last executing test programs: 4m11.975464969s ago: executing program 4 (id=1680): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prlimit64(0x0, 0xb, &(0x7f0000000200)={0x7, 0x40}, &(0x7f0000000240)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) capget(&(0x7f0000000440)={0x20071026}, &(0x7f0000000480)={0xe6, 0xe, 0x0, 0x68a3, 0x8, 0x3}) 4m8.436058121s ago: executing program 4 (id=1688): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r4, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r3, r7, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000), 0x4) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r11, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4088800) io_setup(0x239f, &(0x7f0000000380)=0x0) r13 = eventfd2(0x5, 0x1) io_submit(r12, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r13, &(0x7f0000000080)="e2", 0x1, 0x5, 0x0, 0x1, r13}]) socket$kcm(0x21, 0x2, 0xa) 4m5.245933329s ago: executing program 4 (id=1697): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) clock_adjtime(0x700, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0x0, 0x0, 0x2c43, 0xa00, 0xb000000, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0x0, 0x8000000000000000}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r2}, &(0x7f0000000080)=0x8) 4m4.195387262s ago: executing program 4 (id=1698): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xfffffffd, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 4m3.443043494s ago: executing program 4 (id=1703): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) socket(0x27, 0x80000, 0xfffffffc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r3, 0x4}, 0x8) getdents64(r0, &(0x7f0000002540)=""/4096, 0x1000) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="980200041f037b237e52ccb911d5a7fddbe716b48d69ee53134421508535f13bd26f48d29ac8bd2105d9e703c7ec4ec2f3009978670e658260392f2a0c76744d9b5dc962e486575ae92d916aab8bfb12de2913835c16d2e3205e8de06790a548a59727f4f59eae9a5c07a25b2364b46853ce0f6d56ad13465f40cb92b231f55727d8784b88c01ea9e723e50e64c8eb0c4587c9beaf0b674b819ac8c089539d96923da01515ddd986c709116365faeb9b2b9c1e9fb13e3b97fbddc36aed151334b19c207a9ba006dba0635faca17e70ea2d7f459a1862bc377827", @ANYBLOB="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"], 0x398}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000100)="ba0455111f1b8072fd972350948b312588a8", 0x12, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 4m2.343162543s ago: executing program 4 (id=1706): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x100) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000040)={'team_slave_0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m2.050308344s ago: executing program 32 (id=1706): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x100) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000040)={'team_slave_0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m47.178573817s ago: executing program 0 (id=1741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000029000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b700000000000000950000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="9c2dc1140d93ef5f17d64c95d5fcb455b3c721e52fbb4cb53403ef4679a59b169e32f662db9ada3fe878c52999d7d45553858b52bbf22c4a1c4214497d24fb064fccd400c9f291323c170daa3c41ed71c9101aec85d175d223c6c52863f15e3121598d85c6e57a", 0x67}], 0x1, &(0x7f0000000880)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r5}}}], 0x28}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000002500)}}], 0x2, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@iv={0x90, 0x117, 0x2, 0x7b, "2aff84e950b563656b60d5bb6ab24f3f9679941122db790d4737b2334b8854943ce8952cd85f6d298833b1832560c092ce83a9f785d48fe34273b1841f9413cd12c2058e86fcb01f5ebbfe09cf7c7b124095259bb7bd90f7841cae359c2b19a581e5a43d8ea826328439999c7f5e0d197d43c4fadf66c714d9dc3e"}], 0x90}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d35039a0db14b28f934f10ba53d85e591db18684e050068d37a0e5f4fc6b21f743cff56e141d22ebbf8082f1a", 0x57) 3m45.496190028s ago: executing program 0 (id=1744): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x82) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5d, 0x98, 0x38, 0x20, 0xdd8, 0xd202, 0x382e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x5, [{{0x9, 0x4, 0xca, 0x0, 0x0, 0x98, 0x1, 0x24}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000030000000000000000"], 0x50) socket(0x2, 0x80000, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8c2b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001540)=""/136) 3m42.219771814s ago: executing program 0 (id=1752): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250100"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) r3 = socket$inet6(0xa, 0x3, 0x3a) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) write$UHID_INPUT(r4, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) 3m40.33804075s ago: executing program 0 (id=1758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="5400000016e6a2110d1d3a00503b98c86dab6f0eb291d6745ca54e0b89ef53cd13c722e501f7ca868aa9735828c37b2220937ddbb4e8f8b46ec1aa517a6d19df2f1e0a8615d0a1c0dff8749ef34a47576e185545d29540f30d4b1b5fee97e0662a288b5224084a46ec7825440269a95ab15309b51876867cb7cc8d6ffb1c84b8445e1d8aec06853b2ea231b45c29b60e1a5df6aeb1396419b33b878837bfcbbb3bcd1314783e649f4b3720bbcee863b4c7fc5554ed58a65fdb69308634a54afbcf38675155b482f902fd169a1f1bf2b9910e53eea385a8367ddfee48aa33dd441a61133ebffdf0dba6e09a32a5d9ceb80860206d5dda", @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000002800038024000380200001801100020073636865645f737769746368000000000800010006000000"], 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4044040}, 0x40090) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000001340)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xc, 0x323b, 0x4}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0xffffffff, 0x12d5c, 0x1294b}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) bind$bt_hci(r9, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000140)="05000000010000", 0x7) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) 3m39.823224398s ago: executing program 0 (id=1761): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x82) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5d, 0x98, 0x38, 0x20, 0xdd8, 0xd202, 0x382e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x5, [{{0x9, 0x4, 0xca, 0x0, 0x0, 0x98, 0x1, 0x24}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000030000000000000000"], 0x50) socket(0x2, 0x80000, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8c2b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001540)=""/136) 3m38.770343596s ago: executing program 0 (id=1765): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid}]}}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r4 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) write$bt_hci(r5, &(0x7f0000000780)=ANY=[], 0x8) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) vmsplice(r9, &(0x7f00000004c0)=[{&(0x7f0000000300)='(', 0x1}], 0x1, 0x1) syz_usb_control_io(r4, 0x0, 0x0) 3m24.281004312s ago: executing program 33 (id=1765): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid}]}}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r4 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) write$bt_hci(r5, &(0x7f0000000780)=ANY=[], 0x8) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) vmsplice(r9, &(0x7f00000004c0)=[{&(0x7f0000000300)='(', 0x1}], 0x1, 0x1) syz_usb_control_io(r4, 0x0, 0x0) 2m51.989844537s ago: executing program 3 (id=1921): syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00'], 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, 0x0, 0x20005004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x20000080) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x5, 0xa0300f10, 0x9, 0x8, 0x8, 0xd9, 0x0, 0x0, 0x10, 0xf}}, 0x50) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000100039815fa2c1ec28656aaa79bb94946fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x190) 2m51.230422183s ago: executing program 3 (id=1923): socket$tipc(0x1e, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_pts(r0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil}) r5 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$802154_raw(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000200)={&(0x7f0000000140)="2b69439f4d447a651cb5c3a41f4555b7f5b8cbe71a50da47465106005cc96fb26e62f48106aad38a9671719d68dea0838d5c5d9316ec1d3543555b5bf742e10c1a0edcf9e09502fe55c63298072669d5e59c5f1014d05cf68c3a9c6d82dd55d257b348af6c1b795d346dbd3950f25cde5e2c43bbae580d2f902725b94006535a3c68ed3050a2271854f46535d242f9b927510674d6ab0ca57667370ed4c08fcd4ccf95d414d0eaf459e9317bfe6e75ba1f1c3107b04aba33d69559b171", 0xbd}, 0x1, 0x0, 0x0, 0x4045}, 0x20000010) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 2m47.41776171s ago: executing program 3 (id=1934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xf3, @empty, 0x9}, 0xfffffffffffffea1) shmget(0x1, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe2$9p(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000000000016, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040002, 0x8, 0x1fb}}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x591f) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) 2m46.993478825s ago: executing program 3 (id=1936): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newtaction={0x64, 0x31, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x0, 0xffffffff}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) 2m46.695097167s ago: executing program 3 (id=1938): socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000004c0)=0x9c35) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x10000, 0x1, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) (fail_nth: 3) 2m46.63776075s ago: executing program 3 (id=1940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000008085000000820000008500000005000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r5, &(0x7f00000000c0)=0x58, 0x5) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180), &(0x7f0000000280)=0x4) semop(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000240)=0x8) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2m32.155760701s ago: executing program 34 (id=1940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000008085000000820000008500000005000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r5, &(0x7f00000000c0)=0x58, 0x5) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180), &(0x7f0000000280)=0x4) semop(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000240)=0x8) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 13.362979147s ago: executing program 2 (id=2431): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prlimit64(0x0, 0xb, &(0x7f0000000200)={0x7, 0x40}, &(0x7f0000000240)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 11.087329804s ago: executing program 6 (id=2436): socket(0x10, 0x803, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, 0x0, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 10.79820228s ago: executing program 2 (id=2438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, r4, 0x209, 0x70bd25, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}}, 0x106) 10.035546783s ago: executing program 6 (id=2442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@default, @netrom, @rose, @rose, @remote, @null, @bcast]}, &(0x7f0000000140)=0x48) getsockname$netrom(r2, &(0x7f0000000300)={{0x3, @netrom}, [@default, @null, @bcast, @netrom, @default, @null, @null]}, &(0x7f0000000280)=0x48) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x969, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @private=0xa010100}}, 0x3, 0x12, 0x0, 0x7, 0x81}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd_index=0x4, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9.590884921s ago: executing program 1 (id=2443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) lsm_get_self_attr(0x66, &(0x7f0000001280)={0x0, 0x0, 0x3d, 0x1d, ""/29}, &(0x7f00000012c0)=0x3d, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.421893736s ago: executing program 7 (id=2444): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) tgkill(0x0, r0, 0x27) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_init(0x200, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r4, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x95c5}, @in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x400000, 0x0) ioctl$RTC_IRQP_READ(r7, 0x40187013, &(0x7f0000000680)) pipe2$9p(0x0, 0x84880) openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000100)='./file0/file0\x00', 0x172) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8.588172671s ago: executing program 5 (id=2445): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x10000000) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200080, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x84200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 8.476798947s ago: executing program 7 (id=2446): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ff}, 0x0) 8.067048814s ago: executing program 5 (id=2447): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r1, 0x0, 0xffffffffffffffb1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) 8.066465402s ago: executing program 1 (id=2448): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x141}, 0x0, &(0x7f0000000380)) socket$inet6_udp(0xa, 0x2, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0xcc}, 0x1, 0x0, 0x0, 0x20008400}, 0x40010) r5 = io_uring_setup(0x1a80, &(0x7f0000000180)={0x0, 0xf76f, 0x10, 0x1, 0x154}) r6 = socket(0x2b, 0x1, 0x1) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, 0x0, 0x10005) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) close_range(r5, r6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setns(r3, 0x24020000) 8.000769792s ago: executing program 5 (id=2449): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prlimit64(0x0, 0xb, &(0x7f0000000200)={0x7, 0x40}, &(0x7f0000000240)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 7.972903252s ago: executing program 7 (id=2450): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0xd, 0x7, "f0f1f7ba8492a2"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4001) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0xf0ffff, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) listen(r3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCFLSH(r4, 0x540b, 0x1) 7.494569321s ago: executing program 2 (id=2451): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004740)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b", @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c000000070000000500000000000006040000000040000000610000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0xb1c, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="32032b8943bf95e2bd3b4a0b23d7039f12df0f378772179ff881b64b7dd3255f5a2abcd79930216d95d3"]}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 7.373337382s ago: executing program 6 (id=2452): socket(0x10, 0x803, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 5.373847393s ago: executing program 5 (id=2453): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmtde=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setreuid(0xee01, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x5420, &(0x7f0000000400)) sendmsg$FOU_CMD_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2100dc818c35"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4008080) socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000000fc3731ab6b8bd8ce6cda641b9b29b9c036a1bf32695c5ddf06d947156f1b44ba3c139dbbde547d9af3b9e4c3d2f05d26a6f978addbd23f240cc1cac2b87a51ddd4c5119bfbea93ae9bc8495f315145ca846956d6ef70430715f2e06fcd0d51e6b1624d946aa873904852ecd89d2560f26047336db914830007f1b31be02e202286765a48c04a748aad7f4c103994324f1109acb4096e1b8e3c6", @ANYRES16=r10, @ANYRESHEX=r7, @ANYRES32=r9, @ANYBLOB="10005e80040001000800020000000000"], 0x2c}}, 0x0) 5.236913004s ago: executing program 1 (id=2454): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prlimit64(0x0, 0xb, &(0x7f0000000200)={0x7, 0x40}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) capget(&(0x7f0000000440)={0x20071026}, &(0x7f0000000480)={0xe6, 0xe, 0x0, 0x68a3, 0x8, 0x3}) 5.085787976s ago: executing program 6 (id=2455): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0) 3.874166138s ago: executing program 5 (id=2456): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x19, &(0x7f0000000040)="b7d8ea02382c256b4f2c210300000000000000769c281ea407") 3.735498764s ago: executing program 2 (id=2457): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0x3, &(0x7f0000000040)={0xc, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x12) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x5) finit_module(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r3 = socket(0x10, 0x1, 0x1) getsockopt$SO_COOKIE(r3, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_buf(r6, 0x1, 0x4a, 0x0, &(0x7f0000000080)) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_team\x00', {}, 0x4}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) 3.030386515s ago: executing program 6 (id=2458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) lsm_get_self_attr(0x66, &(0x7f0000001280)={0x0, 0x0, 0x3d, 0x1d, ""/29}, &(0x7f00000012c0)=0x3d, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.03000176s ago: executing program 7 (id=2459): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100a0}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x10001}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010b80)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00003df000/0x4000)=nil, 0x4000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x7, 0x0, 0x2, 0x3}) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) 2.443905293s ago: executing program 7 (id=2460): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r1, 0xb5d6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.428510568s ago: executing program 1 (id=2461): r0 = socket(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'pim6reg0\x00', @ifru_names='syz_tun\x00'}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x1, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, 0x0, 0x20000000) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000040)=@ethtool_ts_info}) 2.076329945s ago: executing program 2 (id=2462): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x6, 0x5}}}}}]}}]}}, 0x0) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) syz_io_uring_setup(0x66c, &(0x7f0000000040)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000180)) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r4 = dup2(r2, r3) close_range(r4, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000200), 0x1) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0xff7f, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5}, 0x0}, 0x0) 1.922747368s ago: executing program 2 (id=2463): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000029000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="9c2dc1140d93ef5f17d64c95d5fcb455b3c721e52fbb4cb53403ef4679a59b169e32f662db9ada3fe878c52999d7d45553858b52bbf22c4a1c4214497d24fb064fccd400c9f291323c170daa3c41ed71c9101aec85d175d223c6c52863f15e3121598d85c6e57a", 0x67}], 0x1, &(0x7f0000000880)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}], 0x28}}, {{&(0x7f00000008c0)={0xa, 0x4e20, 0x9, @private2, 0x8}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000b40)="b45edbbeb4d072815d189a9ef4404e978cc7ef82b52c779a43a8b28b1c34b539072160e1e2b690fa3bec240bc5b720b52f742a8093935c1d851840bab4d6f37d07af2589a794d0451af5d97b71b3e695a3b97467e8d5ea5a5484a5887d31e5d434bcec9b963bf6ec72f15b0777655fbf751f27033558f5f7ad4256cb9fd9796a82e51b86d7c0854f89290aca1c61b7db3a6d059080942d1aafbfed1a81a8f803d3b3f78dbb9e6d9bfdd233521b8cd517c0dc3b0aab8d1479bd47423874400430a4c70aa35064657d9c068b4cacff1098d36d0e0901b057a9d0da027c43065f464f560c25de9f66ba1de75d4a0421cd704fd99037", 0xf4}, {&(0x7f0000000900)="17b2a15c0f5a4d25f5b7d86b372ee02c239170e1682cccf460c6ba9fce37006c4cc7fd4c34c63be5354e688e6e18f473130cc4ef8538de944a86d41e149f391ae3ae97fb4f59278c5daf48f733bc875233efb624ca0c149e04ba68ae48", 0x5d}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000000980)="90015dd143eff5f6027c36dc8dcc9f9572f92521c878c4bd2c55a386696feffb9a354a68e2a872c819e4", 