last executing test programs: 5m32.411605016s ago: executing program 1 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001000"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x37}], 0x2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000500)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x200088a0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000040)={0x7, 0x500, 0xffff, 0xf}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a980)={0x2020}, 0x2020) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r9, &(0x7f0000000680)=ANY=[], 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r7, 0xffffffffffffffff, 0x0) 4m27.815849807s ago: executing program 1 (id=359): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) timer_create(0x2, &(0x7f0000000800)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) r0 = epoll_create1(0x80000) syz_usb_connect$uac2(0x0, 0x8c, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0xd5, 0xe0, 0x6, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x4, 0x1a, 0x5}, [@mixer_unit={0x5, 0x24, 0x4, 0x4, 0x2}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x101, 0xd, 0x4, 0xa, 0x6, 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x1, 0x8, {0x8, 0x25, 0x1, 0x0, 0x33, 0x5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x8, 0x3, {0x8, 0x25, 0x1, 0x3, 0xf, 0x0, 0x8000}}}}}}}}]}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xb, 0x0, 0x0, 0x7995}, 0xf0cb, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_settime(r1, 0x2, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f00000001c0)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 4m24.872289525s ago: executing program 1 (id=374): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000003000000000000000300000d47000000000000090000000001000000020000000000000000000000000000000000000500000000006100"], 0x0, 0x4b, 0x0, 0x1}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0xa3, 0x0, &(0x7f00000004c0)="003ca174d995b2fd0476a5cba6cd476678344ccd3d328e561ebe47bc0f8127096d4eac26e86d58d3433a43c96e8d831aa08f11cce2aaa36f7fb85c31cf4f872f609afe9c4366c416e1bb109f25c36d75f75006150177782a191a9c488a990bef767b2e6323b30fe0a66a44b0255828f5f1fa9752c1190e78748697731d43e8ce578925571eb326e492c7b4d823ec0eafbb914215ad11a354b12c1b7d14b712f51eaf2e", 0x0, 0x4}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cec41b96166062f7eb90e1455c5ae4d99e492ac6c626697056ca0fe4fa97d4185045125fa7e60fd149d606e28ff76844568e77fc63bf96e121c59d01d9f7dbfacd0a7ca4324362d01e750d7f16af4877ae5d894b7bb01dba53742d7ce5f3b471476b67ba6161c3475753a3014abc90d1", @ANYRES16=r4, @ANYBLOB="09002cbd7000fbdbdf251b00000010002e80f62a04000203aaaaaaaaaaaa08000300", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8080) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000002d40)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup3(r0, r7, 0x80000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) syz_open_dev$evdev(0x0, 0x7fffffff, 0x2002) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000000c0)={0x2, 0x3, 0xfd5}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r9, &(0x7f0000000240)=[{&(0x7f00000001c0)='y', 0x1}], 0x1) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbef1, 0x100010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) 4m24.557965786s ago: executing program 1 (id=377): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="5c22401228648b32fa851cc8009e2563e32cf735eb4082a9abb82a7251508d73164152ec205a228bd2c994e9bdecd2d528f29dd91d1d2179a788534a1af74d0eb65256a750a187e5cf5d74bb5fef66180c7d9051fe982ba4d85c1a347212b98d1cdf75bfe89f564581cfea1d4c4067a1ed83effc47dacbed0b787c3b4577fcd99985ff7aa37f61d20ad2ed8596c079dc3032746c0ba38178e08b73cb66b40b91a4590eeb7b9511a089035a391f39e144248f72", 0xb3}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x834}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x39, 0xffffffffffffffff, [{0x6, 0x2}, {0x6, 0xc, "2199d71cd80c553bafb2"}, {0x1, 0x12, "c798d14cd50bf898ceef84f5f55de337"}, {0x0, 0x8, "8f8878c5f6d8"}, {0x7, 0xb, "bf0c0067a455e611a3"}]}]}}}], 0x100}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="1541f46a20a54f1281d9c814f7feea25ff8ba2b0f5d6b91abbc1e41fac3d5d7b008adf9c50606488ac59a1a61a3d3bf607d46e9089a79d554e54", 0x3a}, {&(0x7f00000004c0)="b4f76d7016ddf90d4a63ef654c6f099b57b98b4a9356bcc10295aeaa469c9ce7b73b41ea35603c224e1a4a45b8a02bd2e23e2dae741cbe6389033c9186", 0x3d}, {&(0x7f0000000500)="06f3c101217aec8d601dd6b33a2dc41488350eda8f15e9fc6715639ff4025aead44ba48cfc14a6e6d44cb8c06ecd334b25a6439a2fdbe37983ca099486da623aa772d11b17822a3f7328f24cc381279811ce69d2d1ee4830eddae80377f83ff39143df29bc5585d370e387987fc62765742c0c3c0c379705ca2ddbaf8dad665d0fe07c018843b9ce9afb3c47c80311e7664b1e9b1848baff7a9a007287af0118bc817e70099f958529bf64fb1d4f4e6ebd", 0xb1}, {&(0x7f00000005c0)="e86d78273c686efe420acb3999d3e17d37e631f81dc74eb1af1f486dded02796a9ddd5e57304554d3c936b400ec9a12387c50ef2ee51d71d9c0c013bff47f11ef827c18afd11d70477ec3bea9463939383da65e59fcbdb57440b06f087c50ea87cd5f1486cb056bc264faeb27a68b80845bc96c4d8660de0eca242c5d56803d27c8b368c2ebaa68deb2a669846f326511f62e65edd400f240f2ad39ce65087eb63e4a6b76dabddccb9bea86b6635be8dfb0ac04178a2900f79baa5d84eb25df02b2bb11f9f", 0xc5}, {&(0x7f00000006c0)="89c1dfde9b0c863b2c505686a515959720961282426d", 0x16}, {&(0x7f0000000700)="3b9981e0166b07e63c24abbf82242af053f76da02aae4f9bfca1c8b18dce537c02376474aeb459580086d35c3d8dda220bfc01a0025f464a4b2b909d0a56a1011f4ed54d04d9f176c59433e918e6698a13fd7b3586852f16518a6a2a33c82dc638bbe5ac080c9901bcb93e987a487cfe947722ee85be31a61d0778258a6a670213630c82f51a3070ed49bae8f535248676e33cac5c15a32c2feb056c05b24c5f027e985a8711547c8989f90016523933b8ae85a679ff5e2d17fc48d774a29b6eddc670611ad29502d5dcd98fa851a9664f7206d4445e17fa7ed231a0740f4da2e4", 0xe1}, {&(0x7f0000000800)="dc428411d3a47923f23f5905d212866c582bdce3bc0c0584dfa7b61710cada50aeaa1c7182d1baf51389db610b7b0da9d3622f890dd536792855f6193884e547882d2648dbf0320c91b78aa902d5a847fb46341f8066", 0x56}, {&(0x7f0000000880)="7a9911b910c62e7cb1ecf4b0a93b711a0bdfe4baede8d08a4ca2f588acfb7e08b4feb14512771535f90cdf186a46eba9a4d2cc5bbde5a410032ae9502a76e7a84030e977bcb48a5c84003c7157a04c0708a24e330b81d4d1a7c94fb85b278b0f8bde025c5b564002aa", 0x69}, {&(0x7f0000000900)="70face0e283a116df56ce931a4ad617dc48941f2354b60f442ab967e7d764b690291ac6b072575d3c2653c3d7217a109c6649f9e51cd7f5797dfb72b008467a8314c99587d540938a9de8e64bc2e2754987ae127c5bbe53c5f414013e61707495553f8aa30c719fe6ea81b60d3ba46441fb80a7dffecbf07c3e8b8869f1bee32783b6b38b65000d97afc87d798a6e1edb43ee56a82e3b55a", 0x98}], 0x9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/328], 0x148}}, {{&(0x7f0000000c80)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002340)=[{&(0x7f0000000cc0)="f02d0e941c4daca6d969d6977ff4a3730eb7828dc4af84d9e2d251b8a53be06a4df4702a", 0x24}, {&(0x7f0000000d00)="ecc6d7d210d90d07ee44d369094a31b2f7b17821b4f69490a20544ba58aa9c8ca18eb555ec95ebf22d2f25b9213d445bb4160120bc9b5f124fbee5b3c5339fb9d446e51e06c6254d7cac7b87b64a4bf4bb350a4d1ab67c3a908cc67fc0ecb73f588438b6bc7d30953e98cfc0bb736744ab0d360497df56", 0x77}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="bdd311c5c32d9c0541cb0dfd722ecf8f92dee5913595f784fe130047fff6e0a9c4150820a2b3579940e156fe8d117656bb255e5df1384027c9740dcca5fe1dd061bc7f446b427c594db9f1bbe54b24992558d315d2d275cbba243998582f6ff900471fc1bd40a983893b9373aa95d4f9fc5c03886aec3b599eb2e04ba907a49c0c007e8316740530d2d9a75e0d8099c2d30eb619b04c6cdb90ba29dca841f43e0d0b6345511b", 0xa6}, {&(0x7f0000000e80)="1a1b441788a7f73e23f9448b3183a05497e09ed0d72f7bbd479ce163d91fafa187a453c137", 0x25}, {&(0x7f0000000ec0)="0b31979977a6c1c7c8c07b13e86afa849ded69b100b1b73471d93e19fafa5f9903e870ad345c4b0f5e58b1566bd9f99453ac9f027a190882a305e09210896e0851174c92925b5158ef696049170b261763e14b31eeceaf364dac917c5fef553d851bc26014c8869dd30e1d99d3b11b352af6214ae70ed04ae7246d28cc6359026f54ac5c09dc171ab0d2a1366aa459a02829acdf2f7cef5121fc6bbd1cb726c1e0d6ec00503735868e1e7423e8528bae3eed680e4b7190ae60dbde7db9619e3298e621e481", 0xc5}, {&(0x7f0000002640)="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", 0x139}, {&(0x7f00000010c0)="c90179a057e97716dc8dab869a3e0db10d9cdfa04f723b04bb2d81dd9b8ac25ab1dc516361dbdefed6de6c87563ff2cf6b77dbc45f66d4010fdc01", 0x3b}, {&(0x7f0000001100)="e861077cd1d1c9632fed7204e9a1461e1820477434bfe8bb68b57543b4f6faef71f4a9c537f4bae4639d91dffe71e0f335645f57a844da47193bf8ab5f4543baffc08e7ce7bab71fdac367092c6729cb91c8f56a31a8a9a3758916a05d60058b495edad16b9cc1d2d83b0de8b4fcc1eb9bc83f59bed4d97260ea36207efe45cb52f35f75d01707363cf604aff633525bb9dff5ed8bd45761e0a40fe46811c75423772f19d87d715802902cb23882a9c17b724361c6aa354a670d4c89f75bdb2d10991ad2ea4d1086e9c8afe3e55b50f30301568c618d69dd864a24fa267f37b57337a82ee7c6", 0xe6}, {&(0x7f0000001200)="232929564d40f48c32af5d395b3f78f68fd17815d72bafe01af817570a414eb8f5fd7a9a1dbefea7c837f47c2108feeabe0ce727d1f3d2cd570eb08380317869c89154c16e58982109dacba9b985ffca8624cd11a43d578b976d5140435db71d5de4cf134c2d5ca3bad31f9cc76069fd6b02747b5183ed0f7d92c7179372ac396d9505f5afc5f9b68b805a861f2d85bc592dfe30e65e1794d8bf36c72a5d5a422fa13a6ffbf0faf78989fe58a2cdb081010ae332cb86f756df856c138e", 0xbd}], 0xa, &(0x7f0000002400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x67e35de}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}}], 0x3, 0x240448a1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d80)={'tunl0\x00', &(0x7f0000000a80)={'tunl0\x00', r2, 0x1, 0x8000, 0x8001, 0x3, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x67, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @loopback, {[@end]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000002600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="d1f0f1e1", @ANYRES16=0x0, @ANYBLOB="040025bd7000fddbdf250100000028000280240001800800010007000000080001000500000008000100070000000800010000000000500002804c0001800800010008000000080001000000000008000100060000000800010002000000080001000100000008000100080000000800010004000000080001000000000008000100070000001400018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x80000}, 0x4000000) r5 = socket$l2tp6(0xa, 0x2, 0x73) gettid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0) write(r7, &(0x7f0000000300)="a31f45", 