last executing test programs: 6m51.735341064s ago: executing program 2 (id=1441): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80000) sendto$packet(r0, &(0x7f0000000180)="434c030357b60e5bd704dfa2ae281b331a81019c67dd64f41580c837b2321759b76948e488f508e26550ec9f607978bb912f48044e8dbd3e6821b9e4a2d49fdcfb7bbde6183b9dfe731441a2d51d2b1e881e1cd701098e5ce97d93b8cfa6f07db6595e02cd1f", 0x66, 0x20008815, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000d"], 0x0, 0x28}, 0x28) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x2f01, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 6m49.364283422s ago: executing program 2 (id=1447): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000000}, 0x240080c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x800) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r6, 0x301, 0x0, 0x25dfdbf8, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40006) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c000) 6m48.30400538s ago: executing program 2 (id=1450): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty=0x601}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 6m48.077240291s ago: executing program 2 (id=1451): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x1, &(0x7f0000000100)=0x304, 0x17) socket$inet6(0xa, 0x802, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000090401130103000100092100000001220b0009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="002213"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000240)={0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000003a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 6m46.18437731s ago: executing program 2 (id=1460): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000000}, 0x240080c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x800) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r6, 0x301, 0x0, 0x25dfdbf8, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40006) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c000) 6m43.648099414s ago: executing program 2 (id=1465): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000340), 0x404e80) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000380)={0x7, 0x9, 0x1, 'queue0\x00', 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r3, r4, 0x0, 0x201f00) prlimit64(0x0, 0xe, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 6m26.547282424s ago: executing program 32 (id=1465): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000340), 0x404e80) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000380)={0x7, 0x9, 0x1, 'queue0\x00', 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r3, r4, 0x0, 0x201f00) prlimit64(0x0, 0xe, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4m20.345455805s ago: executing program 5 (id=1871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9181}, {0x4, 0x2, 0x8, 0x2, 0x8, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="aac1e464f484be0d86a4", 0xa}], 0x1}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="11000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000fcdbdf2521000000050020000100000009001f007068793000000000"], 0x28}, 0x1, 0x0, 0x0, 0x2400c020}, 0x40000) 4m19.97995131s ago: executing program 5 (id=1872): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x80080) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x4, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000280)={0x1fd, 0x1}, &(0x7f00000008c0)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, 0x0, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, r6, 0x301, 0xfffffffd, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r2, 0x0, 0x3, 'syz0\x00', &(0x7f0000000300)}) epoll_create(0x89a) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000140)=0x84) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x60) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="120110030000000804160180400001020301090269000301068001080b0001010c2000090400000001012000092401bc0b000900800904010000010220000904010101010220000905010908000704400825010330820800090460"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1e}) 4m16.489632177s ago: executing program 5 (id=1878): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x3}, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = getpid() r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0xa, @pix_mp={0x1ff, 0x0, 0x34324d59, 0x2, 0x2, [{0x9, 0x4}, {0x7, 0x2}, {0xe8c1, 0x80000001}, {0x7fffffff, 0x1}, {0x8, 0x3}, {0x6, 0x2}, {0x7fffffff, 0x74e5}, {0x28, 0x7}], 0x98, 0x1, 0x0, 0x1, 0x2}}) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x1, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x800) 4m15.280429187s ago: executing program 5 (id=1883): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000017140100"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) 4m13.667223222s ago: executing program 5 (id=1889): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x1, [0xc]}, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000040)) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x16, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r7, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0xb0, 0x0, 0xf, [{{0x0, 0x2, 0x6, 0x1000, 0x8, 0x8, {0x5, 0x400, 0xa1, 0x200, 0x1, 0x7, 0x5, 0x6, 0x1, 0x2000, 0x80000001, 0x0, 0x0, 0x10, 0x4}}, {0x1, 0x6, 0x2, 0x0, '@^'}}]}, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @result={0x2, 0x2}}], 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) 4m11.710366754s ago: executing program 5 (id=1893): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x0, 0x5, 0x2005, 0xe, 0x2, 0xcc7, 0xfff, 0x80000001, 0x4, 0x3ff, 0x7f, 0x15fe, 0x5, 0x5, 0x3, 0xe1cb, 0xe, 0x0, 0x2, 0x293, 0x80000089, 0x4, 0x6, 0x3, 0xffffeadc, 0x3, 0x401001c, 0x5, 0x4, 0x8000000, 0x2000005]}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000540)={0x0, 0x0, r2, 0x0, 0x0, 0x7, 0xffffffff, 0xfffffffd, {0x0, 0xfffc, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "f180d29c353da6cc", "17023d1865497dea8d3d7cfbc47bec7e", "e2dba445", "0f70df45c0370f44"}, 0x28) umount2(0x0, 0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='exfat\x00', 0x0, &(0x7f00000001c0)='discard') 4m11.388069048s ago: executing program 33 (id=1893): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x0, 0x5, 0x2005, 0xe, 0x2, 0xcc7, 0xfff, 0x80000001, 0x4, 0x3ff, 0x7f, 0x15fe, 0x5, 0x5, 0x3, 0xe1cb, 0xe, 0x0, 0x2, 0x293, 0x80000089, 0x4, 0x6, 0x3, 0xffffeadc, 0x3, 0x401001c, 0x5, 0x4, 0x8000000, 0x2000005]}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000540)={0x0, 0x0, r2, 0x0, 0x0, 0x7, 0xffffffff, 0xfffffffd, {0x0, 0xfffc, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "f180d29c353da6cc", "17023d1865497dea8d3d7cfbc47bec7e", "e2dba445", "0f70df45c0370f44"}, 0x28) umount2(0x0, 0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='exfat\x00', 0x0, &(0x7f00000001c0)='discard') 2m40.910610768s ago: executing program 0 (id=2132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x1) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket(0x23, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e1e, @multicast1}, {0x2, 0xfffd, @local}, {0x2, 0x4e27, @empty}, 0x1c9, 0x0, 0x0, 0x0, 0xfff6, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) 2m40.336232187s ago: executing program 0 (id=2134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) socket(0xa, 0x3, 0xff) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) 2m39.426511839s ago: executing program 0 (id=2136): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124d, 0x40, 0x1, 0x52}, &(0x7f0000000280)=0x0, &(0x7f0000000900)=0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$lock(r2, 0x6, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd206, 0x10, 0x0, 0x35d}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r4, 0x1, &(0x7f0000000480)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1}) io_uring_enter(r6, 0x6e69, 0x0, 0xe, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) r9 = socket(0x200000100000011, 0x3, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) statx(r4, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x0, &(0x7f00000004c0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) flistxattr(r10, &(0x7f00000000c0)=""/10, 0xa) setsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000002000)=""/102400, 0x19000) getpeername$ax25(r9, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r12, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd, 0xa3d8, &(0x7f0000000340)=[{&(0x7f00000000c0)='\x009zL', 0x4}], 0x1, 0x0, 0x1, {0x2}}) 2m37.703176472s ago: executing program 0 (id=2142): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') io_uring_setup(0x17c7, &(0x7f00000002c0)={0x0, 0xfa87}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e960611a07760760b9b5fee5cf4b68ce01939e8abff005597c800130022000000000000000000008000", 0x800000038}, 0x60) listen(r1, 0x0) r2 = accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r2, r4, 0x2) 2m37.492434218s ago: executing program 0 (id=2143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) (async) listen(r3, 0x0) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async, rerun: 64) syz_usb_connect(0x3, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a4"], 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 2m37.000367957s ago: executing program 0 (id=2147): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0xc010) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x670, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x17, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000200)={r5, 0x1000}, 0x8) r6 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x1040}], 0x1, 0xc) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r8 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) 2m20.342735547s ago: executing program 34 (id=2147): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0xc010) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x670, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x17, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000200)={r5, 0x1000}, 0x8) r6 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x1040}], 0x1, 0xc) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r8 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) 13.068297159s ago: executing program 1 (id=2563): mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x5a, 0x2, 0x0, 0x0}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4c0c1) accept4$unix(r7, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) pivot_root(&(0x7f0000000000)='./control\x00', &(0x7f0000000040)='./control\x00') sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x20, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',versio|=9p2000.\b\x00\x00']) creat(&(0x7f0000000200)='./file0\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 11.954844728s ago: executing program 3 (id=2570): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0xf4) close_range(r0, 0xffffffffffffffff, 0x0) 11.87605612s ago: executing program 1 (id=2571): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000004c0)={'veth1_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000004c0)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000005c0)) syz_open_dev$vim2m(0x0, 0x242, 0x2) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) 11.264893831s ago: executing program 3 (id=2575): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0x61df, &(0x7f00000000c0)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) recvfrom$inet(r2, 0x0, 0x0, 0x700, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @pic={0x0, 0x0, 0x68, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}) 9.968096081s ago: executing program 3 (id=2582): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 9.131896477s ago: executing program 6 (id=2584): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r1, 0x4, 0x2400) write$selinux_create(r1, &(0x7f0000000100)=@objname={'system_u:object_r:system_cron_spool_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xf, 0x20, './file0\x00'}, 0x56) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) ioctl(r3, 0x8b2a, &(0x7f0000000040)) r5 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_attach_bpf(r5, 0x1, 0x45, &(0x7f00000000c0), 0x4) 9.064357881s ago: executing program 1 (id=2586): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0xd, 0x10, "4b625f300237af1d8e4dc6868da78a99"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001a00010000000000000000001c"], 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a010100000000000000000500000048000000030a0103000000000000000005000000090001f7ffff5960c3a400000900030073797a3000000000080007006e6174001400048008000240000000120800014000000001140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x1000000}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}}, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0xe, 0xac, "81e66e609b00390b6d76ce0ed4d98bbfc0009bd400a9ab64a8ad1e3327da4ea6e89cc7e5b103fa666d442fbd23a3f4154991506e0f21cf7ce325de6085df355979118c6a259d859d65805021972289207c99c002afe5f1a311189834b22c6d24ba4ab6d98b20078797e87f9674613011507b92dcca9573ce03ac7b0db22cff28825d65f4a80bd348fd37dc2027f325d8f236e3ac81ea5d05c2ca789ec985ff10ad3c083a1688f5a04ea3cd43"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x11}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x24}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "c129"}, &(0x7f0000000300)={0x20, 0x82, 0x2, "dc08"}, &(0x7f0000000640)={0x20, 0x83, 0x3, "f889b5"}, &(0x7f0000000680)={0x20, 0x84, 0x1, '-'}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "823f62"}}) 7.871306224s ago: executing program 3 (id=2587): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x80080) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000100)) r1 = socket$inet_sctp(0x2, 0x4, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000280)={0x1fd, 0x1}, &(0x7f00000008c0)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, 0x0, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, r7, 0x301, 0xfffffffd, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r3, 0x0, 0x3, 'syz0\x00', &(0x7f0000000300)}) epoll_create(0x89a) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r9, 0x3, 0x9}, &(0x7f00000001c0)=0xc) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x60) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="120110030000000804160180400001020301090269000301068001080b0001010c2000090400000001012000092401bc0b000900800904010000010220000904010101010220000905010908000704400825010330820800090460"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1e}) 7.853788979s ago: executing program 6 (id=2588): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x80080) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000100)) r1 = socket$inet_sctp(0x2, 0x4, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000280)={0x1fd, 0x1}, &(0x7f00000008c0)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, 0x0, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, r6, 0x301, 0xfffffffd, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, 0x0, 0x0, 0x3, 'syz0\x00', &(0x7f0000000300)}) epoll_create(0x89a) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r8, 0x3, 0x9}, &(0x7f00000001c0)=0xc) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x60) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="120110030000000804160180400001020301090269000301068001080b0001010c2000090400000001012000092401bc0b000900800904010000010220000904010101010220000905010908000704400825010330820800090460"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1e}) 6.1574737s ago: executing program 4 (id=2591): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) r0 = syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) symlink(0x0, 0x0) io_uring_setup(0x1c16, &(0x7f00000001c0)={0x0, 0xc8a1, 0x20, 0x8, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 5.648286394s ago: executing program 1 (id=2593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.927091423s ago: executing program 4 (id=2594): r0 = memfd_create(&(0x7f0000000040)='R\x17\bK\x85X\xa3\x1b\xc7p\x13\x10\xa8F\xb4.\'\x19\x8b\xe2\xd8\xf8\xa21{.;0\x17\x11\n\x8d\xfa\xa8\x05\x1b\xdd*\xf8\xf3_\x1a\xd1F\x16\x88N#\xc2\xb1\x1c\x05\x00\x00\x00\x00\x00\x00\a!