0x2a}, {&(0x7f0000000a40)="d9e3f463bcb793e60aa641209de4f077b6a1fbb578e091136ff0761b64a282556884f2a39e402d235d", 0x29}, {&(0x7f0000000c40)="b8b67ec37c95e6c4b8cba51a5bc972ce83c26dc67d34c39b7b233e5acb1e4d71471717594e8153a89d1e514c501eceb64aaebd48a6c9d6c9c5e3f63a12333dbb1eeb0bb85b17adce99c347f8a3a3b7adf551c99391f7465494193403c768940f66efc31dce13db2da5b1f807ecf611010657062655491ffcc5178eb81c020ce5b176ebb96f4dac4fa89d1f439b6047836d2159d84611bd2521105ab18b1b7d5448096d9916dc229e05c5ed14d15ff9f79e0e25475cd2959a47f53548c8e7a8f782900221b258c72281a9b82e36cc7d5bf874afa96429e307f227006344e6ebb373ff8add1ed5d5935675c867", 0xec}, {&(0x7f0000000a80)="1bacd02bfe43d4634a43c978eb63d8d3e3cb6b1dcef931704d731977856fe7b87db3021c3cfb12f49f69868da34625d75d8c1a6fa9c322bc82c4c3aadd6b28146362e601c7f59df36330ff5781c7f8e27ea49f5f2a35fc37b13e3b2063d5917082", 0x61}, {&(0x7f0000000d40)="74080fb3a63fed83c2b689281bb5530310a433b3b61d03d93c04d85e058f5de3e23ebcde0bb26e9d01f32c46efb829bebd13509cd1bbbecd9d1286f99ddf4eca7a7adc0c87724826e4a83492d538e54211b24822b01a8b9cc069b73ba365daddaad7e8b12e9ee2518d3d104146788483d05c6390cbd62a7fe8374d0768bf63ed9459c320dd3623992e77329e02646dff33124ef6d5153ca91af5b805954917940938401fccaf7d5d134eb368972a96fad9a66d6564a7150d67e15ada4f19a8f8e96e8fa46a7395e1ef4a2d140e20396b", 0xd0}, {&(0x7f0000000e40)="498cb885793957aab484ac49b148535eb769f0526c43c113c7713e14472027f5c8af279fd5f26c5f7eafed7e283862375a09eed46b72e408df8c2958acde221a804568ce", 0x44}, {&(0x7f0000000ec0)="5da45a5149a51da7b7316491657b2903baed1fc2e3919d75726486ea1962b5b1f9dfd14f421788eb07259128aba64bba40ca875fe287260178d309f89db7c94f8e6429fdc7a19328f7abbdb21657df97e93e844f11489e7eabd91a7b", 0x5c}], 0xa, &(0x7f0000002180)=[@rthdrdstopts={{0x100, 0x29, 0x37, {0x2b, 0x1c, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x1, [0x0]}, @generic={0xc1, 0xab, "e65adf25929c912e7248aa06a54fdd57ac3b07ad59dc5ed54f89525ddf1ccaab4135b125142bc418bcc8880c82d0e3cfb40ffe9e50ea35ad1c02c3b2bc97f5631f624bdcef01bf94c1e6c8f5827352a18ccc3a9635bcad769f4422dfb23ef5eef9207513ef69f2cf66686b322a549f336cfd8e3df2ff884f046487e4c74dccdda302ea92f2843ac8cd6eb5ac8b1e6eaccf57f4957b808482e602408831fda0a861be9c589ed615cf7141d1"}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0xa}, @enc_lim={0x4, 0x1, 0xf}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xa2ca}}, @dontfrag={{0x14, 0x29, 0x3e, 0x59}}, @hopopts_2292={{0x140, 0x29, 0x36, {0x2c, 0x24, '\x00', [@generic={0x5, 0xc9, "725c3bbe2ab64d1b14b002f522e3e11207a9269839ef8d8410a13a10692094eef065cff88e677f8da3823058ec701772287c61879398897d08e42acf3fb38f238b29203abb3c07ded7d9c5952256f211c0ccb1236e6213e849ad593c4a5acaed798104f61dabe513dbfa042b6522970cca51a12ea43e2ffa5a4d150d472a7df28c7c4df80ef230e2ab42248fd17a943c88ab27637e9d8ae9a8d0593cfc7a768c6c96e0cb29192777105b359f5e442194fc0c965996287c23ea9c39be751620fd00e9d6d79c21c33857"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x40, {0x3, 0xe, 0xe, 0x40, [0x9, 0x4, 0x1, 0x40, 0xa0e, 0x8, 0x3]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hopopts={{0xa8, 0x29, 0x36, {0x89, 0x12, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x9, 0x6, [0x9, 0x6, 0x5d25, 0x5, 0x8000000000000000, 0x0]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x10, 0x2, [0x7ff, 0x4a, 0x6, 0x1, 0x9f9a, 0x10000]}}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0xbb}]}}}], 0x330}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000001040)="15058587f95d4f6594db28b87762450952a122f7dd2cf26fb5bbe2046b25a931fba53d0ca270528b63a4d7b8f9f50505e73be3dafc9ea515be70451383f7b7ccbb2d2822955e28f72d678c46a44158eab36ea89123a787d34d597068de0d51e015549a33b83f6c6278c7bc629367510351badfd78dd9e08d2280449cb8d9e2dd0115168b88d05d1e03fd8fcf28a7bb48c171ebe483e402874096a0e5d8ec68c423e1580a1121a6558fbbf772b6e6adcf8e7a5d1b6e8adef52cf10337a69b45b09892bb68167ae4766283b6053b3078c14b088ff057547bb855af461f664db4221baab6e599b42502", 0xe8}], 0x1, &(0x7f0000002500)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @rthdr={{0x28, 0x29, 0x39, {0x21, 0x2, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00']}}}, @rthdr={{0x78, 0x29, 0x39, {0x2c, 0xc, 0x2, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}}, @rthdr={{0x78, 0x29, 0x39, {0x1d, 0xc, 0x0, 0x10, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, @local, @empty, @private1]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@pad1, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}], 0x188}}], 0x3, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@iv={0x90, 0x117, 0x2, 0x7b, "2aff84e950b563656b60d5bb6ab24f3f9679941122db790d4737b2334b8854943ce8952cd85f6d298833b1832560c092ce83a9f785d48fe34273b1841f9413cd12c2058e86fcb01f5ebbfe09cf7c7b124095259bb7bd90f7841cae359c2b19a581e5a43d8ea826328439999c7f5e0d197d43c4fadf66c714d9dc3e"}], 0x90}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d35039a0db14b28f934f10ba53d85e591db18684e050068d37a0e5f4fc6b21f743cff56e141d22ebbf8082f1a", 0x57) 1.795932833s ago: executing program 7 (id=2464): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000000c00)=""/4099, 0x1003}], 0x2}, 0x40002102) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ddf963", @ANYBLOB="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"]) sendmmsg$inet(r1, &(0x7f000000a040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000380)="ef", 0x1}], 0x1}}, {{&(0x7f0000000980)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000002140)="df", 0x1}], 0x1}}], 0x2, 0x40080) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f8a1e520cc1710107bd5010203010902240001000020000904"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x1ff, 0x200, 0x8, 0x4e, r5}, 0x10) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$hidraw(r6, &(0x7f00000000c0)="860e", 0xffda) 1.238373434s ago: executing program 6 (id=2465): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x141}, 0x0, &(0x7f0000000380)) socket$inet6_udp(0xa, 0x2, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0xcc}, 0x1, 0x0, 0x0, 0x20008400}, 0x40010) r5 = io_uring_setup(0x1a80, &(0x7f0000000180)={0x0, 0xf76f, 0x10, 0x1, 0x154}) r6 = socket(0x2b, 0x1, 0x1) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x10005) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) close_range(r5, r6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setns(r3, 0x24020000) 1.122097457s ago: executing program 1 (id=2466): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev}, &(0x7f0000000040)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) userfaultfd(0x80001) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x0, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) sendmmsg$inet6(r4, &(0x7f0000003ec0)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xfffffffa, @private2, 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="1ae3789188af3757ede37c65b3b0235922ad6f812059409577cb7edf026bccb6973d01994de85f76ff2ca811ce4867eb301948dcd20c374ea3bd405fb6c18ceec2d20d33585c4a335f738cfdc91582b342f1a7a4e31b6f4afed841d571f86431b1439d5835f336f936ef46a51a872d", 0x6f}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e21, 0x5, @private1, 0x3}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="0ae00fc1fe793a317e7cbd4836f4cdc2112a1d0c0e583f8dd1476775eec3024a0c352e10547c7f05c239e893411d7554883fe19b8ff1a54a70a069a7bbc05fa5dc443ff8e43e986131d13faee8e06f9cc692cd4fde40dcd8018d36f4ae47a499d45a1bba05c147611c8ba6cd145f90ef18563bcb6ced4e6e4018318dcf6fc2960c7b36ac464e368fc207e23e75412388b79c5c21", 0x94}, {&(0x7f0000000380)="22df3eed14c7a9f352b3cadb6a89895beab17907973d22476f50e2b1db74bbde61f6a36edf88ec5d2a99995188c91ec57a82b5bc40f8b511f82403af9072c419ceaa77957af4893dbb04eb0a16d4e37284a72f73aab35201086bb93a3ec7dd0fef36b8089cfa54ecd16e639060", 0x6d}], 0x2, &(0x7f0000000480)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}}, {{&(0x7f00000004c0)={0xa, 0x4e20, 0x7, @private1, 0x8}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000000500)="ac6e2f10e0907b2a04589dc673a51fb9b44f597ef261e6f16d756ad5571d5ed2f06a37aad3f9e5e9cf0195b98332840d94e9a6ee", 0x34}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="18b0bb9d56a0b683a25cd2de6bbb2981a569972fe7783fd740b1fe6652d345bc4d674f75fbd28bd66682aad43f2814001ee670841dfbb2c7e63e29f69bda4468e2c8a5365629de2af199d5cf1454857a95dca18706eccc6b31f03b410d0f0be1c15c6c80a9859511330f54677a5f1477256fbecaef6a231927b2d5ef4cb3bdac52648cb579f945160225ea02525e686fffab181854c37753a597005bb6a87c70f7dfd0a3502cc431f37e914d524127c8a128ef090a066fd16396c3a55f8cf2ce08c4a726e6992a", 0xc7}, {&(0x7f0000001640)="0a8f47eaf9589e426edac5f48b4245f16bac23334cdf053ffdbe00ed8c72fa08ca23c820029f1cf8da2336440379b473a29eafa0b89e2b92c6308c8e0f45a91134aa7c6926256e4803d340337bc50b222671ead39a8309aceadedb479fa5a9f0d98aa6fceaa07ccaa6c7d5bfd74d085fc31c5351a19e0da1d9c772db5a10b99f7ea7991b4faabd54cf6cc3edf3cea107328dd7da6bc9119541a43f96093ed33112fa21", 0xa3}, {&(0x7f0000001700)="d41e01e1ad37541dbe381ccfd171e41fd70d2596fd30e2aa8a7e93f945398425078d312edd169f9d618073e3a832d89a54126e85d684cac54ed205792b131848a30a480e3fbfb2530ef1ce1c5645624c451606f2c7e02e208947709f2cec6cb24a80aaf4504cdb2b18f9c592b9c173260b35c3f21fb5af1aa51ed44726d225dcbfe4bfddefd09b4c", 0x88}], 0x5}}, {{&(0x7f0000001840)={0xa, 0x4e23, 0x5, @loopback, 0x9}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000001880)="07bf60caa0312583a7930f6fc89249dd9abfae112e92fd3dfee001b9ff7e9513a47506b94ed4529429064d408c9a59721e0cc63e0633ceec6238e7f8d9549bd1b5af5bf076479492853f40a55eb950e2675b78f1250c7a70962a74e69d48005b1133a8c4291d7f6e49f0d29765cd67612aef2493fcb3380ebaa0690d5cf7e671030548924291aff8c8e9b4742fd48aa267edacc38857bb409036374f87382eac6d76f59a7572a3effcb58a13128837f5d9a4108af193d4d0e5636358497b6abd88bc03", 0xc3}, {&(0x7f0000001980)="ebfa55d35e37bc53ea98bf17d63623ee9662dd5002fb18f1213073d2234e18b5960854b1a5798befa2431dbb9087100ab3018fcae808d19171233cf173d369d3417d043bfc1d4db22372cccc6787b13a5b2e384b9e9fb6b38ca27bdd2e", 0x5d}], 0x2, &(0x7f0000001a40)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x1, 0xe, 0x1, 0xb8, 0x0, [@dev={0xfe, 0x80, '\x00', 0xc}, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1, @dev={0xfe, 0x80, '\x00', 0x2a}, @mcast2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xff}}], 0xa0}}, {{&(0x7f0000001b00)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000001b40)="638560ae99847fa4df0f051eecbfb167675b0e4a23345fbbbd19", 0x1a}], 0x1, &(0x7f0000001bc0)=[@hopopts={{0x20, 0x29, 0x36, {0x67, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}}}], 0x20}}, {{&(0x7f0000001c00)={0xa, 0x4e24, 0xfff, @remote, 0x5}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000001c40)="96e19add263f9585d467587cf6d80f9f4c490413398d33c45dc4e6a44ac9bb848540a9259c805b5727b61ea49f08eae727049ec6d0bc07108098045e16f4bd6952f7659b490261074cab9c4a3a1fd6bc4d765cd8fd158746311030587726b2aeb1a120a88cd338e4a0c493d3af59a733fda350b48ad7ad1b4ab021bb6347657c5776b3bb21ecdc8119c401b64c3d14f95c1216bea3", 0x95}, {&(0x7f0000001d00)="4b053c7d6ca67a3500c28ede2f96861f7d725164658587f96b786c5bf204e62b657955f697d4d614a4349d1f37a8edbefd133cdafc7f4e33da95555699b071fff20dc6155e2d8b90d8ade32502e5e1b5567e070c28bcb62a67c7e1b7587ac4d295c52e529d198faeef8ba1a570", 0x6d}, {&(0x7f0000001d80)="f92cdb2a102c638fdd28242b8d1e087e3949962d07993ffd4c10d15ccf7a1e6afbad4b1fd2f736327a1fb51cc88c7c11e23ac9a6db95e18ef7b1f6329ba0a26a74d8e180c9d47c7a6d32edc286445734658368f034d3deed93839a4a6e60f2d7492d28217aa89a84d200b9d53e9527ea8a1a4f8376f37663c384b35a688c6677035381b32c878357f02be087fc9ff0177e36", 0x92}, {&(0x7f0000001e40)="bf09e061e4c3501ad1c0490bebbcf0090e2157638999b1fc6f19756c2b4e842fda9e6b6c3132a8bdb79418fcd78102929063edfb8ea9e9568049c39982bbb6e7367c96a9671259ad73ec0873dd308ff4d47f3cef24df3cad416299073b4e78eeac217447ee6752747d93fe9bf103900aa5f78445dbf55c30f64ebdf57f8c89c394ab076fed2e42174dd06fe59557e1503cf9fbba659746a75a5bb6d3bfd4adc4c9b539ea14f8c197aa4faada6770810b9a60d934e9e91f1a8d30c1e9a7039ce05369135b070f13021cc92c9bbe005fc943722a369897d4d8a2", 0xd9}, {&(0x7f0000001f40)="30d173ea362d1fc47c2655559aec4ea1a8bfee8b60da9d67624b83176f9ce71007b298a8eaf0d54f55c62a895da63cc31b804dd3af7c5657bdbcc065a118f2593c433317bcbcd3f8833125843553ba3afffffeded70d9b0fbde5bc806bd2dec81e92e549f70dbb64ae49cad5330262889a3808f3fc30d9a8bf25b5e1abe0380eb05a9c356e0a7ffe7d020fd33361df0b589fb4fd75a58decb44a59", 0x9b}, {&(0x7f0000002000)="f878f1e79b65e0ba9bb9e2fb2d041eb54bd03259880912c8869dc444c7f3894cc27cacaab60edcccd1a89d8b992c8810b134dacbfc6a7af41c00cccb513c5c7ce46f08ba0d9a9b494f65d58e5957bd202aedc5d113c843e3473c80329d320a9a027632eb07f80841bf3a08f4664ef60c20fde750a36a2168a83f7a98eee1d2accf896b4f9a846defd14f5e94e724b9d910c0f1877b6d25655d073c184c6ee1910cbf2c0bb420b19d10", 0xa9}, {&(0x7f00000020c0)="2b215779621f82", 0x7}, {&(0x7f0000002100)="b1418fd4b1596fbaac20ded4898375f1543bd120c3184d48e7e2d63149d2bf6ccd4ffde644354569c54b80999b4e12c7fcdc91bd6b0f3f87a2f4ec23caa064ab57c66d08972ffe7eeda9cd0a5adccf8e9ce111be1e5c0711eb72a5d0faf4792bc9ceb52a62cb51ad4ee24ece8be841be85a872edaf1ef13be091c09fad3b9f8b8d18bcf588da39db8e2217ed8353baa88bee3c0a671f40cfcf5a18d57399c4b392208f2b5a32be4fa67a16a97a4f95a8734b52346ac24aea027a8097ce133c44f104fc25d24f9cc1aaace0e0d294146d205a53bc383b2f99307d8636", 0xdc}, {&(0x7f0000002200)="35e44623ba387eae74557ac3b8c38d68cfd638c16417501b69370e2dcac08bd5f893dcd3a871c6e0cd46a71592f0f548f409d0060bfa06ae0aa7fbc18793780fd5cbf2a3336c472fbce5cef2dee4e27aaa5da29e53ac6fbfa20f01", 0x5b}, {&(0x7f0000002280)="e922c14453344e792c74e0a0944e2867feb820682abef139bd", 0x19}], 0xa, &(0x7f00000040c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @dstopts={{0xe0, 0x29, 0x37, {0x0, 0x18, '\x00', [@generic={0xe, 0xc4, "b230de8d0e8b71bbfaa2cffc88546e50174660c14ecaac3726eeefad1819967414b78c2d51324142f06a6a0971ea3d123340c3f2e15d0f42e3903de1e8ade1cb90deb66d53f17c36caf450baaea6593752bba629267025786491da7101b41aec0e66f1a0f872a9fc356b1b2b11f5815163d1ae787a77436bd6599953ff99fc574e9f72e1041137dff64d5f5ffad3a3d5b040be20d4e551427e53bdcf89883692635acb9164eb26f6f88ce0c993f9c4cacc4462379e813caa14cca29e3e01e7858c85a86e"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x67, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x180, 0x29, 0x37, {0x3c, 0x2c, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x1, 0xa, 0x5, 0x5, [0x0, 0x2, 0x8, 0x7ff, 0x1]}}, @generic={0x5e, 0xbc, "0fffa56e2dd972268737dd04f24b48030258a770f9e8177932b6d337c5f62c4284221810c3ac9ab06c7b25d25be1bbaccffe8e613c5a208889778b1514ed8ef10887f77f33abf94991d56b947f688989d656abb31e744197b58225033a845fb6c783de3a5217dc9dd814d6da67a5fce293606a5cb10f80a3e9e881b676852dd62efc7cc59d4201c7536ce996f68ee4665f4f9f0fbbaada6bf9dda1341bc13aa8ce09d45e542d2656a44ecc5902b3d18625da6962f7ff704aa9786153"}, @generic={0xc, 0x6e, "58b4e7f123c455bafb8496224c0bc0366a779ab99666cf304a0638195bd91a801bbd4151eda291083d6a115ef4c7d40314ae69f6169b160a79894c5dc5ed1160d7fa4d5cd2610c1d98ccfe363bc87323573b3d783485bf53c0d73144c1de50e2e698356a6d9765f764a468e210af"}, @pad1]}}}, @hopopts={{0x50, 0x29, 0x36, {0x3c, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x9}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7fffffff}}, @rthdr={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x0, 0x4, 0x0, [@local]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0xe, 0x6, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}}, @jumbo={0xc2, 0x4, 0xae40}, @pad1, @ra={0x5, 0x2, 0xffff}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}], 0x378}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002640)="9cb132fd9eec367294736e95a4c7ce19e43a6802f977f9b31f5c153710e66055160285a1c4fb16ae09924898df6610ccaaae5f8917e6595ba667decc63ef5adaa02c4ece95e9b6318d37e030a468c97f5cf293f54e6c1e2ae843fad883e207046225022f7cd52acfb62b47e1fbac3da8744ca587cb68defde3362a3cc76b0e82b03ca114f9fe350789b005685eedd8f0a6bc4707b1cc235685797659d69b6096c6a3588e9c83b563d10fb838a770265b2947f181858d62e4e56e31f32de431c7efc4df1dcc11bb", 0xc7}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000003740)="e49e0241247b7318c5baa590a65582b7e60a7c33af6f1cf133cbf8b5e9c5cbbd2ba4ea1a5ed73fa2faf1aa8f8544e6de7b62f666f69892590dbc41c41b657f44b4e949562d0deb3575fa5cccb8f99a63c7822499e3608a805a484453baaead241bf12da3f2f2febb47f664402f28ce3eabb94b64c6ab22de0836d5406756f9bce32d645847493244929e59662bc8d351107b93c038d49c2b38a4cf38cec4e788feba7f3b7d881edf7741d23e59ef0a78b055d57a57d065b5", 0xb8}, {&(0x7f0000003800)="1be425be1575952e5986b8bc97150390a4cf8c9588130deb5f2c3463a6953dabd1a5482d384308b76513f1a3b051a9551a9f79214f946595eafe669c86a67639e099c8f52b9d798a55bdbf2e4873f74ac1748283b63470e782cb578f61", 0x5d}, {&(0x7f0000003880)="b09cb15e62526c0dd8905364855e53952a3be3347f772cb50e640df23d610807bcfbb67149af2cabc04cfa7cb40cf2d536ec87d8c9e977bf9a2a83020a858f84be6b5f4ba3fc03ab", 0x48}, {&(0x7f0000003900)="8dbd5019ad77d3f4ea991a66d87a68a7be8d6be80f3b90eedf15a3", 0x1b}, {&(0x7f0000003940)="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", 0xfa}], 0x7}}, {{&(0x7f0000003ac0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}, 0x1c, &(0x7f0000003d00)=[{&(0x7f0000003b00)="d88b4f854795b1127b7035bad479b5a7fba56d25cd1fa3e89cc09b41184a83fba6db4b9a26be634c265554075553aabd5bcfcde4618d73366dde26ad018c9047b004634b27219378ab6397d597bf297a16a35cfe8671c3", 0x57}, {&(0x7f0000003bc0)="ee067015e4a76fcec67a96d0bb12f16bdb07", 0x12}, {&(0x7f0000003c00)="a5dcc68ed43149ad102f65451252742e4f6e843ba4ff675b0edbbcdc7250699ebb51c6adaa4e6b141e720a7a711e2842f313e54343e4abc187d2734cf1c07b87235a49080fecc3edca7fef31fe92b7161872b6d288511b40963adb94057875b852d25189b38b6fbd9514938f2cb265e9d32043f359b4294b5c61e643e76bf640d455752ad19a95b2c42d28af97711bc46a285fc3863f4036f46b9cacc3", 0x9d}, {0x0}], 0x4, &(0x7f0000003d80)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x79}}, @dstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @private1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xa993}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x9c1fe1a1fe46f359, 0x5, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x11, 0x3, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x5, [0x6]}}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x110}}], 0x8, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0xf4, r6, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xf4}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) 153.254781ms ago: executing program 1 (id=2467): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004740)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b", @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c000000070000000500000000000006040000000040000000610000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0xb1c, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="32032b8943bf95e2bd3b4a0b23d7039f12df0f378772179ff881b64b7dd3255f5a2abcd79930216d95d3"]}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 0s ago: executing program 5 (id=2468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xf3, @empty, 0x9}, 0xfffffffffffffea1) shmget(0x1, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe2$9p(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000000000016, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040002, 0x8, 0x1fb}}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x591f) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) kernel console output (not intermixed with test programs): ed USB device number 62 using dummy_hcd [ 646.623100][T13213] loop5: detected capacity change from 0 to 7 [ 646.683740][T13213] Dev loop5: unable to read RDB block 7 [ 646.691755][T13213] loop5: AHDI p1 [ 646.695880][T13213] loop5: partition table partially beyond EOD, truncated [ 646.701851][ T30] audit: type=1400 audit(1769866950.880:1393): avc: denied { write } for pid=13207 comm="syz.1.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 646.810117][ T30] audit: type=1400 audit(1769866950.880:1394): avc: denied { setopt } for pid=13207 comm="syz.1.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 646.839732][T13213] comedi comedi1: comedi_config --init_data is deprecated [ 649.120194][T13238] NFSD: Failed to start, no listeners configured. [ 650.273626][ T5889] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 650.338279][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1899'. [ 650.487668][ T5889] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.344050][ T5889] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 651.363500][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 651.371037][ T5889] usb 3-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 651.382895][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.413986][ T5889] usb 3-1: config 0 descriptor?? [ 652.050868][ T5889] hid_mf 0003:0079:1843.001A: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.2-1/input0 [ 652.067224][ T30] audit: type=1400 audit(1769866956.550:1395): avc: denied { bind } for pid=13283 comm="syz.6.