0x3) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="000000000400000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r6, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x40000000000000d8, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x1, 0xff14) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a602, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000fc0), 0x0, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) 4m23.919983892s ago: executing program 1 (id=379): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x414b, &(0x7f00000000c0)={0x0, 0x287d, 0x0, 0x3, 0x2ce}, &(0x7f0000002200)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000002280)=0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(r1, 0x0, 0x0, 0x30) writev(r7, &(0x7f0000001ac0)=[{&(0x7f00000007c0)='O', 0x1}], 0x1) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0) write(r8, &(0x7f0000000500)="6b766d2d636c6f636b0ac86464404d48d94b0ce5ea6a63cd71da894c40d747c3", 0x20) prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) io_uring_enter(r3, 0x2003, 0xfffffffd, 0x9, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_clone(0x211, 0x0, 0x500, 0x0, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000100)={0x7, 0x1, @qam={0x0, 0x0, 0x5}}) write$binfmt_aout(r9, &(0x7f0000000140)=ANY=[], 0xff2e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x683}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) 4m21.996639396s ago: executing program 1 (id=384): syz_open_dev$vim2m(0x0, 0x3, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000004000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = signalfd4(r0, &(0x7f0000000040)={[0xfff]}, 0x8, 0x800) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000b00)=0xe8) mount$nfs(&(0x7f0000000940)='\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x80040a, &(0x7f0000000b40)={[{'])%'}, {':$'}, {'+u#\':.['}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'l2tp\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x66, 0x36, 0x66, 0x62, 0x36, 0x62], 0x2d, [0x62, 0x39, 0x65, 0x38], 0x2d, [0x36, 0x34, 0x62, 0x39], 0x2d, [0x66, 0x65, 0x33, 0x35], 0x2d, [0x32, 0x63, 0x35, 0x39, 0x30, 0x30, 0x33, 0x37]}}}, {@smackfshat={'smackfshat', 0x3d, '['}}, {@euid_eq={'euid', 0x3d, r2}}, {@fsname={'fsname', 0x3d, '/*/^,'}}]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x20, &(0x7f00000001c0)={&(0x7f0000000140)=""/34, 0x22, 0x0, &(0x7f0000000180)=""/3, 0x3}}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xe8e4, @local, 0xa, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="6fba4bb2708f1e9c4f95", 0xa}, {&(0x7f0000000100)="ed61dd0258ddc737c82c9cdcc7eee4d154b756676dca2b38fdbad6c5a41e6d2ae25c3825f429a1b4fb9cc41e11f72cedddc5b9e11f16d1a71caf1c63e8240714fa0ccc7d98585ef466a6c052a5fdef25b7e44b688e78fd", 0x57}, {&(0x7f0000000200)="750623666602c3554b2fe6b29134fe4b9014b6bcb30c55dfbbe9cae7a2bfdcbfed56d4acf2412dc0875171e114c2c2797eada3d1fe7ad916d8a3bc76dd2db8310e92c9ebbaf78c1280151a3a98905867f2aa9c8fb9514c767c462bdcb6d3306d6d9308d2af8050bffcc91da0a0c77354b00137699c81a0020c087d29cecd9648bceee9b72b8bc3ff726c716ade228e2a7611c1eaf5571ef79811d12b9753ae4b534ece8a45ba8022dbc0ba4fa809e64da29c5b5ca70c", 0xb6}], 0x3, &(0x7f0000000300)=[{0x38, 0x119, 0xfffffffc, "390d471a8e8fa37011444773d355b0419fa79a14207795c335b9e2b84aeb7ebf7b7eaf947c87"}, {0x40, 0x104, 0x0, "b8d7f93e20a828bac804db7e707bd0b9aa22f84a3a1f59fc69af959aa6a193b7fd64755511b89324db83"}, {0x30, 0x85, 0x5, "a21fa93744c77cd670ac1b36a076fd1c943fd3f59c70ea6219"}, {0x20, 0x10b, 0x80000000, "3a9e33a5403dfdd479ee4290"}, {0x98, 0x10e, 0x3, "4ca3dba019889a8bf1f4fd22e4f401564fa54ce25b56c0560fa29426cf4a93f8a21d37a1023f1744d0b90c4f692c6cd783e5e1f78fb599992ea5d0ed2ef80b1959d04b060261b28756548f7eb2860a2edd21a7b0f588b0ad03eff95e0b15c0cc246b7eb13ae602b66271f2aec58999726679d2b826c0780e43b0f496c27e35656c93"}, {0xc8, 0x115, 0x1, "5d8bb90436d39f8fba5116a121fcb681a538d6417986eff29030785a386ab48affd94fb2a7e98535666a6c5f4abf01e1e0c0ad7a05e134d8d620537175796c35dd96ee53eb617dc0becfc69b2dec83eb6ab8e8b339ce5c11fbe69447426eda87d01276d5e6f73262441b635530a104366995882dba2b80768f2f410b85634d89a00abecb4d33469b7dd975f1609ee73e50a47b53c731b90fa4d5d56dfae1a00effe62236b518fa6559344eaa0dbc7304db7cac82"}, {0x88, 0x118, 0xf4, "524536871f3670cf458f290310cf7283d34b7dc26e234938b1e46c8b7afe0e22c8494e3a4b4782a3f0a0199c7e72c4fb06e4d058f54751368acf2da64bb5b9164636982addbc1e180ab0b8ee05357f6679bf867ba87508f3b3fc7ea3c2ef74d70ab153ef1bef62b0b0d35ea3c1d21968df5518fbc9"}, {0x108, 0x110, 0x0, "e1240fc916eebb8f6a3ef035f4eae5721276400a8cb03a105b41c357a45ae4a9d991dcf49660ec7a570f17fc19fc801b4d962fe361e2f8dec105e9e79e69abbea640c0de070305e293c44ace631ebe12d6097766d56645b41d3d6d370e935a8744f250e4c6f9e39a7246585cfacf396c3ea16bb2e45f53a94088484161b442d9502570344e622345c64fddb20789241c27c1f621d6a1a7d1fcc03a8d4be705d0c8d27898601ec5e4a0485478925ac49107c4e581f03c8b5fc674a9ad6806aade9b7fecc6c8e7aae0ea642fa01ad444c1d37017829e2d3f6fa56f5f4036a08b3fad449b6637713025b5f7a2f6dcafd8b040fc762f04"}, {0xa0, 0x10a, 0xf, "ce5827d12289f5e8817104232127b25a4db899d7e9b2777298e73be951769e77494ae099470251b27d3e79d84993bbeb5217cce6279065d48f79cc8619d6cfcdf57fb418c84c643d0bc5ebc97f295938ac22f5b7de235854093db60441b4ac65c16af42794360b4f4b29f122794b423b7ec1adf5c2df77e1b4b532e3cbe2b04224999d14287ab6ff71294d77"}], 0x458}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0), 0x4000, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r4}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) fspick(0xffffffffffffff9c, 0x0, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x10, 0x2}, {0x3}}}}, 0xf) 4m6.912392838s ago: executing program 32 (id=384): syz_open_dev$vim2m(0x0, 0x3, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000004000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = signalfd4(r0, &(0x7f0000000040)={[0xfff]}, 0x8, 0x800) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000b00)=0xe8) mount$nfs(&(0x7f0000000940)='\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x80040a, &(0x7f0000000b40)={[{'])%'}, {':$'}, {'+u#\':.['}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'l2tp\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x66, 0x36, 0x66, 0x62, 0x36, 0x62], 0x2d, [0x62, 0x39, 0x65, 0x38], 0x2d, [0x36, 0x34, 0x62, 0x39], 0x2d, [0x66, 0x65, 0x33, 0x35], 0x2d, [0x32, 0x63, 0x35, 0x39, 0x30, 0x30, 0x33, 0x37]}}}, {@smackfshat={'smackfshat', 0x3d, '['}}, {@euid_eq={'euid', 0x3d, r2}}, {@fsname={'fsname', 0x3d, '/*/^,'}}]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x20, &(0x7f00000001c0)={&(0x7f0000000140)=""/34, 0x22, 0x0, &(0x7f0000000180)=""/3, 0x3}}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xe8e4, @local, 0xa, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="6fba4bb2708f1e9c4f95", 0xa}, {&(0x7f0000000100)="ed61dd0258ddc737c82c9cdcc7eee4d154b756676dca2b38fdbad6c5a41e6d2ae25c3825f429a1b4fb9cc41e11f72cedddc5b9e11f16d1a71caf1c63e8240714fa0ccc7d98585ef466a6c052a5fdef25b7e44b688e78fd", 0x57}, {&(0x7f0000000200)="750623666602c3554b2fe6b29134fe4b9014b6bcb30c55dfbbe9cae7a2bfdcbfed56d4acf2412dc0875171e114c2c2797eada3d1fe7ad916d8a3bc76dd2db8310e92c9ebbaf78c1280151a3a98905867f2aa9c8fb9514c767c462bdcb6d3306d6d9308d2af8050bffcc91da0a0c77354b00137699c81a0020c087d29cecd9648bceee9b72b8bc3ff726c716ade228e2a7611c1eaf5571ef79811d12b9753ae4b534ece8a45ba8022dbc0ba4fa809e64da29c5b5ca70c", 0xb6}], 0x3, &(0x7f0000000300)=[{0x38, 0x119, 0xfffffffc, "390d471a8e8fa37011444773d355b0419fa79a14207795c335b9e2b84aeb7ebf7b7eaf947c87"}, {0x40, 0x104, 0x0, "b8d7f93e20a828bac804db7e707bd0b9aa22f84a3a1f59fc69af959aa6a193b7fd64755511b89324db83"}, {0x30, 0x85, 0x5, "a21fa93744c77cd670ac1b36a076fd1c943fd3f59c70ea6219"}, {0x20, 0x10b, 0x80000000, "3a9e33a5403dfdd479ee4290"}, {0x98, 0x10e, 0x3, "4ca3dba019889a8bf1f4fd22e4f401564fa54ce25b56c0560fa29426cf4a93f8a21d37a1023f1744d0b90c4f692c6cd783e5e1f78fb599992ea5d0ed2ef80b1959d04b060261b28756548f7eb2860a2edd21a7b0f588b0ad03eff95e0b15c0cc246b7eb13ae602b66271f2aec58999726679d2b826c0780e43b0f496c27e35656c93"}, {0xc8, 0x115, 0x1, "5d8bb90436d39f8fba5116a121fcb681a538d6417986eff29030785a386ab48affd94fb2a7e98535666a6c5f4abf01e1e0c0ad7a05e134d8d620537175796c35dd96ee53eb617dc0becfc69b2dec83eb6ab8e8b339ce5c11fbe69447426eda87d01276d5e6f73262441b635530a104366995882dba2b80768f2f410b85634d89a00abecb4d33469b7dd975f1609ee73e50a47b53c731b90fa4d5d56dfae1a00effe62236b518fa6559344eaa0dbc7304db7cac82"}, {0x88, 0x118, 0xf4, "524536871f3670cf458f290310cf7283d34b7dc26e234938b1e46c8b7afe0e22c8494e3a4b4782a3f0a0199c7e72c4fb06e4d058f54751368acf2da64bb5b9164636982addbc1e180ab0b8ee05357f6679bf867ba87508f3b3fc7ea3c2ef74d70ab153ef1bef62b0b0d35ea3c1d21968df5518fbc9"}, {0x108, 0x110, 0x0, "e1240fc916eebb8f6a3ef035f4eae5721276400a8cb03a105b41c357a45ae4a9d991dcf49660ec7a570f17fc19fc801b4d962fe361e2f8dec105e9e79e69abbea640c0de070305e293c44ace631ebe12d6097766d56645b41d3d6d370e935a8744f250e4c6f9e39a7246585cfacf396c3ea16bb2e45f53a94088484161b442d9502570344e622345c64fddb20789241c27c1f621d6a1a7d1fcc03a8d4be705d0c8d27898601ec5e4a0485478925ac49107c4e581f03c8b5fc674a9ad6806aade9b7fecc6c8e7aae0ea642fa01ad444c1d37017829e2d3f6fa56f5f4036a08b3fad449b6637713025b5f7a2f6dcafd8b040fc762f04"}, {0xa0, 0x10a, 0xf, "ce5827d12289f5e8817104232127b25a4db899d7e9b2777298e73be951769e77494ae099470251b27d3e79d84993bbeb5217cce6279065d48f79cc8619d6cfcdf57fb418c84c643d0bc5ebc97f295938ac22f5b7de235854093db60441b4ac65c16af42794360b4f4b29f122794b423b7ec1adf5c2df77e1b4b532e3cbe2b04224999d14287ab6ff71294d77"}], 0x458}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0), 0x4000, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r4}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) fspick(0xffffffffffffff9c, 0x0, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x10, 0x2}, {0x3}}}}, 0xf) 4m0.562778922s ago: executing program 0 (id=458): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r3, 0x4, 0x20, 0x100000000, 0x5}, &(0x7f00000000c0)=0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000200000000000000000010500000020000004010000000000000f020000000061"], 0x0, 0x4f, 0x0, 0x1, 0x2}, 0x28) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m59.549930355s ago: executing program 0 (id=461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003e00010a00000100000000000a00000002000000"], 0x18}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x2, &(0x7f0000006680)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@can_delroute={0x13, 0x19, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "9094a9b270de6dc2"}}}]}, 0x2c}}, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='\x05:::\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0xfdfdffff) 3m58.05256752s ago: executing program 0 (id=467): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x5, 0x5, 0x4, 0x800000, 0xffc, {0x77359400}, {0x4, 0xc, 0x7, 0x0, 0x3, 0xd9, "cb0dd1c1"}, 0x10000, 0x4, {}, 0x5}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x6, 0x5, 0x4, 0x1, 0x2, {r1, r2/1000+10000}, {0x2, 0x2, 0x26, 0x81, 0x2, 0x0, "4757c1e7"}, 0xfff, 0x4, {}, 0x3, 0x0, r0}) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net\x00') getdents(r3, &(0x7f00000001c0)=""/47, 0x2f) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = socket(0x11, 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) setsockopt(r4, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r7 = syz_open_dev$sg(0x0, 0x0, 0x40042) write$binfmt_aout(r7, 0x0, 0x125) clock_gettime(0x0, &(0x7f0000002e00)={0x0, 0x0}) futex_waitv(&(0x7f0000002240)=[{0xee, &(0x7f00000000c0)=0x6, 0x82}, {0x6, &(0x7f0000000280)=0x10, 0x2}, {0x7ff, &(0x7f00000002c0)=0x6, 0x82}, {0xa, &(0x7f0000000300)=0x6, 0x2}, {0x1, &(0x7f0000000340)=0x7, 0x82}, {0x100, &(0x7f00000003c0)=0x7, 0x82}, {0x800, &(0x7f00000004c0)=0x200, 0x82}, {0x5, &(0x7f0000000500)=0x4, 0x82}, {0x8, &(0x7f0000000540)=0x124, 0x2}, {0x7, &(0x7f0000000580)=0x3, 0x2}, {0xffff, &(0x7f00000005c0)=0x9, 0x82}, {0x6, &(0x7f0000000600)=0x9, 0x2}, {0x800, &(0x7f0000000640)=0xc194, 0x2}, {0xfffffffffffffff8, &(0x7f0000000680)=0x2, 0x82}, {0x7fffffffffffffff, &(0x7f00000006c0)=0x7fffffff, 0x82}, {0x6f3, &(0x7f0000000700)=0x1, 0x82}, {0x5, &(0x7f0000000740), 0x82}, {0x4, &(0x7f0000000780)=0x5, 0x2}, {0x6, &(0x7f00000007c0)=0x1, 0x2}, {0x9, &(0x7f0000000800)=0xb, 0x2}, {0x5, &(0x7f0000000840)=0xa8, 0x82}, {0x8, &(0x7f0000000880)=0x3, 0x82}, {0x7, &(0x7f00000008c0)=0x5, 0x82}, {0xfffffffffffffde8, &(0x7f0000000900)=0xd69, 0x2}, {0x1, &(0x7f0000000940)=0x6, 0x2}, {0x400, &(0x7f0000000980), 0x82}, {0x2, &(0x7f00000009c0)=0xfffffffffffffff9, 0x2}, {0xff00000000000000, &(0x7f0000000a00)=0x37, 0x82}, {0x8, &(0x7f0000000a40)=0xe18c, 0x2}, {0x800, &(0x7f0000000a80)=0x9, 0x47b1bda22d0e97bd}, {0x4, &(0x7f0000000ac0)=0x9, 0x82}, {0x1, &(0x7f0000000b00)=0x6, 0x82}, {0x8000000000000001, &(0x7f0000000b40)=0x8000000000000001, 0x82}, {0x4, &(0x7f0000000b80)=0x1, 0x2}, {0x4, &(0x7f0000000bc0)=0x5, 0x2}, {0x8, &(0x7f0000000c00)=0x3, 0x2}, {0x1, &(0x7f0000000c40)=0x200, 0x82}, {0x8000000000000001, &(0x7f0000000c80)=0x8, 0x82}, {0x54, &(0x7f0000000cc0)=0x6, 0x2}, {0x55c3, &(0x7f0000000d00)=0x4, 0x82}, {0xfff, &(0x7f0000000d40)=0xb, 0x82}, {0x5, &(0x7f0000000d80)=0x6, 0x82}, {0x7, &(0x7f0000000dc0)=0x3, 0x2}, {0xbf, &(0x7f0000000e00)=0x1, 0x82}, {0x0, &(0x7f0000000e40)=0xa, 0x82}, {0x5, &(0x7f0000000e80)=0x4, 0x82}, {0x3, &(0x7f0000000ec0)=0x8, 0x82}, {0x71a, &(0x7f0000000f00)=0xfffffffffffffff8, 0x2}, {0x80000001, &(0x7f0000000f40), 0x82}, {0x2, &(0x7f0000000f80)=0x2, 0x2}, {0x118, &(0x7f0000000fc0)=0xfcd6, 0x2}, {0x5, &(0x7f0000001000)=0x4, 0x2}, {0x200, &(0x7f0000001040)=0x3, 0x82}, {0x3, &(0x7f0000001080)=0x8, 0x82}, {0x0, &(0x7f00000010c0)=0x7, 0x2}, {0xfff, &(0x7f0000001100)=0xfffffffffffffffe, 0x82}, {0xaf8, &(0x7f0000001140)=0x4, 0x82}, {0xffff, &(0x7f0000001180)=0x4, 0x82}, {0x5, &(0x7f00000011c0)=0x6, 0x110d53fc7d322af1}, {0x1, &(0x7f0000001200)=0x4, 0x2}, {0x2, &(0x7f0000001240)=0x4, 0x2}, {0x6, &(0x7f0000001280)=0x1, 0x82}, {0x8, &(0x7f00000012c0)=0x81, 0x2}, {0x0, &(0x7f0000001300)=0x100, 0x2}, {0xfffffffffffffffa, &(0x7f0000001340)=0x1000, 0x2}, {0x0, &(0x7f0000001380)=0x400, 0x2}, {0x9, &(0x7f00000013c0)=0x8000000000000001, 0x82}, {0x0, &(0x7f0000001400)=0x7, 0x2}, {0x9, &(0x7f0000001440)=0x7, 0x2}, {0x9, &(0x7f0000001480)=0x7ff, 0x2}, {0xf, &(0x7f00000014c0), 0x82}, {0x9, &(0x7f0000001500)=0x80, 0x2}, {0x800, &(0x7f0000001540)=0x9, 0x82}, {0x5, &(0x7f0000001580)=0xfffffffffffffffa, 0x82}, {0x8, &(0x7f00000015c0)=0x7, 0x82}, {0xfffffffffffffff7, &(0x7f0000001600)=0xfffffffffffffffa, 0x2}, {0xd7, &(0x7f0000001640)=0x62, 0x2}, {0x95, &(0x7f0000001680)=0x1, 0x2}, {0x6, &(0x7f00000016c0)=0xf5, 0x2}, {0x2, &(0x7f0000001700)=0x2e, 0x82}, {0x8000, &(0x7f0000001740)=0xd9, 0x2}, {0xffffffff, &(0x7f0000001780)=0x1, 0x82}, {0x0, &(0x7f00000017c0)=0xfffffffffffffff7, 0x82}, {0x9, &(0x7f0000001800)=0xfffffffffffffff7, 0x82}, {0x40, &(0x7f0000001840)=0x4b44, 0x82}, {0x3, &(0x7f0000001880)=0x7, 0x82}, {0x2, &(0x7f00000018c0)=0xd02b}, {0x1ff, &(0x7f0000001900)=0xc1eb, 0x82}, {0x0, &(0x7f0000001940)=0x800, 0x82}, {0x0, &(0x7f0000001980)=0xa, 0x82}, {0x7, &(0x7f00000019c0), 0x82}, {0x61e, &(0x7f0000001a00)=0x1, 0x2}, {0x1, &(0x7f0000001a40)=0x1a, 0x82}, {0x37752a32, &(0x7f0000001a80)=0xb, 0x82}, {0x9, &(0x7f0000001ac0)=0x100000000, 0x2}, {0x8, &(0x7f0000001b00)=0x4, 0x80}, {0x4, &(0x7f0000001b40)=0x9, 0x2}, {0x0, &(0x7f0000001b80), 0x2}, {0xfffffffffffffffe, &(0x7f0000001bc0)=0x8, 0x2}, {0x0, &(0x7f0000001c00), 0x82}, {0x28, &(0x7f0000001c40)=0x101, 0x82}, {0x0, &(0x7f0000001c80)=0x2838, 0x82}, {0xd43a, &(0x7f0000001cc0)=0xff, 0x2}, {0x100, &(0x7f0000001d00)=0x8, 0x2}, {0x2, &(0x7f0000001d40)=0xd, 0x82}, {0x9, &(0x7f0000001d80)=0x7, 0x2}, {0x7, &(0x7f0000001dc0)=0x9, 0x82}, {0x6, &(0x7f0000001e00)=0x8, 0x2}, {0x4, &(0x7f0000001e40)=0xde, 0x82}, {0x3, &(0x7f0000001e80)=0x5, 0x82}, {0x36, &(0x7f0000001ec0)=0xc, 0x4}, {0x2db, &(0x7f0000001f00)=0x80, 0x6}, {0x3, &(0x7f0000001f40)=0x3b, 0x41}, {0x0, &(0x7f0000001f80)=0x2, 0x82}, {0xe2e6, &(0x7f0000001fc0), 0x2}, {0x8000, &(0x7f0000002000)=0xfff, 0x2}, {0x66f, &(0x7f0000002040)=0x13d, 0x2}, {0xf, &(0x7f0000002080)=0x1, 0x2}, {0x8000, &(0x7f00000020c0)=0x1, 0x82}, {0x0, &(0x7f0000002100)=0x4, 0x82}, {0x8, &(0x7f0000002140)=0x9, 0x2}, {0xfff, &(0x7f0000002180)=0xfffffffffffffbff, 0x2}, {0xfffffffffffffff8, &(0x7f00000021c0)=0x8, 0x2}, {0x6, &(0x7f0000002200)=0x1d73ca73, 0x80}], 0x7c, 0x0, &(0x7f0000002e40)={r8, r9+60000000}, 0x4fb1f016ad68d158) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r6, r4) clock_gettime(0x0, &(0x7f0000000200)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 3m56.14213965s ago: executing program 0 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0/baSourceID\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)="000080", 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@'], 0xfe33) listen(r2, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0xff}]}, 0x10) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff0304060902210725"], 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) lsetxattr(&(0x7f00000002c0)='./config\x00', &(0x7f0000000300)=@known='user.incfs.metadata\x00', &(0x7f0000000340)='configfs\x00', 0x9, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) time(0xfffffffffffffffc) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080), 0x0) write(r1, &(0x7f0000000600)='stacktrace', 0xa) 3m54.072615161s ago: executing program 0 (id=479): close(0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000300000040000180150004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0xd, 0x12, r5, 0xe1c4d000) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r3) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) 3m53.147152074s ago: executing program 0 (id=484): r0 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x0, 0x800, 0x3, 0x3}, &(0x7f0000000080)=0x0, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x20, {0x7, 0x7}, 0xb}, 0x1) 3m52.826912697s ago: executing program 33 (id=484): r0 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x0, 0x800, 0x3, 0x3}, &(0x7f0000000080)=0x0, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x20, {0x7, 0x7}, 0xb}, 0x1) 3m30.126319593s ago: executing program 2 (id=543): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x49, 0x0, 0x1}]}) 3m29.838785313s ago: executing program 2 (id=545): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) 3m29.58526406s ago: executing program 2 (id=546): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0x9, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @loopback, 0x8}, 0x1c) 3m28.581500428s ago: executing program 2 (id=548): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x940, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000440)) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000b80)={0x28, 0x10000, 0x0, r1, 0x26b2e3, 0x6d0c7d3f, 0x4, 0x13581c}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x10000000000, 0x0, 0x0, 0x8, 0x6, r5, 0x0}]) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1a, &(0x7f0000000980)=ANY=[@ANYBLOB="180000004c00000000000000c801000018110000", @ANYRES32=r2, @ANYBLOB="000000000000006f458ad5f1c81080c20a0100b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095009d0daa29548cc000000000000018350000010000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x2, 0x34, &(0x7f0000000580)=""/52, 0x41100, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000005c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000600)=[{0x4, 0x4, 0x6, 0x3}, {0x2, 0x3, 0x5}, {0x0, 0x2, 0x7, 0x5}, {0x1, 0x3, 0xa, 0x9}, {0x1, 0x2, 0x0, 0x3}, {0x3, 0x4, 0xa, 0x2}, {0x0, 0x4, 0x5}], 0x10, 0x7}, 0x94) setsockopt$inet6_int(r4, 0x29, 0xe9828904842a3fa3, &(0x7f00000003c0)=0x2, 0x4) (async) socket(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r7 = getpgrp(0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, 0x0, 0x101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) r9 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0) (async) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) 3m28.249280506s ago: executing program 2 (id=549): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f9b000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe40}, 0x68) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)={[{0x2d, 'rdma'}]}, 0x6) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) r3 = socket$inet(0x2, 0x6, 0x41) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)=ANY=[], 