\xcd\x84;\x13\x9d\xe7\x03\xe6\x1d8\x9f\xa8A', 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x44a7e, 0x90) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r0, r1, 0x0, 0xfffffff2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000faffbfff000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff0000004f9ea20000000000000702008549ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x896, 0x0, 0x5, 0x0, &(0x7f0000000380)="35108964aa", 0x0, 0x2, 0x0, 0x8}, 0x50) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x4902, 0x0) 4.544478686s ago: executing program 6 (id=2595): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0xf00}}, 0x1c) 4.363919932s ago: executing program 1 (id=2596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000006fc0)=[{{&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000001840)=[{&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f00000006c0)=""/100, 0x64}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/248, 0xf8}], 0x4, &(0x7f0000001880)=""/200, 0xc8}, 0x1000}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/125, 0x7d}, {&(0x7f0000001a00)=""/61, 0x3d}], 0x2}, 0x5}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a80)=""/111, 0x6f}, {&(0x7f0000001b00)=""/66, 0x42}, {&(0x7f0000001b80)=""/74, 0x4a}], 0x3}, 0xfffffff0}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/248, 0xf8}, {&(0x7f0000001d40)=""/185, 0xb9}], 0x2, &(0x7f0000001e40)=""/8, 0x8}, 0x86}, {{&(0x7f0000001e80)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/193, 0xc1}, {&(0x7f0000003000)=""/181, 0xb5}, {&(0x7f00000030c0)=""/219, 0xdb}, {&(0x7f00000031c0)=""/16, 0x10}, {&(0x7f0000003200)=""/182, 0xb6}, {&(0x7f00000032c0)=""/246, 0xf6}], 0x7}, 0x800}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/129, 0x81}, {&(0x7f0000004500)=""/196, 0xc4}, {&(0x7f0000004600)=""/235, 0xeb}], 0x4, &(0x7f0000004740)=""/83, 0x53}, 0x1000}, {{&(0x7f00000047c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004840)=""/33, 0x21}, {&(0x7f0000004880)=""/197, 0xc5}, {&(0x7f0000004980)=""/43, 0x2b}, {&(0x7f00000049c0)=""/110, 0x6e}, {&(0x7f0000004a40)=""/225, 0xe1}, {&(0x7f0000004b40)=""/226, 0xe2}, {&(0x7f0000004c40)=""/113, 0x71}, {&(0x7f0000004cc0)=""/177, 0xb1}, {&(0x7f0000004d80)=""/183, 0xb7}, {&(0x7f0000004e40)=""/165, 0xa5}], 0xa, &(0x7f0000004fc0)=""/170, 0xaa}, 0x7}, {{&(0x7f0000005080)=@nfc_llcp, 0x80, &(0x7f0000006600)=[{&(0x7f0000005100)=""/166, 0xa6}, {&(0x7f00000051c0)=""/238, 0xee}, {&(0x7f00000052c0)=""/239, 0xef}, {&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f0000007240)=""/187, 0xbb}, {&(0x7f0000006480)=""/199, 0xc7}, {&(0x7f0000006580)=""/106, 0x6a}], 0x7, &(0x7f0000006680)=""/22, 0x16}, 0x8}, {{&(0x7f00000066c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000069c0)=[{&(0x7f0000006740)=""/166, 0xa6}, {&(0x7f0000006800)=""/222, 0xde}, {&(0x7f0000006900)=""/185, 0xb9}], 0x3, &(0x7f0000006a00)=""/147, 0x93}}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f0000006ac0)=""/242, 0xf2}, {&(0x7f0000006bc0)=""/108, 0x6c}, {&(0x7f0000006c40)=""/118, 0x76}, {&(0x7f0000006cc0)=""/27, 0x1b}, {&(0x7f0000006d00)=""/151, 0x97}, {&(0x7f0000006dc0)=""/17, 0x11}, {&(0x7f0000006e00)=""/189, 0xbd}], 0x7, &(0x7f0000006f40)=""/116, 0x74}, 0x800}], 0xa, 0x2, 0x0) (async) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x1284, 0x80, 0x4, 0x304}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000003c0)={0xa, 0x3, 0x1a, 0x0, 0xffffffffffffffff}) ioctl$XFS_IOC_FSGEOMETRY_V4(r6, 0x8070587c, &(0x7f0000000400)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x20, 0x20, 0x4, 0x0, {{0x26, 0x4, 0x3, 0x5, 0x98, 0x68, 0x0, 0x8, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x99, [@multicast2, @rand_addr=0x64010100, @multicast2]}, @lsrr={0x83, 0x2b, 0x9, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2, @private=0xa010102, @multicast2, @multicast2, @broadcast, @broadcast, @rand_addr=0x3]}, @timestamp={0x44, 0xc, 0xea, 0x0, 0x7, [0x9, 0x3]}, @timestamp_addr={0x44, 0x3c, 0x9a, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff}, {@private=0xa010100, 0x7}, {@remote, 0x7}, {@broadcast, 0x6}, {@private=0xa010102, 0x9}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}]}]}}}}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r7, @fallback=0x26}, 0x94) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r9, 0x0) (async) ioctl$PPPIOCCONNECT(r9, 0x4004743a, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x250001, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000380)=[r2, r8, r3, r11, r2, r2, r10], 0x7) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 4.323775144s ago: executing program 7 (id=2597): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000100)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, 0x0) 4.13163704s ago: executing program 1 (id=2598): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x2008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r9 = fanotify_init(0x200, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close(0x3) fanotify_mark(0xffffffffffffffff, 0x1, 0x20, r10, 0x0) fanotify_mark(r9, 0x1, 0x12, r4, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r11, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 4.130916842s ago: executing program 6 (id=2599): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x1134, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x1104, 0x2, [@TCA_TCINDEX_ACT={0x1100, 0x7, [@m_xt={0x1ac, 0x17, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x5d, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c0401699f8277d8c193f3c7c09a5e9c"}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd0, 0x16, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}]}, {0x71, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0xfffffffb}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0x9, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0xc, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x7, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xcfaf, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4}, {0x3}, {0x5, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1134}, 0x1, 0x0, 0x0, 0x810}, 0x41) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) eventfd(0xfffffff9) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffc002, '\x00', @p_u8=0x0}}) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r8 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r9}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000080)={r10}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000a00)={r9}) 4.102501025s ago: executing program 4 (id=2600): io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x400, 0x3, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x80000001, 0x5, 0x3ff, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffbc, 0x0, 0x2f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x2000005]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000100)={0x0}) mq_unlink(&(0x7f0000000000)='eth0\x00') creat(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000440)) sendmsg$nl_generic(r5, 0x0, 0x4000040) mq_timedsend(r3, 0x0, 0x0, 0x7, 0x0) r7 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff2000/0x2000)=nil) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r7, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 3.803749955s ago: executing program 7 (id=2601): syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='.\x00\b\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140000000000000500190001000000"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000850) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$can_raw(0x1d, 0x3, 0x1) 3.548337084s ago: executing program 3 (id=2602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0xb) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012bbd7000fddbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b00eb0c000006001100b5cf00000800150008000000"], 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x20200, 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x22780, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000240)={'comedi_parport\x00', [0x6, 0x4, 0x100, 0x4, 0x8, 0x208f, 0x6, 0x8012, 0x1007, 0xc0000000, 0x10000005, 0xfffffffd, 0x1, 0x0, 0x5, 0xfdfffffa, 0xe8, 0xdf7, 0x9, 0x8e, 0x2, 0x5, 0xf, 0xb, 0x4, 0x5, 0xb0c4, 0x6, 0x20002, 0x400002, 0x22]}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) getrlimit(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 2.567752693s ago: executing program 7 (id=2603): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000400)=""/112, 0x70) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$phonet(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x2, 0x7f, 0x1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf2502000000080001"], 0x1c}}, 0x840) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x203}, 0x8) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}}], 0x2, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r7, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) 2.564318086s ago: executing program 6 (id=2604): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) r0 = syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) symlink(0x0, 0x0) io_uring_setup(0x1c16, &(0x7f00000001c0)={0x0, 0xc8a1, 0x20, 0x8, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 2.27006574s ago: executing program 4 (id=2605): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r0) 2.213825575s ago: executing program 4 (id=2606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.455983377s ago: executing program 6 (id=2607): r0 = getpid() ptrace$setopts(0x4206, r0, 0x101, 0x10001d) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) close_range(0xffffffffffffffff, r2, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f00000002c0)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pread64(r3, &(0x7f00000001c0)=""/241, 0xf1, 0x2f) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1.148193932s ago: executing program 4 (id=2608): r0 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740), &(0x7f0000000280)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)=ANY=[], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100000000000000193005fded00"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000080) 268.570854ms ago: executing program 7 (id=2609): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) 133.321136ms ago: executing program 7 (id=2610): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x400000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0xf4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 39.758906ms ago: executing program 7 (id=2611): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x8, 0x4, 0x1, "8ebc00", "8085072b"}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, &(0x7f0000000500)={0x40, 0x10, 0x9c, {0x9c, 0x22, "e013c7b37f8dfa38fa9f3ff3bde836b4befa6088ae747982d895c57ccd9fbd6148444eb3419294e6c59b2978dccf236bb5575939d090cc817efd1d242f421840736ddc94d088e6b2973ac147946b64bd83f7f1d0111e18ba5cd3683c39185a347b2b9abd0adb936d3580baca84ef1e98e5184267e4ebc8ac4a6036ca2a395b042465c01403fc8a948569c62c04d222221bb5ddbb7d2c023d656c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, &(0x7f0000000040)={0x0, 0x22, 0x12, {[@main=@item_4={0x3, 0x0, 0xa, "da92680f"}, @global=@item_012={0x2, 0x1, 0x5, "f267"}, @main=@item_4={0x3, 0x0, 0x8, "21f4c682"}, @main=@item_4={0x3, 0x0, 0x9, "706a4817"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9e, 0x1, {0x22, 0xe04}}}}, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x15, 0x17, "1c13d9747e2077822cc24a35c3c11d611b2110f1dd2ba2"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xf2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000005c0)={0x20, 0x1, 0x80, "82ad2efda75887a65613da9891d951cba6cce9d38521160b1dfb3c768561e6ae8dac745c17719803c1ebd27be0c698b35c1d5d6aec4be4365366facf20c70ef6b42236de41993452cc43343c17c7c5bbf0f7f7c31cb0409e988d1cf7b1fd321a8390cfc8004034fa60553cc3d7cd82f1f73a581f2ffeae34857b2d281016b7f8"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x29}}) listen(r4, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r7 = accept4(r4, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) (async) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) (async) unshare(0x62000280) (async) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0xe090, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) 0s ago: executing program 3 (id=2612): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macvlan0\x00'}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}}}}}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @loopback={0xffffffffffffff9d}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) kernel console output (not intermixed with test programs): 3][T14446] hub 9-0:1.0: 1 port detected [ 787.472120][T11839] usb 7-1: Using ep0 maxpacket: 8 [ 787.502714][T11839] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 787.526548][T11839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.534558][T11839] usb 7-1: Product: syz [ 787.539322][T11839] usb 7-1: Manufacturer: syz [ 787.552001][T11839] usb 7-1: SerialNumber: syz [ 787.558817][T11839] usb 7-1: config 0 descriptor?? [ 787.864199][T11839] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 788.175498][T11839] usb write operation failed. (-71) [ 788.191548][T11839] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 788.218032][T11839] dvbdev: DVB: registering new adapter (Terratec H7) [ 788.329626][T14459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.680752][T11839] usb 7-1: media controller created [ 788.686349][T11839] usb read operation failed. (-71) [ 788.743733][T11839] usb write operation failed. (-71) [ 788.811438][T11839] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 788.868998][T11839] usb 7-1: USB disconnect, device number 10 [ 789.045537][ T30] audit: type=1400 audit(1773720504.422:2206): avc: denied { lock } for pid=14463 comm="syz.0.2136" path="socket:[49032]" dev="sockfs" ino=49032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 790.697216][T14482] [syz.1.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 790.819194][ T30] audit: type=1400 audit(1773720506.078:2207): avc: denied { listen } for pid=14483 comm="syz.0.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 790.977265][ T30] audit: type=1400 audit(1773720506.078:2208): avc: denied { accept } for pid=14483 comm="syz.0.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 791.438610][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 791.609493][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 791.648766][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.674877][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.772587][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 791.788070][ T9] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 791.799015][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.818182][ T9] usb 2-1: config 0 descriptor?? [ 791.876399][ T9] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 791.920896][T11839] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 791.940559][ T9] usbhid 2-1:0.0: can't add hid device: -22 [ 791.953907][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 792.033778][T14514] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2150'. [ 792.235113][T11839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 792.267786][T11839] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 792.318866][T14519] No source specified [ 792.374130][T11839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.382242][ T30] audit: type=1400 audit(1773720507.537:2209): avc: denied { map } for pid=14490 comm="syz.1.2144" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 792.418455][T11839] usb 5-1: config 0 descriptor?? [ 792.428749][T14510] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 792.499967][T14521] No source specified [ 792.958294][T11839] hid_parser_main: 22 callbacks suppressed [ 792.958308][T11839] wacom 0003:056A:5000.0011: unknown main item tag 0x0 [ 792.981729][T11839] wacom 0003:056A:5000.0011: unknown main item tag 0x0 [ 793.038198][T11839] wacom 0003:056A:5000.0011: unknown main item tag 0x0 [ 793.055308][T11839] wacom 0003:056A:5000.0011: unknown main item tag 0x0 [ 793.063261][T11839] wacom 0003:056A:5000.0011: unknown main item tag 0x0 [ 793.074377][T11839] wacom 0003:056A:5000.0011: unknown main item tag 0x0 [ 793.084743][T11839] wacom 0003:056A:5000.0011: unknown main item tag 0x0 [ 793.116749][T11839] wacom 0003:056A:5000.0011: unknown main item tag 0x0 [ 793.123877][T11839] wacom 0003:056A:5000.0011: unknown main item tag 0x0 [ 793.130912][T11839] wacom 0003:056A:5000.0011: unknown main item tag 0x0 [ 793.470701][T11839] wacom 0003:056A:5000.0011: item fetching failed at offset 260/483 [ 793.512416][T11839] wacom 0003:056A:5000.0011: parse failed [ 793.518406][T11839] wacom 0003:056A:5000.0011: probe with driver wacom failed with error -22 [ 793.533400][T11839] usb 5-1: USB disconnect, device number 70 [ 794.207918][T14533] overlay: ./file0 is not a directory [ 794.539880][ T5885] usb 2-1: USB disconnect, device number 50 [ 795.501170][T14546] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 795.576135][T14546] FAULT_INJECTION: forcing a failure. [ 795.576135][T14546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.629469][T14546] CPU: 0 UID: 0 PID: 14546 Comm: syz.1.2160 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.629499][T14546] Tainted: [L]=SOFTLOCKUP [ 795.629506][T14546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 795.629516][T14546] Call Trace: [ 795.629522][T14546] [ 795.629528][T14546] dump_stack_lvl+0x100/0x190 [ 795.629560][T14546] should_fail_ex.cold+0x5/0xa [ 795.629581][T14546] _copy_from_user+0x2e/0xd0 [ 795.629599][T14546] copy_msghdr_from_user+0x9f/0x4f0 [ 795.629624][T14546] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 795.629649][T14546] ___sys_sendmsg+0x106/0x1e0 [ 795.629668][T14546] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.629711][T14546] __sys_sendmsg+0x170/0x220 [ 795.629726][T14546] ? __pfx___sys_sendmsg+0x10/0x10 [ 795.629749][T14546] do_syscall_64+0x106/0xf80 [ 795.629764][T14546] ? clear_bhb_loop+0x40/0x90 [ 795.629778][T14546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.629790][T14546] RIP: 0033:0x7f686639c799 [ 795.629800][T14546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.629810][T14546] RSP: 002b:00007f6867319028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.629822][T14546] RAX: ffffffffffffffda RBX: 00007f6866615fa0 RCX: 00007f686639c799 [ 795.629829][T14546] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000005 [ 795.629836][T14546] RBP: 00007f6867319090 R08: 0000000000000000 R09: 0000000000000000 [ 795.629842][T14546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.629848][T14546] R13: 00007f6866616038 R14: 00007f6866615fa0 R15: 00007ffe12ea05c8 [ 795.629862][T14546] [ 795.914695][T14551] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 795.979331][ T5885] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 796.746858][ T5885] usb 7-1: Using ep0 maxpacket: 8 [ 796.807223][ T5885] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 796.816642][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.029487][ T5933] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 797.464395][ T5885] usb 7-1: Product: syz [ 797.480420][ T5885] usb 7-1: Manufacturer: syz [ 797.496414][ T5885] usb 7-1: SerialNumber: syz [ 797.501606][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.534235][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.558489][ T5885] usb 7-1: config 0 descriptor?? [ 797.570151][ T5933] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 797.579506][ T5933] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 797.587933][ T5933] usb 5-1: Manufacturer: syz [ 797.599568][ T5933] usb 5-1: config 0 descriptor?? [ 797.820925][ T5885] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 798.562505][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.572236][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.627954][ T5933] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71 [ 798.654735][ T5933] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 798.697401][ T5933] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71 [ 798.705573][ T5933] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 798.751526][ T5933] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 798.769915][ T5933] usb 5-1: USB disconnect, device number 71 [ 799.093244][T14586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.470993][T14550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.508060][T14550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.546793][T14550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.558644][T14550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.632117][ T5885] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 