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 652.086802][ T5889] hid_mf 0003:0079:1843.001A: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 652.117564][T13286] netlink: 'syz.5.1900': attribute type 5 has an invalid length. [ 652.469664][T13262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.480605][ T30] audit: type=1400 audit(1769866956.550:1396): avc: denied { listen } for pid=13283 comm="syz.6.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 652.504741][T13262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.506044][ T30] audit: type=1400 audit(1769866956.550:1397): avc: denied { accept } for pid=13283 comm="syz.6.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 652.556370][ T30] audit: type=1400 audit(1769866956.550:1398): avc: denied { read } for pid=13283 comm="syz.6.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 652.581714][ T5965] usb 3-1: USB disconnect, device number 52 [ 652.787754][ T5889] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 652.955367][ T5889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.999748][ T30] audit: type=1400 audit(1769866957.537:1399): avc: denied { mount } for pid=13303 comm="syz.6.1904" name="/" dev="ramfs" ino=44109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 653.140516][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 653.149436][ T5889] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.165509][ T5889] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.175810][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.184110][ T5889] usb 2-1: Product: syz [ 653.188519][ T5889] usb 2-1: Manufacturer: syz [ 653.193119][ T5889] usb 2-1: SerialNumber: syz [ 654.069575][ T30] audit: type=1400 audit(1769866958.660:1400): avc: denied { ioctl } for pid=13303 comm="syz.6.1904" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 654.126872][ T5889] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 654.193459][ T5889] cdc_ncm 2-1:1.0: bind() failure [ 655.421502][ T5889] usb 2-1: USB disconnect, device number 72 [ 655.594847][T13316] bridge0: entered allmulticast mode [ 655.632496][T13316] pim6reg: entered allmulticast mode [ 655.657961][T13316] pim6reg: left allmulticast mode [ 655.668522][T13316] bridge0: left allmulticast mode [ 656.028777][T13318] lo speed is unknown, defaulting to 1000 [ 656.498311][T13326] netlink: 'syz.5.1911': attribute type 3 has an invalid length. [ 656.647505][T13330] IPVS: ip_vs_add_dest(): server weight less than zero [ 657.053458][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'. [ 657.321533][ T11] block nbd0: Possible stuck request ffff8880266b8000: control (read@0,1024B). Runtime 300 seconds [ 657.333552][ T11] block nbd0: Possible stuck request ffff8880266b8200: control (read@1024,1024B). Runtime 300 seconds [ 657.347900][ T11] block nbd0: Possible stuck request ffff8880266b8400: control (read@2048,1024B). Runtime 300 seconds [ 657.360833][ T11] block nbd0: Possible stuck request ffff8880266b8600: control (read@3072,1024B). Runtime 300 seconds [ 657.448533][ T793] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 658.084659][T13349] netlink: 'syz.5.1917': attribute type 9 has an invalid length. [ 658.092668][T13349] netlink: 'syz.5.1917': attribute type 7 has an invalid length. [ 658.142293][T13349] netlink: 'syz.5.1917': attribute type 8 has an invalid length. [ 658.270928][ T793] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 658.282452][T13347] orangefs_mount: mount request failed with -4 [ 658.289324][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.454904][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 659.136144][T11843] Bluetooth: hci0: command 0x0c1a tx timeout [ 659.150761][ T5821] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 659.218787][ T793] usb 2-1: Product: syz [ 659.232324][ T793] usb 2-1: Manufacturer: syz [ 659.248137][ T793] usb 2-1: SerialNumber: syz [ 659.288238][ T30] audit: type=1400 audit(1769866964.140:1401): avc: denied { mounton } for pid=13356 comm="syz.5.1920" path="/33/file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 659.400214][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 659.416117][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.436223][ T24] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 659.446118][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.457202][ T24] usb 7-1: config 0 descriptor?? [ 659.522618][T13364] netlink: 'syz.3.1921': attribute type 3 has an invalid length. [ 659.695327][T13342] binder: BINDER_SET_CONTEXT_MGR already set [ 659.787212][T13342] binder: 13340:13342 ioctl 4018620d 200000000100 returned -16 [ 659.798746][T13366] binder: BINDER_SET_CONTEXT_MGR already set [ 659.830083][ T24] pegasus_notetaker 7-1:0.0: Invalid number of endpoints [ 659.837339][T13366] binder: 13340:13366 ioctl 4018620d 2000000002c0 returned -16 [ 659.847046][T13350] bond1: entered promiscuous mode [ 659.862426][ T24] pegasus_notetaker 7-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 659.872874][T13369] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 659.905354][T13350] bond1: entered allmulticast mode [ 659.932903][T13350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 659.941664][ T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 659.975765][ T24] usb 7-1: USB disconnect, device number 3 [ 659.988459][ T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 660.020652][ T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 660.044290][ T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 660.056957][ T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 660.090982][ T793] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 660.092693][ T30] audit: type=1400 audit(1769866964.970:1402): avc: denied { write } for pid=13373 comm="syz.2.1924" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 660.222959][ T30] audit: type=1400 audit(1769866965.012:1403): avc: denied { ioctl } for pid=13373 comm="syz.2.1924" path="/dev/usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 660.503143][T13024] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 660.750515][T13024] usb 3-1: Using ep0 maxpacket: 32 [ 660.762429][T13024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.778979][T13024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.791506][T13024] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 660.808612][T13024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.826955][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 660.836136][T13024] usb 3-1: config 0 descriptor?? [ 660.857082][T13024] hub 3-1:0.0: USB hub found [ 660.980064][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 660.990053][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.009110][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.026487][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 661.037075][T13024] hub 3-1:0.0: 1 port detected [ 661.042017][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.054733][T13024] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 661.074975][ T10] usb 4-1: config 0 descriptor?? [ 661.081433][T13024] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 661.095149][ T10] hub 4-1:0.0: USB hub found [ 661.110808][T13024] usbhid 3-1:0.0: can't add hid device: -71 [ 661.137668][T13024] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 661.215425][T13024] usb 3-1: USB disconnect, device number 53 [ 661.285542][ T10] hub 4-1:0.0: 1 port detected [ 661.453405][ T793] usb 2-1: USB disconnect, device number 73 [ 662.190085][ T10] hub 4-1:0.0: activate --> -90 [ 662.232630][T13392] NFSD: Failed to start, no listeners configured. [ 662.750207][T13406] netlink: 'syz.5.1930': attribute type 1 has an invalid length. [ 663.218999][T13406] netlink: 'syz.5.1930': attribute type 4 has an invalid length. [ 663.254427][T13406] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1930'. [ 663.657072][ T9] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 663.670696][ T9] usb 4-1-port1: cannot reset (err = -32) [ 663.682772][ T9] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad? [ 663.701061][ T9] usb 4-1-port1: cannot disable (err = -32) [ 663.708415][ T9] usb 4-1-port1: cannot reset (err = -32) [ 663.745750][ T5965] usb 4-1: USB disconnect, device number 63 [ 663.752189][ T9] usb 4-1-port1: attempt power cycle [ 663.836776][ T793] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 663.943816][T13417] random: crng reseeded on system resumption [ 664.080867][ T793] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 664.089819][T13415] Restarting kernel threads ... [ 664.095416][T13415] Done restarting kernel threads. [ 664.112902][ T793] usb 3-1: config 0 has no interface number 0 [ 664.119030][ T793] usb 3-1: config 0 interface 41 has no altsetting 0 [ 664.154032][ T793] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 664.169794][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.210396][ T793] usb 3-1: Product: syz [ 664.214598][ T793] usb 3-1: Manufacturer: syz [ 664.248110][ T793] usb 3-1: SerialNumber: syz [ 664.349941][T13419] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1935'. [ 664.360929][ T793] usb 3-1: config 0 descriptor?? [ 664.550488][T13427] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1939'. [ 664.760833][ T5965] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 664.979500][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 665.085503][ T30] audit: type=1326 audit(1769866970.230:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.1942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb78599aeb9 code=0x0 [ 665.112869][ T5965] usb 6-1: device descriptor read/64, error -71 [ 665.132993][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.145072][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 665.155256][ T10] usb 7-1: config 1 has no interface number 0 [ 665.162220][ T10] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.178402][ T10] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 665.190948][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 665.200883][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.209240][ T10] usb 7-1: Product: syz [ 665.214223][ T10] usb 7-1: Manufacturer: syz [ 665.220308][ T10] usb 7-1: SerialNumber: syz [ 665.341397][ T5965] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 665.474412][ T5965] usb 6-1: device descriptor read/64, error -71 [ 665.579392][ T5965] usb usb6-port1: attempt power cycle [ 665.759189][ T793] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 665.773989][ T793] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 665.784120][ T793] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 665.795182][ T793] usb 3-1: USB disconnect, device number 54 [ 665.903164][ T5965] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 665.922839][ T5965] usb 6-1: device descriptor read/8, error -71 [ 665.936035][T13443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.956103][ T30] audit: type=1400 audit(1769866971.133:1405): avc: denied { ioctl } for pid=13442 comm="syz.1.1944" path="socket:[44603]" dev="sockfs" ino=44603 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 666.151008][ T5965] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 666.170075][ T5965] usb 6-1: device descriptor read/8, error -71 [ 666.194956][ T10] cdc_ncm 7-1:1.1: bind() failure [ 666.205107][ T10] usb 7-1: USB disconnect, device number 4 [ 666.275745][ T5965] usb usb6-port1: unable to enumerate USB device [ 666.376275][T13449] random: crng reseeded on system resumption [ 666.406222][T13449] Restarting kernel threads ... [ 666.416330][T13449] Done restarting kernel threads. [ 666.474307][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 666.480749][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 666.542487][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 666.704313][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 666.714060][ T10] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 666.737827][ T10] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.749577][ T10] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.763158][ T10] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 666.776341][ T10] usb 3-1: config 7 interface 0 has no altsetting 0 [ 666.784174][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 666.794840][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.962403][T13456] netlink: 'syz.1.1947': attribute type 1 has an invalid length. [ 666.970553][T13456] netlink: 'syz.1.1947': attribute type 4 has an invalid length. [ 666.978337][T13456] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1947'. [ 667.241775][ T10] hid (null): invalid report_size 26551 [ 667.261873][ T10] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.001B/input/input38 [ 667.340993][ T10] kye 0003:0458:5010.001B: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 667.435516][T13459] FAULT_INJECTION: forcing a failure. [ 667.435516][T13459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.455103][T13459] CPU: 0 UID: 0 PID: 13459 Comm: syz.5.1949 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.455133][T13459] Tainted: [L]=SOFTLOCKUP [ 667.455140][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 667.455150][T13459] Call Trace: [ 667.455157][T13459] [ 667.455165][T13459] dump_stack_lvl+0x100/0x190 [ 667.455194][T13459] should_fail_ex.cold+0x5/0xa [ 667.455219][T13459] _copy_to_user+0x32/0xd0 [ 667.455244][T13459] simple_read_from_buffer+0xcb/0x170 [ 667.455265][T13459] proc_fail_nth_read+0x1af/0x230 [ 667.455287][T13459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.455308][T13459] ? rw_verify_area+0xce/0x6d0 [ 667.455322][T13459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.455342][T13459] vfs_read+0x1e4/0xb30 [ 667.455363][T13459] ? __pfx_vfs_read+0x10/0x10 [ 667.455380][T13459] ? find_held_lock+0x2b/0x80 [ 667.455404][T13459] ? __fget_files+0x215/0x3d0 [ 667.455431][T13459] ? __fget_files+0x21f/0x3d0 [ 667.455457][T13459] ksys_read+0x12a/0x250 [ 667.455475][T13459] ? __pfx_ksys_read+0x10/0x10 [ 667.455493][T13459] ? __pfx_handle_softirqs+0x10/0x10 [ 667.455521][T13459] do_syscall_64+0xc9/0xf80 [ 667.455542][T13459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.455559][T13459] RIP: 0033:0x7faba595b78e [ 667.455573][T13459] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 667.455590][T13459] RSP: 002b:00007faba68eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 667.455607][T13459] RAX: ffffffffffffffda RBX: 00007faba68eb6c0 RCX: 00007faba595b78e [ 667.455619][T13459] RDX: 000000000000000f RSI: 00007faba68eb0a0 RDI: 0000000000000006 [ 667.455630][T13459] RBP: 00007faba68eb090 R08: 0000000000000000 R09: 0000000000000000 [ 667.455640][T13459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.455651][T13459] R13: 00007faba5c16038 R14: 00007faba5c15fa0 R15: 00007fff6d581a98 [ 667.455676][T13459] [ 668.322548][ T30] audit: type=1400 audit(1769866973.548:1406): avc: denied { getopt } for pid=13462 comm="syz.6.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 668.408470][ T5897] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 668.560838][ T5897] usb 3-1: device descriptor read/64, error -32 [ 668.951152][ T5897] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 669.113772][ T5897] usb 3-1: device descriptor read/64, error -32 [ 669.408728][ T5897] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 669.526314][ T5897] usb 3-1: device descriptor read/8, error -71 [ 670.418324][ T5897] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 670.457028][ T5897] usb 3-1: device firmware changed [ 670.464068][ T24] usb 3-1: USB disconnect, device number 55 [ 671.122627][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 671.251521][ T5889] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 671.332473][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 671.344698][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.379210][ T24] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 671.400896][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.413103][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.431711][ T5889] usb 7-1: config 0 has no interfaces? [ 671.451116][ T5889] usb 7-1: New USB device found, idVendor=0f31, idProduct=1000, bcdDevice=be.42 [ 671.461677][ T24] usb 3-1: config 0 descriptor?? [ 671.496006][ T24] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 671.507069][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.515243][ T24] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 671.532088][ T5889] usb 7-1: config 0 descriptor?? [ 671.825838][T13510] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 671.840640][T13507] bond5: entered promiscuous mode [ 671.845852][T13507] bond5: entered allmulticast mode [ 671.848454][ T5889] usb 3-1: USB disconnect, device number 56 [ 671.851920][T13507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 671.937564][T13511] netlink: 'syz.1.1963': attribute type 1 has an invalid length. [ 671.956004][T13511] netlink: 'syz.1.1963': attribute type 4 has an invalid length. [ 671.972286][T13511] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1963'. [ 673.053229][T13522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.460903][ T10] usb 7-1: USB disconnect, device number 5 [ 673.683143][ T30] audit: type=1400 audit(1769866979.228:1407): avc: denied { kexec_image_load } for pid=13524 comm="syz.5.