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 3m27.943101485s ago: executing program 2 (id=550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) syz_emit_ethernet(0x116, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xe0, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x13, '\x00', [@ra, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x95, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a5"}]}]}}}}}}}, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYRESDEC]) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3m27.514093038s ago: executing program 34 (id=550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) syz_emit_ethernet(0x116, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xe0, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x13, '\x00', [@ra, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x95, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a5"}]}]}}}}}}}, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYRESDEC]) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 15.071038856s ago: executing program 5 (id=1139): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3c8, 0x5, 0x2, 0x8, 0x14000000, 0x0, 0x3, 0xa, 0xefd, 0x7ffe, 0x9, 0x13, 0x400, 0x2, 0x13, 0xbd55, 0xffffffa7, 0x3c, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0x860, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) timer_create(0x0, &(0x7f0000000100)={0x0, 0x31, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000039000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ca3000/0x3000)=nil, &(0x7f0000fa2000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xfffffd75, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c490) close_range(r1, r4, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000140)) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) 13.511356414s ago: executing program 5 (id=1144): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) msgrcv(0x0, &(0x7f0000002fc0)={0x0, ""/108}, 0xfffffffffffffea3, 0x2, 0x4800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x3) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) rt_tgsigqueueinfo(r0, r1, 0x28, &(0x7f0000000080)={0x2b, 0x3, 0x93}) keyctl$chown(0x4, r4, 0xee01, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000003c0)={r2, &(0x7f0000000240)='syz', 0x30081, &(0x7f0000000280)={@align, {0x8, 0x9, 0x3, 0x1}}, 0x3, &(0x7f00000002c0), &(0x7f0000000340)=0xd1d}) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0xfffffffdffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000400)={@id={0x2, 0x0, @b}, 0x40, r6, '\x00', @b}) 11.99803097s ago: executing program 3 (id=1146): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x200, 0x1, 0xf2}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1033, 0x0, 0xf4}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x100, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x5ffffffff000, 0x1, 0x13, r1, 0x81000000) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000340), 0x2000000, 0x0) io_uring_enter(r0, 0x65cb, 0xa737, 0x6, &(0x7f0000000080)={[0x4]}, 0x8) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) 11.637388389s ago: executing program 3 (id=1147): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) 11.356218768s ago: executing program 7 (id=1148): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) read(r0, &(0x7f00000000c0)=""/5, 0x5) 10.581248569s ago: executing program 3 (id=1151): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="01154e000100445588fb0000892f", 0xe, 0x804, &(0x7f0000000040)={0x11, 0xf8, r2, 0x0, 0x0, 0x0}, 0x14) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000019180)={0xc, 0x7, 0xc, 0x1ff, 0x1, "0400ebffffffffffffc73cebffff000800", 0x270, 0x100000}) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000840)="5fc83dd3b7a25254be360df7b8e1", 0x0, 0x6333, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(r0, 0x0, 0x1, &(0x7f0000000080)=""/233, &(0x7f0000000180)=0xe9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x76, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x48, {0x0, 0x6, "fd3a85", 0xff, 0x89, 0x0, @remote, @local, [], "85e7d2e1a48a75fc"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x4008032, 0xffffffffffffffff, 0x42a3f000) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000240)={0x9, 0x0, [{0x1e0, 0x0, 0xffffffff}, {0x8cb, 0x0, 0x661}, {0x9fd, 0x0, 0x8000}, {0x89b, 0x0, 0x10000000000}, {0x19c, 0x0, 0x6a52ee35}, {0x1989}, {0xb00}, {0x619, 0x0, 0x5}, {0x11e, 0x0, 0x5}]}) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x6, 0x8, 0x1, 0x4, 0x1, 0x5, 0x7}, 0x0, &(0x7f0000003880)={0x9, 0x3, 0xfffffffffffffffe, 0x8, 0xfffffffffffffc00, 0x8000000000000000, 0x0, 0x5}, &(0x7f00000038c0)={0x0, 0x989680}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r8, r7, 0x4, r7}, 0x6) r9 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r0, &(0x7f0000000380)="cedee9ab40a89d6b46c3a050fba4a0ef10448f44c670ac3e6b9e88b2e2b3b364dcb11c752046bfb1a81910f971582769347f704648f2bfbb9729680f83ae1d7129a0b80d115c57953712841928a076d6df1081073a99e6446dfed01ebb1f55150d263175ce62cc4a1a77021450072ab019a166f12b69be7ddc6d2bac98c13d0db644225d77330ffa408625d5", &(0x7f0000000440)=""/219}, 0x20) connect$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x5}}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x7303}, @void, @llc={@snap={0x0, 0x1, "ab", "d78a45", 0x201, "b96d4a15c35b5dfb147deaad143cb087ff0b06b6ce57910c131fb0096cab956041af6be58b93e0cea345f378a09f4f7d29b3979d9b744b2181e24102c9c1019d3411b2fb2665d6ca1c54adf29c3e9d0c598843254ff67e85b7369f6cdca5ed6e9ec6"}}}, 0x6e) 10.490488613s ago: executing program 7 (id=1152): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setparam(0x0, &(0x7f0000000340)=0x3) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000020900010073797a30000000df1f000000080a01010000000000000000020000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x40000) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x2200) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x48080) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000dc0), 0x11e3, 0x0, 0x0, 0x51c36fff766693eb}, 0x48004) 10.4373183s ago: executing program 5 (id=1153): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r3, 0x4, 0x20, 0x100000000, 0x5}, &(0x7f00000000c0)=0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000200000000000000000010500000020000004010000000000000f020000000061"], 0x0, 0x4f, 0x0, 0x1, 0x2}, 0x28) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.952955064s ago: executing program 7 (id=1156): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x18, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x67, '\x00', @loopback}}}}}}, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000000)={0x0, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_ublk_setup_io_uring(0x155a, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r1, 0x0, 0x0, r2, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc23d7010203010902120001000000000904d4"], 0x0) 6.668931041s ago: executing program 4 (id=1158): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)={0x364, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x14, 0x45, "d9046ed3db313d96798d2a5b6fb8b079"}, @NL80211_ATTR_TESTDATA={0x35, 0x45, "0fc1e16dd0e455adf3852413cc8cda9967bd1ae351871b88c3413dc393fdecaaa04cc60f668142e78857eaa33daf5643d2"}, @NL80211_ATTR_TESTDATA={0xd5, 0x45, "59d505506a71fb33c36817228e61572d6a9c6ff214f974998ab92a1b8f7ea9028de4bfcbd1c857696a69ecd43beac83e2da6174c330895abd30e06e5370cdae6249222d8b35b1e63176a3a3bfff01913b58d7ee9889700413840e42add7d911c568a2e0e9ed16d97ee12de970eb76db5ba7ce218b4f9e24299c9efcb410480d2b1a75e3a234895b905eb5a73d8efd51929c08c57f41b7bd94ebe280518118fe9572f59ec8a3cdc0b76a911a72122da9066543005bf1f33e21e1410a1ff0b35f54b91f7d398575e12cd71cea8d92b41929a"}, @NL80211_ATTR_TESTDATA={0xb9, 0x45, "bfd088ed47aee7681aa28ddf28d7b216da751c53dc5bda1541a180830aa57ae7582a582d9cc89e4ed359e4cfb4e29668a1798c3499522a95f2edea77e77d573db87729640963e750f86db415630502b4f02ddd0b94d1a9bc29315432d4d314214bd87707a7d28a13f46fc8ab24da04ff97b2de90f23689fa14c6940ae670d331903273d39fa96ebb08514565c90020f34c714313922aad97b13b5d7aff70204234a1353aa200ce5244a8e7ba16b78018b7b4313ba0"}, @NL80211_ATTR_TESTDATA={0x79, 0x45, "3acbad61ccb19df6fd2b19c1f94f8a5e8a01cdfaba512b7454ffb54eaa238afce6b9fc1181f73a00eefceef4fd9ee72210b422581a724052561d385cf1e411ec237b927ff71d50efdc59a391be570fd69035d4c62f971ac3dfca68ac679658fdcff28032315ede457908f74d7ae9ebdabe6e9424c7"}, @NL80211_ATTR_TESTDATA={0xea, 0x45, "9f0271155d1ae4d8b2544e6305fd9ec0c7717848e81431944b7d7808debca46a4992bb8dcce1efeb0ecd77cd3d55651d55e1db57bae87035cc9899dbae9d2c0cf5ab1bba7325fd28f96ed7d7fa405835f3c27a2990df6e3aed5c41f1ef0aaf1589425259e122c84f58e567e2409b9af5f8efa5a9375d0ce230244800b9f01cd0bf880a2eb486ab8d39cb75a0e9dc258e7e522893c7661b076679ff80c0c3d33cfcee77146c89742a599b434e90522323b9c8599537a298e49381f3d4ff55aa28cec4ec65b27ff5ca9a1a6036bc3dcc8a9cb1b27824ce4f065db37745022cfa6df68b8f6d0b13"}]}, 0x364}, 0x1, 0x0, 0x0, 0x21}, 0x20000841) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r2 = getpid() r3 = socket$inet6_udp(0xa, 0x2, 0x0) fremovexattr(r3, &(0x7f0000000400)=@known='security.apparmor\x00') sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) capget(&(0x7f00000001c0)={0x99314a5, r2}, &(0x7f0000000340)={0x85e0, 0x4, 0x1ff, 0x6, 0x60, 0xd9}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_PTRACER(0x59616d61, r2) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r12 = io_uring_setup(0x2f9b, &(0x7f00000002c0)={0x0, 0x9ada, 0x40000, 0x1, 0x315}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r12, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x60bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x8, 0xa}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}}, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x7, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=0x5, 0x8, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB="ff0f000000000000000000000000000000008000c95a5beabc5cb4553e7c0adb75095784b4c1f1364eb4e342de76efe236246f14cde967dffe25cc894d7b22fa7dab198b61eadb41b5050c063b1d28f853839d1321010000004eefa0f9bfb1da34847530c23a1a1925af0e284a5604fffd2cc699969fbf1dfdc9c997543173a4dba0414c439801", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 