Tainted: G L syzkaller #0 PREEMPT(full) [ 1850.268599][T25947] Tainted: [L]=SOFTLOCKUP [ 1850.268605][T25947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1850.268615][T25947] Call Trace: [ 1850.268620][T25947] [ 1850.268627][T25947] dump_stack_lvl+0x100/0x190 [ 1850.268657][T25947] should_fail_ex.cold+0x5/0xa [ 1850.268678][T25947] _copy_from_iter+0x1f4/0x1690 [ 1850.268702][T25947] ? __pfx__copy_from_iter+0x10/0x10 [ 1850.268722][T25947] ? sock_has_perm+0x258/0x2f0 [ 1850.268742][T25947] ? __pfx_sock_has_perm+0x10/0x10 [ 1850.268765][T25947] hci_sock_sendmsg+0x4a1/0x2620 [ 1850.268788][T25947] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1850.268814][T25947] sock_write_iter+0x566/0x610 [ 1850.268839][T25947] ? __pfx_sock_write_iter+0x10/0x10 [ 1850.268870][T25947] ? bpf_lsm_file_permission+0x9/0x10 [ 1850.268893][T25947] ? security_file_permission+0x76/0x210 [ 1850.268919][T25947] ? rw_verify_area+0xce/0x6d0 [ 1850.268940][T25947] vfs_write+0x6ac/0x1070 [ 1850.268963][T25947] ? __pfx_sock_write_iter+0x10/0x10 [ 1850.268987][T25947] ? __pfx_vfs_write+0x10/0x10 [ 1850.269007][T25947] ? find_held_lock+0x2b/0x80 [ 1850.269041][T25947] ksys_write+0x1f8/0x250 [ 1850.269063][T25947] ? __pfx_ksys_write+0x10/0x10 [ 1850.269083][T25947] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1850.269106][T25947] ? syscall_user_dispatch+0x76/0x130 [ 1850.269126][T25947] do_syscall_64+0x106/0xf80 [ 1850.269146][T25947] ? clear_bhb_loop+0x40/0x90 [ 1850.269167][T25947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.269183][T25947] RIP: 0033:0x7f513bb9bf79 [ 1850.269197][T25947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1850.269213][T25947] RSP: 002b:00007f513ca08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1850.269228][T25947] RAX: ffffffffffffffda RBX: 00007f513be15fa0 RCX: 00007f513bb9bf79 [ 1850.269239][T25947] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000007 [ 1850.269249][T25947] RBP: 00007f513ca08090 R08: 0000000000000000 R09: 0000000000000000 [ 1850.269259][T25947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1850.269268][T25947] R13: 00007f513be16038 R14: 00007f513be15fa0 R15: 00007ffc17bfe2d8 [ 1850.269290][T25947] [ 1851.256467][T25983] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5207'. [ 1852.428816][T19711] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1852.668544][T25997] fuse: Unknown parameter 'group_id00000000000000000000' [ 1852.687433][T19711] usb 2-1: Using ep0 maxpacket: 16 [ 1852.709520][T19711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.747679][T19711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.824706][T19711] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1852.879427][T19711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.155904][T26006] binder: binder_mmap: 26002 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1853.464185][T19711] usb 2-1: config 0 descriptor?? [ 1853.906276][T16397] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1854.267193][T26015] netlink: 'syz.1.5206': attribute type 21 has an invalid length. [ 1854.544170][T16397] usb 5-1: Using ep0 maxpacket: 32 [ 1854.579577][T16397] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1854.604285][T16397] usb 5-1: config 0 has no interface number 0 [ 1854.620837][T16397] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1854.678972][T16397] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1854.701932][T16397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.723002][T16397] usb 5-1: Product: syz [ 1854.739724][T16397] usb 5-1: Manufacturer: syz [ 1854.769238][T16397] usb 5-1: SerialNumber: syz [ 1854.795474][T16397] usb 5-1: config 0 descriptor?? [ 1854.839898][T16397] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1854.858747][T16397] em28xx 5-1:0.132: Video interface 132 found: [ 1855.101474][T26025] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5218'. [ 1855.134859][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1855.189974][T16397] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1855.339385][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 1855.368341][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1855.435769][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1855.456036][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.471933][ T10] usb 1-1: Product: Њ [ 1855.486172][ T10] usb 1-1: Manufacturer: 刣숹蜅㳜﬽廘셭萝焉쵹钖욚ዻ꾏욍䒎귌谩ꀎ籑疗춑㳍씬羔휎｀ꞙ斱ꋣᓩ᪼뺗껛㒍廼䠢欃 [ 1855.540700][ T10] usb 1-1: SerialNumber: syz [ 1855.590985][T16397] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1855.631201][T16397] em28xx 5-1:0.132: board has no eeprom [ 1855.708103][T16397] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1855.731901][T16397] em28xx 5-1:0.132: analog set to bulk mode. [ 1855.809587][T19711] usbhid 2-1:0.0: can't add hid device: -71 [ 1855.830460][T19711] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1855.849670][T20724] em28xx 5-1:0.132: Registering V4L2 extension [ 1855.921667][T19711] usb 2-1: USB disconnect, device number 88 [ 1855.936695][ T10] cdc_ncm 1-1:1.0: bind() failure [ 1855.943560][T20724] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1855.981843][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1855.995589][T16397] usb 5-1: USB disconnect, device number 3 [ 1856.015034][T20724] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 1856.025613][ T10] cdc_ncm 1-1:1.1: bind() failure [ 1856.032811][T16397] em28xx 5-1:0.132: Disconnecting em28xx [ 1856.050071][ T10] usb 1-1: USB disconnect, device number 2 [ 1856.381876][T20724] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1856.399010][T20724] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1856.428645][T20724] em28xx 5-1:0.132: No AC97 audio processor [ 1856.443244][T20724] usb 5-1: Decoder not found [ 1856.447847][T20724] em28xx 5-1:0.132: failed to create media graph [ 1856.487719][ T30] audit: type=1400 audit(1771281396.549:2065): avc: denied { associate } for pid=26035 comm="syz.1.5220" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1856.512400][T20724] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1856.547825][T20724] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1856.566826][T16397] em28xx 5-1:0.132: Closing input extension [ 1856.659252][T16397] em28xx 5-1:0.132: Freeing device [ 1859.764012][T22500] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1860.002907][T22500] usb 6-1: Using ep0 maxpacket: 32 [ 1860.038378][T22500] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 1860.108698][T22500] usb 6-1: config 0 has no interface number 0 [ 1860.164668][T22500] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x4 has invalid maxpacket 96, setting to 64 [ 1860.220727][T22500] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x1 has invalid maxpacket 1064, setting to 64 [ 1860.278893][T22500] usb 6-1: config 0 interface 237 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 1860.340374][T22500] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1860.410101][T22500] usb 6-1: config 0 interface 237 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1860.476769][T22500] usb 6-1: config 0 interface 237 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1860.540799][T22500] usb 6-1: config 0 interface 237 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1860.607514][T22500] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1860.653110][T26077] FAULT_INJECTION: forcing a failure. [ 1860.653110][T26077] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.693342][T22500] usb 6-1: New USB device found, idVendor=1608, idProduct=030c, bcdDevice=e6.4f [ 1860.726986][T22500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.741943][T26077] CPU: 1 UID: 0 PID: 26077 Comm: syz.1.5235 Tainted: G L syzkaller #0 PREEMPT(full) [ 1860.741972][T26077] Tainted: [L]=SOFTLOCKUP [ 1860.741979][T26077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1860.741990][T26077] Call Trace: [ 1860.741997][T26077] [ 1860.742004][T26077] dump_stack_lvl+0x100/0x190 [ 1860.742036][T26077] should_fail_ex.cold+0x5/0xa [ 1860.742061][T26077] should_failslab+0xc2/0x120 [ 1860.742088][T26077] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1860.742112][T26077] ? __alloc_skb+0x140/0x710 [ 1860.742136][T26077] __alloc_skb+0x140/0x710 [ 1860.742153][T26077] ? __alloc_skb+0x5b7/0x710 [ 1860.742172][T26077] ? __pfx___alloc_skb+0x10/0x10 [ 1860.742198][T26077] alloc_skb_with_frags+0xe0/0x810 [ 1860.742221][T26077] ? finish_task_switch.isra.0+0x200/0xb80 [ 1860.742253][T26077] ? __pfx___schedule+0x10/0x10 [ 1860.742276][T26077] sock_alloc_send_pskb+0x801/0x980 [ 1860.742298][T26077] ? lockdep_hardirqs_on+0x78/0x100 [ 1860.742323][T26077] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1860.742348][T26077] ? __ip_append_data+0x641/0x46d0 [ 1860.742376][T26077] __ip_append_data+0x2291/0x46d0 [ 1860.742404][T26077] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1860.742428][T26077] ? ip_dst_mtu_maybe_forward.constprop.0+0x3df/0x750 [ 1860.742463][T26077] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 1860.742491][T26077] ? __pfx___ip_append_data+0x10/0x10 [ 1860.742512][T26077] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1860.742532][T26077] ? lockdep_hardirqs_on+0x78/0x100 [ 1860.742559][T26077] ip_make_skb+0x28b/0x310 [ 1860.742586][T26077] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1860.742612][T26077] ? __pfx_ip_make_skb+0x10/0x10 [ 1860.742650][T26077] ? udp_sendmsg+0x17b6/0x2890 [ 1860.742672][T26077] udp_sendmsg+0x17b6/0x2890 [ 1860.742700][T26077] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1860.742726][T26077] ? __pfx_udp_sendmsg+0x10/0x10 [ 1860.742756][T26077] ? find_held_lock+0x2b/0x80 [ 1860.742777][T26077] ? finish_task_switch.isra.0+0x200/0xb80 [ 1860.742804][T26077] ? finish_task_switch.isra.0+0x205/0xb80 [ 1860.742833][T26077] ? trace_sched_exit_tp+0x13a/0x180 [ 1860.742871][T26077] udpv6_sendmsg+0x156c/0x2f60 [ 1860.742903][T26077] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1860.742922][T26077] ? preempt_schedule_common+0x42/0xc0 [ 1860.742943][T26077] ? preempt_schedule_thunk+0x16/0x30 [ 1860.743000][T26077] ? __local_bh_enable_ip+0x9e/0x120 [ 1860.743022][T26077] ? lockdep_hardirqs_on+0x78/0x100 [ 1860.743042][T26077] ? inet_autobind+0x145/0x1a0 [ 1860.743066][T26077] ? __local_bh_enable_ip+0x9e/0x120 [ 1860.743088][T26077] ? inet_autobind+0x14a/0x1a0 [ 1860.743112][T26077] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1860.743133][T26077] ? inet6_sendmsg+0x105/0x140 [ 1860.743165][T26077] inet6_sendmsg+0x105/0x140 [ 1860.743187][T26077] ____sys_sendmsg+0x704/0xc30 [ 1860.743216][T26077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1860.743253][T26077] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1860.743273][T26077] ? lockdep_hardirqs_on+0x78/0x100 [ 1860.743295][T26077] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1860.743319][T26077] ___sys_sendmsg+0x190/0x1e0 [ 1860.743347][T26077] ? __pfx____sys_sendmsg+0x10/0x10 [ 1860.743403][T26077] __sys_sendmsg+0x170/0x220 [ 1860.743425][T26077] ? __pfx___sys_sendmsg+0x10/0x10 [ 1860.743462][T26077] do_syscall_64+0x106/0xf80 [ 1860.743483][T26077] ? clear_bhb_loop+0x40/0x90 [ 1860.743505][T26077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.743523][T26077] RIP: 0033:0x7fbb5379bf79 [ 1860.743539][T26077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1860.743556][T26077] RSP: 002b:00007fbb546ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1860.743573][T26077] RAX: ffffffffffffffda RBX: 00007fbb53a15fa0 RCX: 00007fbb5379bf79 [ 1860.743585][T26077] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1860.743596][T26077] RBP: 00007fbb546ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1860.743607][T26077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1860.743617][T26077] R13: 00007fbb53a16038 R14: 00007fbb53a15fa0 R15: 00007fff92899c48 [ 