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 674.435258][T13546] overlayfs: failed to clone upperpath [ 674.820261][T13553] random: crng reseeded on system resumption [ 674.894716][T13553] Restarting kernel threads ... [ 674.900600][T13553] Done restarting kernel threads. [ 676.665169][ T30] audit: type=1400 audit(1769866982.377:1408): avc: denied { setattr } for pid=13560 comm="syz.2.1978" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 676.665531][T13562] random: crng reseeded on system resumption [ 676.797917][T13562] Restarting kernel threads ... [ 676.806317][T13562] Done restarting kernel threads. [ 677.197586][T13566] random: crng reseeded on system resumption [ 677.286190][ T30] audit: type=1400 audit(1769866983.039:1409): avc: denied { append } for pid=13565 comm="syz.2.1980" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 677.324606][ T30] audit: type=1400 audit(1769866983.070:1410): avc: denied { watch watch_reads } for pid=13565 comm="syz.2.1980" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 677.376526][T13564] Restarting kernel threads ... [ 677.381675][T13564] Done restarting kernel threads. [ 677.386767][ T30] audit: type=1400 audit(1769866983.123:1411): avc: denied { remount } for pid=13565 comm="syz.2.1980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 677.596564][T13574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.483125][T13583] lo speed is unknown, defaulting to 1000 [ 679.025026][T10801] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 679.205489][T11843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 679.215472][T10801] usb 2-1: Using ep0 maxpacket: 8 [ 679.222352][T11843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 679.230301][T11843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 679.245671][T11843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 679.253883][T11843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 679.266678][T10801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 679.295161][T10801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 679.305414][T10801] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 679.866340][T13597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.237615][T10801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 680.240547][T11133] bond0: (slave syz_tun): Releasing backup interface [ 680.250731][T10801] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 680.361995][T10801] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 680.390630][T10801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.405867][T13591] lo speed is unknown, defaulting to 1000 [ 680.414299][T10801] usb 2-1: config 0 descriptor?? [ 680.438909][T13584] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 680.641512][ T6909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.694437][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.704909][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.879855][ T6909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.976063][ T10] usb 2-1: USB disconnect, device number 74 [ 680.977916][T11843] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 681.026583][ T5821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 681.035212][ T5821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 681.045887][ T5821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 681.054990][ T5821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 681.062607][ T5821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 681.225624][T13611] random: crng reseeded on system resumption [ 681.273295][ T5821] Bluetooth: hci6: command tx timeout [ 681.306605][ T6909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.568274][ T6909] team0: Port device netdevsim0 removed [ 681.581710][ T6909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.618752][T13591] chnl_net:caif_netlink_parms(): no params data found [ 681.764053][T13606] lo speed is unknown, defaulting to 1000 [ 681.890799][T13591] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.898796][T13591] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.946516][T13591] bridge_slave_0: entered allmulticast mode [ 681.996400][T13591] bridge_slave_0: entered promiscuous mode [ 682.015285][T13591] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.026533][T13591] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.038235][T13591] bridge_slave_1: entered allmulticast mode [ 682.049384][T13591] bridge_slave_1: entered promiscuous mode [ 682.075828][T10801] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 682.106449][T13591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.125969][T13591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.188478][T13591] team0: Port device team_slave_0 added [ 682.200406][T13591] team0: Port device team_slave_1 added [ 682.228353][T10801] usb 7-1: Using ep0 maxpacket: 8 [ 682.244904][T13591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.245168][T10801] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 682.267804][T13591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.317118][T10801] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 682.334585][T10801] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 682.344806][T13591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.355973][T10801] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 682.368327][T10801] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.371971][T13606] chnl_net:caif_netlink_parms(): no params data found [ 682.426855][T10801] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 682.437990][T10801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.469714][T13591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.478159][T13591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.505473][T13591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.638714][T13591] hsr_slave_0: entered promiscuous mode [ 682.642038][T10801] usb 7-1: GET_CAPABILITIES returned 0 [ 682.645053][T13591] hsr_slave_1: entered promiscuous mode [ 682.655511][T10801] usbtmc 7-1:16.0: can't read capabilities [ 682.656669][T13591] debugfs: 'hsr0' already exists in 'hsr' [ 682.683006][T13591] Cannot create hsr debugfs directory [ 682.685929][ T24] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 682.690959][T13606] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.709205][T13606] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.719100][T13606] bridge_slave_0: entered allmulticast mode [ 682.800393][T13606] bridge_slave_0: entered promiscuous mode [ 682.838537][ T24] usb 6-1: device descriptor read/64, error -71 [ 682.912556][T10801] usb 7-1: USB disconnect, device number 6 [ 683.025810][T13606] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.040759][T13606] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.054230][T13606] bridge_slave_1: entered allmulticast mode [ 683.064184][T13606] bridge_slave_1: entered promiscuous mode [ 683.076230][ T5821] Bluetooth: hci7: command tx timeout [ 683.095540][ T24] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 683.121875][T13606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.128441][T13606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.158022][T13606] team0: Port device team_slave_0 added [ 683.189630][T13606] team0: Port device team_slave_1 added [ 683.229445][ T24] usb 6-1: device descriptor read/64, error -71 [ 683.237536][ T5821] Bluetooth: hci6: command tx timeout [ 683.263096][T13606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.276306][T13606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.314386][T13606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.336845][ T24] usb usb6-port1: attempt power cycle [ 683.359054][T13606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.371412][T13606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.406254][T13606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.512423][T13606] hsr_slave_0: entered promiscuous mode [ 683.519150][T13606] hsr_slave_1: entered promiscuous mode [ 683.525265][T13606] debugfs: 'hsr0' already exists in 'hsr' [ 683.539781][T13606] Cannot create hsr debugfs directory [ 683.676120][ T24] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 683.711490][ T24] usb 6-1: device descriptor read/8, error -71 [ 683.943087][T13591] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 683.970359][ T24] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 683.989179][T13591] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 684.012068][ T24] usb 6-1: device descriptor read/8, error -71 [ 684.085893][T13591] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 684.137269][ T24] usb usb6-port1: unable to enumerate USB device [ 684.248837][T13591] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 684.847406][ T6909] bridge_slave_1: left allmulticast mode [ 684.860916][ T6909] bridge_slave_1: left promiscuous mode [ 684.869638][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.882682][ T6909] bridge_slave_0: left allmulticast mode [ 684.891599][ T6909] bridge_slave_0: left promiscuous mode [ 684.900338][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.063690][ T5821] Bluetooth: hci7: command tx timeout [ 685.186025][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2006'. [ 685.209994][ T5821] Bluetooth: hci6: command tx timeout [ 685.317129][T10801] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 685.593798][T10801] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 685.608045][T10801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.676386][T10801] usb 2-1: Product: syz [ 685.680647][T10801] usb 2-1: Manufacturer: syz [ 685.809792][T10801] usb 2-1: SerialNumber: syz [ 685.975866][ T11] block nbd0: Possible stuck request ffff8880266b8000: control (read@0,1024B). Runtime 330 seconds [ 685.986679][ T11] block nbd0: Possible stuck request ffff8880266b8200: control (read@1024,1024B). Runtime 330 seconds [ 685.997931][ T11] block nbd0: Possible stuck request ffff8880266b8400: control (read@2048,1024B). Runtime 330 seconds [ 686.011909][ T11] block nbd0: Possible stuck request ffff8880266b8600: control (read@3072,1024B). Runtime 330 seconds [ 686.694743][ T6909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.711446][ T6909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.727039][ T6909] bond0 (unregistering): Released all slaves [ 686.978356][ T6909] bond1 (unregistering): Released all slaves [ 687.041339][ T5821] Bluetooth: hci7: command tx timeout [ 687.200677][ T5821] Bluetooth: hci6: command tx timeout [ 687.211330][ T6909] bond2 (unregistering): Released all slaves [ 687.436848][ T6909] bond3 (unregistering): Released all slaves [ 687.567332][ T6909] bond4 (unregistering): Released all slaves [ 687.679868][ T6909] bond5 (unregistering): Released all slaves [ 688.077873][ T6909] tipc: Left network mode [ 688.264673][T13024] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 688.384762][T13752] FAULT_INJECTION: forcing a failure. [ 688.384762][T13752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.397921][T13752] CPU: 0 UID: 0 PID: 13752 Comm: syz.5.2012 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.397947][T13752] Tainted: [L]=SOFTLOCKUP [ 688.397954][T13752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 688.397965][T13752] Call Trace: [ 688.397973][T13752] [ 688.397980][T13752] dump_stack_lvl+0x100/0x190 [ 688.398008][T13752] should_fail_ex.cold+0x5/0xa [ 688.398028][T13752] _copy_from_user+0x2e/0xd0 [ 688.398054][T13752] copy_msghdr_from_user+0x9f/0x4f0 [ 688.398074][T13752] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 688.398105][T13752] ___sys_sendmsg+0x106/0x1e0 [ 688.398125][T13752] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.398156][T13752] ? find_held_lock+0x2b/0x80 [ 688.398195][T13752] __sys_sendmsg+0x170/0x220 [ 688.398218][T13752] ? __pfx___sys_sendmsg+0x10/0x10 [ 688.398250][T13752] ? rcu_is_watching+0x12/0xc0 [ 688.398280][T13752] do_syscall_64+0xc9/0xf80 [ 688.398303][T13752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.398321][T13752] RIP: 0033:0x7faba599aeb9 [ 688.398334][T13752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.398351][T13752] RSP: 002b:00007faba68a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.398369][T13752] RAX: ffffffffffffffda RBX: 00007faba5c16180 RCX: 00007faba599aeb9 [ 688.398380][T13752] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000008 [ 688.398391][T13752] RBP: 00007faba68a9090 R08: 0000000000000000 R09: 0000000000000000 [ 688.398401][T13752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.398412][T13752] R13: 00007faba5c16218 R14: 00007faba5c16180 R15: 00007fff6d581a98 [ 688.398436][T13752] [ 688.584232][T10801] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 688.618629][T10801] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 688.681191][ T30] audit: type=1400 audit(1769866994.672:1412): avc: denied { read write } for pid=13745 comm="syz.5.2012" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 688.851684][T13024] usb 7-1: Using ep0 maxpacket: 16 [ 688.881797][T13024] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 688.895998][T13024] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 689.023507][T10801] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 689.030183][T13755] NFSD: Failed to start, no listeners configured. [ 689.035813][ T5821] Bluetooth: hci7: command tx timeout [ 689.082616][T10801] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 689.092384][ T30] audit: type=1400 audit(1769866994.672:1413): avc: denied { open } for pid=13745 comm="syz.5.2012" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 689.095132][T13024] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 689.126932][T10801] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 689.142220][T10801] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 689.435633][T13024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.462533][T13024] usb 7-1: Product: syz [ 689.477191][T13024] usb 7-1: Manufacturer: syz [ 689.526316][T10801] usb 2-1: USB disconnect, device number 75 [ 689.535697][T13024] usb 7-1: SerialNumber: syz [ 689.569711][T13024] usb 7-1: config 0 descriptor?? [ 689.597973][T13024] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 689.610487][T13024] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 689.740640][ T30] audit: type=1400 audit(1769866996.100:1414): avc: denied { create } for pid=13767 comm="syz.5.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 689.814550][T13591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.883234][ T6909] hsr_slave_0: left promiscuous mode [ 689.899272][ T6909] hsr_slave_1: left promiscuous mode [ 689.907220][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.914601][ T6909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.930214][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.942122][ T6909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.970359][ T6909] veth1_macvtap: left promiscuous mode [ 689.976045][ T6909] veth0_macvtap: left promiscuous mode [ 689.982215][ T6909] veth1_vlan: left promiscuous mode [ 689.987515][ T6909] veth0_vlan: left promiscuous mode [ 690.327327][ T5821] Bluetooth: hci4: link tx timeout [ 690.335514][ T5821] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 690.542686][ T30] audit: type=1400 audit(1769866996.929:1415): avc: denied { bind } for pid=13767 comm="syz.5.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 690.829840][T13024] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 690.836927][T13024] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 690.851129][T13024] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 690.867300][T13024] em28xx 7-1:0.0: No AC97 audio processor [ 691.483818][T13787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2020'. [ 691.591550][T13789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.232575][ T6909] team0 (unregistering): Port device team_slave_1 removed [ 692.287651][ T6909] team0 (unregistering): Port device team_slave_0 removed [ 692.315664][T11843] Bluetooth: hci4: command 0x0406 tx timeout [ 692.893196][ T6909] team0 (unregistering): Port device dummy0 removed [ 693.007848][T10801] usb 7-1: USB disconnect, device number 7 [ 693.020593][T10801] em28xx 7-1:0.0: Disconnecting em28xx [ 693.071087][T10801] em28xx 7-1:0.0: Freeing device [ 693.380456][T13606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 693.809599][T13591] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.831575][T13606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 693.867501][T13606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 693.997244][T13606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 694.042054][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.049165][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.127147][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.134300][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.271293][T13826] bond3: entered promiscuous mode [ 694.276955][T13826] bond3: entered allmulticast mode [ 694.283369][T13826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 694.504193][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 694.588367][T13606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.655513][T13606] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.682152][T13845] siw: device registration error -23 [ 694.798858][T13844] team0 (unregistering): Port device team_slave_0 removed [ 694.809623][T13844] team0 (unregistering): Port device team_slave_1 removed [ 694.832638][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.839807][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.874014][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.881231][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.260030][T13591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.648067][T13606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 695.671600][T13862] overlayfs: failed to resolve './file0': -2 [ 696.386540][ T79] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.409296][ T30] audit: type=1400 audit(1769867003.082:1416): avc: denied { map } for pid=13854 comm="syz.1.2030" path="/424" dev="tmpfs" ino=2251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 696.696014][ T6909] IPVS: stop unused estimator thread 0... [ 696.739944][T13606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.775910][T13591] veth0_vlan: entered promiscuous mode [ 696.827529][T13591] veth1_vlan: entered promiscuous mode [ 696.868266][T13024] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 697.044460][T13591] veth0_macvtap: entered promiscuous mode [ 697.140045][T13024] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 697.142214][T13591] veth1_macvtap: entered promiscuous mode [ 697.173070][T13024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.189800][T13024] usb 2-1: Product: syz [ 697.244134][T13606] veth0_vlan: entered promiscuous mode [ 697.262932][T13024] usb 2-1: Manufacturer: syz [ 697.342487][T13024] usb 2-1: SerialNumber: syz [ 697.374462][T13606] veth1_vlan: entered promiscuous mode [ 697.393097][T13591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.396162][T13024] usb 2-1: config 0 descriptor?? [ 697.404159][T13591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.434113][T13024] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 697.457624][T13024] usb 2-1: Detected FT4232HP [ 697.500423][ T6079] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.523096][ T6079] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.681615][ T6079] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.691317][ T6079] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.691393][ T30] audit: type=1400 audit(1769867004.457:1417): avc: denied { map } for pid=13880 comm="syz.1.2033" path="socket:[46901]" dev="sockfs" ino=46901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 697.755372][T13606] veth0_macvtap: entered promiscuous mode [ 697.820647][T13905] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2033'. [ 697.851926][T13606] veth1_macvtap: entered promiscuous mode [ 697.913097][ T30] audit: type=1400 audit(1769867004.604:1418): avc: denied { name_connect } for pid=13880 comm="syz.1.2033" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 697.957515][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.980500][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.001908][T13606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.035866][T13606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.062605][ T6079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.071396][ T6079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.093211][ T3536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.119192][ T3536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.151242][ T3536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.210790][ T3536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.263840][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.278321][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.332276][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.341602][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.236026][T13924] FAULT_INJECTION: forcing a failure. [ 699.236026][T13924] name failslab, interval 1, probability 0, space 0, times 0 [ 699.383184][T13924] CPU: 1 UID: 0 PID: 13924 Comm: syz.6.2036 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.383212][T13924] Tainted: [L]=SOFTLOCKUP [ 699.383218][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 699.383226][T13924] Call Trace: [ 699.383232][T13924] [ 699.383239][T13924] dump_stack_lvl+0x100/0x190 [ 699.383267][T13924] should_fail_ex.cold+0x5/0xa [ 699.383284][T13924] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 699.383313][T13924] should_failslab+0xc2/0x120 [ 699.383337][T13924] kmem_cache_alloc_noprof+0x83/0x780 [ 699.383359][T13924] ? skb_clone+0x190/0x400 [ 699.383388][T13924] ? skb_clone+0x190/0x400 [ 699.383408][T13924] skb_clone+0x190/0x400 [ 699.383430][T13924] netlink_deliver_tap+0xaed/0xcc0 [ 699.383458][T13924] netlink_unicast+0x70c/0x870 [ 699.383485][T13924] ? __pfx_netlink_unicast+0x10/0x10 [ 699.383506][T13924] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 699.383533][T13924] netlink_ack+0x655/0xb80 [ 699.383570][T13924] netlink_rcv_skb+0x333/0x420 [ 699.383594][T13924] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 699.383620][T13924] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 699.383658][T13924] netlink_unicast+0x5aa/0x870 [ 699.383683][T13924] ? __pfx_netlink_unicast+0x10/0x10 [ 699.383715][T13924] netlink_sendmsg+0x8b0/0xda0 [ 699.383743][T13924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.383765][T13924] ? PageHuge+0x180/0x180 [ 699.383791][T13924] ____sys_sendmsg+0xa54/0xc30 [ 699.383808][T13924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.383822][T13924] ? _kstrtoull+0x13c/0x1f0 [ 699.383832][T13924] ? __pfx__kstrtoull+0x10/0x10 [ 