6.599666927s ago: executing program 3 (id=1159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffc, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 6.426943647s ago: executing program 5 (id=1160): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b05, &(0x7f0000000200)={'wlan1\x00'}) syz_emit_ethernet(0x11b6, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40981, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) socket$inet6(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getdents64(r1, 0x0, 0x18) write(r0, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x5, 0x88, @generic=0x6, 0x2, 0x70, 0xb5}) 6.281132614s ago: executing program 4 (id=1161): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) 5.628306467s ago: executing program 6 (id=1162): semctl$IPC_SET(0x0, 0x0, 0x13, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0xee00, 0x0, 0x18, 0x2}, 0x457, 0xffffffff}) r0 = syz_clone(0x2183000, 0x0, 0x29, 0x0, 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="1d", 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) socket$inet6(0xa, 0xa, 0xfffffff5) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000640)=0xfffffffd) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001e580)=""/102390, 0xfffffffffffffe0b) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x2) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x9, 0x3}, 0x30, 0x2) landlock_restrict_self(r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = accept4$alg(r2, 0x0, 0x0, 0x1000) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @private=0xa010100}, 0x3, 0x4, 0x2}}, 0x26) pwritev2(r4, &(0x7f0000000b40)=[{&(0x7f0000000680)="247c73cc98", 0x5}], 0x1, 0x80000001, 0x2, 0x0) listen(r3, 0x5) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 5.242237099s ago: executing program 4 (id=1163): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x439, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r3, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000100)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x40880, &(0x7f0000000200)={0x11, 0xc, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) 4.988699605s ago: executing program 3 (id=1164): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00!\a\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r1], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_secret(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x801, 0x0) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24004884) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000140)="4f1c8ee54b92", &(0x7f00000006c0)="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"}}, &(0x7f0000bbdffc)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) 4.689246464s ago: executing program 6 (id=1165): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r3, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000804) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="40ea000010001fff40000000f32ca0349b6e0431", @ANYRES32=0x0, @ANYRESOCT=r0], 0x40}}, 0x0) 4.607572953s ago: executing program 4 (id=1166): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001440)=[{{&(0x7f0000000340)={0x2, 0x4e25, @broadcast}, 0x10, &(0x7f0000001ac0)=[{&(0x7f00000014c0)="92e2c1de0ce3fb995312a306908b0c8d46a753a01796875744b8af7c806ec7432f268cb16435336f87cc133bced2e64952ea0ba0cf1a93851c833dd6fbd432e44076d8cd367d23dcdf667233cbbfa19c7282329bb0cfad3470eef6774a6e2e33e1f52acd3b366b53b9cc7579bd251d5c18b2d21a1ccd3b80e648201457fc90f0dc450234ce74694e2e7ccc5e9a3abf28d8fca48ba1f8c8057aeafae5668ebca1b66252e2ac4900268c4bb458412d46947fbc77788e2b6f481d214b585b494d73c2d17c64972bc3f7a3571075c5efa9a3cbc13e9367b39c1f90b070cbbf80a9e9ab2d099cda6f72665d5a38", 0xeb}, {&(0x7f00000015c0)="1469ec340002aeda4ce3a9e218e33e694a", 0x11}, {&(0x7f0000001600)="bf9ccf0fbde710af66f1b201c96b4b35c1660276999fde949d5dddd11440c51eb001d15e0aa54cfefafed790c9ea826abc7e14458ca3c789ea91aadafe479b011e188cf841fa9c735b654c6e7410ea1e", 0x50}, {&(0x7f0000001a00)="a1ecfd6529e16e7736f438589309f773ad8f832956fe71978a7a025d4de152409dfee8c842e88e102f5303bd97296eea34b283b86f8fe7cf5170df5c51158c7e91d3b7be6628d8e1b1b1e0d8984ed99cb0aa4dbc80409ae7fb1234cb7e238177efd7bc65d2cd841f463d77361a60c2085a1e0118fff8163ad17fd93e8954bb63e0094627e9e41ab1fe366c3131a5872385c825b563136cd2e9f490d6edc8c0102bf067c42d4393c9d8671b062349c9ab129a", 0xb2}], 0x4}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000001900)="0690cd6d452f393201c6f3893bb3d88ecf626f4bcb084e96b4f6b427c743ce78921fd362e48483e9a7ae3a8bfa939c90279d35a7cdb3b80242038c581110afbe1f2afe1078fe8674e9b5724a3393758b5951eb7aad7999bfdf71915daba76081ca61d1d12af20f5718f4d31678f204bb002f78152ee43819bb158fc8221210967f8fd1af5b84e3ba9671f3a70423536245780dbf0dbf509fb2b2b94fd72404aa22587ec26d373b064cb40c77eacc276c5866f3d819801802fc1fb31e84fb6082db5e9a9c25bd693e71f4ce2c9e5e7dff047a06d6102b0f36343b5556560981307e7781acb4f3b64f32", 0xe9}, {&(0x7f0000001840)="7aa6b8376d4b366a0550f99c180c3082ef92391626bdae39e6656064110392b577427b65a011928cd50b56568857d31cb529b5da417962c6e45dabf7a69545cdee21523da2870d263f45f462ce8651ead59c5fc1a39d36c153584613833cf263ba589326a6e33bc6249de89436551a53c4a845673819f36e051b110dcc5dd93b70497cfec9557ade2abd96ef844235cedf5fa2dfa52469b6a445408abad741893337d709ad3147731df4b9414f5a", 0xae}, {&(0x7f0000001b80)="3f3b95f263e1577057011d7d6f0b2c606faf330deb2826671656d8277673a0dd05dec260dd39537b08000000000000002ce83bff3f41cfad03fd27172aa40c24ae22bb15e4ac141e7c49b6a2f2c07cd4b7824d00a35cf2d45daede", 0x5b}, {&(0x7f00000016c0)="6a6fda894a7afb446b3496bc2187c5d8fcc0d5f5e60f7a203f0bd3296ceb277362c77c74891c1996712ee5607e779cd017e547378947c7bafa744e6b74cf894ac25f4d7037ab0b83177721afbf5135100eb285b705569f029483782ac8c02f95438dbc3e4582cfc7050f30a19ba44b8fcbf292d0e2d6cbe276368ccac6833eff49de832f458d0a3c3946c38e65e3498f1e148995d363fc062973e7ec429ab7735080f55ed0e95a29df55069c3715c9a864bf7654b2c5048085a07f3fc10f1d9cb75e63aea63e9ebece2f627cf0c97ddacc376a5d48838d462f529ae2f6f734ab42bf71a469", 0xe5}], 0x6}}], 0x2, 0x4800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$unix(r0, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)=ANY=[], 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c3) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x1}, 0x30, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000140)={0x100, r5}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0xffffffff) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f00000002c0)={0x20, r7}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 4.550272043s ago: executing program 7 (id=1167): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1b6) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) mkdir(&(0x7f0000000240)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1f7) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') 4.396931617s ago: executing program 6 (id=1168): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3c8, 0x5, 0x2, 0x8, 0x14000000, 0x0, 0x3, 0xa, 0xefd, 0x7ffe, 0x9, 0x13, 0x400, 0x2, 0x13, 0xbd55, 0xffffffa7, 0x3c, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0x860, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) timer_create(0x0, &(0x7f0000000100)={0x0, 0x31, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000039000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ca3000/0x3000)=nil, &(0x7f0000fa2000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xfffffd75, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c490) close_range(r1, r4, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000140)) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) 4.236204048s ago: executing program 7 (id=1169): r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (fail_nth: 1) 3.816018938s ago: executing program 4 (id=1170): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000001880)={0x3, r1, 0xfff, 0x3ff, 0x2, 0x944}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$MEMREADOOB64(r3, 0xc0184d16, &(0x7f0000001040)={0xe, 0x0, 0x0, 0x0}) ioctl$TCSETS(r2, 0x80204705, &(0x7f0000000040)={0x4000005, 0x4, 0x1, 0x400000, 0x15, "3eccd8fd0000000000000010000000040100"}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000780)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000008c0)={&(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880), 0x3, 0x2, 0x7}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000a00)={&(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0], 0x5, 0x6, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000b40)={&(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x7, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={&(0x7f0000000d00)=[0x0], 0x1, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000dc0)={&(0x7f0000000cc0)=[0x0, 0x0, 0x0, r5, 0x0, r7, 0x0, r8, r9, 0x0], 0xa, r1, r10, 0x9, 0xf, 0x5, 0x800, {0x9, 0x6, 0x3, 0x39, 0x6, 0x8, 0x9, 0x9, 0x5d30, 0x101, 0x6325, 0xfb, 0x0, 0x0, "31cc45534937acb26992dd3dfdee0dff8ccdb16c06f34d6e7a0f53a8a2231014"}}) setns(0xc9, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x521a02, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x23, &(0x7f0000000e40)=ANY=[@ANYBLOB="18000000e7010000000000000180ffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018650000020040e6ffffe90005000000950000000000000095000000000000001811000008cc27728edb6bde3c885312362580765b3a5ed3c39e4b32ab84f758c2a3349cee684ab774fa755eff269f17bb4bf44534d3449baebe42e829eb69734e3060e83b9eb47ce08bed8be215191472c32b34397708853a", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000600700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018470000ffffffff0000000000000000c129ffffffffffff180000007f000000000000002d00000018680000030000000000000002000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x2, 0x1, 0xf, 0x2}, {0x0, 0x1, 0x0, 0x2e6e787b2503dc54}, {0x3, 0x3, 0x5, 0xb}, {0x2, 0x4, 0x10, 0x3}, {0x5, 0x2, 0x1, 0xd}, {0x4, 0x3, 0xc, 0x1}, {0x0, 0x2, 0x3, 0x9}, {0x2, 0x2, 0x8}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f00000004c0)=r13, 0x4) 2.59036118s ago: executing program 5 (id=1171): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r0, 