799.662485][ T5885] usb 7-1: USB disconnect, device number 11 [ 799.668515][ T30] audit: type=1400 audit(1773720514.365:2210): avc: denied { ioctl } for pid=14589 comm="syz.4.2171" path="socket:[50391]" dev="sockfs" ino=50391 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 800.505170][T14607] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2174'. [ 800.540131][T14607] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2174'. [ 801.261311][ T5864] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 801.435575][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 801.449168][ T5864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 801.468968][ T5864] usb 5-1: config 1 has an invalid interface number: 96 but max is 2 [ 801.486813][ T5864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.690696][ T5933] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 801.707859][ T5864] usb 5-1: config 1 has no interface number 2 [ 801.739519][ T5864] usb 5-1: string descriptor 0 read error: -22 [ 801.762555][ T5864] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 801.774000][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.866003][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 801.894903][ T5933] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 801.934980][ T5933] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 801.992113][ T5933] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 802.077175][ T5933] usb 4-1: config 1 interface 0 has no altsetting 0 [ 802.135820][ T5933] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 802.148623][ T5864] usb 5-1: USB disconnect, device number 72 [ 802.180910][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.213440][ T5933] usb 4-1: Product: syz [ 802.233003][ T5933] usb 4-1: Manufacturer: syz [ 802.251666][ T5933] usb 4-1: SerialNumber: syz [ 802.321587][T14626] fuse: Unknown parameter '0x000000000000000300000000000000000000004' [ 802.504106][ T5933] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 802.504645][T14630] dns_resolver: Unsupported content type (152) [ 803.255026][ T5864] usb 4-1: USB disconnect, device number 63 [ 803.303260][ T5864] usblp0: removed [ 804.171095][T14653] fuse: Bad value for 'fd' [ 804.396674][ T5933] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 804.769874][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 804.779570][ T5933] usb 5-1: unable to get BOS descriptor or descriptor too short [ 804.792335][ T5933] usb 5-1: config 1 has an invalid interface number: 96 but max is 2 [ 804.801541][ T5933] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 804.913925][T14661] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 804.922752][T14661] overlayfs: failed to set xattr on upper [ 804.923364][ T30] audit: type=1400 audit(1773720519.257:2211): avc: denied { mounton } for pid=14659 comm="syz.1.2187" path="/file0" dev="hugetlbfs" ino=50503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 804.929253][T14661] overlayfs: ...falling back to redirect_dir=nofollow. [ 804.958294][T14661] overlayfs: ...falling back to index=off. [ 804.964245][T14661] overlayfs: ...falling back to uuid=null. [ 804.970296][T14661] overlayfs: maximum fs stacking depth exceeded [ 804.979940][ T5933] usb 5-1: config 1 has no interface number 2 [ 805.199176][ T5933] usb 5-1: string descriptor 0 read error: -22 [ 805.205400][ T5933] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 805.293420][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.855108][ T5933] usb 5-1: USB disconnect, device number 73 [ 806.089635][ T792] wg1 speed is unknown, defaulting to 1000 [ 806.415921][ T5933] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 806.577883][ T5933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 806.596423][ T5933] usb 4-1: not running at top speed; connect to a high speed hub [ 806.633038][ T5933] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 806.647708][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.658472][ T5933] usb 4-1: Product: syz [ 806.669280][ T5933] usb 4-1: Manufacturer: syz [ 806.675813][ T5933] usb 4-1: SerialNumber: syz [ 806.832775][ T792] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 807.210085][ T792] usb 7-1: Using ep0 maxpacket: 32 [ 808.048713][ T792] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 808.056910][ T792] usb 7-1: config 0 has no interface number 0 [ 808.063110][ T792] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 808.074303][ T792] usb 7-1: config 0 interface 85 has no altsetting 0 [ 808.083590][ T792] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 808.092836][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.101000][ T792] usb 7-1: Product: syz [ 808.113195][ T792] usb 7-1: Manufacturer: syz [ 808.117903][ T792] usb 7-1: SerialNumber: syz [ 808.136219][ T792] usb 7-1: config 0 descriptor?? [ 808.576859][T12793] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 808.595397][T12793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 808.605382][T12793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 808.613426][T12793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 808.621017][T12793] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 808.693189][ T5864] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 808.810254][ T792] appletouch 7-1:0.85: Geyser mode initialized. [ 808.825550][T14695] xfrm0 speed is unknown, defaulting to 1000 [ 808.848301][ T792] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input68 [ 808.863907][T14695] wg1 speed is unknown, defaulting to 1000 [ 809.387668][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 809.407769][ T5864] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 809.417142][ T5864] usb 5-1: config 0 has no interface number 0 [ 809.436417][ T5933] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 809.455310][ T5864] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 809.468759][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.479744][ T5864] usb 5-1: Product: syz [ 809.486878][ T5864] usb 5-1: Manufacturer: syz [ 809.493992][ T5864] usb 5-1: SerialNumber: syz [ 809.550746][ T5933] usb 4-1: USB disconnect, device number 64 [ 809.614018][ T30] audit: type=1400 audit(1773720523.673:2212): avc: denied { map } for pid=14698 comm="syz.3.2198" path="socket:[50588]" dev="sockfs" ino=50588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 809.655791][ T5864] usb 5-1: config 0 descriptor?? [ 809.662541][ T24] usb 7-1: USB disconnect, device number 12 [ 809.673416][ T5864] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 809.687588][ T5864] uvcvideo 5-1:0.105: No valid video chain found. [ 809.713538][ T7530] udevd[7530]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 809.793937][ T24] appletouch 7-1:0.85: input: appletouch disconnected [ 809.921390][T14708] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 810.237743][T14695] chnl_net:caif_netlink_parms(): no params data found [ 810.416252][T14711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.592205][T14711] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.841440][T14719] ubi31: attaching mtd0 [ 810.862608][T14719] ubi31 error: validate_ec_hdr: bad VID header offset 258, expected 64 [ 810.871151][T14719] ubi31 error: validate_ec_hdr: bad EC header [ 810.877408][T14719] Erase counter header dump: [ 810.882159][T14719] magic 0x55424923 [ 810.886959][T14719] version 1 [ 810.890859][T14719] ec 1 [ 810.894863][T14719] vid_hdr_offset 258 [ 810.899264][T14719] data_offset 322 [ 810.903304][T14719] image_seq -467834913 [ 810.908106][T14719] hdr_crc 0x6454b13f [ 810.912887][T14719] erase counter header hexdump: [ 810.918776][T14719] CPU: 0 UID: 0 PID: 14719 Comm: syz.6.2202 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.918804][T14719] Tainted: [L]=SOFTLOCKUP [ 810.918811][T14719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 810.918822][T14719] Call Trace: [ 810.918829][T14719] [ 810.918837][T14719] dump_stack_lvl+0x100/0x190 [ 810.918872][T14719] validate_ec_hdr+0x2d0/0x330 [ 810.918898][T14719] ubi_io_read_ec_hdr+0x656/0x6d0 [ 810.918923][T14719] ubi_attach+0x601/0x4d30 [ 810.918959][T14719] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 810.918984][T14719] ? irqentry_exit+0x180/0x670 [ 810.919009][T14719] ? lockdep_hardirqs_on+0x78/0x100 [ 810.919033][T14719] ? irqentry_exit+0x180/0x670 [ 810.919057][T14719] ? __pfx_ubi_attach+0x10/0x10 [ 810.919087][T14719] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 810.919114][T14719] ? __vmalloc_node_noprof+0xad/0xf0 [ 810.919136][T14719] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 810.919166][T14719] ubi_attach_mtd_dev+0x139f/0x32a0 [ 810.919203][T14719] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 810.919229][T14719] ? __pfx_get_mtd_device+0x10/0x10 [ 810.919257][T14719] ctrl_cdev_ioctl+0x36a/0x400 [ 810.919284][T14719] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 810.919312][T14719] ? selinux_file_ioctl+0x139/0x290 [ 810.919338][T14719] ? selinux_file_ioctl+0xb4/0x290 [ 810.919365][T14719] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 810.919394][T14719] __x64_sys_ioctl+0x18e/0x210 [ 810.919425][T14719] do_syscall_64+0x106/0xf80 [ 810.919449][T14719] ? clear_bhb_loop+0x40/0x90 [ 810.919473][T14719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.919492][T14719] RIP: 0033:0x7fbd4999c799 [ 810.919510][T14719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.919528][T14719] RSP: 002b:00007fbd4a832028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 810.919546][T14719] RAX: ffffffffffffffda RBX: 00007fbd49c16090 RCX: 00007fbd4999c799 [ 810.919558][T14719] RDX: 0000200000000440 RSI: 0000000040186f40 RDI: 0000000000000005 [ 810.919569][T14719] RBP: 00007fbd49a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 810.919580][T14719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.919591][T14719] R13: 00007fbd49c16128 R14: 00007fbd49c16090 R15: 00007ffe884ddb88 [ 810.919616][T14719] [ 810.919655][T14719] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 811.654227][ T5812] Bluetooth: hci5: command tx timeout [ 811.727604][ T5933] usb 5-1: USB disconnect, device number 74 [ 811.754065][T14719] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 811.825271][T14695] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.832404][T14695] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.917608][T14724] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 812.106346][T14695] bridge_slave_0: entered allmulticast mode [ 812.124799][T14695] bridge_slave_0: entered promiscuous mode [ 812.251955][T14711] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.284469][T14695] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.313580][T14695] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.336734][T14695] bridge_slave_1: entered allmulticast mode [ 812.348962][T14695] bridge_slave_1: entered promiscuous mode [ 812.478814][T14711] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.524265][T14695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.562974][ T792] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 812.745463][T14695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.928814][T14695] team0: Port device team_slave_0 added [ 812.935779][T14695] team0: Port device team_slave_1 added [ 812.969625][ T792] usb 5-1: Using ep0 maxpacket: 32 [ 812.979103][ T6391] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.981927][ T792] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 813.001220][ T792] usb 5-1: config 0 has no interface number 0 [ 813.017510][ T792] usb 5-1: config 0 interface 184 has no altsetting 0 [ 813.042262][T14695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.053339][ T792] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 813.077202][T14695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.078677][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.125337][T14695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.140810][ T6391] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.151863][T14695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.158815][T14695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.207324][ T792] usb 5-1: Product: syz [ 813.211562][T14695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.222112][ T792] usb 5-1: Manufacturer: syz [ 813.222132][ T792] usb 5-1: SerialNumber: syz [ 813.224468][ T792] usb 5-1: config 0 descriptor?? [ 813.314141][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.324858][ T30] audit: type=1400 audit(1773720527.143:2213): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 813.404214][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2204'. [ 813.428015][T14738] FAULT_INJECTION: forcing a failure. [ 813.428015][T14738] name failslab, interval 1, probability 0, space 0, times 0 [ 813.441092][T14738] CPU: 0 UID: 0 PID: 14738 Comm: syz.6.2204 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.441121][T14738] Tainted: [L]=SOFTLOCKUP [ 813.441128][T14738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 813.441138][T14738] Call Trace: [ 813.441145][T14738] [ 813.441152][T14738] dump_stack_lvl+0x100/0x190 [ 813.441183][T14738] should_fail_ex.cold+0x5/0xa [ 813.441203][T14738] ? __pfx_console_unlock+0x10/0x10 [ 813.441228][T14738] should_failslab+0xc2/0x120 [ 813.441247][T14738] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 813.441271][T14738] ? fdb_create+0x22f/0x1960 [ 813.441301][T14738] fdb_create+0x22f/0x1960 [ 813.441328][T14738] ? lock_acquire+0x1cf/0x380 [ 813.441349][T14738] ? __pfx_fdb_create+0x10/0x10 [ 813.441381][T14738] br_fdb_external_learn_add+0x36b/0x810 [ 813.441401][T14738] ? idr_get_free+0x940/0xa00 [ 813.441424][T14738] __br_fdb_add+0x134/0xd40 [ 813.441447][T14738] br_fdb_add+0x470/0xdd0 [ 813.441471][T14738] ? __pfx_br_fdb_add+0x10/0x10 [ 813.441493][T14738] ? __nla_parse+0x40/0x60 [ 813.441514][T14738] ? __pfx_br_fdb_add+0x10/0x10 [ 813.441531][T14738] rtnl_fdb_add+0x644/0xab0 [ 813.441556][T14738] ? rtnl_fdb_get+0x130/0x1040 [ 813.441576][T14738] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 813.441616][T14738] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 813.441639][T14738] rtnetlink_rcv_msg+0x3c9/0xe90 [ 813.441664][T14738] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 813.441692][T14738] ? ref_tracker_free+0x37e/0x6c0 [ 813.441713][T14738] netlink_rcv_skb+0x159/0x420 [ 813.441738][T14738] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 813.441760][T14738] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 813.441802][T14738] ? netlink_deliver_tap+0x1ae/0xcc0 [ 813.441830][T14738] netlink_unicast+0x5aa/0x870 [ 813.441858][T14738] ? __pfx_netlink_unicast+0x10/0x10 [ 813.441890][T14738] netlink_sendmsg+0x8b0/0xda0 [ 813.441918][T14738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.441941][T14738] ? PageHuge+0x170/0x180 [ 813.441972][T14738] ____sys_sendmsg+0x9e1/0xb70 [ 813.441997][T14738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.442023][T14738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 813.442052][T14738] ? irqentry_exit+0x180/0x670 [ 813.442081][T14738] ___sys_sendmsg+0x190/0x1e0 [ 813.442111][T14738] ? __pfx____sys_sendmsg+0x10/0x10 [ 813.442167][T14738] __sys_sendmsg+0x170/0x220 [ 813.442189][T14738] ? __pfx___sys_sendmsg+0x10/0x10 [ 813.442226][T14738] do_syscall_64+0x106/0xf80 [ 813.442247][T14738] ? clear_bhb_loop+0x40/0x90 [ 813.442270][T14738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.442288][T14738] RIP: 0033:0x7fbd4999c799 [ 813.442304][T14738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.442320][T14738] RSP: 002b:00007fbd4a853028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.442338][T14738] RAX: ffffffffffffffda RBX: 00007fbd49c15fa0 RCX: 00007fbd4999c799 [ 813.442349][T14738] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000006 [ 813.442360][T14738] RBP: 00007fbd4a853090 R08: 0000000000000000 R09: 0000000000000000 [ 813.442370][T14738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.442380][T14738] R13: 00007fbd49c16038 R14: 00007fbd49c15fa0 R15: 00007ffe884ddb88 [ 813.442403][T14738] [ 813.776243][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.788213][T14740] vivid-006: disconnect [ 813.803048][ T5812] Bluetooth: hci5: command tx timeout [ 813.923683][T14695] hsr_slave_0: entered promiscuous mode [ 813.930050][T14695] hsr_slave_1: entered promiscuous mode [ 813.980800][T14695] debugfs: 'hsr0' already exists in 'hsr' [ 813.987036][ T30] audit: type=1400 audit(1773720527.751:2214): avc: denied { mount } for pid=14744 comm="syz.6.2210" name="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 814.011010][T14695] Cannot create hsr debugfs directory [ 814.145743][ T30] audit: type=1400 audit(1773720527.751:2215): avc: denied { search } for pid=14744 comm="syz.6.2210" name="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 814.241126][ T792] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 814.262679][ T792] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 814.331112][ T30] audit: type=1400 audit(1773720527.938:2216): avc: denied { read open } for pid=14744 comm="syz.6.2210" path="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 814.363737][T14743] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 814.377274][T14743] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 814.388523][T14747] vivid-006: reconnect [ 814.509326][ T792] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 814.556904][ T792] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 814.666144][ T792] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 814.680139][ T792] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 814.828837][T14695] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 814.838522][T14695] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 814.851442][T14695] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 814.860491][T14695] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 815.044946][ T792] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 815.048022][T14695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.244458][T14695] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.263139][T13808] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.270238][T13808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.284566][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.291671][ T6391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.299723][ T792] usb 4-1: device descriptor read/64, error -71 [ 815.489133][T14695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.578698][ T792] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 815.727332][ T792] usb 4-1: device descriptor read/64, error -71 [ 815.892207][ T792] usb usb4-port1: attempt power cycle [ 816.027034][ T5812] Bluetooth: hci5: command tx timeout [ 816.097021][T14695] veth0_vlan: entered promiscuous mode [ 816.106212][ T5864] usb 5-1: USB disconnect, device number 75 [ 816.218109][T14695] veth1_vlan: entered promiscuous mode [ 816.388725][T14785] erspan1: entered allmulticast mode [ 816.400906][ T792] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 816.435446][ T792] usb 4-1: device descriptor read/8, error -71 [ 816.454959][ T7202] block nbd0: Possible stuck request ffff8880281f0000: control (read@0,1024B). Runtime 600 seconds [ 816.466190][ T7202] block nbd0: Possible stuck request ffff8880281f0200: control (read@1024,1024B). Runtime 600 seconds [ 816.477502][ T7202] block nbd0: Possible stuck request ffff8880281f0400: control (read@2048,1024B). Runtime 600 seconds [ 816.488784][ T7202] block nbd0: Possible stuck request ffff8880281f0600: control (read@3072,1024B). Runtime 600 seconds [ 816.515511][T14695] veth0_macvtap: entered promiscuous mode [ 816.545892][T14695] veth1_macvtap: entered promiscuous mode [ 816.604034][T14695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.629843][T14695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.674747][T13808] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.709219][T13808] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.722939][ T792] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 816.788391][T13808] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.025135][T13808] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.043029][ T792] usb 4-1: device descriptor read/8, error -71 [ 817.161707][ T792] usb usb4-port1: unable to enumerate USB device [ 817.243808][ T30] audit: type=1400 audit(1773720530.800:2217): avc: denied { accept } for pid=14792 comm="syz.4.