699.383844][T13924] ___sys_sendmsg+0x190/0x1e0 [ 699.383862][T13924] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.383909][T13924] __sys_sendmmsg+0x205/0x430 [ 699.383934][T13924] ? __pfx___sys_sendmmsg+0x10/0x10 [ 699.383953][T13924] ? __fget_files+0x215/0x3d0 [ 699.383967][T13924] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 699.383986][T13924] ? fput+0x79/0x100 [ 699.384002][T13924] ? ksys_write+0x1ac/0x250 [ 699.384019][T13924] ? __pfx_ksys_write+0x10/0x10 [ 699.384042][T13924] __x64_sys_sendmmsg+0x9c/0x100 [ 699.384062][T13924] ? lockdep_hardirqs_on+0x78/0x100 [ 699.384080][T13924] do_syscall_64+0xc9/0xf80 [ 699.384093][T13924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.384104][T13924] RIP: 0033:0x7fbb1d99aeb9 [ 699.384114][T13924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.384125][T13924] RSP: 002b:00007fbb1e840028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 699.384136][T13924] RAX: ffffffffffffffda RBX: 00007fbb1dc15fa0 RCX: 00007fbb1d99aeb9 [ 699.384144][T13924] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 699.384154][T13924] RBP: 00007fbb1e840090 R08: 0000000000000000 R09: 0000000000000000 [ 699.384164][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.384174][T13924] R13: 00007fbb1dc16038 R14: 00007fbb1dc15fa0 R15: 00007ffd5a5a5a38 [ 699.384198][T13924] [ 699.408571][ T30] audit: type=1400 audit(1769867006.231:1419): avc: denied { read write } for pid=13920 comm="syz.2.1991" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 699.408639][ T30] audit: type=1400 audit(1769867006.231:1420): avc: denied { open } for pid=13920 comm="syz.2.1991" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 699.510119][T13927] netlink: 'syz.2.1991': attribute type 2 has an invalid length. [ 699.522819][T13024] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 699.523145][T13024] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 699.527096][T13024] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 699.536334][T13024] usb 2-1: USB disconnect, device number 76 [ 699.582293][ T30] audit: type=1400 audit(1769867006.410:1421): avc: denied { ioctl } for pid=13920 comm="syz.2.1991" path="socket:[47428]" dev="sockfs" ino=47428 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 699.591927][T13024] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 699.592180][T13024] ftdi_sio 2-1:0.0: device disconnected [ 700.597119][T13941] overlayfs: failed to resolve './file1': -2 [ 701.471009][ T30] audit: type=1400 audit(1769867008.384:1422): avc: denied { ioctl } for pid=13933 comm="syz.1.2039" path="socket:[47461]" dev="sockfs" ino=47461 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 702.768290][T13982] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2049'. [ 702.840637][T10801] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 703.360184][T13982] binder: 13981:13982 unknown command 0 [ 703.365785][T13982] binder: 13981:13982 ioctl c0306201 200000000080 returned -22 [ 703.374948][ T30] audit: type=1400 audit(1769867010.420:1423): avc: denied { map } for pid=13981 comm="syz.2.2049" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 703.457167][T10801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.502485][T10801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.925732][T10801] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 703.934811][T10801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.947193][T13993] overlayfs: failed to resolve './file1': -2 [ 703.973966][T10801] usb 2-1: config 0 descriptor?? [ 704.131451][T13999] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 705.492699][T10801] usbhid 2-1:0.0: can't add hid device: -71 [ 705.535794][T10801] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 705.775993][T14009] binder: 14002:14009 unknown command 0 [ 705.781634][T14009] binder: 14002:14009 ioctl c0306201 200000000080 returned -22 [ 705.860674][ T30] audit: type=1400 audit(1769867013.003:1424): avc: denied { ioctl } for pid=14002 comm="syz.2.2054" path="socket:[47501]" dev="sockfs" ino=47501 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 705.861717][T14009] binder: BINDER_SET_CONTEXT_MGR already set [ 705.893317][T14009] binder: 14002:14009 ioctl 4018620d 200000000040 returned -16 [ 706.083605][T10801] usb 2-1: USB disconnect, device number 77 [ 706.510597][ T30] audit: type=1400 audit(1769867013.696:1425): avc: denied { bind } for pid=14017 comm="syz.7.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 706.936545][T14034] random: crng reseeded on system resumption [ 707.025855][T14034] Restarting kernel threads ... [ 707.031277][T14034] Done restarting kernel threads. [ 707.307895][ T30] audit: type=1400 audit(1769867014.484:1426): avc: denied { name_bind } for pid=14028 comm="syz.7.2061" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 707.420293][T14038] tipc: Enabling of bearer rejected, already enabled [ 707.829708][T14038] tipc: Resetting bearer [ 708.586322][T14059] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2065'. [ 708.829307][T14061] overlayfs: failed to resolve './file1': -2 [ 708.878660][T10801] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 709.260920][T10801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.313877][T10801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.355731][T10801] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 709.383158][T10801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.461477][T10801] usb 3-1: config 0 descriptor?? [ 710.886390][T10801] usbhid 3-1:0.0: can't add hid device: -71 [ 710.895283][T10801] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 711.181193][ T30] audit: type=1400 audit(1769867018.410:1427): avc: denied { block_suspend } for pid=14085 comm="syz.1.2074" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 711.209224][T10801] usb 3-1: USB disconnect, device number 57 [ 711.521848][T14111] cgroup: No subsys list or none specified [ 711.823027][ T30] audit: type=1400 audit(1769867019.103:1428): avc: denied { bind } for pid=14110 comm="syz.2.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 711.823057][ T30] audit: type=1400 audit(1769867019.114:1429): avc: denied { write } for pid=14110 comm="syz.2.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 712.398943][T14120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.055387][T13024] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 713.223456][T13024] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.223483][T13024] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 713.224861][T13024] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 713.224886][T13024] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 713.224906][T13024] usb 8-1: SerialNumber: syz [ 713.255074][T14131] xt_hashlimit: size too large, truncated to 1048576 [ 713.427771][T13024] usb 8-1: 0:2 : does not exist [ 713.460092][T13024] usb 8-1: unit 5: unexpected type 0x0d [ 713.591788][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2083'. [ 713.600855][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2083'. [ 713.610986][T10801] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 713.621388][T13024] usb 8-1: USB disconnect, device number 2 [ 713.692527][T10135] udevd[10135]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.811339][T10801] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 713.831394][T10801] usb 2-1: config 0 has no interface number 0 [ 713.849706][T10801] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 713.877006][T10801] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 713.897859][T10801] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 714.130602][T10801] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 714.200837][T10801] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 714.345805][T10801] usb 2-1: Product: syz [ 714.364706][T10801] usb 2-1: SerialNumber: syz [ 714.379992][T10801] usb 2-1: config 0 descriptor?? [ 714.405534][T10801] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 714.520702][T10801] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input39 [ 714.971849][ T11] block nbd0: Possible stuck request ffff8880266b8000: control (read@0,1024B). Runtime 360 seconds [ 714.983223][ T11] block nbd0: Possible stuck request ffff8880266b8200: control (read@1024,1024B). Runtime 360 seconds [ 714.998138][ T11] block nbd0: Possible stuck request ffff8880266b8400: control (read@2048,1024B). Runtime 360 seconds [ 715.012460][ T11] block nbd0: Possible stuck request ffff8880266b8600: control (read@3072,1024B). Runtime 360 seconds [ 715.127819][T14157] NFSD: Failed to start, no listeners configured. [ 715.221938][T10801] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 715.413797][T10801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.457534][T10801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.479293][T10801] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 715.526262][T10801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.554233][T10801] usb 6-1: config 0 descriptor?? [ 715.892319][ T30] audit: type=1400 audit(1769867023.565:1430): avc: denied { getopt } for pid=14174 comm="syz.7.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 717.272841][T10801] usbhid 6-1:0.0: can't add hid device: -71 [ 717.281928][T10801] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 717.322998][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 717.331746][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 717.338840][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 717.346941][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 717.354890][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 717.362039][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 717.369884][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 717.377029][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 717.377170][T14198] lo speed is unknown, defaulting to 1000 [ 717.384157][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 717.384346][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 717.397228][ T5889] usb 2-1: USB disconnect, device number 78 [ 717.404065][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 717.437055][ T30] audit: type=1400 audit(1769867025.182:1431): avc: denied { ioctl } for pid=14197 comm="syz.7.2094" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x550f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 717.474013][T10801] usb 6-1: USB disconnect, device number 20 [ 717.543632][ T5889] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 717.581890][T14204] siw: device registration error -23 [ 718.986491][T10801] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 719.174501][T10801] usb 8-1: Using ep0 maxpacket: 8 [ 719.194916][T10801] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 719.248159][T10801] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 719.302184][T10801] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 719.341859][T10801] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 719.434111][T10801] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 719.448993][T10801] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 719.461663][T10801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.470506][T10801] usb 8-1: Product: syz [ 719.474671][T10801] usb 8-1: Manufacturer: syz [ 719.479255][T10801] usb 8-1: SerialNumber: syz [ 719.520655][T10801] usb 8-1: config 0 descriptor?? [ 719.930897][ T5817] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 719.987886][T10801] rc_core: IR keymap rc-imon-rsc not found [ 719.994070][T10801] Registered IR keymap rc-empty [ 719.999918][T10801] rc rc0: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 720.039280][T10801] input: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input40 [ 720.126771][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 720.160703][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.169359][T10801] usb 8-1: USB disconnect, device number 3 [ 720.203506][ T5817] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 720.412497][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.448648][ T5817] usb 3-1: config 0 descriptor?? [ 720.482625][ T5817] pwc: Askey VC010 type 2 USB webcam detected. [ 720.503721][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 720.524943][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.544580][ T24] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 720.578300][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.603726][ T24] usb 6-1: config 0 descriptor?? [ 720.634786][ T24] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 720.647190][ T24] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 720.854032][T14244] bond4: entered promiscuous mode [ 720.870101][T14244] bond4: entered allmulticast mode [ 720.876127][T14266] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 720.884631][T14244] 8021q: adding VLAN 0 to HW filter on device bond4 [ 720.944446][ T793] usb 6-1: USB disconnect, device number 21 [ 722.075715][T14287] efs: cannot read volume header [ 722.106010][ T30] audit: type=1400 audit(1769867030.075:1432): avc: denied { ioctl } for pid=14275 comm="syz.1.2109" path="socket:[47897]" dev="sockfs" ino=47897 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 722.750246][ T5817] pwc: send_video_command error -71 [ 722.784745][ T5817] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 722.808218][ T5817] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 722.837042][ T5817] usb 3-1: USB disconnect, device number 58 [ 723.070506][T13024] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 723.350661][ T30] audit: type=1400 audit(1769867031.398:1433): avc: denied { unmount } for pid=12826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 723.451096][T13024] usb 6-1: Using ep0 maxpacket: 16 [ 723.460124][T13024] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 723.510178][T13024] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.536266][T13024] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 723.550296][T13024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 723.559323][T13024] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 723.589534][T13024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.615062][T13024] usb 6-1: config 0 descriptor?? [ 723.876625][T14320] NFSD: Failed to start, no listeners configured. [ 723.936279][T14294] kvm: kvm [14292]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 723.975100][T14294] kvm: kvm [14292]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 724.063897][ T5821] Bluetooth: hci7: link tx timeout [ 724.069275][ T5821] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 724.109989][T14319] NFSD: Failed to start, no listeners configured. [ 724.415122][T13024] usbhid 6-1:0.0: can't add hid device: -71 [ 724.441628][T13024] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 724.477876][T13024] usb 6-1: USB disconnect, device number 22 [ 724.793998][ T30] audit: type=1400 audit(1769867032.910:1434): avc: denied { nlmsg_read } for pid=14332 comm="syz.1.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 724.882455][ T30] audit: type=1400 audit(1769867033.004:1435): avc: denied { create } for pid=14336 comm="syz.1.2124" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 724.926258][T14337] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 724.938082][T14337] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 724.950327][T14337] overlayfs: failed to clone upperpath [ 724.990148][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.996538][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 725.011968][T14337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2124'. [ 725.747978][ T30] audit: type=1400 audit(1769867033.592:1436): avc: denied { append } for pid=14338 comm="syz.5.2125" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 725.816089][ T30] audit: type=1400 audit(1769867033.592:1437): avc: denied { write } for pid=14338 comm="syz.5.2125" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 725.982613][ T30] audit: type=1400 audit(1769867034.159:1438): avc: denied { remount } for pid=14346 comm="syz.1.2128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 726.003678][T14347] binder: Unknown parameter '3ta4s' [ 726.046126][T14347] tipc: Resetting bearer [ 726.054339][ T10] lo speed is unknown, defaulting to 1000 [ 726.075139][T11843] Bluetooth: hci7: command 0x0406 tx timeout [ 726.260451][T14345] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2126'. [ 726.485616][T14361] random: crng reseeded on system resumption [ 726.521949][T14361] Restarting kernel threads ... [ 726.527948][T14361] Done restarting kernel threads. [ 726.774975][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 726.845268][ T30] audit: type=1400 audit(1769867035.062:1439): avc: denied { unmount } for pid=12288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 726.918104][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 726.942739][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 727.064468][T14374] random: crng reseeded on system resumption [ 727.119371][ T10] usb 2-1: New USB device found, idVendor=046a, idProduct=0331, bcdDevice= 0.00 [ 727.179377][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.200866][ T793] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 727.298868][ T10] usb 2-1: config 0 descriptor?? [ 727.444524][T14381] siw: device registration error -23 [ 727.459825][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 727.712877][ T793] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 727.721333][ T793] usb 3-1: config 0 has no interface number 0 [ 727.734281][ T793] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 727.743661][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.752507][ T793] usb 3-1: Product: syz [ 727.757242][ T793] usb 3-1: Manufacturer: syz [ 727.763941][ T793] usb 3-1: SerialNumber: syz [ 727.800962][ T793] usb 3-1: config 0 descriptor?? [ 727.832357][ T793] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 727.864063][ T793] usb 3-1: selecting invalid altsetting 1 [ 727.877545][ T793] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 728.004876][ T793] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 728.015376][ T793] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 728.023731][ T793] usb 3-1: media controller created [ 728.035327][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 728.044278][T14369] netlink: 'syz.2.2133': attribute type 21 has an invalid length. [ 729.034521][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 729.299829][T14388] can0: slcan on ttyS3. [ 730.195605][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 730.218242][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 730.232744][T14383] can0 (unregistered): slcan off ttyS3. [ 730.352693][ T10] usb 2-1: USB disconnect, device number 79 [ 730.585800][T13024] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 730.699291][ T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 730.747109][T13024] usb 7-1: no configurations [ 730.755937][T13024] usb 7-1: can't read configurations, error -22 [ 730.785960][T14406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8218 sclass=netlink_route_socket pid=14406 comm=syz.7.2141 [ 730.842558][ T10] usb 2-1: device descriptor read/64, error -71 [ 730.889898][T13024] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 731.033012][T13024] usb 7-1: no configurations [ 731.053765][T13024] usb 7-1: can't read configurations, error -22 [ 731.078413][T13024] usb usb7-port1: attempt power cycle [ 731.095955][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 731.123205][ T793] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 731.146888][ T793] zl10353_read_register: readreg error (reg=127, ret==-71) [ 731.156090][ T793] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 731.205042][T14373] Restarting kernel threads ... [ 731.210162][T14373] Done restarting kernel threads. [ 731.250395][ T793] usb 3-1: USB disconnect, device number 59 [ 731.281447][ T10] usb 2-1: device descriptor read/64, error -71 [ 731.435381][ T10] usb usb2-port1: attempt power cycle [ 731.465393][T13024] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 731.541403][T14427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.926454][T13024] usb 7-1: no configurations [ 731.933617][T13024] usb 7-1: can't read configurations, error -22 [ 731.966232][ T9] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 732.078386][T13024] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 732.119929][T13024] usb 7-1: no configurations [ 732.124616][T13024] usb 7-1: can't read configurations, error -22 [ 732.142655][T13024] usb usb7-port1: unable to enumerate USB device [ 732.157949][ T9] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 732.166039][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.185450][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 732.206712][ T9] usb 6-1: config 0 has no interface number 0 [ 732.226695][ T10] usb 2-1: device descriptor read/8, error -71 [ 732.234067][ T9] usb 6-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 732.252206][ T9] usb 6-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.273172][ T9] usb 6-1: config 0 interface 41 has no altsetting 0 [ 732.283462][ T9] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 732.293230][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.301865][ T9] usb 6-1: Product: syz [ 732.306072][ T9] usb 6-1: Manufacturer: syz [ 732.310832][ T9] usb 6-1: SerialNumber: syz [ 732.504534][ T9] usb 6-1: config 0 descriptor?? [ 732.515396][ T9] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22 [ 732.556388][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 732.585324][ T10] usb 2-1: device descriptor read/8, error -71 [ 732.690411][ T10] usb usb2-port1: unable to enumerate USB device [ 733.267333][T14446] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 733.275151][T14446] audit: out of memory in audit_log_start [ 733.295850][ T30] audit: type=1400 audit(1769867041.802:1440): avc: denied { connect } for pid=14442 comm="syz.2.