0x0, r0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0xffffffff) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42840, 0x1f0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32, @ANYBLOB="240003"], 0x10e0}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 2.571774316s ago: executing program 6 (id=1172): unshare(0x6a040000) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffe34) r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, &(0x7f0000000380)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_fd={0x2185, 0x1, 0x4, 0x10, 0x2, {0x77359400}, {0x2, 0x0, 0x4, 0x9, 0x7, 0x2, "749cf02c"}, 0x10000, 0x4, {&(0x7f0000000400)=[{0x800, 0x3, {}, 0x400}, {0x58, 0x80000001, {}, 0x2}]}, 0xfcfd}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 1.893132485s ago: executing program 4 (id=1173): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000ac0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/fail-nth\x00', 0x2, 0x0) writev(r1, &(0x7f0000003800)=[{&(0x7f0000001540)="f7", 0x1}], 0x1) syz_usb_disconnect(r0) 1.244433564s ago: executing program 5 (id=1174): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffc, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1.149387976s ago: executing program 6 (id=1175): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004550c, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'}) close(r0) 728.773821ms ago: executing program 3 (id=1176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70b92d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x106f) ioctl$LOOP_CLR_FD(r2, 0x4c01) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x8, 0x0, 0x0, 0xf7, 0x42}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r4, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 561.336812ms ago: executing program 7 (id=1177): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 0s ago: executing program 6 (id=1178): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) r1 = socket(0x10, 0x803, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000000)={0x0, 0x0, 0xe5bb}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xa74) (async) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xa74) syz_pidfd_open(r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000000)={0x0}) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r5, 0x7}, 0x14, 0x0}}], 0x1, 0x80) (async) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r5, 0x7}, 0x14, 0x0}}], 0x1, 0x80) open$dir(&(0x7f00000001c0)='./file0\x00', 0x82000, 0xa9) (async) open$dir(&(0x7f00000001c0)='./file0\x00', 0x82000, 0xa9) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x90, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}, @replay_thresh={0x8, 0xb, 0xfffffffb}]}, 0x10c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) kernel console output (not intermixed with test programs): 766069][ T6382] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.779003][ T6382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 372.797172][ T6382] usb 6-1: SerialNumber: syz [ 372.975714][ T30] audit: type=1400 audit(1785937300.895:1232): avc: denied { listen } for pid=9094 comm="syz.7.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.064949][ T30] audit: type=1400 audit(1785937300.955:1233): avc: denied { accept } for pid=9094 comm="syz.7.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.212486][ T6375] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 373.370894][ T30] audit: type=1800 audit(1785937301.295:1234): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.768" name="ipv4_address" dev="configfs" ino=30595 res=0 errno=0 [ 373.508969][ T6375] usb 5-1: device descriptor read/64, error -71 [ 373.809616][ T6382] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 373.829185][ T6375] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 373.989627][ T6375] usb 5-1: device descriptor read/64, error -71 [ 374.004117][ T9138] overlay: filesystem on ./bus not supported as upperdir [ 374.130503][ T6375] usb usb5-port1: attempt power cycle [ 374.375642][ T6378] usb 6-1: USB disconnect, device number 10 [ 374.437221][ T6378] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 374.631746][ T6375] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 374.692541][ T6375] usb 5-1: device descriptor read/8, error -71 [ 375.061201][ T6375] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 375.129012][ T6378] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 375.244738][ T6375] usb 5-1: device descriptor read/8, error -71 [ 375.429763][ T6378] usb 4-1: device descriptor read/64, error -71 [ 375.466578][ T6375] usb usb5-port1: unable to enumerate USB device [ 375.548515][ T9169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0140 instead [ 375.579040][ T9169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x2000 instead [ 375.603269][ T30] audit: type=1400 audit(1785937303.525:1235): avc: denied { getopt } for pid=9168 comm="syz.5.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.648015][ T30] audit: type=1400 audit(1785937303.565:1236): avc: denied { write } for pid=9168 comm="syz.5.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.667848][ T9169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0041 instead [ 375.684026][ T9169] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0xff00 instead [ 375.739325][ T6378] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 375.790696][ T9169] jffs2: notice: (9169) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 375.879034][ T6378] usb 4-1: device descriptor read/64, error -71 [ 375.946895][ T30] audit: type=1400 audit(1785937303.865:1237): avc: denied { write } for pid=9151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.016872][ T6378] usb usb4-port1: attempt power cycle [ 376.207376][ T30] audit: type=1400 audit(1785937304.125:1238): avc: denied { write } for pid=9183 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.389009][ T6378] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 376.424321][ T30] audit: type=1400 audit(1785937304.335:1239): avc: granted { setsecparam } for pid=9180 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 376.474108][ T6378] usb 4-1: device descriptor read/8, error -71 [ 376.759747][ T6378] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 376.859432][ T6378] usb 4-1: device descriptor read/8, error -71 [ 377.000463][ T6378] usb usb4-port1: unable to enumerate USB device [ 377.735008][ T30] audit: type=1400 audit(1785937305.655:1240): avc: denied { name_bind } for pid=9197 comm="syz.7.791" src=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 377.784811][ T9216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.038929][ T6378] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 378.096845][ T30] audit: type=1400 audit(1785937306.015:1241): avc: denied { write } for pid=9191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.152050][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.7.791'. [ 378.170279][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.250624][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.271220][ T6378] usb 7-1: Using ep0 maxpacket: 16 [ 378.280661][ T6378] usb 7-1: unable to get BOS descriptor or descriptor too short [ 378.303666][ T6378] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.330090][ T6378] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.375211][ T6378] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 378.376014][ T30] audit: type=1400 audit(1785937306.295:1242): avc: denied { write } for pid=9230 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.401301][ T6378] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.416453][ T6378] usb 7-1: Product: syz [ 378.421039][ T6378] usb 7-1: Manufacturer: syz [ 378.425757][ T6378] usb 7-1: SerialNumber: syz [ 378.599104][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 378.675190][ T6378] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 378.684895][ T6378] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 378.889422][ T24] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 378.899567][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.969751][ T9243] FAULT_INJECTION: forcing a failure. [ 378.969751][ T9243] name failslab, interval 1, probability 0, space 0, times 0 [ 378.982571][ T9243] CPU: 0 UID: 0 PID: 9243 Comm: syz.3.796 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.982600][ T9243] Tainted: [L]=SOFTLOCKUP [ 378.982605][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 378.982616][ T9243] Call Trace: [ 378.982622][ T9243] [ 378.982629][ T9243] dump_stack_lvl+0x100/0x190 [ 378.982657][ T9243] should_fail_ex.cold+0x5/0xa [ 378.982681][ T9243] should_failslab+0xc2/0x120 [ 378.982704][ T9243] __kmalloc_noprof+0xfc/0x820 [ 378.982726][ T9243] ? iovec_from_user+0x8d/0x140 [ 378.982754][ T9243] iovec_from_user+0x8d/0x140 [ 378.982782][ T9243] __import_iovec+0x81/0x640 [ 378.982806][ T9243] ? __might_fault+0x40/0x140 [ 378.982823][ T9243] ? __might_fault+0xc5/0x140 [ 378.982845][ T9243] import_iovec+0x101/0x130 [ 378.982874][ T9243] copy_msghdr_from_user+0x2c6/0x4c0 [ 378.982893][ T9243] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 378.982916][ T9243] ? rcu_is_watching+0x12/0xc0 [ 378.982942][ T9243] ? ___sys_sendmsg+0x19d/0x1e0 [ 378.982958][ T9243] ? kfree+0x1e5/0x6c0 [ 378.982988][ T9243] ___sys_sendmsg+0x106/0x1e0 [ 378.983007][ T9243] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.983045][ T9243] ? __pfx___might_resched+0x10/0x10 [ 378.983072][ T9243] __sys_sendmmsg+0x20c/0x440 [ 378.983099][ T9243] ? __pfx___sys_sendmmsg+0x10/0x10 [ 378.983122][ T9243] ? __schedule+0x126e/0x6730 [ 378.983158][ T9243] ? fput+0x79/0x100 [ 378.983180][ T9243] ? exit_to_user_mode_loop+0x166/0x6f0 [ 378.983202][ T9243] ? rcu_is_watching+0x12/0xc0 [ 378.983227][ T9243] ? trace_hardirqs_off+0x70/0x170 [ 378.983259][ T9243] __x64_sys_sendmmsg+0x9c/0x100 [ 378.983282][ T9243] ? lockdep_hardirqs_on+0x78/0x100 [ 378.983302][ T9243] do_syscall_64+0x115/0x870 [ 378.983322][ T9243] ? clear_bhb_loop+0x40/0x90 [ 378.983344][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.983361][ T9243] RIP: 0033:0x7fc9f159e0d9 [ 378.983377][ T9243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.983393][ T9243] RSP: 002b:00007fc9ef7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 378.983411][ T9243] RAX: ffffffffffffffda RBX: 00007fc9f1826180 RCX: 00007fc9f159e0d9 [ 378.983422][ T9243] RDX: 0000000000000003 RSI: 00002000000021c0 RDI: 0000000000000007 [ 378.983432][ T9243] RBP: 00007fc9ef7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 378.983442][ T9243] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 378.983452][ T9243] R13: 00007fc9f1826218 R14: 00007fc9f1826180 R15: 00007fff6b447848 [ 378.983475][ T9243] [ 379.756824][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.780852][ T24] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 379.837368][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.855576][ T24] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 380.188565][ T24] usb 6-1: Manufacturer: syz [ 380.261160][ T24] usb 6-1: config 0 descriptor?? [ 380.477481][ T6378] usb 7-1: 2:1 : can't get Cluster Descriptor [ 380.509216][ T6379] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 380.548940][ T24] rc_core: IR keymap rc-hauppauge not found [ 380.566682][ T24] Registered IR keymap rc-empty [ 380.611261][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 380.671861][ T6379] usb 5-1: config index 0 descriptor too short (expected 2075, got 27) [ 380.693296][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 380.707815][ T6379] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 380.730132][ T6379] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.746349][ T24] usb 6-1: USB disconnect, device number 11 [ 380.756904][ T6379] usb 5-1: config 0 has no interface number 0 [ 380.807930][ T6379] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 380.832377][ T6379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.844854][ T6379] usb 5-1: Product: syz [ 380.849261][ T6379] usb 5-1: Manufacturer: syz [ 380.859046][ T6379] usb 5-1: SerialNumber: syz [ 380.937359][ T6379] usb 5-1: config 0 descriptor?? [ 381.009507][ T6378] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 381.229021][ T6378] usb 4-1: Using ep0 maxpacket: 16 [ 381.236756][ T6378] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 381.245781][ T6378] usb 4-1: config 127 has no interface number 0 [ 381.246050][ T9255] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 381.286175][ T9255] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 381.288297][ T6378] usb 4-1: config 127 interface 124 has no altsetting 0 [ 381.319483][ T6378] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 381.329262][ T6379] usb 5-1: USB disconnect, device number 34 [ 381.344744][ T6378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.365165][ T6378] usb 4-1: Product: syz [ 381.370781][ T6378] usb 4-1: Manufacturer: syz [ 381.375536][ T6378] usb 4-1: SerialNumber: syz [ 381.461419][ T9257] autofs4:pid:9257:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 382.122992][ T24] usb 7-1: USB disconnect, device number 8 [ 382.285354][ T6379] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 382.335236][ T6379] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 382.385540][ T6378] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 382.630749][ T6386] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 383.473729][ T6386] usb 5-1: Using ep0 maxpacket: 16 [ 383.507803][ T6386] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 383.509797][ T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 383.559203][ T6386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 383.626470][ T6386] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 383.670630][ T6386] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 383.720853][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.737637][ T6386] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 383.765509][ T6386] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 383.768263][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 383.788876][ T6386] usb 5-1: Manufacturer: syz [ 383.796387][ T6378] usb 4-1: unable to get BOS descriptor or descriptor too short [ 383.806816][ T6386] usb 5-1: config 0 descriptor?? [ 383.816843][ T6378] usb 4-1: device firmware changed [ 383.839704][ T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 383.849191][ T9265] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 383.891846][ T6378] usb 4-1: USB disconnect, device number 25 [ 383.903512][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.951799][ T24] usb 6-1: config 0 descriptor?? [ 383.984727][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 384.006806][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 384.027846][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 384.076100][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 384.110972][ T24] usb 6-1: media controller created [ 384.351512][ T6379] usb 5-1: USB disconnect, device number 35 [ 384.526978][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.565632][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 384.597702][ T30] audit: type=1400 audit(1785937312.515:1243): avc: denied { read write } for pid=9288 comm="syz.3.807" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 384.661194][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 384.682497][ T30] audit: type=1400 audit(1785937312.515:1244): avc: denied { open } for pid=9288 comm="syz.3.807" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 384.825050][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 384.840445][ T30] audit: type=1400 audit(1785937312.515:1245): avc: denied { ioctl } for pid=9288 comm="syz.3.807" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 384.906891][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 384.959035][ T6386] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 384.981940][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 385.016072][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 385.078674][ T24] usb 6-1: USB disconnect, device number 12 [ 385.130642][ T6386] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 385.148933][ T6386] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 385.174984][ T6386] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 385.196664][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 385.217094][ T6386] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.440164][ T9293] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 385.662700][ T6386] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 385.774457][ T30] audit: type=1400 audit(1785937313.695:1246): avc: denied { write } for pid=9292 comm="syz.6.808" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 386.489458][ T6379] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 386.645655][ T9305] vivid-002: disconnect [ 387.100159][ T6379] usb 8-1: config index 0 descriptor too short (expected 2075, got 27) [ 387.116296][ T6379] usb 8-1: config 0 has an invalid interface number: 200 but max is 0 [ 387.134927][ T6379] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.215009][ T6379] usb 8-1: config 0 has no interface number 0 [ 387.238772][ T6379] usb 8-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 387.249448][ T6379] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.275298][ T6379] usb 8-1: Product: syz [ 387.379623][ T6379] usb 8-1: Manufacturer: syz [ 387.386987][ T6379] usb 8-1: SerialNumber: syz [ 387.409652][ T6379] usb 8-1: config 0 descriptor?? [ 387.957259][ T6379] usb 8-1: USB disconnect, device number 9 [ 388.825564][ T9336] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 388.825564][ T9336] The task syz.7.819 (9336) triggered the difference, watch for misbehavior. [ 388.922900][ T9293] vivid-002: reconnect [ 388.933374][ T6379] usb 7-1: USB disconnect, device number 9 [ 389.428545][ T9338] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.598222][ T9338] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.656443][ T9338] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.760206][ T9338] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.856885][ T1023] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.918132][ T1023] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.952957][ T9348] batman_adv: batadv0: Adding interface: veth0 [ 389.984680][ T9348] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.009936][ T30] audit: type=1400 audit(1785937317.905:1247): avc: denied { read } for pid=9330 comm="syz.5.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 390.037933][ T9334] netlink: 'syz.5.818': attribute type 4 has an invalid length. [ 390.128024][ T9348] batman_adv: batadv0: Interface activated: veth0 [ 390.148425][ T9345] netlink: 'syz.5.818': attribute type 17 has an invalid length. [ 390.167141][ T9349] batman_adv: batadv0: Interface deactivated: veth0 [ 390.504797][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 390.712323][ T9349] batman_adv: batadv0: Removing interface: veth0 [ 392.251571][ T9351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.292936][ T9351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.340736][ T9351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.363364][ T9351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.629097][ T9372] xt_hashlimit: size too large, truncated to 1048576 [ 393.089166][ T36] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.162666][ T36] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.622915][ T30] audit: type=1400 audit(1785937321.545:1248): avc: denied { view } for pid=9383 comm="syz.7.832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 393.739123][ T24] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 393.798909][ T6379] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 393.889544][ T1222] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 393.920424][ T24] usb 5-1: config 0 has no interfaces? [ 393.930198][ T24] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 393.945096][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.953409][ T6378] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 393.973001][ T24] usb 5-1: Product: syz [ 393.980416][ T6379] usb 