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 817.455293][T13814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.463275][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 817.466914][T13814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.471157][ T30] audit: type=1326 audit(1773720530.847:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.4.2218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bb419c799 code=0x0 [ 817.547089][T13808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.554942][T13808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.673120][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 817.675689][T14804] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 817.958033][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 817.969034][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 817.979494][ T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 817.988831][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.011362][ T24] usb 7-1: Product: syz [ 818.033284][ T24] usb 7-1: Manufacturer: syz [ 818.054611][ T24] usb 7-1: SerialNumber: syz [ 818.081462][ T24] usb 7-1: config 0 descriptor?? [ 818.250606][ T5812] Bluetooth: hci5: command tx timeout [ 818.663146][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input69 [ 819.437253][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2227'. [ 819.501785][ T24] rc_core: IR keymap rc-imon-pad not found [ 819.520811][ T24] Registered IR keymap rc-empty [ 819.551491][ T24] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 819.636335][ T24] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 819.731444][T14836] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 819.738078][T14836] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 819.748868][T14836] vhci_hcd vhci_hcd.0: Device attached [ 819.867411][T14837] vhci_hcd: connection closed [ 819.867719][ T7720] vhci_hcd vhci_hcd.1: stop threads [ 819.883901][ T7720] vhci_hcd vhci_hcd.1: release socket [ 819.914834][ T7720] vhci_hcd vhci_hcd.1: disconnect device [ 819.961386][T11839] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 820.015957][ T24] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 820.057363][ T5872] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 820.066247][ T24] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input70 [ 820.158849][ T24] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:13> initialized [ 820.270943][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 820.298993][ T5872] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 820.346594][ T5872] usb 5-1: config 0 has no interface number 0 [ 820.374383][ T5872] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 820.386663][T14851] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 820.472218][T14852] kvm: user requested TSC rate below hardware speed [ 820.488615][ T5872] usb 5-1: config 0 interface 85 has no altsetting 0 [ 820.538413][ T5872] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 820.572037][ T24] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 820.590535][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.730106][ T5872] usb 5-1: Product: syz [ 820.758678][ T5872] usb 5-1: Manufacturer: syz [ 820.769552][ T5872] usb 5-1: SerialNumber: syz [ 820.786487][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 820.806824][ T24] usb 8-1: config 1 has no interface number 0 [ 820.823895][ T24] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 820.825662][ T5872] usb 5-1: config 0 descriptor?? [ 820.867657][ T24] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 820.889253][ T24] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 820.912473][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 820.965985][ T5864] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 820.982920][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 8016, setting to 64 [ 821.078461][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 821.128480][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.150519][ T24] usb 8-1: Product: syz [ 821.154725][ T24] usb 8-1: Manufacturer: syz [ 821.175234][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short [ 821.183203][ T24] usb 8-1: SerialNumber: syz [ 821.193193][ T5864] usb 2-1: not running at top speed; connect to a high speed hub [ 821.207958][T14832] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 821.228744][ T5864] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 821.247512][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.269161][ T5864] usb 2-1: Product: syz [ 821.279954][ T5864] usb 2-1: Manufacturer: syz [ 821.293810][ T5864] usb 2-1: SerialNumber: syz [ 821.393409][ T5933] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 821.434588][T14832] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 821.458341][T14832] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 821.526089][ T5872] appletouch 5-1:0.85: Geyser mode initialized. [ 821.565884][ T5864] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 821.587256][ T5933] usb 4-1: no configurations [ 821.591871][ T5933] usb 4-1: can't read configurations, error -22 [ 821.608130][ T5864] usb 2-1: failed to enable PITCH for EP 0x1 [ 821.617984][ T5872] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input71 [ 821.618595][ T5864] usb 2-1: unit 2 not found! [ 821.649335][ T5864] usb 2-1: unit 8 not found! [ 821.705258][ T24] cdc_ncm 8-1:1.1: bind() failure [ 821.759206][ T5933] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 821.787594][ T24] usb 8-1: USB disconnect, device number 2 [ 821.868342][ T792] usb 5-1: USB disconnect, device number 76 [ 821.868417][ C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 821.983794][ T792] appletouch 5-1:0.85: input: appletouch disconnected [ 822.003568][ T5933] usb 4-1: no configurations [ 822.008236][ T5933] usb 4-1: can't read configurations, error -22 [ 822.046722][ T5933] usb usb4-port1: attempt power cycle [ 822.054650][ T5864] usb 2-1: USB disconnect, device number 51 [ 822.557411][ T5933] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 822.581392][ T5933] usb 4-1: no configurations [ 822.586116][ T5933] usb 4-1: can't read configurations, error -22 [ 822.622799][ T5864] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 822.752919][ T5933] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 822.884714][ T5864] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 822.902535][ T5933] usb 4-1: no configurations [ 822.943515][ T5933] usb 4-1: can't read configurations, error -22 [ 822.958831][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.974198][T14871] tipc: Started in network mode [ 822.991728][ T5933] usb usb4-port1: unable to enumerate USB device [ 823.012738][T14871] tipc: Node identity 84e, cluster identity 4711 [ 823.034204][ T5864] usb 2-1: Product: syz [ 823.052184][T14871] tipc: Node number set to 2126 [ 823.058956][ T5864] usb 2-1: Manufacturer: syz [ 823.098661][ T5864] usb 2-1: SerialNumber: syz [ 823.241261][ T5864] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 823.352523][ T5933] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 824.843487][T14876] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 824.850663][T14876] overlayfs: failed to set xattr on upper [ 824.856390][T14876] overlayfs: ...falling back to redirect_dir=nofollow. [ 824.863348][T14876] overlayfs: ...falling back to index=off. [ 824.869389][T14876] overlayfs: ...falling back to uuid=null. [ 824.875297][T14876] overlayfs: maximum fs stacking depth exceeded [ 825.124709][ T5933] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 825.132003][ T5933] ath9k_htc: Failed to initialize the device [ 826.749676][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 826.757120][T11839] usb 7-1: USB disconnect, device number 13 [ 826.775471][ T5933] usb 2-1: ath9k_htc: USB layer deinitialized [ 827.329078][T14889] fuse: Unknown parameter 'rotmole' [ 827.398166][T14892] fuse: Unknown parameter 'rotmole' [ 827.940061][T11839] usb 2-1: USB disconnect, device number 52 [ 829.467878][T14921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2248'. [ 830.867599][T14950] netlink: 'syz.3.2251': attribute type 6 has an invalid length. [ 830.875442][T14950] netlink: 'syz.3.2251': attribute type 7 has an invalid length. [ 830.886982][T14950] netlink: 'syz.3.2251': attribute type 8 has an invalid length. [ 830.993717][ T5864] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 831.132562][T14872] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 831.156720][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 831.168880][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.182494][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 831.275928][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 831.292546][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 831.306047][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 831.342796][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.356982][T14872] usb 5-1: Using ep0 maxpacket: 8 [ 831.812682][ T5864] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 831.831536][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.839799][T14872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 831.848816][ T5864] usb 2-1: Product: syz [ 831.853463][ T5864] usb 2-1: Manufacturer: syz [ 831.858575][ T5864] usb 2-1: SerialNumber: syz [ 831.863438][T14872] usb 5-1: config 1 has an invalid interface number: 96 but max is 2 [ 831.872825][T14872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.883935][T14872] usb 5-1: config 1 has no interface number 2 [ 831.890533][ T5864] usb 2-1: config 0 descriptor?? [ 831.915354][T14933] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 831.928757][T14872] usb 5-1: string descriptor 0 read error: -22 [ 831.935566][T14872] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 831.945849][T14872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.363522][ T7715] Bluetooth: hci6: Frame reassembly failed (-84) [ 832.411002][T14872] usb 5-1: USB disconnect, device number 77 [ 833.063146][T14966] 9p: Bad value for 'rfdno' [ 833.890821][T14872] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 834.185349][T14872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 834.500310][ T5812] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 834.618280][ T5959] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 834.657544][ T5864] rc_core: IR keymap rc-snapstream-firefly not found [ 834.671545][T14872] usb 4-1: config 4 has an invalid interface number: 179 but max is 0 [ 834.679741][T14872] usb 4-1: config 4 has no interface number 0 [ 834.703156][ T5864] Registered IR keymap rc-empty [ 834.709630][ T5864] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 834.720208][T14872] usb 4-1: config 4 interface 179 has no altsetting 0 [ 834.741613][T14872] usb 4-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=f2.a6 [ 834.750986][T14872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.766567][ T5864] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input72 [ 834.776255][T14872] usb 4-1: Product: syz [ 834.788849][T14872] usb 4-1: Manufacturer: syz [ 834.794877][T14872] usb 4-1: SerialNumber: syz [ 834.804836][ T5864] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input73 [ 834.841779][ T5864] usb 2-1: USB disconnect, device number 53 [ 834.847811][ C1] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 834.879290][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 834.904359][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.917385][ T5959] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 834.926744][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.007399][ T5959] usb 5-1: config 0 descriptor?? [ 835.416204][ T5864] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 835.474819][T14974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.579683][ T30] audit: type=1400 audit(1773720547.956:2219): avc: denied { listen } for pid=14992 comm="syz.7.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 835.606809][T14974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.671801][ T5864] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 835.693938][ T5864] usb 2-1: config 0 has an invalid descriptor of length 229, skipping remainder of the config [ 835.708261][ T5959] hid_parser_main: 223 callbacks suppressed [ 835.708278][ T5959] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 835.722423][ T5864] usb 2-1: config 0 has no interface number 0 [ 835.742391][ T5959] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 835.750036][ T5864] usb 2-1: too many endpoints for config 0 interface 200 altsetting 132: 243, using maximum allowed: 30 [ 835.768951][ T5959] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 835.779623][ T5864] usb 2-1: config 0 interface 200 altsetting 132 has 0 endpoint descriptors, different from the interface descriptor's value: 243 [ 835.797160][ T5959] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 835.813113][ T5959] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 835.822428][ T5864] usb 2-1: config 0 interface 200 has no altsetting 0 [ 835.834539][ T5959] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 835.852507][ T5864] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= b.41 [ 835.865819][ T5959] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 835.884529][ T5864] usb 2-1: New USB device strings: Mfr=3, Product=246, SerialNumber=2 [ 835.897832][ T5959] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 835.913448][ T5864] usb 2-1: Product: syz [ 835.919898][ T5959] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 835.932745][ T5864] usb 2-1: Manufacturer: syz [ 835.940931][ T5959] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 835.951720][ T5864] usb 2-1: SerialNumber: syz [ 835.969757][ T5864] usb 2-1: config 0 descriptor?? [ 836.063727][ T5959] petalynx 0003:18B1:0037.0013: collection stack underflow [ 836.084722][ T5959] petalynx 0003:18B1:0037.0013: item 0 0 0 12 parsing failed [ 836.093458][ T5959] petalynx 0003:18B1:0037.0013: parse failed [ 836.104184][ T5959] petalynx 0003:18B1:0037.0013: probe with driver petalynx failed with error -22 [ 836.291083][T14872] usb 4-1: USB disconnect, device number 73 [ 836.853291][ T792] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 837.061456][ T792] usb 7-1: Using ep0 maxpacket: 16 [ 837.087416][ T792] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 837.106589][ T792] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 837.164491][ T792] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.288415][ T24] usb 5-1: USB disconnect, device number 78 [ 837.331985][ T792] usb 7-1: config 1 interface 0 has no altsetting 0 [ 837.372898][ T792] usb 7-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 837.405219][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.472559][ T5864] ftdi_sio 2-1:0.200: FTDI USB Serial Device converter detected [ 837.484519][ T5864] ftdi_sio ttyUSB0: unknown device type: 0xb41 [ 837.508859][ T5864] usb 2-1: USB disconnect, device number 54 [ 837.524429][ T792] usb 7-1: Product: syz [ 837.548634][ T792] usb 7-1: Manufacturer: syz [ 837.549672][ T5864] ftdi_sio 2-1:0.200: device disconnected [ 837.582445][ T792] usb 7-1: SerialNumber: syz [ 837.901941][ T792] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 838.390006][ T30] audit: type=1400 audit(1773720550.584:2220): avc: denied { read write } for pid=15003 comm="syz.6.2265" name="lp0" dev="devtmpfs" ino=4452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 838.416807][T15004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.439930][T15004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.466639][ T30] audit: type=1400 audit(1773720550.584:2221): avc: denied { open } for pid=15003 comm="syz.6.2265" path="/dev/usb/lp0" dev="devtmpfs" ino=4452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 838.504212][ T792] usb 7-1: USB disconnect, device number 14 [ 838.553938][ T792] usblp0: removed [ 838.975092][ T30] audit: type=1400 audit(1773720551.136:2222): avc: denied { read } for pid=15024 comm="syz.7.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 839.525616][ T30] audit: type=1400 audit(1773720551.650:2223): avc: denied { getopt } for pid=15031 comm="syz.6.