1860.743641][T26077] [ 1861.364556][T22500] usb 6-1: Product: syz [ 1861.368872][T22500] usb 6-1: Manufacturer: syz [ 1861.394969][T22500] usb 6-1: SerialNumber: syz [ 1861.414938][T22500] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 1861.423835][T22500] usb 6-1: no configuration chosen from 1 choice [ 1861.939939][T26089] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1862.375306][ T10] usb 6-1: USB disconnect, device number 96 [ 1864.210445][T26114] lo speed is unknown, defaulting to 1000 [ 1864.264278][T19711] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1864.313222][T26114] wlan1 speed is unknown, defaulting to 1000 [ 1864.377692][T26114] vxcan1 speed is unknown, defaulting to 1000 [ 1864.423060][ T30] audit: type=1400 audit(1771281404.885:2066): avc: denied { bind } for pid=26113 comm="syz.6.5243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1865.338836][T26117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5245'. [ 1865.686816][T26123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5244'. [ 1866.046895][T26123] bond3: entered promiscuous mode [ 1866.060221][T26123] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1866.846926][T26128] netlink: 'syz.1.5244': attribute type 33 has an invalid length. [ 1866.861905][T26128] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5244'. [ 1866.955538][T26123] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1866.981370][ T30] audit: type=1400 audit(1771281407.562:2067): avc: denied { read } for pid=26145 comm="syz.0.5252" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1867.080045][T26123] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 1867.092937][ T30] audit: type=1400 audit(1771281407.615:2068): avc: denied { open } for pid=26145 comm="syz.0.5252" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1867.129918][T26123] bond3: (slave sit1): Error -95 calling set_mac_address [ 1867.314754][T22568] Bluetooth: hci3: unexpected subevent 0x0c length: 11 > 5 [ 1867.332173][T22568] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1868.042277][T26161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5257'. [ 1868.243882][T26165] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5258'. [ 1868.598613][ T30] audit: type=1400 audit(1771281409.263:2069): avc: denied { ioctl } for pid=26166 comm="syz.0.5260" path="socket:[100437]" dev="sockfs" ino=100437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1869.862198][ T30] audit: type=1400 audit(1771281410.576:2070): avc: denied { mounton } for pid=26192 comm="syz.4.5268" path="/441/file0" dev="tmpfs" ino=2365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1870.460463][ T30] audit: type=1400 audit(1771281411.090:2071): avc: denied { ioctl } for pid=26186 comm="syz.5.5266" path="socket:[100489]" dev="sockfs" ino=100489 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1873.538043][T26224] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5272'. [ 1873.984048][T26211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26211 comm=syz.6.5269 [ 1873.996544][T26224] FAULT_INJECTION: forcing a failure. [ 1873.996544][T26224] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.996573][T26224] CPU: 0 UID: 0 PID: 26224 Comm: syz.5.5272 Tainted: G L syzkaller #0 PREEMPT(full) [ 1873.996597][T26224] Tainted: [L]=SOFTLOCKUP [ 1873.996603][T26224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1873.996612][T26224] Call Trace: [ 1873.996618][T26224] [ 1873.996624][T26224] dump_stack_lvl+0x100/0x190 [ 1873.996652][T26224] should_fail_ex.cold+0x5/0xa [ 1873.996674][T26224] should_failslab+0xc2/0x120 [ 1873.996697][T26224] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1873.996717][T26224] ? __alloc_skb+0x140/0x710 [ 1873.996738][T26224] __alloc_skb+0x140/0x710 [ 1873.996753][T26224] ? __alloc_skb+0x5b7/0x710 [ 1873.996768][T26224] ? __pfx___alloc_skb+0x10/0x10 [ 1873.996792][T26224] netlink_ack+0x117/0xb80 [ 1873.996811][T26224] ? trace_contention_end+0x140/0x180 [ 1873.996833][T26224] netlink_rcv_skb+0x333/0x420 [ 1873.996854][T26224] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1873.996877][T26224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1873.996911][T26224] xfrm_netlink_rcv+0x71/0x90 [ 1873.996931][T26224] netlink_unicast+0x5aa/0x870 [ 1873.996954][T26224] ? __pfx_netlink_unicast+0x10/0x10 [ 1873.996982][T26224] netlink_sendmsg+0x8b0/0xda0 [ 1873.997007][T26224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1873.997026][T26224] ? __might_fault+0x20/0x140 [ 1873.997053][T26224] ____sys_sendmsg+0xa54/0xc30 [ 1873.997077][T26224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1873.997109][T26224] ___sys_sendmsg+0x190/0x1e0 [ 1873.997133][T26224] ? __pfx____sys_sendmsg+0x10/0x10 [ 1873.997182][T26224] __sys_sendmsg+0x170/0x220 [ 1873.997201][T26224] ? __pfx___sys_sendmsg+0x10/0x10 [ 1873.997233][T26224] do_syscall_64+0x106/0xf80 [ 1873.997252][T26224] ? clear_bhb_loop+0x40/0x90 [ 1873.997277][T26224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.997293][T26224] RIP: 0033:0x7ff2edd9bf79 [ 1873.997307][T26224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1873.997322][T26224] RSP: 002b:00007ff2eeb82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1873.997338][T26224] RAX: ffffffffffffffda RBX: 00007ff2ee015fa0 RCX: 00007ff2edd9bf79 [ 1873.997349][T26224] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1873.997358][T26224] RBP: 00007ff2eeb82090 R08: 0000000000000000 R09: 0000000000000000 [ 1873.997367][T26224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1873.997376][T26224] R13: 00007ff2ee016038 R14: 00007ff2ee015fa0 R15: 00007ffe2a6ea658 [ 1873.997398][T26224] [ 1874.594629][T26223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26223 comm=syz.0.5270 [ 1875.395436][T16397] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1875.622823][T16397] usb 5-1: Using ep0 maxpacket: 16 [ 1875.629364][T16397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.648069][T16397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.678501][T16397] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1875.719848][T16397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.749269][T16397] usb 5-1: config 0 descriptor?? [ 1876.270850][T26243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5273'. [ 1876.449543][T26248] netlink: 'syz.4.5274': attribute type 21 has an invalid length. [ 1876.906647][T26250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5278'. [ 1876.915723][T26250] netlink: 'syz.0.5278': attribute type 7 has an invalid length. [ 1876.925544][T26250] netlink: 'syz.0.5278': attribute type 8 has an invalid length. [ 1876.947430][T26250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5278'. [ 1876.982723][T26250] ip6gretap0: entered promiscuous mode [ 1877.022379][T26250] ip6gretap0: left promiscuous mode [ 1877.131813][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1878.104567][T16397] usbhid 5-1:0.0: can't add hid device: -71 [ 1878.220730][T16397] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1878.255733][T16397] usb 5-1: USB disconnect, device number 4 [ 1879.071949][ T5927] IPVS: starting estimator thread 0... [ 1879.170467][T26274] IPVS: using max 71 ests per chain, 170400 per kthread [ 1880.604442][ T24] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 1881.007738][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1881.029550][ T24] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1881.053964][ T24] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1881.100766][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1881.120709][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1881.131029][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.149815][ T24] usb 6-1: config 0 descriptor?? [ 1883.947763][T26326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5298'. [ 1884.959853][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 1884.983298][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1884.996545][ T30] audit: type=1400 audit(1771281426.482:2072): avc: denied { connect } for pid=26335 comm="syz.1.5301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1885.033919][ T24] usb 6-1: USB disconnect, device number 97 [ 1885.357206][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1885.522731][T26358] netlink: 'syz.0.5309': attribute type 4 has an invalid length. [ 1885.531706][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1885.541556][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.562089][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1885.583610][ T30] audit: type=1400 audit(1771281427.091:2073): avc: denied { read write } for pid=26352 comm="syz.4.5308" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1885.618307][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1885.631225][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.640920][ T30] audit: type=1400 audit(1771281427.091:2074): avc: denied { open } for pid=26352 comm="syz.4.5308" path="/447/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1885.666870][ T24] usb 2-1: config 0 descriptor?? [ 1886.396222][ T30] audit: type=1400 audit(1771281427.920:2075): avc: denied { kexec_image_load } for pid=26368 comm="syz.4.5311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1887.967108][T26386] FAULT_INJECTION: forcing a failure. [ 1887.967108][T26386] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.015040][T26386] CPU: 1 UID: 0 PID: 26386 Comm: syz.4.5315 Tainted: G L syzkaller #0 PREEMPT(full) [ 1888.015065][T26386] Tainted: [L]=SOFTLOCKUP [ 1888.015071][T26386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1888.015080][T26386] Call Trace: [ 1888.015085][T26386] [ 1888.015091][T26386] dump_stack_lvl+0x100/0x190 [ 1888.015124][T26386] should_fail_ex.cold+0x5/0xa [ 1888.015143][T26386] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1888.015167][T26386] should_failslab+0xc2/0x120 [ 1888.015188][T26386] __kmalloc_noprof+0xe0/0x850 [ 1888.015211][T26386] tomoyo_realpath_from_path+0xb6/0x690 [ 1888.015238][T26386] tomoyo_path_number_perm+0x23c/0x580 [ 1888.015257][T26386] ? tomoyo_path_number_perm+0x22e/0x580 [ 1888.015277][T26386] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1888.015317][T26386] ? find_held_lock+0x2b/0x80 [ 1888.015335][T26386] ? __fget_files+0x215/0x3d0 [ 1888.015355][T26386] ? hook_file_ioctl_common+0x146/0x410 [ 1888.015375][T26386] ? __fget_files+0x21f/0x3d0 [ 1888.015399][T26386] security_file_ioctl+0xd3/0x230 [ 1888.015421][T26386] __x64_sys_ioctl+0xb7/0x210 [ 1888.015443][T26386] do_syscall_64+0x106/0xf80 [ 1888.015461][T26386] ? clear_bhb_loop+0x40/0x90 [ 1888.015482][T26386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.015500][T26386] RIP: 0033:0x7f7171f9bf79 [ 1888.015514][T26386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.015530][T26386] RSP: 002b:00007f7172f0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1888.015549][T26386] RAX: ffffffffffffffda RBX: 00007f7172215fa0 RCX: 00007f7171f9bf79 [ 1888.015560][T26386] RDX: 0000200000000d40 RSI: 00000000c0386105 RDI: 0000000000000003 [ 1888.015571][T26386] RBP: 00007f7172f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1888.015581][T26386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1888.015591][T26386] R13: 00007f7172216038 R14: 00007f7172215fa0 R15: 00007ffef2f177e8 [ 1888.015615][T26386] [ 1888.015642][T26386] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1888.761529][ T24] creative-sb0540 0003:041E:3100.0089: item fetching failed at offset 0/5 [ 1888.776801][ T24] creative-sb0540 0003:041E:3100.0089: parse failed [ 1888.786822][ T24] creative-sb0540 0003:041E:3100.0089: probe with driver creative-sb0540 failed with error -22 [ 1889.156223][ T30] audit: type=1400 audit(1771282198.844:2076): avc: denied { unmount } for pid=25311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1889.795470][ T24] usb 2-1: USB disconnect, device