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 734.261459][ T30] audit: type=1400 audit(1769867042.516:1441): avc: denied { lock } for pid=14452 comm="syz.1.2150" path="socket:[49207]" dev="sockfs" ino=49207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 734.342143][ T24] usb 6-1: USB disconnect, device number 23 [ 734.461667][ T793] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 734.658942][ T10] IPVS: starting estimator thread 0... [ 734.659369][T14473] IPVS: ip_vs_add_dest(): server weight less than zero [ 734.760283][T14476] can0: slcan on ttyS3. [ 735.138430][T14479] IPVS: rr: FWM 3 0x00000003 - no destination available [ 735.157857][T14476] can0 (unregistered): slcan off ttyS3. [ 735.169543][T14477] can0: slcan on ttyS3. [ 735.204298][T14474] IPVS: using max 71 ests per chain, 170400 per kthread [ 735.221342][ T793] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 735.270115][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.366537][ T793] usb 7-1: Product: syz [ 735.370740][ T793] usb 7-1: Manufacturer: syz [ 735.375330][ T793] usb 7-1: SerialNumber: syz [ 735.443457][T14465] can0 (unregistered): slcan off ttyS3. [ 735.455062][T14484] program syz.2.2158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 735.960324][T14494] FAULT_INJECTION: forcing a failure. [ 735.960324][T14494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.973476][T14494] CPU: 1 UID: 0 PID: 14494 Comm: syz.5.2159 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.973503][T14494] Tainted: [L]=SOFTLOCKUP [ 735.973510][T14494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 735.973521][T14494] Call Trace: [ 735.973527][T14494] [ 735.973534][T14494] dump_stack_lvl+0x100/0x190 [ 735.973563][T14494] should_fail_ex.cold+0x5/0xa [ 735.973588][T14494] _copy_from_user+0x2e/0xd0 [ 735.973613][T14494] copy_msghdr_from_user+0x9f/0x4f0 [ 735.973633][T14494] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 735.973664][T14494] ___sys_sendmsg+0x106/0x1e0 [ 735.973684][T14494] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.973715][T14494] ? find_held_lock+0x2b/0x80 [ 735.973755][T14494] __sys_sendmsg+0x170/0x220 [ 735.973779][T14494] ? __pfx___sys_sendmsg+0x10/0x10 [ 735.973818][T14494] do_syscall_64+0xc9/0xf80 [ 735.973841][T14494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.973859][T14494] RIP: 0033:0x7faba599aeb9 [ 735.973873][T14494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.973891][T14494] RSP: 002b:00007faba68a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.973909][T14494] RAX: ffffffffffffffda RBX: 00007faba5c16180 RCX: 00007faba599aeb9 [ 735.973921][T14494] RDX: 0000000000000800 RSI: 0000200000000380 RDI: 0000000000000007 [ 735.973931][T14494] RBP: 00007faba68a9090 R08: 0000000000000000 R09: 0000000000000000 [ 735.973942][T14494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.973952][T14494] R13: 00007faba5c16218 R14: 00007faba5c16180 R15: 00007fff6d581a98 [ 735.973976][T14494] [ 736.588385][ T30] audit: type=1400 audit(1769867044.879:1442): avc: denied { bind } for pid=14456 comm="syz.6.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 737.568740][ T793] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 737.581463][ T793] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 737.593302][ T793] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 737.609022][ T793] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 737.726793][ T793] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 737.867553][T14520] random: crng reseeded on system resumption [ 738.111925][ T793] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 738.292356][T14520] Restarting kernel threads ... [ 738.292775][T14520] Done restarting kernel threads. [ 738.305792][T14529] fuse: Unknown parameter 'user_id00000000000000000000' [ 738.378853][ T793] usb 7-1: USB disconnect, device number 12 [ 738.512683][ T24] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 738.910893][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.942158][ T793] IPVS: starting estimator thread 0... [ 738.957884][T14538] IPVS: ip_vs_add_dest(): server weight less than zero [ 738.964739][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.984864][T14538] IPVS: rr: FWM 3 0x00000003 - no destination available [ 738.995077][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 739.024162][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 739.033528][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.071403][T14539] IPVS: using max 45 ests per chain, 108000 per kthread [ 739.274791][ T24] usb 2-1: config 0 descriptor?? [ 739.623695][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.664759][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.828914][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 739.839004][T14562] overlayfs: missing 'lowerdir' [ 739.861662][T14555] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 740.022999][T14560] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2171'. [ 740.196506][ T24] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x6 [ 740.326213][ T24] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 741.416072][T14585] random: crng reseeded on system resumption [ 741.476078][T14585] Restarting kernel threads ... [ 741.482361][T14585] Done restarting kernel threads. [ 741.586105][ T24] usb 2-1: reset high-speed USB device number 84 using dummy_hcd [ 741.747682][ T24] usb 2-1: device descriptor read/64, error -32 [ 741.986290][ T24] usb 2-1: reset high-speed USB device number 84 using dummy_hcd [ 742.351318][T14597] IPVS: ip_vs_add_dest(): server weight less than zero [ 742.453670][T14601] overlayfs: missing 'lowerdir' [ 742.756018][T14612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2185'. [ 742.866276][T14608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=14608 comm=syz.1.2184 [ 742.939705][T10801] usb 2-1: USB disconnect, device number 84 [ 743.129801][T14608] netlink: 'syz.1.2184': attribute type 12 has an invalid length. [ 743.385922][ T5817] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 743.605750][ T5817] usb 6-1: Using ep0 maxpacket: 32 [ 744.036442][ T11] block nbd0: Possible stuck request ffff8880266b8000: control (read@0,1024B). Runtime 390 seconds [ 744.047217][ T11] block nbd0: Possible stuck request ffff8880266b8200: control (read@1024,1024B). Runtime 390 seconds [ 744.058230][ T11] block nbd0: Possible stuck request ffff8880266b8400: control (read@2048,1024B). Runtime 390 seconds [ 744.069506][ T11] block nbd0: Possible stuck request ffff8880266b8600: control (read@3072,1024B). Runtime 390 seconds [ 744.083970][ T5817] usb 6-1: config 0 interface 0 has no altsetting 0 [ 744.123769][ T5817] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 744.219766][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.396026][ T5817] usb 6-1: Product: syz [ 744.400222][ T5817] usb 6-1: Manufacturer: syz [ 744.418019][ T5817] usb 6-1: SerialNumber: syz [ 744.442040][ T5817] usb 6-1: config 0 descriptor?? [ 745.083757][ T5817] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 745.110722][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 745.430529][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.464332][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.475077][ T5817] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 745.484179][ T5817] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 745.493329][ T10] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 745.508830][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.523164][ T10] usb 8-1: config 0 descriptor?? [ 745.735744][T14645] overlayfs: missing 'lowerdir' [ 745.740818][ T30] audit: type=1400 audit(1769867054.895:1443): avc: denied { ioctl } for pid=14613 comm="syz.5.2186" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 746.012842][T14657] overlayfs: missing 'lowerdir' [ 746.495047][ T30] audit: type=1400 audit(1769867055.693:1444): avc: denied { create } for pid=14661 comm="syz.2.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 746.825732][T13024] usb 6-1: USB disconnect, device number 24 [ 747.441164][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 747.483120][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 747.530067][ T10] usb 8-1: USB disconnect, device number 4 [ 747.641782][T14675] sctp: [Deprecated]: syz.6.2203 (pid 14675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 747.641782][T14675] Use struct sctp_sack_info instead [ 747.743921][ T30] audit: type=1400 audit(1769867056.931:1445): avc: denied { read } for pid=14673 comm="syz.6.2203" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 748.303792][T14675] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 748.312021][T14675] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 748.352599][T14684] IPVS: ip_vs_add_dest(): server weight less than zero [ 748.439686][T14675] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 748.465935][T14675] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 748.476457][T14675] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 748.482740][T14675] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 748.491633][T14675] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 748.497694][T14675] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 748.521412][T14675] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 748.544012][T14675] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 748.559389][T14675] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 748.575553][T14675] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 748.593412][T14675] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 748.604550][T14675] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 748.613149][T14675] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 749.100956][T14695] overlayfs: missing 'lowerdir' [ 749.640888][T14710] netlink: 'syz.2.2211': attribute type 4 has an invalid length. [ 749.649219][T14710] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2211'. [ 749.677551][T14710] .`: renamed from bond0 (while UP) [ 749.843965][T11843] Bluetooth: hci0: command 0x0c1a tx timeout [ 750.358852][T11843] Bluetooth: hci1: command 0x0406 tx timeout [ 750.434781][T11843] Bluetooth: hci5: command 0x0c1a tx timeout [ 750.441041][T11843] Bluetooth: hci4: command 0x0406 tx timeout [ 750.448772][T11843] Bluetooth: hci2: command 0x0406 tx timeout [ 750.520234][T11843] Bluetooth: hci6: command 0x0c1a tx timeout [ 750.526723][ T5821] Bluetooth: hci7: command 0x0406 tx timeout [ 750.891690][ T793] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 750.903636][T14728] random: crng reseeded on system resumption [ 750.915335][T14728] Restarting kernel threads ... [ 750.922860][T14728] Done restarting kernel threads. [ 751.237678][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.249147][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.259682][ T793] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 751.269431][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.448248][ T793] usb 6-1: config 0 descriptor?? [ 752.180156][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout [ 752.339316][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 752.416093][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 752.422131][ T5821] Bluetooth: hci5: command 0x0c1a tx timeout [ 752.494183][ T5821] Bluetooth: hci7: command 0x0406 tx timeout [ 752.500236][T11843] Bluetooth: hci6: command 0x0c1a tx timeout [ 752.511193][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 752.673138][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 752.683710][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 752.701822][ T10] usb 2-1: config 0 has no interface number 0 [ 752.707933][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.737228][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.758586][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 752.777489][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.801141][ T10] usb 2-1: config 0 descriptor?? [ 753.942187][ T793] usbhid 6-1:0.0: can't add hid device: -71 [ 753.998849][ T793] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 754.396361][ T5821] Bluetooth: hci5: command 0x0c1a tx timeout [ 754.403285][ T10] uclogic 0003:28BD:0094.001D: pen parameters not found [ 754.423021][ T10] uclogic 0003:28BD:0094.001D: interface is invalid, ignoring [ 754.445910][ T10] usb 2-1: USB disconnect, device number 85 [ 754.636804][ T5821] Bluetooth: hci6: command 0x0c1a tx timeout [ 754.669888][ T793] usb 6-1: USB disconnect, device number 25 [ 755.390556][T14800] xt_hashlimit: size too large, truncated to 1048576 [ 756.265510][T14794] NFSD: Failed to start, no listeners configured. [ 756.602503][T14814] random: crng reseeded on system resumption [ 756.651890][T14814] Restarting kernel threads ... [ 756.657943][T14814] Done restarting kernel threads. [ 757.240376][T14826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'. [ 759.009261][T14833] overlayfs: missing 'lowerdir' [ 759.269565][T14837] random: crng reseeded on system resumption [ 760.182208][T14835] Restarting kernel threads ... [ 760.187333][T14835] Done restarting kernel threads. [ 760.454231][T13024] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 760.655104][T13024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.679037][ T5817] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 760.873573][T13024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.912383][T13024] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 760.948690][T13024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.999326][T13024] usb 2-1: config 0 descriptor?? [ 761.063573][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 761.074580][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.100522][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.126783][ T5817] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 761.174398][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.215757][ T5817] usb 3-1: config 0 descriptor?? [ 762.032599][ T5817] mcp2221 0003:04D8:00DD.001E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 762.240958][T14893] xt_hashlimit: size too large, truncated to 1048576 [ 762.441224][T13024] usbhid 2-1:0.0: can't add hid device: -71 [ 762.468622][T13024] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 762.987210][T13024] usb 2-1: USB disconnect, device number 86 [ 762.999634][ T5817] usb 3-1: USB disconnect, device number 60 [ 763.230911][T14905] overlayfs: missing 'workdir' [ 763.437674][ T30] audit: type=1400 audit(1769867073.478:1446): avc: denied { audit_control } for pid=14908 comm="syz.2.2244" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 763.873011][ T30] audit: type=1400 audit(1769867073.562:1447): avc: denied { ioctl } for pid=14908 comm="syz.2.2244" path="socket:[50098]" dev="sockfs" ino=50098 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 764.279077][T14921] lo speed is unknown, defaulting to 1000 [ 764.363109][ T5817] IPVS: starting estimator thread 0... [ 764.511509][T14934] IPVS: using max 38 ests per chain, 91200 per kthread [ 764.940178][T14943] netlink: 'syz.2.2250': attribute type 1 has an invalid length. [ 764.949746][T14943] netlink: 'syz.2.2250': attribute type 2 has an invalid length. [ 769.472496][T14976] overlayfs: missing 'workdir' [ 770.329809][T14984] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2257'. [ 770.339838][T14984] netlink: 'syz.5.2257': attribute type 2 has an invalid length. [ 770.562312][T14989] bridge0: port 3(gretap0) entered blocking state [ 770.569048][T14989] bridge0: port 3(gretap0) entered disabled state [ 770.576643][T14989] gretap0: entered allmulticast mode [ 770.593950][T14989] gretap0: entered promiscuous mode [ 770.603070][T14989] bridge0: port 3(gretap0) entered blocking state [ 770.609706][T14989] bridge0: port 3(gretap0) entered forwarding state [ 771.355451][T15007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.834222][T15025] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 772.955419][ T30] audit: type=1400 audit(1769867083.473:1448): avc: denied { setopt } for pid=15030 comm="syz.5.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 772.981804][T15025] Error validating options; rc = [-22] [ 773.011717][ T30] audit: type=1400 audit(1769867083.473:1449): avc: denied { accept } for pid=15030 comm="syz.5.