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 839.557611][T15032] block nbd1: server does not support multiple connections per device. [ 839.577694][T15032] block nbd1: shutting down sockets [ 839.794856][T15041] tipc: New replicast peer: 100.1.1.1 [ 839.800599][T15041] tipc: Enabled bearer , priority 10 [ 840.275195][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2277'. [ 841.308791][T15063] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2282'. [ 842.111830][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 842.129130][ T30] audit: type=1400 audit(1773720554.082:2224): avc: denied { bind } for pid=15072 comm="syz.6.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 842.924383][ T5959] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 843.103039][ T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 843.117310][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.154741][ T24] usb 2-1: Product: syz [ 843.202301][ T5959] usb 8-1: Using ep0 maxpacket: 32 [ 843.218521][ T5959] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 843.228293][ T5959] usb 8-1: config 0 has no interface number 0 [ 843.301196][ T24] usb 2-1: Manufacturer: syz [ 843.309273][ T5959] usb 8-1: config 0 interface 184 has no altsetting 0 [ 843.319832][ T24] usb 2-1: SerialNumber: syz [ 843.343906][ T5959] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 843.356277][ T24] usb 2-1: config 0 descriptor?? [ 843.361674][ T5959] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.373398][ T5959] usb 8-1: Product: syz [ 843.378008][ T5959] usb 8-1: Manufacturer: syz [ 843.415488][ T5959] usb 8-1: SerialNumber: syz [ 843.456400][ T5959] usb 8-1: config 0 descriptor?? [ 843.867763][T15092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 844.747220][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2291'. [ 844.760487][ T5959] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 844.785577][ T5959] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 846.316115][ T30] audit: type=1400 audit(1773720557.244:2225): avc: denied { lock } for pid=15107 comm="syz.4.2296" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 846.367114][ T792] usb 2-1: USB disconnect, device number 55 [ 846.404794][ T5959] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 846.452166][ T5959] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 846.461841][ T5959] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 846.500740][ T5959] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 846.561499][ T5959] usb 8-1: USB disconnect, device number 3 [ 847.166293][T15120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.179637][T15120] team0: Port device batadv0 added [ 847.633692][T15133] qnx6: unable to read the first superblock [ 848.101832][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 848.108390][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 848.215175][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2303'. [ 848.635147][T15153] FAULT_INJECTION: forcing a failure. [ 848.635147][T15153] name failslab, interval 1, probability 0, space 0, times 0 [ 848.665167][ T7202] block nbd0: Possible stuck request ffff8880281f0000: control (read@0,1024B). Runtime 630 seconds [ 848.680296][T15153] CPU: 1 UID: 0 PID: 15153 Comm: syz.4.2297 Tainted: G L syzkaller #0 PREEMPT(full) [ 848.680324][T15153] Tainted: [L]=SOFTLOCKUP [ 848.680330][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 848.680339][T15153] Call Trace: [ 848.680345][T15153] [ 848.680352][T15153] dump_stack_lvl+0x100/0x190 [ 848.680393][T15153] should_fail_ex.cold+0x5/0xa [ 848.680416][T15153] should_failslab+0xc2/0x120 [ 848.680435][T15153] __kmalloc_cache_noprof+0x7a/0x6f0 [ 848.680457][T15153] ? binder_get_thread+0x201/0x850 [ 848.680485][T15153] binder_get_thread+0x201/0x850 [ 848.680511][T15153] binder_poll+0x3f/0x430 [ 848.680533][T15153] ? __pfx_binder_poll+0x10/0x10 [ 848.680554][T15153] do_select+0xd54/0x1850 [ 848.680590][T15153] ? __pfx_do_select+0x10/0x10 [ 848.680609][T15153] ? __pfx___pollwait+0x10/0x10 [ 848.680639][T15153] ? __pfx_pollwake+0x10/0x10 [ 848.680667][T15153] ? __pfx_pollwake+0x10/0x10 [ 848.680696][T15153] ? __pfx_pollwake+0x10/0x10 [ 848.680750][T15153] ? find_held_lock+0x2b/0x80 [ 848.680773][T15153] ? __might_fault+0xc5/0x140 [ 848.680796][T15153] ? __might_fault+0xc5/0x140 [ 848.680828][T15153] ? core_sys_select+0x55b/0xbb0 [ 848.680843][T15153] core_sys_select+0x55b/0xbb0 [ 848.680866][T15153] ? __pfx_core_sys_select+0x10/0x10 [ 848.680881][T15153] ? find_held_lock+0x2b/0x80 [ 848.680903][T15153] ? get_pid_task+0xfc/0x250 [ 848.680954][T15153] ? __pfx_set_user_sigmask+0x10/0x10 [ 848.680972][T15153] ? __mutex_unlock_slowpath+0x15c/0x790 [ 848.680997][T15153] ? __fget_files+0x215/0x3d0 [ 848.681019][T15153] do_pselect.constprop.0+0x238/0x270 [ 848.681040][T15153] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 848.681063][T15153] ? ksys_write+0x1ac/0x250 [ 848.681093][T15153] __x64_sys_pselect6+0x149/0x1c0 [ 848.681115][T15153] do_syscall_64+0x106/0xf80 [ 848.681137][T15153] ? clear_bhb_loop+0x40/0x90 [ 848.681158][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.681176][T15153] RIP: 0033:0x7f9bb419c799 [ 848.681192][T15153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.681208][T15153] RSP: 002b:00007f9bb50c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 848.681226][T15153] RAX: ffffffffffffffda RBX: 00007f9bb4416090 RCX: 00007f9bb419c799 [ 848.681238][T15153] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 848.681249][T15153] RBP: 00007f9bb50c1090 R08: 0000000000000000 R09: 0000000000000000 [ 848.681260][T15153] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 848.681270][T15153] R13: 00007f9bb4416128 R14: 00007f9bb4416090 R15: 00007ffc4f91d818 [ 848.681295][T15153] [ 848.681328][ T7202] block nbd0: Possible stuck request ffff8880281f0200: control (read@1024,1024B). Runtime 630 seconds [ 848.964479][ T7202] block nbd0: Possible stuck request ffff8880281f0400: control (read@2048,1024B). Runtime 630 seconds [ 848.980352][ T7202] block nbd0: Possible stuck request ffff8880281f0600: control (read@3072,1024B). Runtime 630 seconds [ 849.224640][T15161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 850.231898][T15163] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 850.886821][T15177] overlayfs: failed to resolve './cgroup': -2 [ 850.932542][ T30] audit: type=1400 audit(1773720562.323:2226): avc: denied { accept } for pid=15176 comm="syz.7.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 851.064328][T15185] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 851.069816][T15185] PKCS7: Only support pkcs7_signedData type [ 851.123774][T15188] kvm: user requested TSC rate below hardware speed [ 851.166703][T11839] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 851.166703][ T5959] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 851.327296][ T5959] usb 7-1: Using ep0 maxpacket: 32 [ 851.334101][ T5959] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 851.344501][ T5959] usb 7-1: config 0 has no interface number 0 [ 851.357348][ T5959] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 851.360382][T11839] usb 5-1: Using ep0 maxpacket: 8 [ 851.387789][ T5959] usb 7-1: config 0 interface 85 has no altsetting 0 [ 851.396185][T11839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 851.405564][T11839] usb 5-1: config 1 has an invalid interface number: 96 but max is 2 [ 851.413786][T11839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.424892][ T5959] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 851.434724][ T5959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.443516][ T5959] usb 7-1: Product: syz [ 851.445774][T11839] usb 5-1: config 1 has no interface number 2 [ 851.448005][ T5959] usb 7-1: Manufacturer: syz [ 851.469786][T11839] usb 5-1: string descriptor 0 read error: -22 [ 851.476141][ T5959] usb 7-1: SerialNumber: syz [ 851.476186][T11839] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 851.505340][T11839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.515956][ T5959] usb 7-1: config 0 descriptor?? [ 851.990366][T11839] usb 5-1: USB disconnect, device number 79 [ 852.183578][ T5959] appletouch 7-1:0.85: Geyser mode initialized. [ 852.288466][ T5959] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input74 [ 852.443746][T15198] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2314'. [ 852.502629][ T5959] usb 7-1: USB disconnect, device number 15 [ 852.508600][ C1] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 852.760126][ T7530] udevd[7530]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 852.772797][ T5959] appletouch 7-1:0.85: input: appletouch disconnected [ 855.385511][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2320'. [ 855.590122][ T30] audit: type=1400 audit(1773720566.664:2227): avc: denied { bind } for pid=15224 comm="syz.7.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 855.660636][ T30] audit: type=1400 audit(1773720566.673:2228): avc: denied { listen } for pid=15224 comm="syz.7.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 856.073745][ T30] audit: type=1400 audit(1773720566.673:2229): avc: denied { connect } for pid=15224 comm="syz.7.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 856.139100][ T30] audit: type=1400 audit(1773720566.701:2230): avc: denied { connect } for pid=15201 comm="syz.1.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 856.207672][ T30] audit: type=1400 audit(1773720566.935:2231): avc: denied { nlmsg_write } for pid=15212 comm="syz.6.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 857.531190][T15241] autofs4:pid:15241:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 857.819129][T15237] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 858.378268][T15247] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 858.597495][T15250] binder: 15249:15250 ioctl 400454ce 0 returned -22 [ 858.688086][T15250] binder: 15249:15250 ioctl 80045105 200000000040 returned -22 [ 859.211074][T15257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=15257 comm=syz.7.2326 [ 859.277711][T15259] FAULT_INJECTION: forcing a failure. [ 859.277711][T15259] name failslab, interval 1, probability 0, space 0, times 0 [ 859.291582][T15259] CPU: 0 UID: 0 PID: 15259 Comm: syz.4.2330 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.291611][T15259] Tainted: [L]=SOFTLOCKUP [ 859.291617][T15259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 859.291627][T15259] Call Trace: [ 859.291634][T15259] [ 859.291641][T15259] dump_stack_lvl+0x100/0x190 [ 859.291674][T15259] should_fail_ex.cold+0x5/0xa [ 859.291697][T15259] should_failslab+0xc2/0x120 [ 859.291715][T15259] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 859.291741][T15259] ? __alloc_skb+0x140/0x710 [ 859.291766][T15259] __alloc_skb+0x140/0x710 [ 859.291784][T15259] ? __alloc_skb+0x5b7/0x710 [ 859.291803][T15259] ? __pfx___alloc_skb+0x10/0x10 [ 859.291830][T15259] netlink_alloc_large_skb+0x69/0x150 [ 859.291857][T15259] netlink_sendmsg+0x680/0xda0 [ 859.291886][T15259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.291909][T15259] ? PageHuge+0x170/0x180 [ 859.291942][T15259] ____sys_sendmsg+0x9e1/0xb70 [ 859.291967][T15259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.291994][T15259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.292032][T15259] ___sys_sendmsg+0x190/0x1e0 [ 859.292061][T15259] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.292116][T15259] __sys_sendmsg+0x170/0x220 [ 859.292139][T15259] ? __pfx___sys_sendmsg+0x10/0x10 [ 859.292176][T15259] do_syscall_64+0x106/0xf80 [ 859.292199][T15259] ? clear_bhb_loop+0x40/0x90 [ 859.292220][T15259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.292238][T15259] RIP: 0033:0x7f9bb419c799 [ 859.292254][T15259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.292270][T15259] RSP: 002b:00007f9bb50e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.292296][T15259] RAX: ffffffffffffffda RBX: 00007f9bb4415fa0 RCX: 00007f9bb419c799 [ 859.292308][T15259] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 859.292319][T15259] RBP: 00007f9bb50e2090 R08: 0000000000000000 R09: 0000000000000000 [ 859.292329][T15259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.292339][T15259] R13: 00007f9bb4416038 R14: 00007f9bb4415fa0 R15: 00007ffc4f91d818 [ 859.292362][T15259] [ 859.601680][ T5813] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 859.933176][ T5813] usb 7-1: Using ep0 maxpacket: 32 [ 860.797698][ T5813] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 860.861794][ T5813] usb 7-1: config 0 has no interface number 0 [ 860.916903][ T5813] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 860.930086][ T5813] usb 7-1: config 0 interface 85 has no altsetting 0 [ 860.939321][ T5813] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 860.950715][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.958734][ T5813] usb 7-1: Product: syz [ 861.000054][ T5813] usb 7-1: Manufacturer: syz [ 861.008186][ T30] audit: type=1400 audit(1773720571.733:2232): avc: denied { mount } for pid=15264 comm="syz.7.2334" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 861.034355][ T5813] usb 7-1: SerialNumber: syz [ 861.052184][ T5813] usb 7-1: config 0 descriptor?? [ 861.077280][ T30] audit: type=1400 audit(1773720571.743:2233): avc: denied { remount } for pid=15264 comm="syz.7.2334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 861.150483][ T30] audit: type=1400 audit(1773720571.799:2234): avc: denied { unmount } for pid=14695 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 861.718651][ T5813] appletouch 7-1:0.85: Geyser mode initialized. [ 861.814453][ T5813] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input75 [ 861.969698][ T5813] usb 7-1: USB disconnect, device number 16 [ 862.173517][ T30] audit: type=1400 audit(1773720572.828:2235): avc: denied { bind } for pid=15300 comm="syz.7.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 862.313397][ T5813] appletouch 7-1:0.85: input: appletouch disconnected [ 862.697605][T15306] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 863.047877][ T5812] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 863.063095][T15309] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 863.069866][T15309] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 864.052773][T15309] vhci_hcd vhci_hcd.0: Device attached [ 864.439463][T15318] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 864.520617][ T5959] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 864.635450][T15323] FAULT_INJECTION: forcing a failure. [ 864.635450][T15323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.648675][T15323] CPU: 0 UID: 0 PID: 15323 Comm: syz.3.2349 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.648702][T15323] Tainted: [L]=SOFTLOCKUP [ 864.648707][T15323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 864.648713][T15323] Call Trace: [ 864.648718][T15323] [ 864.648723][T15323] dump_stack_lvl+0x100/0x190 [ 864.648746][T15323] should_fail_ex.cold+0x5/0xa [ 864.648761][T15323] strncpy_from_user+0x3b/0x2d0 [ 864.648782][T15323] do_getname+0x78/0x390 [ 864.648798][T15323] do_sys_openat2+0xc5/0x1e0 [ 864.648812][T15323] ? __pfx_do_sys_openat2+0x10/0x10 [ 864.648825][T15323] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 864.648843][T15323] ? __fget_files+0x21f/0x3d0 [ 864.648858][T15323] __x64_sys_openat+0x12d/0x210 [ 864.648872][T15323] ? __pfx___x64_sys_openat+0x10/0x10 [ 864.648886][T15323] ? ksys_write+0x1ac/0x250 [ 864.648907][T15323] do_syscall_64+0x106/0xf80 [ 864.648922][T15323] ? clear_bhb_loop+0x40/0x90 [ 864.648936][T15323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.648948][T15323] RIP: 0033:0x7f1387f9c799 [ 864.648957][T15323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.648968][T15323] RSP: 002b:00007f13861f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 864.648980][T15323] RAX: ffffffffffffffda RBX: 00007f1388216090 RCX: 00007f1387f9c799 [ 864.648987][T15323] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 864.648994][T15323] RBP: 00007f13861f6090 R08: 0000000000000000 R09: 0000000000000000 [ 864.649000][T15323] R10: 00000000000000e8 R11: 0000000000000246 R12: 0000000000000001 [ 864.649007][T15323] R13: 00007f1388216128 R14: 00007f1388216090 R15: 00007fff70ab99c8 [ 864.649021][T15323] [ 865.296234][T15312] vhci_hcd: connection reset by peer [ 865.342139][ T7720] vhci_hcd vhci_hcd.6: stop threads [ 865.348512][ T7720] vhci_hcd vhci_hcd.6: release socket [ 865.370565][ T7720] vhci_hcd vhci_hcd.6: disconnect device [ 866.138973][T15346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.169893][T15346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.624568][T15356] syzkaller0: entered promiscuous mode [ 867.770574][ T792] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 868.120085][ T30] audit: type=1400 audit(1773720578.393:2236): avc: denied { getopt } for pid=15366 comm="syz.7.