number 89 [ 1891.606914][T26436] fuse: Bad value for 'fd' [ 1893.198544][T26451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5332'. [ 1893.367220][ T5927] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1893.633994][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1893.750563][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 1893.763150][ T5927] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1893.776308][ T5927] usb 6-1: config 0 has no interface number 0 [ 1893.796687][ T5927] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1893.988609][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1893.999690][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1894.006492][ T5927] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1894.142977][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1894.152335][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.162423][ T5927] usb 6-1: Product: syz [ 1894.172616][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.181452][ T10] usb 1-1: Product: syz [ 1894.181932][ T5927] usb 6-1: Manufacturer: syz [ 1894.185608][ T10] usb 1-1: Manufacturer: syz [ 1894.204077][ T10] usb 1-1: SerialNumber: syz [ 1894.209244][ T5927] usb 6-1: SerialNumber: syz [ 1894.548076][ T5927] usb 6-1: config 0 descriptor?? [ 1894.549040][ T10] usb 1-1: config 0 descriptor?? [ 1894.560947][T26454] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1894.574039][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 1894.582682][ T10] port100 1-1:0.0: NFC: Could not get supported command types [ 1894.613910][ T5927] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1894.625323][T26455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26455 comm=syz.1.5336 [ 1894.638914][ T5927] em28xx 6-1:0.132: Video interface 132 found: [ 1895.004475][ T5927] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 1895.011200][T26470] orangefs_mount: mount request failed with -4 [ 1895.779660][ T5886] usb 1-1: USB disconnect, device number 4 [ 1895.946106][ T5927] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1895.976180][ T5927] em28xx 6-1:0.132: board has no eeprom [ 1896.186162][ T5927] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1896.215898][ T5927] em28xx 6-1:0.132: analog set to bulk mode. [ 1896.240804][ T5886] em28xx 6-1:0.132: Registering V4L2 extension [ 1896.320304][ T5927] usb 6-1: USB disconnect, device number 98 [ 1896.334013][ T5927] em28xx 6-1:0.132: Disconnecting em28xx [ 1896.822627][ T5886] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 1896.830165][ T5886] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 1896.839096][ T5886] em28xx 6-1:0.132: No AC97 audio processor [ 1896.847146][ T5886] usb 6-1: Decoder not found [ 1896.851737][ T5886] em28xx 6-1:0.132: failed to create media graph [ 1896.858616][ T5886] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 1896.882344][ T5886] em28xx 6-1:0.132: Remote control support is not available for this card. [ 1896.893307][ T5927] em28xx 6-1:0.132: Closing input extension [ 1897.122168][ T5927] em28xx 6-1:0.132: Freeing device [ 1897.547294][T26505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5348'. [ 1897.571096][T26505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5348'. [ 1898.301160][ T30] audit: type=1400 audit(1771282208.210:2077): avc: denied { append } for pid=26513 comm="syz.6.5351" name="nbd6" dev="devtmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1898.595914][T20724] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1898.729882][T20724] usb 5-1: device descriptor read/64, error -71 [ 1899.052415][T26537] binder: binder_mmap: 26530 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1900.065362][T26543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5358'. [ 1900.103853][T26543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5358'. [ 1900.107687][T20724] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1900.140161][T26544] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5355'. [ 1900.262841][T20724] usb 5-1: device descriptor read/64, error -71 [ 1900.377455][T20724] usb usb5-port1: attempt power cycle [ 1900.396074][ T5879] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1900.539051][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 1900.559297][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1900.570180][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1900.589973][ T5879] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1900.602975][ T5879] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1900.612073][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.626509][ T5879] usb 7-1: config 0 descriptor?? [ 1900.731440][T20724] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1900.758454][T20724] usb 5-1: device descriptor read/8, error -71 [ 1900.842119][ T30] audit: type=1400 audit(1771282211.118:2078): avc: denied { ioctl } for pid=26545 comm="syz.6.5359" path="socket:[101376]" dev="sockfs" ino=101376 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1901.051056][T20724] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1901.113561][T20724] usb 5-1: device descriptor read/8, error -71 [ 1901.213538][ T5879] microsoft 0003:045E:07DA.008A: ignoring exceeding usage max [ 1901.226675][ T5879] microsoft 0003:045E:07DA.008A: ignoring exceeding usage max [ 1901.262998][T20724] usb usb5-port1: unable to enumerate USB device [ 1901.282465][ T5879] microsoft 0003:045E:07DA.008A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1901.297309][ T5879] microsoft 0003:045E:07DA.008A: no inputs found [ 1901.312354][ T5879] microsoft 0003:045E:07DA.008A: could not initialize ff, continuing anyway [ 1901.367706][ T5879] usb 7-1: USB disconnect, device number 41 [ 1901.397435][ T30] audit: type=1400 audit(1771282211.706:2079): avc: denied { lock } for pid=26560 comm="syz.4.5363" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1901.494666][T26563] fido_id[26563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1901.716654][T26559] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1901.729464][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1901.883880][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 1901.899322][T26580] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5368'. [ 1901.920878][ T5879] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1901.996489][ T5879] usb 1-1: config 0 has no interface number 0 [ 1902.016518][ T5879] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1902.239792][ T5879] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1902.250942][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.272756][ T5879] usb 1-1: Product: syz [ 1902.281987][ T5879] usb 1-1: Manufacturer: syz [ 1902.306664][ T5879] usb 1-1: SerialNumber: syz [ 1902.317980][ T5879] usb 1-1: config 0 descriptor?? [ 1902.348183][T26566] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1902.548485][T19711] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1902.571385][T26566] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1902.606100][ T5886] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1902.634473][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1902.721056][T19711] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1902.748952][T19711] usb 7-1: not running at top speed; connect to a high speed hub [ 1902.777340][T19711] usb 7-1: config 1 has an invalid interface number: 4 but max is 2 [ 1902.779483][ T5886] usb 6-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1902.785564][T19711] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1902.796951][ T5886] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1902.843718][T19711] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1902.854703][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1902.872095][T19711] usb 7-1: config 1 has no interface number 1 [ 1902.872128][ T5886] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1902.878586][T19711] usb 7-1: too many endpoints for config 1 interface 4 altsetting 81: 231, using maximum allowed: 30 [ 1902.897303][ T24] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1902.920037][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.920081][T19711] usb 7-1: config 1 interface 4 altsetting 81 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 1902.930706][ T24] usb 5-1: config 0 descriptor?? [ 1902.955444][ T5886] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1902.968998][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.984253][ T5886] usb 6-1: Product: syz [ 1902.996453][ T5886] usb 6-1: Manufacturer: syz [ 1903.002884][ T5886] usb 6-1: SerialNumber: syz [ 1903.002883][T19711] usb 7-1: config 1 interface 4 has no altsetting 0 [ 1903.017530][T19711] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1903.044463][T19711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.052798][T19711] usb 7-1: Product: syz [ 1903.065952][T19711] usb 7-1: Manufacturer: syz [ 1903.070585][T19711] usb 7-1: SerialNumber: syz [ 1903.175396][T26589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1903.191202][T26589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1903.201139][ T24] usb 5-1: string descriptor 0 read error: -71 [ 1903.220538][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 1903.226653][ T5886] uvcvideo 6-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1903.234312][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1903.243107][ T5886] uvcvideo 6-1:220.0: No valid video chain found. [ 1903.255966][ T24] usb 5-1: USB disconnect, device number 9 [ 1903.267500][ T5886] usb 6-1: USB disconnect, device number 99 [ 1903.301009][T26584] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5369'. [ 1903.330777][T26584] tipc: Enabling of bearer rejected, already enabled [ 1903.345567][T19711] usb 7-1: 0:2 : does not exist [ 1903.367309][T19711] hub 7-1:1.4: Invalid hub with more than one config or interface [ 1903.376185][T19711] hub 7-1:1.4: probe with driver hub failed with error -22 [ 1903.390273][T19711] usb 7-1: USB disconnect, device number 42 [ 1903.407977][T26227] udevd[26227]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1903.601138][T26566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1903.660513][ T5879] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1903.671285][ T5879] asix 1-1:0.188: probe with driver asix failed with error -32 [ 1903.917151][T26608] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5374'. [ 1903.936937][T26608] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5374'. [ 1904.140070][T26614] syzkaller0: entered allmulticast mode [ 1905.173794][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1905.188379][ T24] usb 1-1: USB disconnect, device number 5 [ 1907.008573][ T30] audit: type=1800 audit(1771282217.575:2080): pid=26613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5376" name="file1" dev="ramfs" ino=101778 res=0 errno=0 [ 1908.010794][T26629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26629 comm=syz.1.5381 [ 1908.912411][T26653] netlink: 'syz.6.5387': attribute type 1 has an invalid length. [ 1909.038882][T26653] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1909.049639][T26653] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1909.518613][T16397] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1909.554340][T26659] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 1909.607231][T26653] macvlan2: entered promiscuous mode [ 1909.613670][T26653] macvlan2: entered allmulticast mode [ 1909.622355][T26653] bond1: entered promiscuous mode [ 1909.630411][T26653] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1909.646482][T26653] bond1: left promiscuous mode [ 1909.667498][T16397] usb 