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 773.050328][T15037] overlayfs: missing 'workdir' [ 773.188149][T15040] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15040 comm=syz.7.2269 [ 773.238485][ T11] block nbd0: Possible stuck request ffff8880266b8000: control (read@0,1024B). Runtime 420 seconds [ 773.249762][ T11] block nbd0: Possible stuck request ffff8880266b8200: control (read@1024,1024B). Runtime 420 seconds [ 773.264843][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 773.284048][ T11] block nbd0: Possible stuck request ffff8880266b8400: control (read@2048,1024B). Runtime 420 seconds [ 773.428395][ T11] block nbd0: Possible stuck request ffff8880266b8600: control (read@3072,1024B). Runtime 420 seconds [ 773.567265][T15047] lo speed is unknown, defaulting to 1000 [ 773.681677][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 773.694833][ T10] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.705809][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 773.712428][ T10] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 773.722100][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.738968][ T10] usb 7-1: config 0 descriptor?? [ 773.964512][T15053] overlayfs: failed to clone lowerpath [ 773.971243][ T30] audit: type=1400 audit(1769867084.534:1450): avc: denied { mounton } for pid=15049 comm="syz.1.2272" path="/475/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 774.522000][ T30] audit: type=1400 audit(1769867085.101:1451): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 774.548624][ T10] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 775.027088][T15065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.393319][ T30] audit: type=1400 audit(1769867086.035:1452): avc: denied { map } for pid=15022 comm="syz.6.2264" path=2F6465762F636F6D65646934202864656C6574656429 dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 776.517670][T15089] overlayfs: missing 'lowerdir' [ 776.661396][ T24] usb 7-1: USB disconnect, device number 13 [ 777.173259][T15102] overlay: filesystem on ./file0 not supported as upperdir [ 777.556299][T15107] xt_hashlimit: size too large, truncated to 1048576 [ 778.329768][T15109] lo speed is unknown, defaulting to 1000 [ 778.551950][T15117] lo speed is unknown, defaulting to 1000 [ 780.034475][T15140] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2295'. [ 780.367189][T15148] siw: device registration error -23 [ 780.997984][T15155] xt_hashlimit: size too large, truncated to 1048576 [ 781.207305][T15159] fuse: Unknown parameter 'fd0x0000000000000003' [ 782.768342][T15179] lo speed is unknown, defaulting to 1000 [ 782.779334][T15178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48400 sclass=netlink_route_socket pid=15178 comm=syz.6.2303 [ 782.839056][T15178] hub 9-0:1.0: USB hub found [ 782.846683][T15178] hub 9-0:1.0: 1 port detected [ 783.492670][T15189] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2307'. [ 783.516368][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 783.522674][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 784.465762][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 784.707495][T15205] fuse: Unknown parameter 'fd0x0000000000000003' [ 784.851034][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 784.860218][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.980689][ T10] usb 6-1: Product: syz [ 784.995219][ T10] usb 6-1: Manufacturer: syz [ 785.016897][ T10] usb 6-1: SerialNumber: syz [ 785.261407][T10801] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 785.444072][T15215] NFSD: Failed to start, no listeners configured. [ 785.489629][T10801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.959504][T10801] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 786.004320][T10801] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 786.108869][T10801] usb 7-1: Manufacturer: syz [ 786.185093][T10801] usb 7-1: config 0 descriptor?? [ 786.206853][T10801] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 786.307224][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 786.319274][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 786.336817][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 786.352121][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 786.362458][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 786.389210][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 786.659495][ T10] usb 6-1: USB disconnect, device number 26 [ 786.725806][T15226] NFSD: Failed to start, no listeners configured. [ 787.143443][T15234] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2318'. [ 787.268997][T15238] lo speed is unknown, defaulting to 1000 [ 787.763030][T15242] xt_hashlimit: max too large, truncated to 1048576 [ 788.576606][ T30] audit: type=1400 audit(1769867099.873:1453): avc: denied { setopt } for pid=15247 comm="syz.7.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 789.221599][T10801] usb 7-1: USB disconnect, device number 14 [ 789.400640][T15260] random: crng reseeded on system resumption [ 789.470526][T15260] Restarting kernel threads ... [ 789.477257][T15260] Done restarting kernel threads. [ 789.689742][T15264] siw: device registration error -23 [ 789.707986][T15268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2329'. [ 789.717819][T15268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2329'. [ 789.916215][T15274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2330'. [ 790.538757][T15287] IPVS: ip_vs_add_dest(): server weight less than zero [ 790.546702][T15287] IPVS: rr: FWM 3 0x00000003 - no destination available [ 790.913772][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 791.099955][T15292] hsr_slave_1 (unregistering): left promiscuous mode [ 791.225804][T15301] random: crng reseeded on system resumption [ 791.297260][T15301] Restarting kernel threads ... [ 791.303271][T15301] Done restarting kernel threads. [ 791.525867][T15294] lo speed is unknown, defaulting to 1000 [ 791.539619][T15303] FAULT_INJECTION: forcing a failure. [ 791.539619][T15303] name failslab, interval 1, probability 0, space 0, times 0 [ 791.552582][ T30] audit: type=1400 audit(1769867102.980:1454): avc: denied { rename } for pid=15302 comm="syz.2.2339" name="file0" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 791.575907][T15303] CPU: 0 UID: 0 PID: 15303 Comm: syz.2.2339 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.575938][T15303] Tainted: [L]=SOFTLOCKUP [ 791.575945][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 791.575956][T15303] Call Trace: [ 791.575962][T15303] [ 791.575970][T15303] dump_stack_lvl+0x100/0x190 [ 791.575998][T15303] should_fail_ex.cold+0x5/0xa [ 791.576018][T15303] should_failslab+0xc2/0x120 [ 791.576041][T15303] kmem_cache_alloc_noprof+0x83/0x780 [ 791.576055][T15303] ? getname_flags.part.0+0x4c/0x540 [ 791.576074][T15303] ? getname_flags.part.0+0x4c/0x540 [ 791.576090][T15303] getname_flags.part.0+0x4c/0x540 [ 791.576108][T15303] getname_flags+0x93/0xf0 [ 791.576120][T15303] do_sys_openat2+0xc5/0x220 [ 791.576135][T15303] ? __pfx_do_sys_openat2+0x10/0x10 [ 791.576150][T15303] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 791.576165][T15303] ? __fget_files+0x21f/0x3d0 [ 791.576181][T15303] __x64_sys_openat+0x12d/0x210 [ 791.576197][T15303] ? __pfx___x64_sys_openat+0x10/0x10 [ 791.576212][T15303] ? ksys_write+0x1ac/0x250 [ 791.576229][T15303] do_syscall_64+0xc9/0xf80 [ 791.576242][T15303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.576253][T15303] RIP: 0033:0x7f6bbf39aeb9 [ 791.576263][T15303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.576273][T15303] RSP: 002b:00007f6bc02a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 791.576284][T15303] RAX: ffffffffffffffda RBX: 00007f6bbf615fa0 RCX: 00007f6bbf39aeb9 [ 791.576291][T15303] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 791.576298][T15303] RBP: 00007f6bc02a9090 R08: 0000000000000000 R09: 0000000000000000 [ 791.576304][T15303] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 791.576310][T15303] R13: 00007f6bbf616038 R14: 00007f6bbf615fa0 R15: 00007fffb7f14178 [ 791.576323][T15303] [ 791.834375][T15306] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2341'. [ 791.848897][ T30] audit: type=1400 audit(1769867103.316:1455): avc: denied { read } for pid=15305 comm="syz.5.2340" name="file1" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 791.902085][ T30] audit: type=1400 audit(1769867103.337:1456): avc: denied { open } for pid=15305 comm="syz.5.2340" path="/125/file0/file1" dev="overlay" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 792.672580][T11843] Bluetooth: hci0: command 0x0c1a tx timeout [ 792.771443][ T5821] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 792.929976][T15322] xt_hashlimit: size too large, truncated to 1048576 [ 793.696389][ T5817] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 793.883527][ T5817] usb 7-1: Using ep0 maxpacket: 16 [ 793.897893][ T5817] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.915005][ T5817] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 793.946205][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.957362][ T5817] usb 7-1: config 0 descriptor?? [ 793.968184][ T5817] pegasus_notetaker 7-1:0.0: Invalid number of endpoints [ 793.976680][ T5817] pegasus_notetaker 7-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 794.715255][T15351] random: crng reseeded on system resumption [ 794.887161][T15353] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 794.916627][ T9] usb 7-1: USB disconnect, device number 15 [ 794.928208][T15351] Restarting kernel threads ... [ 794.949161][T15351] Done restarting kernel threads. [ 795.000186][ T5817] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 795.032860][ T30] audit: type=1400 audit(1769867106.645:1457): avc: denied { getopt } for pid=15341 comm="syz.2.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 795.114885][T15328] bond2: entered promiscuous mode [ 795.120091][T15328] bond2: entered allmulticast mode [ 795.131113][T15328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 795.144967][ T5817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.352730][ T5817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.388092][ T5817] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 795.407616][ T5817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.420701][ T5817] usb 8-1: config 0 descriptor?? [ 795.989631][T15371] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2355'. [ 796.831084][ T5817] usbhid 8-1:0.0: can't add hid device: -71 [ 796.856443][ T5817] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 797.526227][ T5817] usb 8-1: USB disconnect, device number 5 [ 797.611576][T15385] lo speed is unknown, defaulting to 1000 [ 798.610746][T15395] random: crng reseeded on system resumption [ 799.018972][T15401] random: crng reseeded on system resumption [ 799.369257][T15400] Restarting kernel threads ... [ 799.375777][T15400] Done restarting kernel threads. [ 799.678641][T15413] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2366'. [ 801.037779][ T30] audit: type=1400 audit(1769867112.955:1458): avc: denied { bind } for pid=15427 comm="syz.5.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 801.059947][T15428] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2369'. [ 801.171472][ T30] audit: type=1400 audit(1769867112.986:1459): avc: denied { write } for pid=15427 comm="syz.5.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 802.401214][ T11] block nbd0: Possible stuck request ffff8880266b8000: control (read@0,1024B). Runtime 450 seconds [ 802.412033][ T11] block nbd0: Possible stuck request ffff8880266b8200: control (read@1024,1024B). Runtime 450 seconds [ 802.423038][ T11] block nbd0: Possible stuck request ffff8880266b8400: control (read@2048,1024B). Runtime 450 seconds [ 802.434449][ T11] block nbd0: Possible stuck request ffff8880266b8600: control (read@3072,1024B). Runtime 450 seconds [ 802.690712][T15443] veth0_to_team: entered promiscuous mode [ 803.267310][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 803.462967][ T10] usb 2-1: too many configurations: 94, using maximum allowed: 8 [ 803.556699][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 803.568896][T15456] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2378'. [ 803.570938][ T10] usb 2-1: can't read configurations, error -61 [ 803.664011][T15457] NFSD: Failed to start, no listeners configured. [ 803.715407][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 804.039354][ T10] usb 2-1: too many configurations: 94, using maximum allowed: 8 [ 804.086176][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 804.135047][ T10] usb 2-1: can't read configurations, error -61 [ 804.148097][ T10] usb usb2-port1: attempt power cycle [ 804.231418][T15465] tmpfs: Bad value for 'mpol' [ 804.562746][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 804.583239][ T10] usb 2-1: too many configurations: 94, using maximum allowed: 8 [ 804.735457][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 804.870951][ T10] usb 2-1: can't read configurations, error -61 [ 804.920890][T15475] xt_hashlimit: size too large, truncated to 1048576 [ 804.931760][T15471] siw: device registration error -23 [ 805.029905][ T10] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 805.969937][ T10] usb 2-1: device descriptor read/8, error -71 [ 806.087033][ T10] usb usb2-port1: unable to enumerate USB device [ 806.443733][T15487] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15487 comm=syz.5.2386 [ 807.609175][T15502] geneve2: entered promiscuous mode [ 807.839400][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 808.056534][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.087801][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 808.107666][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.126631][ T10] usb 2-1: config 0 descriptor?? [ 808.169358][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 808.787514][T15524] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2395'. [ 808.858249][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 808.865342][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 808.875717][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 808.901475][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 808.916418][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 808.924517][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 808.960769][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 808.973380][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 808.980358][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 808.989005][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 808.999154][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 809.016351][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 809.035624][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2389'. [ 809.048232][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 809.149603][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 809.171177][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 809.609648][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 809.643281][ T10] pwc: Registered as video103. [ 809.697206][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41 [ 809.769809][ T10] usb 2-1: USB disconnect, device number 91 [ 810.188074][T15544] geneve2: entered promiscuous mode [ 810.525765][T15556] random: crng reseeded on system resumption [ 810.613018][T15556] Restarting kernel threads ... [ 810.618958][T15556] Done restarting kernel threads. [ 810.765555][T15555] siw: device registration error -23 [ 811.605051][T15566] NFSD: Failed to start, no listeners configured. [ 811.669053][T15563] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 811.935029][T15571] hfs: unable to load iocharset "io#harset" [ 812.288754][ T43] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 812.303452][T15578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.440891][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 812.465124][ T43] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 812.473371][ T43] usb 6-1: config 0 has no interface number 0 [ 812.480211][ T43] usb 6-1: config 0 interface 196 has no altsetting 0 [ 812.552512][ T43] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 812.576437][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.592297][ T43] usb 6-1: Product: syz [ 812.690395][ T43] usb 6-1: Manufacturer: syz [ 812.696025][ T43] usb 6-1: SerialNumber: syz [ 812.716393][ T43] usb 6-1: config 0 descriptor?? [ 812.807457][T15594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.905177][T15611] overlayfs: overlapping lowerdir path [ 815.202172][T10801] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 817.035813][T10801] usb 3-1: Using ep0 maxpacket: 16 [ 817.795788][ T43] ipheth 6-1:0.196: Unable to find endpoints [ 817.820823][T10801] usb 3-1: device descriptor read/all, error -71 [ 817.915409][T15644] FAULT_INJECTION: forcing a failure. [ 817.915409][T15644] name failslab, interval 1, probability 0, space 0, times 0 [ 818.023949][T15644] CPU: 1 UID: 0 PID: 15644 Comm: syz.6.2430 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.023979][T15644] Tainted: [L]=SOFTLOCKUP [ 818.023985][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 818.023994][T15644] Call Trace: [ 818.023999][T15644] [ 818.024005][T15644] dump_stack_lvl+0x100/0x190 [ 818.024028][T15644] should_fail_ex.cold+0x5/0xa [ 818.024045][T15644] should_failslab+0xc2/0x120 [ 818.024064][T15644] __kmalloc_cache_noprof+0x80/0x810 [ 818.024079][T15644] ? __sta_info_destroy_part2+0x272/0x540 [ 818.024102][T15644] ? __sta_info_destroy_part2+0x272/0x540 [ 818.024119][T15644] __sta_info_destroy_part2+0x272/0x540 [ 818.024141][T15644] __sta_info_flush+0x4f6/0x720 [ 818.024167][T15644] ? __pfx___sta_info_flush+0x10/0x10 [ 818.024191][T15644] ieee80211_ibss_disconnect+0x169/0xba0 [ 818.024218][T15644] ieee80211_ibss_leave+0x4a/0x160 [ 818.024231][T15644] cfg80211_leave_ibss+0x1a7/0x450 [ 818.024248][T15644] cfg80211_leave+0x219/0x410 [ 818.024272][T15644] cfg80211_netdev_notifier_call+0x55b/0x10e0 [ 818.024296][T15644] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 818.024316][T15644] ? __lock_acquire+0x4a5/0x2630 [ 818.024332][T15644] ? __bfs+0x150/0x2a0 [ 818.024350][T15644] ? check_irq_usage+0xe5/0x810 [ 818.024366][T15644] ? check_irq_usage+0xe5/0x810 [ 818.024379][T15644] ? __bfs+0x150/0x2a0 [ 818.024403][T15644] ? check_noncircular+0x97/0x160 [ 818.024430][T15644] ? __lock_acquire+0x4a5/0x2630 [ 818.024449][T15644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 818.024474][T15644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 818.024495][T15644] ? inetdev_event+0x149/0x17f0 [ 818.024515][T15644] ? igmp_netdev_event+0x7b/0x890 [ 818.024535][T15644] ? __pfx_igmp_netdev_event+0x10/0x10 [ 818.024552][T15644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 818.024571][T15644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 818.024589][T15644] ? ipmr_device_event+0x1bc/0x230 [ 818.024609][T15644] notifier_call_chain+0x99/0x3b0 [ 818.024627][T15644] call_netdevice_notifiers_info+0xbe/0x110 [ 818.024652][T15644] __dev_close_many+0xff/0x700 [ 818.024666][T15644] ? __pfx___dev_close_many+0x10/0x10 [ 818.024688][T15644] ? trace_contention_end+0xd6/0x110 [ 818.024706][T15644] netif_close_many+0x233/0x630 [ 818.024718][T15644] ? nl80211_del_interface+0xb9/0x190 [ 818.024740][T15644] ? __pfx_netif_close_many+0x10/0x10 [ 818.024754][T15644] ? __mutex_unlock_slowpath+0x15c/0x790 [ 818.024774][T15644] netif_close+0x17f/0x230 [ 818.024786][T15644] ? __pfx_netif_close+0x10/0x10 [ 818.024804][T15644] dev_close+0xaa/0x240 [ 818.024823][T15644] nl80211_del_interface+0xec/0x190 [ 818.024844][T15644] genl_family_rcv_msg_doit+0x214/0x300 [ 818.024861][T15644] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 818.024881][T15644] ? bpf_lsm_capable+0x9/0x10 [ 818.024900][T15644] ? security_capable+0x80/0x260 [ 818.024921][T15644] ? ns_capable+0xd2/0xf0 [ 818.024941][T15644] genl_rcv_msg+0x560/0x800 [ 818.024957][T15644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 818.024970][T15644] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 818.024984][T15644] ? __pfx_nl80211_del_interface+0x10/0x10 [ 818.025002][T15644] ? __pfx_nl80211_post_doit+0x10/0x10 [ 818.025024][T15644] netlink_rcv_skb+0x159/0x420 [ 818.025044][T15644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 818.025059][T15644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 818.025087][T15644] ? netlink_deliver_tap+0x1ae/0xcc0 [ 818.025108][T15644] genl_rcv+0x28/0x40 [ 818.025127][T15644] netlink_unicast+0x5aa/0x870 [ 818.025150][T15644] ? __pfx_netlink_unicast+0x10/0x10 [ 818.025185][T15644] netlink_sendmsg+0x8b0/0xda0 [ 818.025208][T15644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.025227][T15644] ? PageHuge+0x180/0x180 [ 818.025249][T15644] ____sys_sendmsg+0xa54/0xc30 [ 818.025264][T15644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.025287][T15644] ___sys_sendmsg+0x190/0x1e0 [ 818.025303][T15644] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.025327][T15644] ? find_held_lock+0x2b/0x80 [ 818.025357][T15644] __sys_sendmsg+0x170/0x220 [ 818.025376][T15644] ? __pfx___sys_sendmsg+0x10/0x10 [ 818.025407][T15644] do_syscall_64+0xc9/0xf80 [ 818.025425][T15644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.025440][T15644] RIP: 0033:0x7fbb1d99aeb9 [ 818.025452][T15644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.025465][T15644] RSP: 002b:00007fbb1e840028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.025480][T15644] RAX: ffffffffffffffda RBX: 00007fbb1dc15fa0 RCX: 00007fbb1d99aeb9 [ 818.025489][T15644] RDX: 0000000020000080 RSI: 0000200000000200 RDI: 0000000000000004 [ 818.025498][T15644] RBP: 00007fbb1e840090 R08: 0000000000000000 R09: 0000000000000000 [ 818.025506][T15644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.025514][T15644] R13: 00007fbb1dc16038 R14: 00007fbb1dc15fa0 R15: 00007ffd5a5a5a38 [ 818.025534][T15644] [ 818.558834][T15648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 818.935124][T15646] NFSD: Failed to start, no listeners configured. [ 819.164918][T15643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.255805][T15668] xt_hashlimit: max too large, truncated to 1048576 [ 820.290130][ T30] audit: type=1400 audit(1769867133.176:1460): avc: denied { getopt } for pid=15667 comm="syz.1.