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 868.166108][ T792] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 868.196492][ T792] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 868.245858][ T792] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 868.266360][ T792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 868.282018][ T792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 868.296811][ T792] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 868.306449][ T792] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 868.314724][ T792] usb 4-1: Product: syz [ 868.319047][ T792] usb 4-1: Manufacturer: syz [ 868.363678][ T792] cdc_wdm 4-1:1.0: skipping garbage [ 868.388201][ T792] cdc_wdm 4-1:1.0: skipping garbage [ 868.409783][ T792] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 868.422901][ T792] cdc_wdm 4-1:1.0: Unknown control protocol [ 868.518967][T15376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.451333][ T30] audit: type=1400 audit(1773720579.638:2237): avc: denied { create } for pid=15390 comm="syz.7.2366" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 869.475215][ T30] audit: type=1400 audit(1773720579.666:2238): avc: denied { read append } for pid=15390 comm="syz.7.2366" name="file0" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 869.479785][ T5864] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 869.506077][ T30] audit: type=1400 audit(1773720579.666:2239): avc: denied { open } for pid=15390 comm="syz.7.2366" path="/36/file0" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 869.677337][T15393] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 869.762439][ T5864] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 101, changing to 4 [ 869.777014][ T5864] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 199, changing to 4 [ 869.845341][T15397] xt_TPROXY: Can be used only with -p tcp or -p udp [ 870.175792][ T5864] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 870.188246][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.197218][ T5864] usb 5-1: Product: ఄ [ 870.202627][ T5864] usb 5-1: Manufacturer: ᲈ䋰䡸鬻蚨䵁缑뉩왱蔆쇦﯂䢙릮⠊븢෱ᑤ啊鰇澔룚㍱ꝥ䠒ཤِ䱫⼲ [ 870.215769][ T5864] usb 5-1: SerialNumber: 憿䆊숁狫阴ﴽ婓緤᫠짳왻鴯晀㪴㰃渼Ḉ鉾学潐嬣梩㾮꧖쎚ꚲ楅褘ﵨಷ꽛䆫街䯌傀ⶹ咩皇垜拤 [ 870.231768][ T5959] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 870.420758][ T30] audit: type=1400 audit(1773720580.545:2240): avc: denied { unlink } for pid=14695 comm="syz-executor" name="file0" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 870.892222][T15392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 871.077996][ T5872] usb 4-1: USB disconnect, device number 74 [ 872.540735][ T5864] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 872.619409][ T5864] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 872.642166][ T5864] usb 5-1: USB disconnect, device number 80 [ 872.694054][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.715424][T15415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 872.721930][T15417] netlink: 'syz.1.2371': attribute type 1 has an invalid length. [ 873.750858][T15425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2374'. [ 874.126917][T15433] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2375'. [ 874.486432][T15435] can0: slcan on ptm0. [ 875.028768][T15429] can0 (unregistered): slcan off ptm0. [ 875.051895][ T30] audit: type=1804 audit(1773720584.885:2241): pid=15443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2378" name="/newroot/40/cgroup.controllers" dev="tmpfs" ino=233 res=1 errno=0 [ 875.209918][ T30] audit: type=1800 audit(1773720584.913:2242): pid=15443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2378" name="cgroup.controllers" dev="tmpfs" ino=233 res=0 errno=0 [ 875.311329][ T30] audit: type=1800 audit(1773720585.007:2243): pid=15443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2378" name="cgroup.controllers" dev="tmpfs" ino=233 res=0 errno=0 [ 875.505525][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2379'. [ 877.283895][ T5959] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 877.430163][T15486] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2384'. [ 877.461930][T15485] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2384'. [ 877.769671][ T5959] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 877.822982][ T5959] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 877.850844][ T5959] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 877.860004][ T5959] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 877.918050][ T5959] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 877.972765][ T5959] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 877.992699][ T5959] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 878.025114][ T5959] usb 8-1: Product: syz [ 878.058166][ T5959] usb 8-1: Manufacturer: syz [ 878.082781][ T5959] cdc_wdm 8-1:1.0: skipping garbage [ 878.091439][ T5959] cdc_wdm 8-1:1.0: skipping garbage [ 878.107586][ T5959] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 878.113636][ T5959] cdc_wdm 8-1:1.0: Unknown control protocol [ 878.642294][T15519] tipc: Started in network mode [ 878.654307][ T5813] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 878.748717][T15519] tipc: Node identity 84e, cluster identity 4711 [ 878.849487][ T30] audit: type=1400 audit(1773720588.402:2244): avc: denied { read write } for pid=15477 comm="syz.7.2383" name="cdc-wdm0" dev="devtmpfs" ino=4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 878.875911][T15519] tipc: Node number set to 2126 [ 878.897649][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.930297][ T5813] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 879.051940][ T30] audit: type=1400 audit(1773720588.402:2245): avc: denied { open } for pid=15477 comm="syz.7.2383" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 879.090561][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.113761][ T5813] usb 4-1: config 0 descriptor?? [ 879.348187][ T5864] usb 8-1: USB disconnect, device number 4 [ 879.574009][ T5813] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 879.608519][ T5813] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0014/input/input76 [ 879.921697][ T5813] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 880.111051][ T5864] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 880.355043][T15541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 880.666493][T15542] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 880.681687][T15512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.704680][T15512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.721693][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.742814][ T5864] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 880.774562][ T7202] block nbd0: Possible stuck request ffff8880281f0000: control (read@0,1024B). Runtime 660 seconds [ 880.790558][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.906393][ T5864] usb 5-1: config 0 descriptor?? [ 881.047817][ T7202] block nbd0: Possible stuck request ffff8880281f0200: control (read@1024,1024B). Runtime 660 seconds [ 881.059201][ T7202] block nbd0: Possible stuck request ffff8880281f0400: control (read@2048,1024B). Runtime 660 seconds [ 881.089856][ T7202] block nbd0: Possible stuck request ffff8880281f0600: control (read@3072,1024B). Runtime 660 seconds [ 881.285631][ T5959] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 881.780345][ T5864] usbhid 5-1:0.0: can't add hid device: -71 [ 881.790541][ T5959] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 881.802937][ T5864] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 881.838381][ T5959] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 881.856200][ T5864] usb 5-1: USB disconnect, device number 81 [ 881.895858][ T5959] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.920552][ T5813] usb 4-1: USB disconnect, device number 75 [ 881.934479][ T5959] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 881.960478][ T5872] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 882.004629][ T5959] usb 2-1: config 0 interface 0 has no altsetting 0 [ 882.055566][ T5959] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 882.094623][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.129757][ T5959] usb 2-1: config 0 descriptor?? [ 882.149020][ T5872] usb 8-1: Using ep0 maxpacket: 16 [ 882.156788][ T5872] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 882.183978][ T5872] usb 8-1: config 0 has no interface number 0 [ 882.205722][ T5872] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 882.223495][ T5872] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 882.244684][ T5872] usb 8-1: config 0 interface 41 has no altsetting 0 [ 882.328505][ T5864] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 882.368263][ T5872] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 882.391780][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.410882][ T5872] usb 8-1: Product: syz [ 882.420669][ T5872] usb 8-1: Manufacturer: syz [ 882.445312][ T5872] usb 8-1: SerialNumber: syz [ 882.463717][ T30] audit: type=1400 audit(1773720591.798:2246): avc: denied { append } for pid=15557 comm="syz.6.2398" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 882.506311][ T5872] usb 8-1: config 0 descriptor?? [ 882.516887][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.528131][T15547] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 882.548415][T15547] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 882.555919][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 882.601743][ T5959] ryos 0003:1E7D:3138.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 882.625779][ T5864] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 882.655796][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.685995][ T5864] usb 5-1: config 0 descriptor?? [ 882.723840][ T5864] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 882.726906][T11839] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 882.796494][T15547] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 882.825944][T15547] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 882.967792][T11839] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.989329][ T5864] usb 2-1: USB disconnect, device number 56 [ 883.000309][T11839] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 883.014046][T11839] usb 7-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 883.027700][T11839] usb 7-1: config 1 interface 1 has no altsetting 0 [ 883.052837][T11839] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 883.083988][T11839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.100048][T11839] usb 7-1: Product: syz [ 883.106984][T11839] usb 7-1: Manufacturer: syz [ 883.111751][T11839] usb 7-1: SerialNumber: syz [ 883.296976][ T5872] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -22 [ 883.442857][T11839] usb 7-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 883.461613][T11839] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 883.501589][T11839] usb 7-1: unknown interface protocol 0x1, assuming v1 [ 883.516595][T11839] usb 7-1: cannot find UAC_HEADER [ 883.723821][T11839] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 883.897502][T11839] usb 7-1: USB disconnect, device number 17 [ 883.955594][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 884.114926][ T5959] usb 5-1: USB disconnect, device number 82 [ 884.491254][ T5933] IPVS: starting estimator thread 0... [ 884.528764][ T30] audit: type=1400 audit(1773720593.743:2247): avc: denied { read } for pid=15571 comm="syz.4.2401" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 884.586948][T15580] IPVS: using max 82 ests per chain, 196800 per kthread [ 884.594396][T15583] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 884.668597][T15583] block device autoloading is deprecated and will be removed. [ 884.684389][ T30] audit: type=1400 audit(1773720593.743:2248): avc: denied { open } for pid=15571 comm="syz.4.2401" path="/503/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 884.729809][ T30] audit: type=1400 audit(1773720593.790:2249): avc: denied { ioctl } for pid=15571 comm="syz.4.2401" path="/503/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 885.109236][ T30] audit: type=1400 audit(1773720593.940:2250): avc: denied { getopt } for pid=15571 comm="syz.4.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 885.412174][T15575] md: could not open device unknown-block(0,0). [ 885.430586][T15575] md: md_import_device returned -6 [ 885.455360][ T30] audit: type=1326 audit(1773720594.183:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.6.2405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd4999c799 code=0x0 [ 885.611608][T15604] No source specified [ 885.621338][ T30] audit: type=1400 audit(1773720594.763:2252): avc: denied { create } for pid=15603 comm="syz.4.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 885.653556][ T30] audit: type=1400 audit(1773720594.791:2253): avc: denied { sys_admin } for pid=15603 comm="syz.4.2406" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 885.793580][T11839] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 885.820222][ T5813] usb 8-1: USB disconnect, device number 5 [ 885.892618][ T5933] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 885.914083][ T30] audit: type=1400 audit(1773720595.044:2254): avc: denied { setopt } for pid=15612 comm="syz.4.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 885.965904][T11839] usb 4-1: Using ep0 maxpacket: 8 [ 886.081885][ T5933] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 886.095289][ T5933] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 886.132216][ T5933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 886.141417][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 886.152300][ T5933] usb 2-1: SerialNumber: syz [ 886.237064][T11839] usb 4-1: unable to get BOS descriptor or descriptor too short [ 886.328646][ T5933] usb 2-1: bad CDC descriptors [ 886.345123][ T5933] usb-storage 2-1:1.0: USB Mass Storage device detected [ 886.438232][T11839] usb 4-1: config 1 has an invalid interface number: 96 but max is 2 [ 886.447506][T11839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.462495][T11839] usb 4-1: config 1 has no interface number 2 [ 886.487733][T11839] usb 4-1: string descriptor 0 read error: -22 [ 886.493087][ T5933] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 886.777948][T11839] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 886.787183][ T5933] scsi host1: usb-storage 2-1:1.0 [ 886.793545][T11839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.813991][ T5872] libceph: connect (1)[c::]:6789 error -22 [ 886.819993][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 886.866214][ T5933] usb 2-1: USB disconnect, device number 57 [ 886.961633][T15616] ceph: No mds server is up or the cluster is laggy [ 887.271415][T15634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2412'. [ 887.392798][T15633] binder: 15631:15633 ioctl c00c620f 200000000000 returned -22 [ 887.427758][T15636] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 887.435149][ T5813] IPVS: starting estimator thread 0... [ 887.479555][T11839] usb 4-1: USB disconnect, device number 76 [ 887.561533][T15637] IPVS: using max 40 ests per chain, 96000 per kthread [ 887.704920][ T5933] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 887.893765][T15641] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 888.110449][ T5933] usb 7-1: unable to get BOS descriptor or descriptor too short [ 888.121515][ T5933] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.161033][ T5933] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.204199][ T5933] usb 7-1: config 1 interface 0 has no altsetting 0 [ 888.237047][ T5933] usb 7-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 888.284474][ T5933] usb 7-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 888.292654][ T5933] usb 7-1: Product: syz [ 888.321041][ T5933] usb 7-1: Manufacturer: syz [ 888.325681][ T5933] usb 7-1: SerialNumber: syz [ 888.352936][T15645] mkiss: ax0: crc mode is auto. [ 888.379910][T15647] nfs: Unknown parameter '' [ 888.510129][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2420'. [ 888.520736][ T30] audit: type=1400 audit(1773720597.485:2255): avc: denied { write } for pid=15652 comm="syz.7.2420" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 888.658718][T11839] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 888.995890][T11839] usb 4-1: device descriptor read/64, error -71 [ 889.250996][T15662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2421'. [ 889.924139][ T5933] usbhid 7-1:1.0: fixing wrong optional hid class descriptors count [ 889.936466][ T5933] usbhid 7-1:1.0: can't add hid device: -22 [ 889.943083][ T5933] usbhid 7-1:1.0: probe with driver usbhid failed with error -22 [ 889.962998][ T5864] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 889.974049][ T5933] usb 7-1: USB disconnect, device number 18 [ 890.155385][ T5864] usb 8-1: Using ep0 maxpacket: 16 [ 890.168905][ T5864] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 890.204169][T11839] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 890.212005][ T5864] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 890.275507][ T5864] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 890.305179][ T5864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.313233][ T5864] usb 8-1: Product: syz [ 890.326604][ T5864] usb 8-1: Manufacturer: syz [ 890.348075][ T5864] usb 8-1: SerialNumber: syz [ 890.376313][ T5864] usb 8-1: config 0 descriptor?? [ 890.390706][T11839] usb 4-1: device descriptor read/64, error -71 [ 890.408853][ T5864] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 890.441594][ T5864] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 890.599173][T11839] usb usb4-port1: attempt power cycle [ 890.947200][T15673] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 890.978634][T11839] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 891.038841][T11839] usb 4-1: device descriptor read/8, error -71 [ 891.267022][ T5864] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 891.273565][ T5864] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 891.311263][T11839] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 891.342409][ T5813] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 891.357954][T11839] usb 4-1: device descriptor read/8, error -71 [ 891.482132][T11839] usb usb4-port1: unable to enumerate USB device [ 891.530396][ T5813] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 891.542931][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.557037][ T5813] usb 2-1: Product: syz [ 891.568064][ T5813] usb 2-1: Manufacturer: syz [ 891.599592][ T5813] usb 2-1: SerialNumber: syz [ 891.609033][ T5813] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 891.647226][T11839] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 891.886243][ T5813] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 892.630527][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.666064][ T5813] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 892.685851][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.701750][ T5813] usb 5-1: config 0 descriptor?? [ 892.719249][ T5813] pwc: Askey VC010 type 2 USB webcam detected. [ 892.742491][T11839] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 892.749768][T11839] ath9k_htc: Failed to initialize the device [ 892.838355][ T5864] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 892.858827][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 892.866356][ T5864] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 892.872991][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 892.885159][ T5864] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 892.892036][ T5864] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 892.898758][ T5864] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 892.899991][T11839] usb 2-1: ath9k_htc: USB layer deinitialized [ 892.907452][ T5864] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 892.929298][ T792] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 892.941508][ T5864] usb 8-1: USB disconnect, device number 6 [ 893.083373][T15698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=15698 comm=syz.6.2431 [ 893.101459][T15698] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 893.111661][T15698] PKCS7: Only support pkcs7_signedData type [ 893.168413][ T5813] pwc: recv_control_msg error -32 req 02 val 2b00 [ 893.175144][ T792] usb 4-1: Using ep0 maxpacket: 32 [ 893.196279][T15680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 893.212429][ T30] audit: type=1804 audit(1773720601.863:2256): pid=15680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2427" name="/newroot/512/file1" dev="tmpfs" ino=2744 res=1 errno=0 [ 893.240400][ T5813] pwc: recv_control_msg error -32 req 02 val 2700 [ 893.250212][ T5813] pwc: recv_control_msg error -71 req 02 val 2c00 [ 893.257368][ T5813] pwc: recv_control_msg error -71 req 04 val 1000 [ 893.279905][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.303113][ T5813] pwc: recv_control_msg error -71 req 04 val 1300 [ 893.313103][ T792] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 893.330640][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.340308][ T5813] pwc: recv_control_msg error -71 req 04 val 1400 [ 893.352498][ T5813] pwc: recv_control_msg error -71 req 02 val 2000 [ 893.397508][ T5813] pwc: recv_control_msg error -71 req 02 val 2100 [ 893.471168][ T5813] pwc: recv_control_msg error -71 req 04 val 1500 [ 893.487024][ T792] usb 4-1: config 0 descriptor?? [ 893.508670][ T792] hub 4-1:0.0: USB hub found [ 893.541618][ T5813] pwc: recv_control_msg error -71 req 02 val 2500 [ 893.551094][ T5813] pwc: recv_control_msg error -71 req 02 val 2400 [ 893.566402][ T5813] pwc: recv_control_msg error -71 req 02 val 2600 [ 893.573548][ T5813] pwc: recv_control_msg error -71 req 02 val 2900 [ 893.581406][ T5813] pwc: recv_control_msg error -71 req 02 val 2800 [ 893.606905][ T5813] pwc: recv_control_msg error -71 req 04 val 1100 [ 893.614668][ T5813] pwc: recv_control_msg error -71 req 04 val 1200 [ 893.625714][ T5813] pwc: Registered as video103. [ 893.646006][ T5813] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input77 [ 893.683968][ T5813] usb 5-1: USB disconnect, device number 83 [ 893.745792][ T792] hub 4-1:0.0: 1 port detected [ 893.964620][ T792] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 894.082895][ T792] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 894.097282][ T792] usbhid 4-1:0.0: can't add hid device: -71 [ 895.158557][ T792] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 895.177832][ T30] audit: type=1400 audit(1773720603.705:2257): avc: denied { setopt } for pid=15699 comm="syz.7.