1-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1909.691043][T16397] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1909.710545][T16397] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1909.722506][T16397] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1909.733948][T16397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.863338][T16397] usb 1-1: Product: syz [ 1909.867599][T16397] usb 1-1: Manufacturer: syz [ 1909.872737][T16397] usb 1-1: SerialNumber: syz [ 1910.344224][T16397] uvcvideo 1-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1910.363605][T16397] uvcvideo 1-1:220.0: No valid video chain found. [ 1910.407297][T16397] usb 1-1: USB disconnect, device number 6 [ 1910.450479][T26676] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5392'. [ 1910.463041][T26676] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5392'. [ 1913.226364][ T5886] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1913.392898][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1913.435800][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1913.480736][ T5886] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1913.520192][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.554445][ T5886] usb 1-1: config 0 descriptor?? [ 1913.699554][T26696] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5400'. [ 1914.094381][ T5886] hid-steam 0003:28DE:1142.008B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1914.170041][ T5886] hid-steam 0003:28DE:1142.008B: Steam wireless receiver connected [ 1914.197604][ T5886] hid-steam 0003:28DE:1142.008C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1915.015594][ T30] audit: type=1400 audit(1771282225.596:2081): avc: denied { mount } for pid=26703 comm="syz.5.5402" name="/" dev="hugetlbfs" ino=101886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1915.090697][ T5886] usb 1-1: USB disconnect, device number 7 [ 1915.202188][ T5886] hid-steam 0003:28DE:1142.008B: Steam wireless receiver disconnected [ 1916.908022][T26740] dummy0: entered allmulticast mode [ 1916.947708][T26739] dummy0: left allmulticast mode [ 1918.655605][T26754] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5412'. [ 1918.886983][T16397] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1919.172057][T16397] usb 6-1: Using ep0 maxpacket: 16 [ 1919.516841][T26741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26741 comm=syz.0.5406 [ 1919.534370][T16397] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1919.555014][T16397] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.587904][T16397] usb 6-1: config 0 has no interface number 0 [ 1919.955153][T16397] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1919.989324][T16397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 1919.997397][T16397] usb 6-1: Product: syz [ 1920.400420][T16397] usb 6-1: Manufacturer: syz [ 1920.508006][T16397] usb 6-1: SerialNumber: syz [ 1920.855094][ T30] audit: type=1400 audit(1771282231.906:2082): avc: denied { connect } for pid=26765 comm="syz.1.5417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1920.897290][T16397] usb 6-1: config 0 descriptor?? [ 1920.912238][T16397] usb 6-1: can't set config #0, error -71 [ 1920.926167][T16397] usb 6-1: USB disconnect, device number 100 [ 1921.665245][T26783] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1923.088627][ T30] audit: type=1400 audit(1771282234.479:2083): avc: denied { connect } for pid=26801 comm="syz.5.5426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1924.173106][ T30] audit: type=1400 audit(1771282234.489:2084): avc: denied { write } for pid=26801 comm="syz.5.5426" laddr=fe80::12 lport=43433 faddr=ff02::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1924.445412][T26811] FAULT_INJECTION: forcing a failure. [ 1924.445412][T26811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1924.459234][T26811] CPU: 0 UID: 0 PID: 26811 Comm: syz.0.5431 Tainted: G L syzkaller #0 PREEMPT(full) [ 1924.459262][T26811] Tainted: [L]=SOFTLOCKUP [ 1924.459267][T26811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1924.459275][T26811] Call Trace: [ 1924.459279][T26811] [ 1924.459283][T26811] dump_stack_lvl+0x100/0x190 [ 1924.459306][T26811] should_fail_ex.cold+0x5/0xa [ 1924.459321][T26811] _copy_from_user+0x2e/0xd0 [ 1924.459334][T26811] generic_map_update_batch+0x452/0x800 [ 1924.459356][T26811] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1924.459374][T26811] ? fdget+0x17a/0x210 [ 1924.459391][T26811] ? __sanitizer_cov_trace_pc+0x3f/0x70 [ 1924.459407][T26811] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1924.459425][T26811] bpf_map_do_batch+0x66f/0x6d0 [ 1924.459443][T26811] __sys_bpf+0x302/0x4b90 [ 1924.459454][T26811] ? trace_sched_exit_tp+0x13a/0x180 [ 1924.459472][T26811] ? __pfx___sys_bpf+0x10/0x10 [ 1924.459489][T26811] ? __pfx___schedule+0x10/0x10 [ 1924.459503][T26811] ? preempt_schedule_irq+0x7b/0x90 [ 1924.459530][T26811] __x64_sys_bpf+0x7b/0xc0 [ 1924.459540][T26811] ? lockdep_hardirqs_on+0x78/0x100 [ 1924.459554][T26811] do_syscall_64+0x106/0xf80 [ 1924.459568][T26811] ? clear_bhb_loop+0x40/0x90 [ 1924.459582][T26811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.459593][T26811] RIP: 0033:0x7fdc56f9bf79 [ 1924.459603][T26811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1924.459614][T26811] RSP: 002b:00007fdc57efe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1924.459625][T26811] RAX: ffffffffffffffda RBX: 00007fdc57216090 RCX: 00007fdc56f9bf79 [ 1924.459632][T26811] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001a [ 1924.459639][T26811] RBP: 00007fdc57efe090 R08: 0000000000000000 R09: 0000000000000000 [ 1924.459645][T26811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1924.459652][T26811] R13: 00007fdc57216128 R14: 00007fdc57216090 R15: 00007ffe27f8ba58 [ 1924.459666][T26811] [ 1926.634087][T26844] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5439'. [ 1926.666138][T20724] IPVS: starting estimator thread 0... [ 1926.766712][T26845] IPVS: using max 46 ests per chain, 110400 per kthread [ 1926.828729][T26850] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1928.242507][T26861] xt_hashlimit: size too large, truncated to 1048576 [ 1928.617594][T19711] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1928.846609][T19711] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1928.886049][T19711] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1929.008267][T19711] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1929.017319][T19711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1929.055594][T19711] usb 2-1: Product: syz [ 1929.059780][T19711] usb 2-1: Manufacturer: syz [ 1929.064364][T19711] usb 2-1: SerialNumber: syz [ 1929.119716][T19711] usb 2-1: config 0 descriptor?? [ 1929.169142][T19711] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 1929.196881][T19711] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1929.241915][T19711] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1929.356197][T22500] usb 2-1: USB disconnect, device number 90 [ 1929.669344][T26872] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5447'. [ 1930.303821][ T5886] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 1930.352533][ T5886] hid-generic 0000:0000:0000.008D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1931.432639][T26880] netlink: 'syz.1.5449': attribute type 16 has an invalid length. [ 1931.440606][T26880] netlink: 'syz.1.5449': attribute type 17 has an invalid length. [ 1933.036297][ T30] audit: type=1400 audit(1771282244.915:2085): avc: denied { append } for pid=26883 comm="syz.0.5443" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1933.265667][ T30] audit: type=1400 audit(1771282244.925:2086): avc: denied { ioctl } for pid=26883 comm="syz.0.5443" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1935.650541][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1936.041954][ T30] audit: type=1400 audit(1771282248.075:2087): avc: denied { listen } for pid=26923 comm="syz.5.5459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1936.073911][T26924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5459'. [ 1936.865717][T25879] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1937.160124][T22568] Bluetooth: hci3: ACL packet for unknown connection handle 1737 [ 1937.751396][T26937] ./cgroup: Can't lookup blockdev [ 1937.756800][T26937] ./cgroup: Can't lookup blockdev [ 1937.792948][T26937] ./cgroup: Can't lookup blockdev [ 1937.798337][T26937] ./cgroup: Can't lookup blockdev [ 1937.804796][T26937] ./cgroup: Can't lookup blockdev [ 1937.844915][T26937] ./cgroup: Can't lookup blockdev [ 1939.209672][ T24] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1939.276190][ T5927] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1939.424527][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1939.435660][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 1939.440865][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1939.461762][ T24] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1939.480039][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.492381][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.504314][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1939.621164][ T24] usb 7-1: config 0 descriptor?? [ 1939.637158][ T5927] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1939.684666][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.717307][ T5927] usb 5-1: config 0 descriptor?? [ 1939.793061][T26958] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1939.972637][T26965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5470'. [ 1940.158907][ T24] isku 0003:1E7D:319C.008E: item fetching failed at offset 6/7 [ 1940.271068][T26942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1940.272625][ T24] isku 0003:1E7D:319C.008E: parse failed [ 1940.286176][ T24] isku 0003:1E7D:319C.008E: probe with driver isku failed with error -22 [ 1940.306297][T26942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1941.272195][T26968] usb 7-1: USB disconnect, device number 43 [ 1941.475157][ T5879] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1941.547406][T19711] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1941.694191][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 1941.699899][T19711] usb 2-1: Using ep0 maxpacket: 16 [ 1941.711414][ T5879] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1941.724483][T19711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1941.735569][ T5879] usb 1-1: config 0 has no interface number 0 [ 1941.746605][ T5879] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1941.756764][T19711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1941.770507][T19711] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1941.782785][ T5879] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1941.794037][T19711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.804968][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.817873][T19711] usb 2-1: Product: syz [ 1941.824151][ T5879] usb 1-1: Product: syz [ 1941.829573][T19711] usb 2-1: Manufacturer: syz [ 1941.835634][ T5879] usb 1-1: Manufacturer: syz [ 1941.840320][T19711] usb 2-1: SerialNumber: syz [ 1941.845775][ T5879] usb 1-1: SerialNumber: syz [ 1941.853265][T19711] usb 2-1: config 0 descriptor?? [ 1941.863907][ T5879] usb 1-1: config 0 descriptor?? [ 1941.890498][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 1941.935125][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1941.974268][ T5879] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1941.976080][ T5927] usb 5-1: USB disconnect, device number 10 [ 1941.990290][ T5879] em28xx 1-1:0.132: Video interface 132 found: [ 1942.143792][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1942.159348][T19711] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input92 [ 1942.194958][T19711] imon:send_packet: packet tx failed (-71) [ 1942.265872][T19711] imon 2-1:0.0: panel buttons/knobs setup failed [ 1942.349561][ T5879] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1942.380000][T19711] rc_core: IR keymap rc-imon-pad not found [ 1942.392684][T19711] Registered IR keymap rc-empty [ 1942.397822][T19711] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1942.432284][T19711] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1942.465870][T19711] imon:send_packet: packet tx failed (-71) [ 1942.482321][T19711] imon 2-1:0.0: remote input dev register failed [ 1942.501514][T19711] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 1942.719721][T19711] imon 2-1:0.0: unable to initialize intf0, err 0 [ 1942.757447][T19711] imon:imon_probe: failed to initialize context! [ 1942.839300][T19711] imon 2-1:0.0: unable to register, err -19 [ 1942.859413][T19711] usb 2-1: USB disconnect, device number 91 [ 1943.027037][ T5879] em28xx 1-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1943.036252][ T5879] em28xx 1-1:0.132: failed to read eeprom (err=-5) [ 1943.072826][ T5879] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1943.152744][ T5879] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1943.167429][ T5879] em28xx 1-1:0.132: analog set to bulk mode. [ 1943.176944][T16397] em28xx 1-1:0.132: Registering V4L2 extension [ 1943.209108][ T5879] usb 1-1: USB disconnect, device number 8 [ 1943.244661][ T5879] em28xx 1-1:0.132: Disconnecting em28xx [ 1943.266441][T26968] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1943.384600][T19711] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1943.434967][T26968] usb 7-1: Using ep0 maxpacket: 32 [ 1943.472262][T26968] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1943.491909][T26968] usb 7-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1943.517620][T26968] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.546036][T26968] usb 7-1: config 0 descriptor?? [ 1943.578891][T19711] usb 2-1: Using ep0 maxpacket: 16 [ 1943.610626][T19711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1943.637202][T19711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1943.666572][T19711] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1943.675930][T19711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.702428][T19711] usb 2-1: Product: syz [ 1943.721542][T19711] usb 2-1: Manufacturer: syz [ 1943.737839][T19711] usb 2-1: SerialNumber: syz [ 1943.759627][T19711] usb 2-1: config 0 descriptor?? [ 1943.810097][T16397] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1943.817269][T16397] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1943.842990][T16397] em28xx 1-1:0.132: No AC97 audio processor [ 1944.782791][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1944.846489][T19711] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input94 [ 1945.986484][T26968] itetech 0003:048D:8595.008F: hidraw0: USB HID v4.0a Device [HID 048d:8595] on usb-dummy_hcd.6-1/input0 [ 1945.986840][T16397] usb 1-1: Decoder not found [ 1946.111330][T27016] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1946.264358][T19711] imon:send_packet: packet tx failed (-71) [ 1946.288845][T16397] em28xx 1-1:0.132: failed to create media graph [ 1946.330116][T16397] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1946.361810][T19711] imon 2-1:0.0: panel buttons/knobs setup failed [ 1946.400614][T16397] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1946.446957][ T5879] em28xx 1-1:0.132: Closing input extension [ 1946.496885][ T5879] em28xx 1-1:0.132: Freeing device [ 1946.523719][T19711] rc_core: IR keymap rc-imon-pad not found [ 1946.543167][T19711] Registered IR keymap rc-empty [ 1946.550474][T19711] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1946.581641][T19711] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1946.674690][T19711] imon:send_packet: packet tx failed (-71) [ 1946.742847][T19711] imon 2-1:0.0: remote input dev register failed [ 1946.749316][T19711] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 1946.850054][T27033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=27033 comm=syz.1.5483 [ 1946.905859][T19711] imon 2-1:0.0: unable to initialize intf0, err 0 [ 1946.941222][T19711] imon:imon_probe: failed to initialize context! [ 1946.960484][T19711] imon 2-1:0.0: unable to register, err -19 [ 1946.989598][T19711] usb 2-1: USB disconnect, device number 92 [ 1947.076158][ T5879] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1947.295028][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 1947.316886][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1947.331845][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1947.341862][ T5879] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1947.366361][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.406795][ T5879] usb 1-1: config 0 descriptor?? [ 1947.438469][T27037] netlink: 'syz.5.5482': attribute type 10 has an invalid length. [ 1949.636953][ T5879] usbhid 1-1:0.0: can't add hid device: -71 [ 1949.667011][ T5879] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1949.705913][ T5879] usb 1-1: USB disconnect, device number 9 [ 1950.677293][ T5879] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1950.837852][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 1950.844485][ T5879] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1950.855363][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1950.878048][ T5879] usb 1-1: config 0 has no interface number 0 [ 1950.892115][ T5879] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1950.903944][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 1950.912765][ T5879] usb 1-1: Product: syz [ 1950.916961][ T5879] usb 1-1: Manufacturer: syz [ 1950.921608][ T5879] usb 1-1: SerialNumber: syz [ 1950.933833][ T5879] usb 1-1: config 0 descriptor?? [ 1950.943676][ T5879] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1950.950999][ T5879] uvcvideo 1-1:0.105: No valid video chain found. [ 1951.096966][T27011] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1951.106413][T27011] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1951.118576][T27037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1951.134867][ T5879] usb 1-1: USB disconnect, device number 10 [ 1951.141976][T27011] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1951.168686][T27037] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1951.231130][T13629] usb 7-1: USB disconnect, device number 44 [ 1951.858275][T27060] binder: binder_mmap: 27055 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1952.435670][T27065] binder: binder_mmap: 27057 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1953.332298][ T5879] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1953.505141][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 1953.512817][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1953.524374][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1953.534828][ T5879] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1953.544428][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.552702][T13629] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1953.561273][T27085] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5493'. [ 1953.586601][ T5879] usb 7-1: config 0 descriptor?? [ 1953.714120][T13629] usb 2-1: Using ep0 maxpacket: 32 [ 1954.444989][T27091] netlink: 'syz.6.5494': attribute type 21 has an invalid length. [ 1954.867192][T13629] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1954.876432][T13629] usb 2-1: config 0 has no interface number 0 [ 1954.884660][T13629] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1954.897783][T13629] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1954.907615][T13629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.915869][T13629] usb 2-1: Product: syz [ 1954.920128][T13629] usb 2-1: Manufacturer: syz [ 1954.925091][T13629] usb 2-1: SerialNumber: syz [ 1954.934293][T13629] usb 2-1: config 0 descriptor?? [ 1954.948334][T13629] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1954.958339][T13629] em28xx 2-1:0.132: Video interface 132 found: [ 1955.033301][T27098] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1955.049100][T27098] qnx6: wrong signature (magic) in superblock #1. [ 1955.055620][T27098] qnx6: unable to read the first superblock [ 1955.333570][ T5927] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1955.348136][T13629] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1955.685646][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 1955.721892][ T5927] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1955.733561][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.517362][ T5879] usbhid 7-1:0.0: can't add hid device: -71 [ 1956.523397][ T5879] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1956.571122][ T5927] usb 1-1: Product: syz [ 1956.577859][ T5927] usb 1-1: Manufacturer: syz [ 1956.582934][ T5927] usb 1-1: SerialNumber: syz [ 1956.590542][ T5927] usb 1-1: config 0 descriptor?? [ 1956.615792][T13629] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1956.633662][T13629] em28xx 2-1:0.132: board has no eeprom [ 1956.654436][ T5879] usb 7-1: USB disconnect, device number 45 [ 1956.714339][T13629] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1956.731174][T13629] em28xx 2-1:0.132: analog set to bulk mode. [ 1956.739578][T26968] em28xx 2-1:0.132: Registering V4L2 extension [ 1956.754011][T13629] usb 2-1: USB disconnect, device number 93 [ 1956.770930][T13629] em28xx 2-1:0.132: Disconnecting em28xx [ 1956.914835][T16397] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1957.061773][ T5927] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1957.227552][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1957.258941][ T5927] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1957.283972][ T5927] usb 1-1: media controller created [ 1957.379951][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1957.486324][ T5879] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1957.494396][T16397] usb 6-1: Using ep0 maxpacket: 16 [ 1957.573112][T16397] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1957.584873][T26968] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1957.590746][T16397] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.627613][T16397] usb 6-1: config 0 has no interface number 0 [ 1957.638673][T26968] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1957.649679][T26968] em28xx 2-1:0.132: No AC97 audio processor [ 1957.660639][T26968] usb 2-1: Decoder not found [ 1957.665860][T26968] em28xx 2-1:0.132: failed to create media graph [ 1957.672516][T26968] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1957.782545][T16397] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1957.792788][T16397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 1957.802033][ T5879] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1957.811060][ T5879] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1957.821214][T16397] usb 6-1: Product: syz [ 1957.825449][T16397] usb 6-1: Manufacturer: syz [ 1957.830949][ T5879] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1957.842145][ T5879] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1957.851689][T16397] usb 6-1: SerialNumber: syz [ 1957.854738][T26968] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1957.856290][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1957.856313][ T5879] usb 7-1: Product: syz [ 1957.881361][ T5879] usb 7-1: Manufacturer: syz [ 1957.889772][T16397] usb 6-1: config 0 descriptor?? [ 1957.899411][T16397] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1957.911813][T16397] uvcvideo 6-1:0.105: No valid video chain found. [ 1957.920332][ T5879] usb 7-1: SerialNumber: syz [ 1957.923363][T13629] em28xx 2-1:0.132: Closing input extension [ 1957.954742][ T5879] usb 7-1: config 0 descriptor?? [ 1957.972048][ T5879] hub 7-1:0.0: bad descriptor, ignoring hub [ 1957.978348][ T5879] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1957.992800][ T5879] usb 7-1: selecting