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 820.679409][T15577] syz.5.2409 (15577): drop_caches: 3 [ 820.694388][T10801] usb 6-1: USB disconnect, device number 27 [ 823.400456][T15714] NFSD: Failed to start, no listeners configured. [ 823.603493][ T5817] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 823.897127][T15723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'. [ 824.793703][ T5817] usb 8-1: Using ep0 maxpacket: 16 [ 824.801131][ T5817] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 824.809472][ T5817] usb 8-1: config 0 has no interface number 0 [ 824.815666][ T5817] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 825.567514][ T5817] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 825.577540][ T5817] usb 8-1: config 0 interface 41 has no altsetting 0 [ 825.586158][ T5817] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 825.595682][ T5817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.603746][ T5817] usb 8-1: Product: syz [ 825.608216][ T5817] usb 8-1: Manufacturer: syz [ 825.616650][ T5817] usb 8-1: SerialNumber: syz [ 825.627741][ T5817] usb 8-1: config 0 descriptor?? [ 825.637381][T15716] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 825.644728][T15716] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 825.916088][T15716] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 825.923724][T15716] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 825.931162][T15728] fuse: Unknown parameter 'rootmtde' [ 828.214401][ T5817] sr9700 8-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.7-1, CoreChip SR9700 USB Ethernet, f0:f1:f7:ba:84:92 [ 828.234429][ T30] audit: type=1326 audit(1769867141.512:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.7.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988219aeb9 code=0x7ffc0000 [ 828.285559][T15744] mkiss: ax0: crc mode is auto. [ 828.293023][ T30] audit: type=1326 audit(1769867141.512:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.7.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988219aeb9 code=0x7ffc0000 [ 828.314415][ T5817] usb 8-1: USB disconnect, device number 6 [ 828.339424][T13024] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 828.348606][ T5817] sr9700 8-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.7-1, CoreChip SR9700 USB Ethernet [ 828.393193][ T30] audit: type=1326 audit(1769867141.544:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.7.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f988219aeb9 code=0x7ffc0000 [ 828.460836][ T30] audit: type=1326 audit(1769867141.544:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.7.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988219aeb9 code=0x7ffc0000 [ 828.515528][ T30] audit: type=1326 audit(1769867141.565:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.7.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988219aeb9 code=0x7ffc0000 [ 828.517938][T13024] usb 6-1: Using ep0 maxpacket: 16 [ 828.577722][ T30] audit: type=1326 audit(1769867141.565:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.7.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f988219aeb9 code=0x7ffc0000 [ 828.583473][T13024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.622627][ T30] audit: type=1326 audit(1769867141.701:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.7.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988219aeb9 code=0x7ffc0000 [ 828.647682][ T30] audit: type=1326 audit(1769867141.701:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.7.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988219aeb9 code=0x7ffc0000 [ 828.671579][ T30] audit: type=1326 audit(1769867141.743:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.7.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f988219aeb9 code=0x7ffc0000 [ 828.695560][ T30] audit: type=1326 audit(1769867141.743:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.7.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988219aeb9 code=0x7ffc0000 [ 828.705902][T13024] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 828.797386][T13024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.827299][T13024] usb 6-1: config 0 descriptor?? [ 829.404442][T13024] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 829.908008][T13024] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 830.058449][ T793] usb 6-1: USB disconnect, device number 28 [ 830.108208][T13024] usb 8-1: Using ep0 maxpacket: 16 [ 830.118303][T13024] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.135005][T13024] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 830.271497][T13024] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 830.722104][T13024] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 830.732810][T13024] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.916444][T13024] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 831.024277][T13024] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 831.051824][ T11] block nbd0: Possible stuck request ffff8880266b8000: control (read@0,1024B). Runtime 480 seconds [ 831.063367][ T11] block nbd0: Possible stuck request ffff8880266b8200: control (read@1024,1024B). Runtime 480 seconds [ 831.094342][ T11] block nbd0: Possible stuck request ffff8880266b8400: control (read@2048,1024B). Runtime 480 seconds [ 831.105667][ T11] block nbd0: Possible stuck request ffff8880266b8600: control (read@3072,1024B). Runtime 480 seconds [ 831.116899][T13024] usb 8-1: Manufacturer: syz [ 831.137774][T13024] usb 8-1: config 0 descriptor?? [ 831.521929][T15814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2467'. [ 832.413587][ T31] INFO: task syz.3.1940:13433 blocked for more than 144 seconds. [ 832.512814][ T31] Tainted: G L syzkaller #0 [ 832.540653][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 833.502617][ T31] task:syz.3.1940 state:D stack:25688 pid:13433 tgid:13429 ppid:5811 task_flags:0x400140 flags:0x00080002 [ 833.515449][ T31] Call Trace: [ 833.519189][ T31] [ 833.522519][ T31] ? __schedule+0xf65/0x5e10 [ 833.706827][ T31] __schedule+0xfe4/0x5e10 [ 833.770529][T15817] random: crng reseeded on system resumption [ 833.820459][ T31] ? __lock_acquire+0x4a5/0x2630 [ 833.845441][ T31] ? __pfx___schedule+0x10/0x10 [ 833.861154][T15817] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 833.871989][ T31] ? find_held_lock+0x2b/0x80 [ 833.892750][ T31] ? schedule+0x2bf/0x390 [ 833.915941][ T31] schedule+0xdd/0x390 [ 833.947317][ T31] io_schedule+0x8a/0xf0 [ 833.961325][T15817] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 833.977414][ T31] folio_wait_bit_common+0x414/0xa70 [ 833.995065][ T31] ? folio_wait_bit_common+0x2a0/0xa70 [ 834.003221][T15817] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 834.011447][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 834.017695][T15817] PM: hibernation: Basic memory bitmaps created [ 834.073883][T13024] rc_core: IR keymap rc-hauppauge not found [ 834.089263][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 834.098796][T13024] Registered IR keymap rc-empty [ 834.098834][ T31] ? __pfx___might_resched+0x10/0x10 [ 834.125255][ T31] ? compaction_free+0x182/0x430 [ 834.135956][T13024] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 834.137059][ T31] migrate_pages_batch+0x1b85/0x4530 [ 834.174796][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 834.182984][ T31] ? __pfx_compaction_free+0x10/0x10 [ 834.202814][T13024] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 834.206033][ T31] ? __schedule+0x2ef9/0x5e10 [ 834.227563][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 834.239094][ T31] ? rcu_is_watching+0x12/0xc0 [ 834.250057][ T31] ? __schedule+0xff6/0x5e10 [ 834.250202][T13024] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 834.291584][ T31] migrate_pages_sync+0x4db/0x880 [ 834.303318][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 834.314956][T13024] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input42 [ 834.315745][ T31] ? __pfx_compaction_free+0x10/0x10 [ 834.363988][T13024] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 834.365554][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 834.391666][ T31] ? find_held_lock+0x2b/0x80 [ 834.401433][ T31] migrate_pages+0x1a5b/0x2810 [ 834.403523][T13024] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 834.420676][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 834.432196][ T31] ? __pfx_compaction_free+0x10/0x10 [ 834.433098][T13024] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 834.437516][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 834.437553][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 834.459678][ T31] ? __nr_to_section+0xaa/0x100 [ 834.465377][ T31] ? pfn_to_online_page+0x178/0x4c0 [ 834.470100][T13024] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 834.470644][ T31] compact_zone+0x240c/0x4320 [ 834.483902][ T31] ? irqentry_exit+0x180/0x670 [ 834.488753][ T31] ? __pfx_compact_zone+0x10/0x10 [ 834.489084][T13024] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 834.493907][ T31] compact_node+0x17f/0x2c0 [ 834.505401][ T31] ? __pfx_compact_node+0x10/0x10 [ 834.510573][ T31] ? __lru_add_drain_all+0x43c/0x650 [ 834.515868][ T31] ? __lru_add_drain_all+0x441/0x650 [ 834.517661][T13024] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 834.521211][ T31] sysctl_compaction_handler+0x141/0x210 [ 834.533907][ T31] proc_sys_call_handler+0x47f/0x5a0 [ 834.539204][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 834.545011][ T31] ? splice_from_pipe_next+0x1ec/0x5a0 [ 834.552339][ T31] iter_file_splice_write+0x82b/0x10a0 [ 834.553545][T13024] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 834.557911][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 834.557946][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 834.557981][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 834.584356][ T31] direct_splice_actor+0x192/0x6c0 [ 834.585666][T13024] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 834.590445][ T31] splice_direct_to_actor+0x345/0xa30 [ 834.602977][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 834.608693][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 834.613004][T13024] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 834.614736][ T31] do_splice_direct+0x174/0x240 [ 834.626564][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 834.631921][ T31] ? avc_policy_seqno+0x9/0x20 [ 834.637095][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 834.641507][T13024] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 834.643028][ T31] ? rw_verify_area+0xce/0x6d0 [ 834.656008][ T31] do_sendfile+0xadc/0xe20 [ 834.660418][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 834.662568][T13024] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 834.665387][ T31] __x64_sys_sendfile64+0x154/0x220 [ 834.673756][T13024] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 834.680606][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 834.692051][T13024] usb 8-1: USB disconnect, device number 7 [ 834.693045][T15810] Restarting kernel threads ... [ 834.703661][T15810] Done restarting kernel threads. [ 834.709805][T15810] PM: hibernation: Basic memory bitmaps freed [ 834.737862][ T31] do_syscall_64+0xc9/0xf80 [ 834.742564][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.752330][ T31] RIP: 0033:0x7f4ca739aeb9 [ 834.759080][ T31] RSP: 002b:00007f4ca55d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 834.767710][ T31] RAX: ffffffffffffffda RBX: 00007f4ca7616090 RCX: 00007f4ca739aeb9 [ 834.777009][ T31] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 000000000000000a [ 834.785226][ T31] RBP: 00007f4ca7408c1f R08: 0000000000000000 R09: 0000000000000000 [ 834.793182][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 834.801174][ T31] R13: 00007f4ca7616128 R14: 00007f4ca7616090 R15: 00007ffe092626d8 [ 834.809221][ T31] [ 834.812290][ T31] [ 834.812290][ T31] Showing all locks held in the system: [ 834.822077][ T31] 1 lock held by khungtaskd/31: [ 834.827753][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 834.837789][ T31] 6 locks held by kworker/u8:8/3536: [ 834.843152][ T31] 1 lock held by acpid/5165: [ 834.847731][ T31] #0: ffffffff8e5efab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 834.889961][ T31] 2 locks held by getty/5578: [ 834.894662][ T31] #0: ffff88814cfff0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 834.904449][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 834.914574][ T31] 1 lock held by udevd/5814: [ 834.919208][ T31] #0: ffff888142311358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 834.928549][ T31] 4 locks held by udevd/10135: [ 834.933285][ T31] #0: ffff888074e41d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 834.942561][ T31] #1: ffff888056385c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 834.952150][ T31] #2: ffff888056af70f8 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 834.961816][ T31] #3: ffff888052cb4198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 834.972083][ T31] 7 locks held by kworker/0:6/13024: [ 834.977573][ T31] #0: ffff888141a97d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 834.988460][ T31] #1: ffffc900051d7c98 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 835.000007][ T31] #2: ffff88814439e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 835.008926][ T31] #3: ffff888052cb4198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 835.018241][ T31] #4: ffff8880781df160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 835.029027][ T31] #5: ffffffff8fbfe8e8 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x184/0x4d0 [ 835.039214][ T31] #6: ffffffff8e5efab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 835.052857][ T31] 1 lock held by syz.3.1940/13433: [ 835.057951][ T31] #0: ffff8880552d0420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 835.068316][ T31] [ 835.074112][ T31] ============================================= [ 835.074112][ T31] [ 835.085110][ T31] NMI backtrace for cpu 0 [ 835.085128][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 835.085152][ T31] Tainted: [L]=SOFTLOCKUP [ 835.085158][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 835.085168][ T31] Call Trace: [ 835.085175][ T31] [ 835.085182][ T31] dump_stack_lvl+0x100/0x190 [ 835.085210][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 835.085236][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 835.085264][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 835.085293][ T31] sys_info+0x141/0x190 [ 835.085314][ T31] watchdog+0xcc3/0xfe0 [ 835.085346][ T31] ? __pfx_watchdog+0x10/0x10 [ 835.085372][ T31] ? __kthread_parkme+0x18c/0x230 [ 835.085397][ T31] ? __pfx_watchdog+0x10/0x10 [ 835.085424][ T31] ? __pfx_watchdog+0x10/0x10 [ 835.085447][ T31] kthread+0x3b3/0x730 [ 835.085467][ T31] ? __pfx_kthread+0x10/0x10 [ 835.085483][ T31] ? ret_from_fork+0x79/0xaf0 [ 835.085503][ T31] ? ret_from_fork+0x79/0xaf0 [ 835.085532][ T31] ? rcu_is_watching+0x12/0xc0 [ 835.085556][ T31] ? __pfx_kthread+0x10/0x10 [ 835.085575][ T31] ret_from_fork+0x754/0xaf0 [ 835.085595][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 835.085617][ T31] ? __switch_to+0x7b9/0x10c0 [ 835.085641][ T31] ? __pfx_kthread+0x10/0x10 [ 835.085660][ T31] ret_from_fork_asm+0x1a/0x30 [ 835.085689][ T31] [ 835.085696][ T31] Sending NMI from CPU 0 to CPUs 1: [ 835.232114][ C1] NMI backtrace for cpu 1 [ 835.232130][ C1] CPU: 1 UID: 0 PID: 1162 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.232151][ C1] Tainted: [L]=SOFTLOCKUP [ 835.232156][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 835.232165][ C1] Workqueue: events_unbound toggle_allocation_gate [ 835.232190][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x70 [ 835.232211][ C1] Code: f3 0f 1e fa 65 8b 05 c5 54 dd 11 48 8b 34 24 65 48 8b 15 a1 54 dd 11 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 91 f4 72 09 8b 82 6c 16 00 00 85 c0 74 f1 8b 82 48 16 00 00 83 [ 835.232225][ C1] RSP: 0018:ffffc9000403f748 EFLAGS: 00000293 [ 835.232235][ C1] RAX: 0000000000000000 RBX: ffffc9000403f900 RCX: ffffffff8b75ef8c [ 835.232244][ C1] RDX: ffff888028844980 RSI: ffffffff8b75f704 RDI: ffff888028844980 [ 835.232254][ C1] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 835.232262][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000008000 [ 835.232270][ C1] R13: ffffc9000403f94c R14: 0000000000000000 R15: ffffffff826637bb [ 835.232279][ C1] FS: 0000000000000000(0000) GS:ffff8881246db000(0000) knlGS:0000000000000000 [ 835.232293][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.232302][ C1] CR2: 00007faba5be0ad8 CR3: 000000007f841000 CR4: 00000000003526f0 [ 835.232311][ C1] Call Trace: [ 835.232316][ C1] [ 835.232321][ C1] insn_get_opcode+0xbb4/0x11b0 [ 835.232343][ C1] insn_get_modrm+0x84/0x790 [ 835.232357][ C1] insn_get_displacement+0x2f9/0x960 [ 835.232371][ C1] insn_get_immediate+0x84/0x1e00 [ 835.232384][ C1] ? __asan_memset+0x23/0x50 [ 835.232399][ C1] insn_decode+0x21d/0x320 [ 835.232413][ C1] arch_jump_entry_size+0xb6/0x150 [ 835.232434][ C1] ? __pfx_arch_jump_entry_size+0x10/0x10 [ 835.232456][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 835.232474][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x48/0x190 [ 835.232490][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x190 [ 835.232509][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x11a/0x190 [ 835.232526][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 835.232542][ C1] __jump_label_patch+0x85/0x3e0 [ 835.232563][ C1] arch_jump_label_transform_queue+0x7e/0x120 [ 835.232584][ C1] ? find_held_lock+0x2b/0x80 [ 835.232602][ C1] __jump_label_update+0xd7/0x380 [ 835.232624][ C1] jump_label_update+0x37a/0x550 [ 835.232645][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 835.232665][ C1] static_key_enable+0x1a/0x20 [ 835.232683][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 835.232699][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 835.232716][ C1] ? process_one_work+0x80b/0x1840 [ 835.232732][ C1] ? rcu_is_watching+0x12/0xc0 [ 835.232752][ C1] process_one_work+0x9c2/0x1840 [ 835.232771][ C1] ? __pfx_process_one_work+0x10/0x10 [ 835.232789][ C1] ? assign_work+0x19c/0x250 [ 835.232804][ C1] worker_thread+0x5da/0xe40 [ 835.232822][ C1] ? kthread+0x17d/0x730 [ 835.232835][ C1] ? __pfx_worker_thread+0x10/0x10 [ 835.232849][ C1] kthread+0x3b3/0x730 [ 835.232863][ C1] ? __pfx_kthread+0x10/0x10 [ 835.232876][ C1] ? ret_from_fork+0x79/0xaf0 [ 835.232891][ C1] ? ret_from_fork+0x79/0xaf0 [ 835.232905][ C1] ? rcu_is_watching+0x12/0xc0 [ 835.232922][ C1] ? __pfx_kthread+0x10/0x10 [ 835.232935][ C1] ret_from_fork+0x754/0xaf0 [ 835.232951][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 835.232966][ C1] ? __switch_to+0x7b9/0x10c0 [ 835.232984][ C1] ? __pfx_kthread+0x10/0x10 [ 835.233003][ C1] ret_from_fork_asm+0x1a/0x30 [ 835.233022][ C1] [ 835.592925][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 835.599848][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 835.610529][ T31] Tainted: [L]=SOFTLOCKUP [ 835.614845][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 835.624894][ T31] Call Trace: [ 835.628168][ T31] [ 835.631078][ T31] dump_stack_lvl+0x100/0x190 [ 835.635745][ T31] vpanic+0x20d/0x630 [ 835.639710][ T31] panic+0xd1/0xd1 [ 835.643419][ T31] ? __pfx_panic+0x10/0x10 [ 835.647815][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 835.653955][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 835.660094][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 835.666232][ T31] ? watchdog.cold+0x198/0x1ca [ 835.670979][ T31] ? watchdog+0xcd3/0xfe0 [ 835.675296][ T31] watchdog.cold+0x1a9/0x1ca [ 835.679871][ T31] ? __pfx_watchdog+0x10/0x10 [ 835.684531][ T31] ? __kthread_parkme+0x18c/0x230 [ 835.689544][ T31] ? __pfx_watchdog+0x10/0x10 [ 835.694211][ T31] ? __pfx_watchdog+0x10/0x10 [ 835.698875][ T31] kthread+0x3b3/0x730 [ 835.702925][ T31] ? __pfx_kthread+0x10/0x10 [ 835.707500][ T31] ? ret_from_fork+0x79/0xaf0 [ 835.712156][ T31] ? ret_from_fork+0x79/0xaf0 [ 835.716814][ T31] ? rcu_is_watching+0x12/0xc0 [ 835.721559][ T31] ? __pfx_kthread+0x10/0x10 [ 835.726130][ T31] ret_from_fork+0x754/0xaf0 [ 835.730699][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 835.735792][ T31] ? __switch_to+0x7b9/0x10c0 [ 835.740454][ T31] ? __pfx_kthread+0x10/0x10 [ 835.745025][ T31] ret_from_fork_asm+0x1a/0x30 [ 835.749778][ T31] [ 835.753063][ T31] Kernel Offset: disabled [ 835.757363][ T31] Rebooting in 86400 seconds..