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 895.384047][ T792] usb 4-1: USB disconnect, device number 81 [ 895.433832][ T5959] usb 2-1: USB disconnect, device number 58 [ 895.542951][ T30] audit: type=1400 audit(1773720604.042:2258): avc: denied { lock } for pid=15713 comm="syz.3.2435" path="socket:[56502]" dev="sockfs" ino=56502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 895.640255][T15717] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 895.706049][T15721] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2437'. [ 895.706339][ T30] audit: type=1400 audit(1773720604.042:2259): avc: denied { create } for pid=15713 comm="syz.3.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 896.426762][T15729] xt_TPROXY: Can be used only with -p tcp or -p udp [ 896.466319][ T30] audit: type=1400 audit(1773720604.903:2260): avc: denied { ioctl } for pid=15723 comm="syz.1.2438" path="socket:[55669]" dev="sockfs" ino=55669 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 896.529999][ T5812] Bluetooth: hci2: Dropping invalid advertising data [ 896.553004][ T5812] Bluetooth: hci2: Malformed LE Event: 0x02 [ 897.286017][ T5813] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 897.554183][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 897.598040][ T5813] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 897.642890][ T5813] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 897.677071][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 897.927697][ T5813] usb 2-1: Product: syz [ 897.939662][ T5813] usb 2-1: Manufacturer: syz [ 897.959575][ T5813] usb 2-1: SerialNumber: syz [ 897.980664][T15758] netlink: 'syz.3.2444': attribute type 39 has an invalid length. [ 898.048488][ T5813] usb 2-1: config 0 descriptor?? [ 898.064978][T15745] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 898.087660][T15759] overlayfs: failed lookup in lower (newroot/506, name='file1', err=-40): overlapping layers [ 898.286703][ T5813] hub 2-1:0.0: bad descriptor, ignoring hub [ 898.348050][ T5813] hub 2-1:0.0: probe with driver hub failed with error -5 [ 900.536884][ T5813] usb 2-1: USB disconnect, device number 59 [ 900.568218][ T5959] IPVS: starting estimator thread 0... [ 900.580387][T15772] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 900.595308][T15772] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 900.726756][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2447'. [ 900.741276][T15773] IPVS: using max 82 ests per chain, 196800 per kthread [ 900.775196][T15776] netlink: 'syz.4.2447': attribute type 20 has an invalid length. [ 900.862528][T15776] netlink: 'syz.4.2447': attribute type 21 has an invalid length. [ 901.102590][ T5813] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 901.744008][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 901.759892][ T5813] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 901.826453][ T5813] usb 2-1: string descriptor 0 read error: -71 [ 901.850948][ T5813] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 901.860042][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 901.909820][ T5813] usb 2-1: config 0 descriptor?? [ 901.926503][ T5813] usb 2-1: can't set config #0, error -71 [ 901.938054][ T5813] usb 2-1: USB disconnect, device number 60 [ 902.057609][ T30] audit: type=1400 audit(1773720610.141:2261): avc: denied { listen } for pid=15799 comm="syz.4.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 902.150231][ T5959] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 902.333477][ T5959] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 902.787522][ T5959] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 902.853175][ T5959] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 902.910871][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.027476][T15794] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 903.059922][ T5959] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 903.369261][ T5959] usb 4-1: USB disconnect, device number 82 [ 903.506421][T15814] syz_tun: entered allmulticast mode [ 903.786543][ T5813] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 903.993406][ T5813] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 904.037270][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.057618][ T5813] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 904.075016][ T5813] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 904.083294][ T5813] usb 2-1: Manufacturer: syz [ 904.096935][ T5813] usb 2-1: config 0 descriptor?? [ 904.309909][ T5813] rc_core: IR keymap rc-hauppauge not found [ 904.315926][ T5813] Registered IR keymap rc-empty [ 904.701875][T15814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.718493][ T5813] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 904.738084][T15814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.740475][ T5813] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input78 [ 904.850093][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 904.980944][T15814] syz_tun (unregistering): left allmulticast mode [ 905.409533][ T5864] usb 2-1: USB disconnect, device number 61 [ 905.746262][T15846] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 906.703657][T15861] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2476'. [ 908.103776][T15828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 908.287589][ T30] audit: type=1400 audit(1773720615.959:2262): avc: denied { setopt } for pid=15874 comm="syz.7.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 908.318777][T11839] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 908.701791][T11839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.860446][T11839] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 908.869809][T11839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.894712][T11839] usb 2-1: config 0 descriptor?? [ 908.986781][T11839] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 909.074700][T15888] FAULT_INJECTION: forcing a failure. [ 909.074700][T15888] name failslab, interval 1, probability 0, space 0, times 0 [ 909.095155][T15888] CPU: 0 UID: 0 PID: 15888 Comm: syz.4.2483 Tainted: G L syzkaller #0 PREEMPT(full) [ 909.095189][T15888] Tainted: [L]=SOFTLOCKUP [ 909.095195][T15888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.095206][T15888] Call Trace: [ 909.095213][T15888] [ 909.095220][T15888] dump_stack_lvl+0x100/0x190 [ 909.095253][T15888] should_fail_ex.cold+0x5/0xa [ 909.095276][T15888] should_failslab+0xc2/0x120 [ 909.095295][T15888] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 909.095319][T15888] ? skb_clone+0x190/0x400 [ 909.095345][T15888] skb_clone+0x190/0x400 [ 909.095367][T15888] netlink_deliver_tap+0xaed/0xcc0 [ 909.095397][T15888] netlink_unicast+0x70c/0x870 [ 909.095425][T15888] ? __pfx_netlink_unicast+0x10/0x10 [ 909.095446][T15888] ? __alloc_skb+0x5b7/0x710 [ 909.095475][T15888] netlink_ack+0x655/0xb80 [ 909.095507][T15888] netlink_rcv_skb+0x333/0x420 [ 909.095531][T15888] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 909.095551][T15888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 909.095587][T15888] ? ns_capable+0xd2/0xf0 [ 909.095611][T15888] nfnetlink_rcv+0x1b3/0x440 [ 909.095629][T15888] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 909.095647][T15888] ? netlink_deliver_tap+0x1ae/0xcc0 [ 909.095674][T15888] netlink_unicast+0x5aa/0x870 [ 909.095703][T15888] ? __pfx_netlink_unicast+0x10/0x10 [ 909.095737][T15888] netlink_sendmsg+0x8b0/0xda0 [ 909.095771][T15888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 909.095793][T15888] ? PageHuge+0x170/0x180 [ 909.095825][T15888] ____sys_sendmsg+0x9e1/0xb70 [ 909.095851][T15888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 909.095877][T15888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 909.095915][T15888] ___sys_sendmsg+0x190/0x1e0 [ 909.095944][T15888] ? __pfx____sys_sendmsg+0x10/0x10 [ 909.096002][T15888] __sys_sendmsg+0x170/0x220 [ 909.096024][T15888] ? __pfx___sys_sendmsg+0x10/0x10 [ 909.096062][T15888] do_syscall_64+0x106/0xf80 [ 909.096084][T15888] ? clear_bhb_loop+0x40/0x90 [ 909.096106][T15888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.096123][T15888] RIP: 0033:0x7f9bb419c799 [ 909.096139][T15888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.096155][T15888] RSP: 002b:00007f9bb50e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.096172][T15888] RAX: ffffffffffffffda RBX: 00007f9bb4415fa0 RCX: 00007f9bb419c799 [ 909.096183][T15888] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 909.096194][T15888] RBP: 00007f9bb50e2090 R08: 0000000000000000 R09: 0000000000000000 [ 909.096204][T15888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.096214][T15888] R13: 00007f9bb4416038 R14: 00007f9bb4415fa0 R15: 00007ffc4f91d818 [ 909.096238][T15888] [ 909.431121][ T30] audit: type=1400 audit(1773720617.035:2263): avc: denied { read } for pid=15876 comm="syz.3.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 909.569501][T11839] gspca_vc032x: reg_r err -110 [ 909.602365][T11839] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 910.018615][T15899] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 910.241863][ T30] audit: type=1400 audit(1773720617.792:2264): avc: denied { setopt } for pid=15901 comm="syz.4.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 910.751602][T15912] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 911.252843][T11839] usb 2-1: USB disconnect, device number 62 [ 911.378204][T15924] mkiss: ax0: crc mode is auto. [ 912.778257][T15940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2496'. [ 913.079462][T15944] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2497'. [ 913.876040][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 913.883118][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 913.889472][ T7202] block nbd0: Possible stuck request ffff8880281f0000: control (read@0,1024B). Runtime 690 seconds [ 913.987266][ T7202] block nbd0: Possible stuck request ffff8880281f0200: control (read@1024,1024B). Runtime 690 seconds [ 913.999294][ T7202] block nbd0: Possible stuck request ffff8880281f0400: control (read@2048,1024B). Runtime 690 seconds [ 914.017384][ T7202] block nbd0: Possible stuck request ffff8880281f0600: control (read@3072,1024B). Runtime 690 seconds [ 915.892878][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2502'. [ 915.909141][ T24] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 916.092184][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.107095][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 916.137921][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.174707][ T24] usb 4-1: config 0 descriptor?? [ 916.194425][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 916.657634][T11839] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 916.778062][T15972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 916.786742][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 916.793780][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 916.810912][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 916.819075][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 917.258519][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 917.277991][T11839] usb 2-1: Using ep0 maxpacket: 8 [ 917.295223][T11839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 917.726697][T11839] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 917.750613][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 917.757859][T11839] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 917.767610][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 917.789538][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 917.796694][T11839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.828506][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 917.861259][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 917.873365][T11839] usb 2-1: config 0 descriptor?? [ 917.910459][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 918.207407][T15984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2507'. [ 919.383898][T15988] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2508'. [ 920.450150][T11839] usbhid 2-1:0.0: can't add hid device: -71 [ 920.484792][T11839] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 920.536081][T11839] usb 2-1: USB disconnect, device number 63 [ 920.723404][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 920.730262][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 920.738100][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 920.746131][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 920.753392][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 920.761423][ T24] pwc: Registered as video103. [ 920.767943][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input79 [ 920.799056][ T24] usb 4-1: USB disconnect, device number 83 [ 921.281056][T15996] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 921.304027][T15996] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 921.336376][T15996] overlayfs: failed to get uuid (515/file0, err=-13); falling back to uuid=null. [ 921.347064][ T30] audit: type=1400 audit(1773720628.175:2265): avc: denied { ioctl } for pid=15995 comm="syz.3.2513" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 922.252017][ T30] audit: type=1400 audit(1773720629.027:2266): avc: denied { append } for pid=16008 comm="syz.6.2509" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 922.352886][T16017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2510'. [ 923.602254][T16044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 923.617054][ T5813] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 923.788098][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 923.798909][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.832383][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 923.926159][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 923.937708][ T5959] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 923.967729][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 923.997886][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 924.023712][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 924.064285][ T5813] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 924.076004][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.086885][ T5813] usb 5-1: Product: syz [ 924.093056][ T5813] usb 5-1: Manufacturer: syz [ 924.100541][ T5813] usb 5-1: SerialNumber: syz [ 924.185844][ T5959] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.197383][ T5959] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 924.207031][ T5959] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.219700][ T5959] usb 8-1: config 0 descriptor?? [ 924.223996][ T5813] usb 5-1: config 0 descriptor?? [ 924.241204][T16041] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 926.963741][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 927.050236][ T5959] usbhid 8-1:0.0: can't add hid device: -71 [ 927.056268][ T5959] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 927.069423][ T5959] usb 8-1: USB disconnect, device number 7 [ 927.178652][ T5813] rc_core: IR keymap rc-snapstream-firefly not found [ 927.460773][ T5813] Registered IR keymap rc-empty [ 927.471808][T16073] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2529'. [ 927.579540][ T5813] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 927.606369][ T5813] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input80 [ 928.040019][ T5813] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input81 [ 928.701009][ T5813] usb 5-1: USB disconnect, device number 84 [ 928.707086][ C0] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 929.020059][ T30] audit: type=1400 audit(1773720635.350:2267): avc: denied { write } for pid=16091 comm="syz.6.2534" path="socket:[58499]" dev="sockfs" ino=58499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 929.128588][T16094] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 930.094698][T16107] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 930.117389][T16107] /dev/nullb0: Can't open blockdev [ 930.134194][T16102] netlink: 'syz.4.2537': attribute type 1 has an invalid length. [ 930.141966][T16102] netlink: 'syz.4.2537': attribute type 2 has an invalid length. [ 930.149773][T16102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2537'. [ 930.204462][T16102] netlink: 'syz.4.2537': attribute type 1 has an invalid length. [ 930.212225][T16102] netlink: 'syz.4.2537': attribute type 2 has an invalid length. [ 930.219983][T16102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2537'. [ 930.312916][ T30] audit: type=1400 audit(1773720636.575:2268): avc: denied { write } for pid=16108 comm="syz.1.