invalid altsetting 0 [ 1958.108484][T16397] usb 6-1: USB disconnect, device number 101 [ 1958.153225][ T5927] zl10353_read_register: readreg error (reg=127, ret==0) [ 1958.198007][ T5927] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1958.237049][ T5927] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1959.489740][T27142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.518369][T27142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.654128][T27147] lo speed is unknown, defaulting to 1000 [ 1959.679482][T27147] wlan1 speed is unknown, defaulting to 1000 [ 1959.697215][T27147] vxcan1 speed is unknown, defaulting to 1000 [ 1959.768363][ T30] audit: type=1400 audit(1771282272.937:2088): avc: denied { ioctl } for pid=27143 comm="syz.4.5516" path="pid:[4026532958]" dev="nsfs" ino=4026532958 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1960.223432][T27116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1960.236139][T27116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1962.114947][T26968] usb 7-1: USB disconnect, device number 46 [ 1963.701608][ T30] audit: type=1400 audit(1771282275.342:2089): avc: denied { ioctl } for pid=27168 comm="syz.6.5520" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1964.106939][T27180] random: crng reseeded on system resumption [ 1967.650991][T13039] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1968.372794][T27216] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5534'. [ 1968.440117][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5531'. [ 1968.468617][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5531'. [ 1971.487407][T26968] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1971.639718][T26968] usb 6-1: Using ep0 maxpacket: 16 [ 1971.661387][T26968] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1971.752825][T26968] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1971.765421][T26968] usb 6-1: config 0 has no interface number 0 [ 1971.777489][T26968] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1971.786799][T26968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 1971.797008][T26968] usb 6-1: Product: syz [ 1971.865518][T26968] usb 6-1: Manufacturer: syz [ 1971.870502][T26968] usb 6-1: SerialNumber: syz [ 1971.886133][T26968] usb 6-1: config 0 descriptor?? [ 1971.985125][T26968] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1971.995089][T26968] uvcvideo 6-1:0.105: No valid video chain found. [ 1972.454955][T16397] usb 6-1: USB disconnect, device number 102 [ 1974.220170][ T30] audit: type=1400 audit(1771282288.140:2090): avc: denied { lock } for pid=27277 comm="syz.6.5553" path="socket:[104109]" dev="sockfs" ino=104109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1974.285784][T27271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27271 comm=syz.1.5546 [ 1974.508810][T11980] Bluetooth: hci1: command 0x0406 tx timeout [ 1974.615780][T26968] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1974.833158][T26968] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1974.841514][T26968] usb 7-1: not running at top speed; connect to a high speed hub [ 1974.855309][T26968] usb 7-1: config 2 has an invalid interface number: 212 but max is 1 [ 1974.864753][T26968] usb 7-1: config 2 has an invalid interface number: 226 but max is 1 [ 1975.303235][T26968] usb 7-1: config 2 has no interface number 0 [ 1975.309539][T26968] usb 7-1: config 2 has no interface number 1 [ 1975.315904][T26968] usb 7-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1975.327005][T26968] usb 7-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1975.337790][T26968] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1975.361710][T26968] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64 [ 1975.386109][T26968] usb 7-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1975.404407][T26968] usb 7-1: config 2 interface 212 has no altsetting 0 [ 1975.414620][T26968] usb 7-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1975.425364][T26968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.433473][T26968] usb 7-1: Product: syz [ 1975.437723][T26968] usb 7-1: Manufacturer: syz [ 1975.442513][T26968] usb 7-1: SerialNumber: syz [ 1975.578555][ T30] audit: type=1400 audit(1771282289.589:2091): avc: denied { block_suspend } for pid=27300 comm="syz.0.5559" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1975.662546][T27286] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5554'. [ 1975.671951][T27286] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5554'. [ 1975.681056][T27286] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5554'. [ 1975.874411][T26968] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.226/input/input97 [ 1975.941308][T26968] usb 7-1: USB disconnect, device number 47 [ 1976.087277][ T5927] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1976.668612][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 1976.689282][ T5927] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1976.699647][ T5927] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1976.710108][ T5927] usb 5-1: config 2 has no interface number 0 [ 1976.717905][ T5927] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1976.732948][ T5927] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1976.743948][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.752335][ T5927] usb 5-1: Product: syz [ 1976.760243][ T5927] usb 5-1: Manufacturer: syz [ 1976.782959][ T5927] usb 5-1: SerialNumber: syz [ 1976.818440][ T5927] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1976.835346][T27320] netlink: 'syz.6.5564': attribute type 2 has an invalid length. [ 1976.870319][T27320] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5564'. [ 1977.007705][ T5879] usb 5-1: USB disconnect, device number 11 [ 1977.630537][ T5927] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1977.899115][ T5927] usb 6-1: config 0 has an invalid interface number: 148 but max is 0 [ 1977.920515][ T5927] usb 6-1: config 0 has no interface number 0 [ 1977.927627][ T5927] usb 6-1: config 0 interface 148 has no altsetting 0 [ 1977.942904][ T5927] usb 6-1: New USB device found, idVendor=0459, idProduct=5053, bcdDevice=9b.91 [ 1977.963580][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.995408][ T5927] usb 6-1: Product: syz [ 1977.999593][ T5927] usb 6-1: Manufacturer: syz [ 1978.079042][ T5927] usb 6-1: SerialNumber: syz [ 1978.216135][ T5927] usb 6-1: config 0 descriptor?? [ 1978.257062][T27351] loop7: detected capacity change from 0 to 8 [ 1978.800316][T27352] workqueue: Failed to create a rescuer kthread for wq "dio/overlay": -EINTR [ 1978.825768][ T5927] usb 6-1: USB disconnect, device number 103 [ 1979.950793][T27351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1979.977578][T27351] Buffer I/O error on dev loop7, logical block 0, async page read [ 1980.004684][T27351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1980.014280][T27351] Buffer I/O error on dev loop7, logical block 0, async page read [ 1980.022414][T27351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1980.075453][T27351] Buffer I/O error on dev loop7, logical block 0, async page read [ 1980.093452][T27351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1980.104142][T27351] Buffer I/O error on dev loop7, logical block 0, async page read [ 1980.117499][T27351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1980.146352][T27361] fuse: Unknown parameter '0x0000000000000004' [ 1980.152132][T27351] Buffer I/O error on dev loop7, logical block 0, async page read [ 1980.182268][T27351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1980.218091][T27351] Buffer I/O error on dev loop7, logical block 0, async page read [ 1980.246884][T27351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1980.284706][T27351] Buffer I/O error on dev loop7, logical block 0, async page read [ 1980.308344][T27351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1980.330449][T27351] Buffer I/O error on dev loop7, logical block 0, async page read [ 1980.345086][T27351] ldm_validate_partition_table(): Disk read failed. [ 1980.370669][T27369] qnx4: no qnx4 filesystem (no root dir). [ 1980.378600][T27351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1980.411090][T27351] Buffer I/O error on dev loop7, logical block 0, async page read [ 1980.436886][T27351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1980.506550][T27351] Buffer I/O error on dev loop7, logical block 0, async page read [ 1980.515520][T27351] Dev loop7: unable to read RDB block 0 [ 1980.540315][T27351] loop7: unable to read partition table [ 1980.551043][T27351] loop7: partition table beyond EOD, truncated [ 1980.570131][T27351] loop_reread_partitions: partition scan of loop7 ( Cj̖P=ý?}X) failed (rc=-5) [ 1980.825774][ T30] audit: type=1400 audit(1771282295.091:2092): avc: denied { accept } for pid=27381 comm="syz.4.5574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1981.328177][T27398] random: crng reseeded on system resumption [ 1981.954251][T27403] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5589'. [ 1982.018005][ T30] audit: type=1400 audit(1771282296.319:2093): avc: denied { append } for pid=27400 comm="syz.0.5589" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1982.532226][ T30] audit: type=1400 audit(1771282296.319:2094): avc: denied { ioctl } for pid=27400 comm="syz.0.5589" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1982.577521][T26968] IPVS: starting estimator thread 0... [ 1982.668793][T27416] IPVS: using max 42 ests per chain, 100800 per kthread [ 1982.692372][T27419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1982.716678][T27419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1982.830863][T20724] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1983.398321][T20724] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1983.408215][T20724] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.452590][T20724] usb 5-1: config 0 has no interface number 0 [ 1983.462027][T20724] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1983.476246][T20724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.507435][T20724] usb 5-1: Product: syz [ 1983.518233][T20724] usb 5-1: Manufacturer: syz [ 1983.535648][T20724] usb 5-1: SerialNumber: syz [ 1983.975867][T27429] FAULT_INJECTION: forcing a failure. [ 1983.975867][T27429] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.989079][T27429] CPU: 0 UID: 0 PID: 27429 Comm: syz.6.5595 Tainted: G L syzkaller #0 PREEMPT(full) [ 1983.989109][T27429] Tainted: [L]=SOFTLOCKUP [ 1983.989115][T27429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1983.989125][T27429] Call Trace: [ 1983.989131][T27429] [ 1983.989138][T27429] dump_stack_lvl+0x100/0x190 [ 1983.989172][T27429] should_fail_ex.cold+0x5/0xa [ 1983.989196][T27429] should_failslab+0xc2/0x120 [ 1983.989222][T27429] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1983.989245][T27429] ? __alloc_skb+0x140/0x710 [ 1983.989268][T27429] __alloc_skb+0x140/0x710 [ 1983.989285][T27429] ? __alloc_skb+0x5b7/0x710 [ 1983.989302][T27429] ? __pfx___alloc_skb+0x10/0x10 [ 1983.989326][T27429] alloc_skb_with_frags+0xe0/0x810 [ 1983.989347][T27429] ? __might_fault+0xc5/0x140 [ 1983.989365][T27429] ? __might_fault+0xc5/0x140 [ 1983.989387][T27429] sock_alloc_send_pskb+0x801/0x980 [ 1983.989405][T27429] ? _copy_from_iter+0x270/0x1690 [ 1983.989429][T27429] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1983.989446][T27429] ? mark_held_locks+0x40/0x70 [ 1983.989472][T27429] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1983.989493][T27429] ? lockdep_hardirqs_on+0x78/0x100 [ 1983.989518][T27429] ? reacquire_held_locks+0xce/0x1e0 [ 1983.989547][T27429] bt_skb_sendmsg.constprop.0+0xbd/0x600 [ 1983.989573][T27429] ? __pfx_bt_skb_sendmsg.constprop.0+0x10/0x10 [ 1983.989595][T27429] ? rfcomm_sock_sendmsg+0x1bd/0x4f0 [ 1983.989616][T27429] ? rfcomm_sock_sendmsg+0x1bd/0x4f0 [ 1983.989638][T27429] ? __local_bh_enable_ip+0x9e/0x120 [ 1983.989665][T27429] rfcomm_sock_sendmsg+0x3da/0x4f0 [ 1983.989690][T27429] ____sys_sendmsg+0xa54/0xc30 [ 1983.989717][T27429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1983.989744][T27429] ? kvm_sched_clock_read+0x11/0x20 [ 1983.989763][T27429] ? sched_clock+0x38/0x60 [ 1983.989789][T27429] ? sched_clock_cpu+0x6c/0x570 [ 1983.989817][T27429] ___sys_sendmsg+0x190/0x1e0 [ 1983.989844][T27429] ? __pfx____sys_sendmsg+0x10/0x10 [ 1983.989870][T27429] ? __schedule+0x2fa6/0x60e0 [ 1983.989917][T27429] __sys_sendmsg+0x170/0x220 [ 1983.989940][T27429] ? __pfx___sys_sendmsg+0x10/0x10 [ 1983.989977][T27429] do_syscall_64+0x106/0xf80 [ 1983.989997][T27429] ? clear_bhb_loop+0x40/0x90 [ 1983.990019][T27429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.990037][T27429] RIP: 0033:0x7f513bb9bf79 [ 1983.990052][T27429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1983.990068][T27429] RSP: 002b:00007f513c9e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1983.990085][T27429] RAX: ffffffffffffffda RBX: 00007f513be16090 RCX: 00007f513bb9bf79 [ 1983.990101][T27429] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 1983.990112][T27429] RBP: 00007f513c9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1983.990122][T27429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1983.990132][T27429] R13: 00007f513be16128 R14: 00007f513be16090 R15: 00007ffc17bfe2d8 [ 1983.990157][T27429] [ 1984.816531][T20724] usb 5-1: config 0 descriptor?? [ 1984.825865][T20724] ims_pcu 5-1:0.41: Missing CDC union descriptor [ 1984.832547][T20724] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 1986.030629][T20724] usb 5-1: USB disconnect, device number 12 [ 1988.101866][T27447] bridge0: port 1(vlan2) entered blocking state [ 1988.122104][T27447] bridge0: port 1(vlan2) entered disabled state [ 1988.162206][T27447] vlan2: entered allmulticast mode [ 1988.231917][T27447] vlan2: left allmulticast mode [ 1989.304152][T27471] fuse: Unknown parameter '0x0000000000000004' [ 1990.488823][ T5964] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1990.669486][ T5964] usb 7-1: Using ep0 maxpacket: 8 [ 1990.693154][ T5964] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1990.746186][ T5964] usb 7-1: config 179 has no interface number 0 [ 1990.810935][ T5964] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1990.923788][ T5964] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1991.064962][ T5964] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1991.180321][ T5964] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1991.287163][ T5964] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1991.401522][ T5964] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1991.428714][ T5964] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1991.456204][ T5964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1991.506977][ T5964] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input98 [ 1991.574043][ T5166] input input98: unable to receive magic message: -110 [ 1991.649930][T26932] input input98: unable to receive magic message: -32 [ 1991.668408][ T5166] input input98: unable to receive magic message: -32 [ 1991.716761][ T5166] input input98: unable to receive magic message: -32 [ 1991.730785][ T5166] input input98: unable to receive magic message: -32 [ 1992.267328][T27482] overlayfs: failed lookup in lower (newroot/188, name='file0', err=-40): overlapping layers [ 1992.298844][ T5879] usb 7-1: USB disconnect, device number 48 [ 1992.298905][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1992.576832][T27504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1992.585698][T27504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1992.784963][T27508] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5619'. [ 1994.127909][T26968] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1994.167992][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1994.308068][T26968] usb 5-1: Using ep0 maxpacket: 16 [ 1994.342740][T26968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1994.391304][T26968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1994.406667][T26968] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1994.417557][T26968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.520327][T26968] usb 5-1: config 0 descriptor?? [ 1994.816217][T27541] FAULT_INJECTION: forcing a failure. [ 1994.816217][T27541] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.829703][T27541] CPU: 0 UID: 0 PID: 27541 Comm: syz.5.5624 Tainted: G L syzkaller #0 PREEMPT(full) [ 1994.829730][T27541] Tainted: [L]=SOFTLOCKUP [ 1994.829737][T27541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1994.829747][T27541] Call Trace: [ 1994.829755][T27541] [ 1994.829763][T27541] dump_stack_lvl+0x100/0x190 [ 1994.829794][T27541] should_fail_ex.cold+0x5/0xa [ 1994.829819][T27541] should_failslab+0xc2/0x120 [ 1994.829844][T27541] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1994.829865][T27541] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 1994.829896][T27541] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 1994.829919][T27541] idr_get_free+0x52e/0xa00 [ 1994.829947][T27541] idr_alloc_u32+0x1ac/0x320 [ 1994.829971][T27541] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1994.829995][T27541] ? lock_acquire+0x5e/0x380 [ 1994.830027][T27541] idr_alloc_cyclic+0x10b/0x230 [ 1994.830049][T27541] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1994.830067][T27541] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1994.830094][T27541] bpf_link_prime+0x7b/0x4c0 [ 1994.830124][T27541] bpf_xdp_link_attach+0x27a/0x910 [ 1994.830148][T27541] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1994.830168][T27541] ? find_held_lock+0x2b/0x80 [ 1994.830189][T27541] ? __fget_files+0x215/0x3d0 [ 1994.830227][T27541] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1994.830255][T27541] __sys_bpf+0x3951/0x4b90 [ 1994.830276][T27541] ? __pfx___sys_bpf+0x10/0x10 [ 1994.830291][T27541] ? proc_fail_nth_write+0x9f/0x220 [ 1994.830310][T27541] ? find_held_lock+0x2b/0x80 [ 1994.830335][T27541] ? find_held_lock+0x2b/0x80 [ 1994.830355][T27541] ? ksys_write+0x190/0x250 [ 1994.830385][T27541] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1994.830407][T27541] ? __fget_files+0x215/0x3d0 [ 1994.830446][T27541] ? fput+0x79/0x100 [ 1994.830463][T27541] ? ksys_write+0x1ac/0x250 [ 1994.830484][T27541] ? __pfx_ksys_write+0x10/0x10 [ 1994.830513][T27541] __x64_sys_bpf+0x7b/0xc0 [ 1994.830530][T27541] ? lockdep_hardirqs_on+0x78/0x100 [ 1994.830551][T27541] do_syscall_64+0x106/0xf80 [ 1994.830572][T27541] ? clear_bhb_loop+0x40/0x90 [ 1994.830594][T27541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.830612][T27541] RIP: 0033:0x7ff2edd9bf79 [ 1994.830628][T27541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1994.830644][T27541] RSP: 002b:00007ff2ebfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1994.830662][T27541] RAX: ffffffffffffffda RBX: 00007ff2ee016180 RCX: 00007ff2edd9bf79 [ 1994.830673][T27541] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 1994.830684][T27541] RBP: 00007ff2ebfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1994.830694][T27541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1994.830704][T27541] R13: 00007ff2ee016218 R14: 00007ff2ee016180 R15: 00007ffe2a6ea658 [ 1994.830730][T27541] [ 1995.117959][T27539] binder: binder_mmap: 27533 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1997.367785][T27563] binder: binder_mmap: 27557 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1998.288452][ T6058] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1998.327077][T26968] usbhid 5-1:0.0: can't add hid device: -71 [ 1998.346139][T26968] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1998.355655][T27577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.455825][T26968] usb 5-1: USB disconnect, device number 13 [ 1998.515479][T27577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1999.089080][T26968] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1999.275061][ T30] audit: type=1400 audit(1771282314.420:2095): avc: denied { write } for pid=27588 comm="syz.5.5639" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1999.303475][T26968] usb 5-1: Using ep0 maxpacket: 16 [ 1999.317748][T26968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1999.365145][T26968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1999.415258][T26968] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1999.503371][T26968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.612376][T26968] usb 5-1: config 0 descriptor?? [ 2001.275770][T27620] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5643'. [ 2001.476530][ T30] audit: type=1400 audit(1771282316.772:2096): avc: denied { write } for pid=27621 comm="syz.6.5645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2001.572286][T27628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.583351][T27628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2002.508413][T26968] usbhid 5-1:0.0: can't add hid device: -71 [ 2002.514415][T26968] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2002.575472][T26968] usb 5-1: USB disconnect, device number 14 [ 2002.753016][T27637] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5651'. [ 2002.809740][T27637] netlink: 'syz.5.5651': attribute type 7 has an invalid length. [ 2002.890545][T27640] 9p: Bad value for 'wfdno' [ 2002.968216][T27637] netlink: 'syz.5.5651': attribute type 8 has an invalid length. [ 2002.994357][T27637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5651'. [ 2003.019821][T27637] bond0: entered promiscuous mode [ 2003.038674][T27637] bond_slave_0: entered promiscuous mode [ 2003.085179][T27637] bond_slave_1: entered promiscuous mode [ 2003.099430][T27637] batadv0: entered promiscuous mode [ 2003.224479][T27637] ip6gretap0: entered promiscuous mode [ 2003.294773][T27637] bond0: left promiscuous mode [ 2003.305861][T27637] bond_slave_0: left promiscuous mode [ 2004.432588][T27637] bond_slave_1: left promiscuous mode [ 2004.438147][T27637] batadv0: left promiscuous mode [ 2004.513433][T27637] ip6gretap0: left promiscuous mode [ 2004.845939][T16397] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 2005.546947][T16397] usb 7-1: Using ep0 maxpacket: 8 [ 2005.553497][T16397] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 2005.584488][T16397] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2005.643155][T16397] usb 7-1: config 0 has no interface number 0 [ 2005.649282][T16397] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2005.679900][T16397] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2005.725220][T16397] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2005.765984][T16397] usb 7-1: config 0 interface 52 has no altsetting 0 [ 2005.803275][T16397] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 2005.918279][T16397] usb 7-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 2005.943442][T16397] usb 7-1: Product: syz [ 2005.956727][T16397] usb 7-1: SerialNumber: syz [ 2006.391912][T26968] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 2006.392923][T16397] usb 7-1: config 0 descriptor?? [ 2006.472292][T27674] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5662'. [ 2006.568180][T26968] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 2006.584740][T26968] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 2006.599531][T26968] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2006.665083][T26968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.673062][T16397] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 2006.673274][T16397] synaptics_usb 7-1:0.52: probe with driver synaptics_usb failed with error -5 [ 2006.716173][T27672] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 2006.967051][T27653] : renamed from wg1 (while UP) [ 2007.111038][T27686] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.5665' sets config #0 [ 2007.658577][ T30] audit: type=1400 audit(1771282322.672:2097): avc: denied { getopt } for pid=27681 comm="syz.1.5665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2007.953001][T27690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.962816][T27690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.565896][T16397] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2008.689632][T16397] usb 6-1: device descriptor read/64, error -71 [ 2008.799734][T26968] usb 5-1: string descriptor 0 read error: -71 [ 2008.826618][T26968] hub 5-1:32.0: USB hub found [ 2008.847963][T26968] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 2008.918721][T16397] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2009.006002][T26968] usb 5-1: USB disconnect, device number 15 [ 2009.051664][T16397] usb 6-1: device descriptor read/64, error -71 [ 2009.166747][T16397] usb usb6-port1: attempt power cycle [ 2009.301518][ T5879] usb 7-1: USB disconnect, device number 49 [ 2009.336892][T27738] fuse: Unknown parameter 'fd0x0000000000000004' [ 2009.525433][T27742] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.5673'. [ 2009.558874][T27742] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2009.567434][T16397] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 2009.594915][T16397] usb 6-1: device descriptor read/8, error -71 [ 2009.870269][T16397] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2009.900169][T16397] usb 6-1: device descriptor read/8, error -71 [ 2011.208482][T27753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2011.222835][T16397] usb usb6-port1: unable to enumerate USB device [ 2011.232457][ T30] audit: type=1400 audit(1771282326.515:2098): avc: denied { create } for pid=27752 comm="syz.0.5675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2011.288495][ T30] audit: type=1400 audit(1771282326.525:2099): avc: denied { sys_admin } for pid=27752 comm="syz.0.5675" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2011.402804][T27761] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2011.445245][T27768] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5677'. [ 2017.034335][ T5181] udevd[5181]: worker [26982] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 2052.685494][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2106.326733][ T31] INFO: task kworker/1:5:13629 blocked for more than 143 seconds. [ 2106.334556][ T31] Tainted: G L syzkaller #0 [ 2106.342284][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2106.351023][ T31] task:kworker/1:5 state:D stack:21512 pid:13629 tgid:13629 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 2106.363232][ T31] Workqueue: usb_hub_wq hub_event [ 2106.368299][ T31] Call Trace: [ 2106.371570][ T31] [ 2106.374574][ T31] __schedule+0xfee/0x60e0 [ 2106.378992][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2106.384015][ T31] ? __pfx___schedule+0x10/0x10 [ 2106.388861][ T31] ? find_held_lock+0x2b/0x80 [ 2106.394229][ T31] ? schedule+0x2bf/0x390 [ 2106.398545][ T31] schedule+0xdd/0x390 [ 2106.402842][ T31] schedule_timeout+0x1b2/0x280 [ 2106.407685][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2106.413197][ T31] ? mark_held_locks+0x40/0x70 [ 2106.417959][ T31] __wait_for_common+0x2e7/0x4c0 [ 2106.422908][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2106.428268][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 2106.433735][ T31] ? __pfx_device_del+0x10/0x10 [ 2106.438581][ T31] ? kobject_put+0xb9/0x640 [ 2106.443105][ T31] i2c_del_adapter+0x62d/0x820 [ 2106.447866][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 2106.453106][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 2106.458393][ T31] ? em28xx_unregister_media_device+0xa2/0xe0 [ 2106.464639][ T31] ? kfree+0x1f6/0x6b0 [ 2106.468705][ T31] ? media_device_unregister+0x446/0x610 [ 2106.474335][ T31] em28xx_i2c_unregister+0x47/0x70 [ 2106.479757][ T31] em28xx_release_resources+0xe0/0x1b0 [ 2106.485223][ T31] em28xx_usb_disconnect.cold+0x17d/0x253 [ 2106.491001][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 2106.496199][ T31] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 2106.501763][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2106.507540][ T31] device_remove+0x12a/0x180 [ 2106.512125][ T31] device_release_driver_internal+0x42e/0x600 [ 2106.518202][ T31] bus_remove_device+0x22f/0x440 [ 2106.523134][ T31] device_del+0x376/0x9b0 [ 2106.527510][ T31] ? __pfx_device_del+0x10/0x10 [ 2106.532355][ T31] ? kobject_put+0xb9/0x640 [ 2106.536886][ T31] usb_disable_device+0x367/0x810 [ 2106.541906][ T31] usb_disconnect+0x2e2/0x9a0 [ 2106.546623][ T31] hub_event+0x1d0c/0x4af0 [ 2106.551046][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2106.556004][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 2106.561191][ T31] ? __pfx_hub_event+0x10/0x10 [ 2106.566156][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 2106.571773][ T31] ? rcu_is_watching+0x12/0xc0 [ 2106.576552][ T31] process_one_work+0x9d7/0x1920 [ 2106.581484][ T31] ? __pfx_process_one_work+0x10/0x10 [ 2106.586877][ T31] ? __pfx_hub_event+0x10/0x10 [ 2106.591635][ T31] worker_thread+0x5da/0xe40 [ 2106.596256][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2106.601359][ T31] ? kthread+0x13a/0x450 [ 2106.605655][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2106.610758][ T31] kthread+0x370/0x450 [ 2106.614853][ T31] ? __pfx_kthread+0x10/0x10 [ 2106.619433][ T31] ret_from_fork+0x754/0xd80 [ 2106.624044][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2106.629143][ T31] ? __switch_to+0x7b4/0x1120 [ 2106.633815][ T31] ? __pfx_kthread+0x10/0x10 [ 2106.638394][ T31] ret_from_fork_asm+0x1a/0x30 [ 2106.643231][ T31] [ 2106.646306][ T31] [ 2106.646306][ T31] Showing all locks held in the system: [ 2106.654047][ T31] 1 lock held by khungtaskd/31: [ 2106.658880][ T31] #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2106.668755][ T31] 2 locks held by getty/5579: [ 2106.673415][ T31] #0: ffff8880343600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2106.683512][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 2106.693655][ T31] 6 locks held by kworker/1:5/13629: [ 2106.698929][ T31] #0: ffff888022699548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 2106.710467][ T31] #1: ffffc90003867d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 2106.721799][ T31] #2: ffff88802b0d6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 2106.731129][ T31] #3: ffff88802b1ca198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 2106.740435][ T31] #4: ffff88805e2a7160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 2106.750998][ T31] #5: ffff88803283dba8 (&dev->lock#6){+.+.}-{4:4}, at: em28xx_release_resources+0x71/0x1b0 [ 2106.761183][ T31] 4 locks held by udevd/26982: [ 2106.765952][ T31] #0: ffff88808a590d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 2106.774830][ T31] #1: ffff88804d114088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 2106.784482][ T31] #2: ffff88809ace40f8 (kn->active#28){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 2106.794039][ T31] #3: ffff88802b1ca198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 2106.803367][ T31] [ 2106.805677][ T31] ============================================= [ 2106.805677][ T31] [ 2106.814230][ T31] NMI backtrace for cpu 1 [ 2106.814245][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2106.814270][ T31] Tainted: [L]=SOFTLOCKUP [ 2106.814276][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2106.814287][ T31] Call Trace: [ 2106.814293][ T31] [ 2106.814300][ T31] dump_stack_lvl+0x100/0x190 [ 2106.814330][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2106.814350][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2106.814385][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2106.814416][ T31] sys_info+0x141/0x190 [ 2106.814440][ T31] watchdog+0xd25/0x1050 [ 2106.814469][ T31] ? __pfx_watchdog+0x10/0x10 [ 2106.814492][ T31] ? __kthread_parkme+0x18c/0x230 [ 2106.814519][ T31] ? kthread+0x13a/0x450 [ 2106.814533][ T31] ? __pfx_watchdog+0x10/0x10 [ 2106.814553][ T31] kthread+0x370/0x450 [ 2106.814568][ T31] ? __pfx_kthread+0x10/0x10 [ 2106.814585][ T31] ret_from_fork+0x754/0xd80 [ 2106.814604][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2106.814623][ T31] ? __switch_to+0x7b4/0x1120 [ 2106.814643][ T31] ? __pfx_kthread+0x10/0x10 [ 2106.814660][ T31] ret_from_fork_asm+0x1a/0x30 [ 2106.814691][ T31] [ 2106.814698][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2106.939767][ C0] NMI backtrace for cpu 0 [ 2106.939783][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2106.939802][ C0] Tainted: [L]=SOFTLOCKUP [ 2106.939807][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2106.939815][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2106.939835][ C0] Code: 98 83 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 2c 1d 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2106.939848][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 2106.939860][ C0] RAX: 0000000007962b89 RBX: ffffffff8e4975c0 RCX: ffffffff8b8e5c75 [ 2106.939870][ C0] RDX: 0000000000000000 RSI: ffffffff8de6cf89 RDI: ffffffff8c1adf20 [ 2106.939879][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 2106.939887][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 2106.939896][ C0] R13: 0000000000000000 R14: ffffffff90d92f10 R15: 0000000000000000 [ 2106.939906][ C0] FS: 0000000000000000(0000) GS:ffff888124352000(0000) knlGS:0000000000000000 [ 2106.939920][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2106.939929][ C0] CR2: 00005650bbc6f168 CR3: 000000000e598000 CR4: 00000000003526f0 [ 2106.939938][ C0] Call Trace: [ 2106.939943][ C0] [ 2106.939948][ C0] default_idle+0x9/0x10 [ 2106.939965][ C0] default_idle_call+0x6c/0xb0 [ 2106.939981][ C0] do_idle+0x35b/0x4b0 [ 2106.939998][ C0] ? __pfx_do_idle+0x10/0x10 [ 2106.940016][ C0] cpu_startup_entry+0x4f/0x60 [ 2106.940031][ C0] rest_init+0x251/0x260 [ 2106.940049][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2106.940067][ C0] start_kernel+0x47f/0x480 [ 2106.940083][ C0] x86_64_start_reservations+0x24/0x30 [ 2106.940099][ C0] x86_64_start_kernel+0x12b/0x130 [ 2106.940114][ C0] common_startup_64+0x13e/0x148 [ 2106.940134][ C0] [ 2107.125816][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2107.132650][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2107.143301][ T31] Tainted: [L]=SOFTLOCKUP [ 2107.147599][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2107.157635][ T31] Call Trace: [ 2107.160893][ T31] [ 2107.163804][ T31] dump_stack_lvl+0x100/0x190 [ 2107.168473][ T31] vpanic+0x552/0x970 [ 2107.172436][ T31] ? __pfx_vpanic+0x10/0x10 [ 2107.176921][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2107.183063][ T31] panic+0xd1/0xe0 [ 2107.186762][ T31] ? __pfx_panic+0x10/0x10 [ 2107.191170][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2107.197310][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2107.203453][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2107.209593][ T31] ? watchdog.cold+0x198/0x1ca [ 2107.214339][ T31] ? watchdog+0xd35/0x1050 [ 2107.218743][ T31] watchdog.cold+0x1a9/0x1ca [ 2107.223317][ T31] ? __pfx_watchdog+0x10/0x10 [ 2107.227984][ T31] ? __kthread_parkme+0x18c/0x230 [ 2107.232994][ T31] ? kthread+0x13a/0x450 [ 2107.237213][ T31] ? __pfx_watchdog+0x10/0x10 [ 2107.241870][ T31] kthread+0x370/0x450 [ 2107.245915][ T31] ? __pfx_kthread+0x10/0x10 [ 2107.250484][ T31] ret_from_fork+0x754/0xd80 [ 2107.255052][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2107.260141][ T31] ? __switch_to+0x7b4/0x1120 [ 2107.264797][ T31] ? __pfx_kthread+0x10/0x10 [ 2107.269364][ T31] ret_from_fork_asm+0x1a/0x30 [ 2107.274128][ T31] [ 2107.277389][ T31] Kernel Offset: disabled [ 2107.281684][ T31] Rebooting in 86400 seconds..