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 930.757585][T16117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.251782][T16121] tc_dump_action: action bad kind [ 931.357673][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2542'. [ 931.637292][T16129] kexec: Could not allocate control_code_buffer [ 931.658456][ T30] audit: type=1400 audit(1773720637.819:2269): avc: denied { mount } for pid=16124 comm="syz.1.2544" name="/" dev="rpc_pipefs" ino=57714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 933.957260][T16173] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2557'. [ 935.409351][T16190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2563'. [ 935.427408][T16190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2563'. [ 935.772318][T16192] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 935.791897][T16192] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 935.911212][T16197] xt_TCPMSS: Only works on TCP SYN packets [ 936.252071][ T30] audit: type=1400 audit(1773720642.122:2270): avc: denied { mount } for pid=16201 comm="syz.6.2568" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 936.277823][T16202] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 936.476549][ T30] audit: type=1400 audit(1773720642.150:2271): avc: denied { mounton } for pid=16201 comm="syz.6.2568" path="/131/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 936.572568][ T30] audit: type=1400 audit(1773720642.272:2272): avc: denied { read } for pid=16201 comm="syz.6.2568" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 936.691772][ T30] audit: type=1400 audit(1773720642.272:2273): avc: denied { read } for pid=16201 comm="syz.6.2568" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 936.972296][ T30] audit: type=1400 audit(1773720642.272:2274): avc: denied { read } for pid=16201 comm="syz.6.2568" name="/" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 937.267178][ T30] audit: type=1400 audit(1773720642.272:2275): avc: denied { open } for pid=16201 comm="syz.6.2568" path="/131/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 937.362237][ T30] audit: type=1400 audit(1773720642.272:2276): avc: denied { read } for pid=16201 comm="syz.6.2568" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 937.386550][ T30] audit: type=1400 audit(1773720642.272:2277): avc: denied { read } for pid=16201 comm="syz.6.2568" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 937.410455][ T30] audit: type=1400 audit(1773720642.272:2278): avc: denied { read } for pid=16201 comm="syz.6.2568" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 937.806432][ T30] audit: type=1400 audit(1773720642.272:2279): avc: denied { read } for pid=16201 comm="syz.6.2568" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 937.882839][T16231] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 940.783219][ T5959] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 941.955401][T16275] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 942.234171][ T5959] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 942.242693][ T5959] usb 2-1: config 0 has no interface number 0 [ 942.248924][ T5959] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 942.340167][ T5959] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 942.350036][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 942.360582][ T5959] usb 2-1: Manufacturer: syz [ 942.388222][ T5959] usb 2-1: SerialNumber: syz [ 942.489401][ T5959] usb 2-1: config 0 descriptor?? [ 942.666856][ T5959] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 942.680907][ T5959] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 942.709886][ T5959] usb 2-1: USB disconnect, device number 64 [ 943.073946][ T792] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 943.205376][ T5812] Bluetooth: hci5: command 0x0406 tx timeout [ 943.788842][ T792] usb 4-1: Using ep0 maxpacket: 8 [ 943.849483][ T792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 943.874589][ T792] usb 4-1: config 1 has an invalid interface number: 96 but max is 2 [ 943.888180][ T792] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 943.899037][ T792] usb 4-1: config 1 has no interface number 2 [ 943.913579][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 943.913596][ T30] audit: type=1400 audit(1773720649.287:2287): avc: denied { write } for pid=16299 comm="syz.4.2594" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 944.008589][ T792] usb 4-1: string descriptor 0 read error: -22 [ 944.074619][ T792] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 944.249693][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.645560][ T792] usb 4-1: can't set config #1, error -71 [ 944.737588][T16312] hpfs: Bad magic ... probably not HPFS [ 944.746486][ T792] usb 4-1: USB disconnect, device number 84 [ 944.803527][ T30] audit: type=1400 audit(1773720650.120:2288): avc: denied { ioctl } for pid=16309 comm="syz.6.2599" path="socket:[58216]" dev="sockfs" ino=58216 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 945.104833][T16325] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2601'. [ 945.891095][ T5813] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 946.169706][ T5813] usb 2-1: Using ep0 maxpacket: 8 [ 946.194326][ T5813] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 946.219887][ T5813] usb 2-1: config 6 has no interface number 0 [ 946.237177][ T5813] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 946.348596][ T5813] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 946.374806][ T5813] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 946.474145][ T7202] block nbd0: Possible stuck request ffff8880281f0000: control (read@0,1024B). Runtime 720 seconds [ 946.485097][ T7202] block nbd0: Possible stuck request ffff8880281f0200: control (read@1024,1024B). Runtime 720 seconds [ 946.497094][ T7202] block nbd0: Possible stuck request ffff8880281f0400: control (read@2048,1024B). Runtime 720 seconds [ 946.509096][ T7202] block nbd0: Possible stuck request ffff8880281f0600: control (read@3072,1024B). Runtime 720 seconds [ 946.586360][ T5813] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 946.963434][ T5813] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 946.972994][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.985469][ T5813] usb 2-1: Product: syz [ 947.006726][ T5813] usb 2-1: Manufacturer: syz [ 947.041857][ T5813] usb 2-1: SerialNumber: syz [ 947.233692][ T5813] hso 2-1:6.2: Failed to find BULK IN ep [ 947.485001][ T30] audit: type=1400 audit(1773720652.627:2289): avc: denied { watch watch_reads } for pid=16313 comm="syz.1.2598" path="pipe:[4871]" dev="pipefs" ino=4871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 947.575082][T16322] netlink: 'syz.1.2598': attribute type 4 has an invalid length. [ 947.670749][T16355] netlink: 'syz.1.2598': attribute type 4 has an invalid length. [ 948.055806][ T5813] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 948.194829][ T5813] usb 5-1: device descriptor read/64, error -71 [ 948.462085][ T5813] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 948.505829][ T31] INFO: task syz.0.2147:14495 blocked for more than 143 seconds. [ 948.521570][ T31] Tainted: G L syzkaller #0 [ 948.528698][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 948.537916][ T31] task:syz.0.2147 state:D stack:28760 pid:14495 tgid:14494 ppid:5802 task_flags:0x400140 flags:0x00080002 [ 948.551835][ T31] Call Trace: [ 948.555272][ T31] [ 948.560142][ T31] __schedule+0xfee/0x6120 [ 948.564787][ T31] ? __lock_acquire+0x4a5/0x2630 [ 948.570179][ T31] ? __pfx___schedule+0x10/0x10 [ 948.575122][ T31] ? find_held_lock+0x2b/0x80 [ 948.580571][ T31] ? schedule+0x2bf/0x390 [ 948.584924][ T31] schedule+0xdd/0x390 [ 948.588998][ T31] schedule_preempt_disabled+0x13/0x30 [ 948.594569][ T31] __mutex_lock+0xc9a/0x1b90 [ 948.599178][ T31] ? bdev_open+0x41a/0xe40 [ 948.604035][ T31] ? find_held_lock+0x2b/0x80 [ 948.608765][ T31] ? find_inode_fast+0x5e3/0x910 [ 948.613718][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 948.618743][ T31] ? find_inode_fast+0x1fa/0x910 [ 948.623737][ T31] ? bdev_open+0x41a/0xe40 [ 948.628227][ T31] bdev_open+0x41a/0xe40 [ 948.632466][ T31] ? iput+0x3a/0x40 [ 948.636373][ T31] blkdev_open+0x34e/0x4f0 [ 948.640821][ T31] do_dentry_open+0x6d8/0x1660 [ 948.645665][T11839] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 948.653308][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 948.658504][ T31] vfs_open+0x82/0x3f0 [ 948.662911][ T31] path_openat+0x208c/0x31a0 [ 948.668340][ T5813] usb 5-1: device descriptor read/64, error -71 [ 948.674752][ T31] ? __pfx_path_openat+0x10/0x10 [ 948.680991][ T31] do_file_open+0x20e/0x430 [ 948.685522][ T31] ? __pfx_do_file_open+0x10/0x10 [ 948.690960][ T31] ? alloc_fd+0x476/0x790 [ 948.695332][ T31] ? do_getname+0x191/0x390 [ 948.700003][ T31] do_sys_openat2+0x10d/0x1e0 [ 948.704686][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 948.709920][ T31] ? __fget_files+0x21f/0x3d0 [ 948.714597][ T31] __x64_sys_openat+0x12d/0x210 [ 948.719484][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 948.724870][ T31] do_syscall_64+0x106/0xf80 [ 948.729906][ T31] ? clear_bhb_loop+0x40/0x90 [ 948.734594][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.740504][ T31] RIP: 0033:0x7fa58915cfce [ 948.744926][ T31] RSP: 002b:00007fa58a031b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 948.753377][ T31] RAX: ffffffffffffffda RBX: 00007fa58a0326c0 RCX: 00007fa58915cfce [ 948.761462][ T31] RDX: 0000000000000100 RSI: 00007fa58a031c00 RDI: ffffffffffffff9c [ 948.769452][ T31] RBP: 00007fa58a031c00 R08: 0000000000000000 R09: 0000000000000000 [ 948.777495][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 948.786069][ T5813] usb usb5-port1: attempt power cycle [ 948.791852][ T31] R13: 00007fa589416038 R14: 00007fa589415fa0 R15: 00007ffd174a14b8 [ 948.801671][ T31] [ 948.804773][ T31] [ 948.804773][ T31] Showing all locks held in the system: [ 948.812479][ T31] 1 lock held by khungtaskd/31: [ 948.817570][ T31] #0: ffffffff8e7e76a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 948.827988][ T31] 2 locks held by getty/5565: [ 948.832719][ T31] #0: ffff88803911b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 948.842544][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 948.852755][ T31] 6 locks held by kworker/0:3/5813: [ 948.858672][T11839] usb 8-1: unable to get BOS descriptor or descriptor too short [ 948.870424][T11839] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 948.879899][ T31] #0: ffff888022aee548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 948.893686][T11839] usb 8-1: can't read configurations, error -71 [ 948.903017][ T31] #1: ffffc900036afd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 948.916072][ T31] #2: ffff88802b2e7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 948.925039][ T31] #3: ffff88802b2e4518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 948.935389][ T31] #4: ffff88802ae2ed68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 948.945133][ T31] #5: ffffffff8fbb22f0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a5/0x1c60 [ 948.955614][ T31] 1 lock held by udevd/6531: [ 948.960203][ T31] #0: ffff888028114358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 948.969824][ T31] 6 locks held by kworker/0:4/11839: [ 948.975349][ T31] #0: ffff888022aee548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 948.986214][ T31] #1: ffffc900039e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 948.997481][ T31] #2: ffff88802b3df198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 949.006367][ T31] #3: ffff88802b3dc518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 949.016333][ T31] #4: ffff88802af64e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 949.026851][ T31] #5: ffffffff8fbb22f0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a5/0x1c60 [ 949.038916][ T31] 1 lock held by syz.0.2147/14495: [ 949.044074][ T31] #0: ffff888028114358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 949.053665][ T31] [ 949.055988][ T31] ============================================= [ 949.055988][ T31] [ 949.064441][ T31] NMI backtrace for cpu 0 [ 949.064456][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 949.064478][ T31] Tainted: [L]=SOFTLOCKUP [ 949.064484][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 949.064493][ T31] Call Trace: [ 949.064499][ T31] [ 949.064506][ T31] dump_stack_lvl+0x100/0x190 [ 949.064537][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 949.064555][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 949.064585][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 949.064617][ T31] sys_info+0x141/0x190 [ 949.064641][ T31] watchdog+0xd25/0x1050 [ 949.064673][ T31] ? __pfx_watchdog+0x10/0x10 [ 949.064698][ T31] ? __kthread_parkme+0x18c/0x230 [ 949.064726][ T31] ? kthread+0x13a/0x450 [ 949.064741][ T31] ? __pfx_watchdog+0x10/0x10 [ 949.064760][ T31] kthread+0x370/0x450 [ 949.064776][ T31] ? __pfx_kthread+0x10/0x10 [ 949.064795][ T31] ret_from_fork+0x754/0xd80 [ 949.064815][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 949.064835][ T31] ? __switch_to+0x7b4/0x1120 [ 949.064857][ T31] ? __pfx_kthread+0x10/0x10 [ 949.064876][ T31] ret_from_fork_asm+0x1a/0x30 [ 949.064909][ T31] [ 949.064916][ T31] Sending NMI from CPU 0 to CPUs 1: [ 949.189981][ C1] NMI backtrace for cpu 1 [ 949.189998][ C1] CPU: 1 UID: 0 PID: 5959 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.190018][ C1] Tainted: [L]=SOFTLOCKUP [ 949.190022][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 949.190032][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 949.190069][ C1] RIP: 0010:dev_nit_active_rcu+0x4/0x130 [ 949.190088][ C1] Code: 7d a9 f8 48 89 df 5b e9 fa ee 09 f9 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 54 55 53 48 89 fb e8 10 7d a9 f8 e8 eb 39 8d f8 31 ff 89 c5 89 [ 949.190101][ C1] RSP: 0018:ffffc90004057350 EFLAGS: 00000246 [ 949.190112][ C1] RAX: 1ffff1100fc0a250 RBX: ffff88807e051280 RCX: ffffc90004057438 [ 949.190121][ C1] RDX: ffff88802a6524c0 RSI: ffffffff89625d16 RDI: ffff88807a2c4000 [ 949.190131][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 949.190139][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888029f25000 [ 949.190148][ C1] R13: dffffc0000000000 R14: ffff88807a2c4000 R15: 0000000000000000 [ 949.190157][ C1] FS: 0000000000000000(0000) GS:ffff888124442000(0000) knlGS:0000000000000000 [ 949.190171][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.190180][ C1] CR2: 00007fc1855e7158 CR3: 000000007e49a000 CR4: 00000000003526f0 [ 949.190189][ C1] Call Trace: [ 949.190194][ C1] [ 949.190199][ C1] dev_hard_start_xmit+0x2d1/0x7d0 [ 949.190214][ C1] ? validate_xmit_skb_list+0xe7/0x130 [ 949.190235][ C1] sch_direct_xmit+0x1b2/0xc60 [ 949.190254][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 949.190272][ C1] __qdisc_run+0x52d/0x1b10 [ 949.190291][ C1] __dev_queue_xmit+0x2caf/0x4800 [ 949.190308][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 949.190323][ C1] ? __lock_acquire+0x4a5/0x2630 [ 949.190342][ C1] ? mark_held_locks+0x40/0x70 [ 949.190363][ C1] ip6_finish_output2+0xfd4/0x1ce0 [ 949.190387][ C1] __ip6_finish_output+0x357/0xdf0 [ 949.190407][ C1] ip6_output+0x2aa/0xa60 [ 949.190426][ C1] ? __pfx_ip6_output+0x10/0x10 [ 949.190445][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 949.190464][ C1] ? csum_ipv6_magic+0x295/0x320 [ 949.190479][ C1] ? __pfx_ip6_output+0x10/0x10 [ 949.190498][ C1] ip6_local_out+0xcb/0x1f0 [ 949.190514][ C1] udp_tunnel6_xmit_skb+0x8ae/0xde0 [ 949.190534][ C1] send6+0x4bc/0xd30 [ 949.190549][ C1] ? __pfx_send6+0x10/0x10 [ 949.190566][ C1] wg_socket_send_skb_to_peer+0xf6/0x210 [ 949.190581][ C1] wg_packet_tx_worker+0x199/0x7f0 [ 949.190602][ C1] process_one_work+0xa23/0x19a0 [ 949.190620][ C1] ? __pfx_process_one_work+0x10/0x10 [ 949.190637][ C1] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 949.190657][ C1] worker_thread+0x5ef/0xe50 [ 949.190674][ C1] ? kthread+0x13a/0x450 [ 949.190686][ C1] ? __pfx_worker_thread+0x10/0x10 [ 949.190698][ C1] kthread+0x370/0x450 [ 949.190710][ C1] ? __pfx_kthread+0x10/0x10 [ 949.190722][ C1] ret_from_fork+0x754/0xd80 [ 949.190736][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 949.190749][ C1] ? rcu_is_watching+0x12/0xc0 [ 949.190764][ C1] ? __switch_to+0x7b4/0x1120 [ 949.190785][ C1] ? __pfx_kthread+0x10/0x10 [ 949.190798][ C1] ret_from_fork_asm+0x1a/0x30 [ 949.190819][ C1] [ 949.509226][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 949.516087][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 949.526748][ T31] Tainted: [L]=SOFTLOCKUP [ 949.531054][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 949.541096][ T31] Call Trace: [ 949.544353][ T31] [ 949.547267][ T31] dump_stack_lvl+0x100/0x190 [ 949.551936][ T31] vpanic+0x552/0x970 [ 949.555897][ T31] ? __pfx_vpanic+0x10/0x10 [ 949.560381][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 949.566528][ T31] panic+0xd1/0xe0 [ 949.570229][ T31] ? __pfx_panic+0x10/0x10 [ 949.574627][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 949.580768][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 949.586912][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 949.593063][ T31] ? watchdog.cold+0x198/0x1ca [ 949.597809][ T31] ? watchdog+0xd35/0x1050 [ 949.602213][ T31] watchdog.cold+0x1a9/0x1ca [ 949.606795][ T31] ? __pfx_watchdog+0x10/0x10 [ 949.611457][ T31] ? __kthread_parkme+0x18c/0x230 [ 949.616472][ T31] ? kthread+0x13a/0x450 [ 949.620701][ T31] ? __pfx_watchdog+0x10/0x10 [ 949.625363][ T31] kthread+0x370/0x450 [ 949.629414][ T31] ? __pfx_kthread+0x10/0x10 [ 949.633986][ T31] ret_from_fork+0x754/0xd80 [ 949.638558][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 949.643654][ T31] ? __switch_to+0x7b4/0x1120 [ 949.648332][ T31] ? __pfx_kthread+0x10/0x10 [ 949.652906][ T31] ret_from_fork_asm+0x1a/0x30 [ 949.657666][ T31] [ 949.660870][ T31] Kernel Offset: disabled [ 949.665170][ T31] Rebooting in 86400 seconds..