4-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 393.998931][ T24] usb 5-1: Manufacturer: syz [ 394.003771][ T6379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.011861][ T24] usb 5-1: SerialNumber: syz [ 394.029219][ T24] usb 5-1: config 0 descriptor?? [ 394.036659][ T6379] usb 4-1: config 0 descriptor?? [ 394.080647][ T1222] usb 8-1: config 7 has an invalid interface number: 232 but max is 0 [ 394.100157][ T1222] usb 8-1: config 7 has no interface number 0 [ 394.113952][ T1222] usb 8-1: config 7 interface 232 altsetting 255 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 394.138988][ T6378] usb 6-1: Using ep0 maxpacket: 8 [ 394.145692][ T1222] usb 8-1: config 7 interface 232 has no altsetting 0 [ 394.159420][ T6378] usb 6-1: config 135 has an invalid interface number: 230 but max is 0 [ 394.177315][ T1222] usb 8-1: string descriptor 0 read error: -22 [ 394.185681][ T6378] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 394.199712][ T1222] usb 8-1: New USB device found, idVendor=1460, idProduct=9150, bcdDevice=1e.cd [ 394.217385][ T6378] usb 6-1: config 135 has no interface number 0 [ 394.227627][ T1222] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.240916][ T6378] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.275348][ T1222] usb 8-1: Interface #232 referenced by multiple IADs [ 394.311593][ T6378] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 394.327621][ T1222] usbhid 8-1:7.232: couldn't find an input interrupt endpoint [ 394.348286][ T6378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.376522][ T6378] usb 6-1: Product: syz [ 394.387001][ T6378] usb 6-1: Manufacturer: syz [ 394.398785][ T6378] usb 6-1: SerialNumber: syz [ 394.438410][ T6378] uvcvideo 6-1:135.230: probe with driver uvcvideo failed with error -22 [ 394.448514][ T1222] usb 5-1: USB disconnect, device number 36 [ 394.472202][ T9380] FAULT_INJECTION: forcing a failure. [ 394.472202][ T9380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.499019][ T9380] CPU: 0 UID: 0 PID: 9380 Comm: syz.3.830 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.499047][ T9380] Tainted: [L]=SOFTLOCKUP [ 394.499053][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 394.499063][ T9380] Call Trace: [ 394.499069][ T9380] [ 394.499077][ T9380] dump_stack_lvl+0x100/0x190 [ 394.499103][ T9380] should_fail_ex.cold+0x5/0xa [ 394.499124][ T9380] _copy_from_user+0x2e/0xd0 [ 394.499150][ T9380] copy_msghdr_from_user+0x9f/0x4c0 [ 394.499169][ T9380] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 394.499197][ T9380] ___sys_sendmsg+0x106/0x1e0 [ 394.499217][ T9380] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.499233][ T9380] ? __lock_acquire+0x49f/0x1a40 [ 394.499255][ T9380] ? get_pid_task+0x106/0x250 [ 394.499297][ T9380] __sys_sendmsg+0x160/0x210 [ 394.499321][ T9380] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.499356][ T9380] do_syscall_64+0x115/0x870 [ 394.499377][ T9380] ? clear_bhb_loop+0x40/0x90 [ 394.499398][ T9380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.499416][ T9380] RIP: 0033:0x7fc9f159e0d9 [ 394.499431][ T9380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.499448][ T9380] RSP: 002b:00007fc9f2386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.499469][ T9380] RAX: ffffffffffffffda RBX: 00007fc9f1825fa0 RCX: 00007fc9f159e0d9 [ 394.499480][ T9380] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 394.499490][ T9380] RBP: 00007fc9f2386090 R08: 0000000000000000 R09: 0000000000000000 [ 394.499500][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.499509][ T9380] R13: 00007fc9f1826038 R14: 00007fc9f1825fa0 R15: 00007fff6b447848 [ 394.499532][ T9380] [ 394.514194][ T6379] usbhid 4-1:0.0: can't add hid device: -71 [ 394.808091][ T6379] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 394.832983][ T6379] usb 4-1: USB disconnect, device number 26 [ 395.311027][ T6382] IPVS: starting estimator thread 0... [ 395.639056][ T9393] IPVS: using max 42 ests per chain, 100800 per kthread [ 395.710652][ T6379] usb 8-1: USB disconnect, device number 10 [ 396.840614][ T5818] usb 6-1: USB disconnect, device number 13 [ 396.977224][ T9410] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 397.244079][ T9413] evm: overlay not supported [ 397.339180][ T5818] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 397.478941][ T6382] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 398.089027][ T5818] usb 6-1: Using ep0 maxpacket: 8 [ 398.100844][ T5818] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 398.124214][ T5818] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 398.148602][ T5818] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 398.165442][ T5818] usb 6-1: Product: syz [ 398.170730][ T6382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.187886][ T5818] usb 6-1: Manufacturer: syz [ 398.195424][ T6382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.209933][ T5818] usb 6-1: SerialNumber: syz [ 398.225537][ T6382] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 398.247871][ T6382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.270426][ T6382] usb 4-1: config 0 descriptor?? [ 398.425595][ T5818] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 398.758877][ T5818] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 398.775960][ T5818] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 398.793629][ T5818] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 398.810983][ T5818] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 398.844183][ T5818] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 398.853334][ T9426] netlink: 277 bytes leftover after parsing attributes in process `syz.7.845'. [ 398.888091][ T5818] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 398.903015][ T30] audit: type=1400 audit(1785937326.825:1249): avc: denied { getopt } for pid=9424 comm="syz.7.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 399.008355][ T6382] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 399.014675][ T6378] usb 6-1: USB disconnect, device number 14 [ 399.059009][ T6382] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 399.079991][ T6382] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 399.103915][ T6382] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 399.122570][ T6382] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 399.136607][ T6378] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 399.146439][ T6382] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 399.147799][ T30] audit: type=1400 audit(1785937327.065:1250): avc: denied { map } for pid=9424 comm="syz.7.845" path="socket:[32093]" dev="sockfs" ino=32093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 399.200198][ T6382] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 399.201099][ T6378] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 399.256653][ T6378] visor 6-1:1.0: device disconnected [ 399.261540][ T6382] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 399.362455][ T6382] cp2112 0003:10C4:EA90.000E: Part Number: 0x82 Device Version: 0xFE [ 399.468983][ T5818] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 399.682283][ T9437] xt_hashlimit: size too large, truncated to 1048576 [ 400.268153][ T5818] usb 8-1: unable to get BOS descriptor or descriptor too short [ 400.279260][ T30] audit: type=1400 audit(1785937327.555:1251): avc: denied { write } for pid=9414 comm="syz.3.842" name="control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 400.296861][ T5818] usb 8-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 400.323396][ T6382] cp2112 0003:10C4:EA90.000E: error requesting SMBus config [ 400.346050][ T5818] usb 8-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 400.364420][ T6382] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71 [ 400.484783][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.535717][ T30] audit: type=1400 audit(1785937328.455:1252): avc: denied { create } for pid=9442 comm="syz.5.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 400.537225][ T5818] usb 8-1: Product: syz [ 400.928979][ T6382] usb 4-1: USB disconnect, device number 27 [ 401.087628][ T5818] usb 8-1: Manufacturer: syz [ 401.097724][ T5818] usb 8-1: SerialNumber: syz [ 401.212932][ T9450] netlink: 28 bytes leftover after parsing attributes in process `syz.5.850'. [ 401.324194][ T5818] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.411895][ T9453] gretap1: entered promiscuous mode [ 401.506892][ T5818] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 401.525429][ T30] audit: type=1400 audit(1785937329.445:1253): avc: denied { bind } for pid=9449 comm="syz.5.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 401.572178][ T5818] usb 8-1: USB disconnect, device number 11 [ 401.598025][ T7201] udevd[7201]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.628182][ T9450] bond1 (unregistering): Released all slaves [ 401.989338][ T6385] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 402.084407][ T6382] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 402.129038][ T6382] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 402.179223][ T6385] usb 4-1: Using ep0 maxpacket: 16 [ 402.237953][ T6385] usb 4-1: unable to get BOS descriptor or descriptor too short [ 402.271020][ T6385] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.298364][ T6385] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.332464][ T6385] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 402.348934][ T6385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.368906][ T6385] usb 4-1: Product: syz [ 402.373346][ T6385] usb 4-1: Manufacturer: syz [ 402.388900][ T6385] usb 4-1: SerialNumber: syz [ 402.663654][ T6385] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 402.714133][ T6385] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 402.749986][ T6378] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 402.788234][ T9486] ip_tables: iptables: counters copy to user failed while replacing table [ 402.939932][ T6378] usb 5-1: Using ep0 maxpacket: 16 [ 402.948558][ T30] audit: type=1800 audit(1785937330.865:1254): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.855" name="num" dev="configfs" ino=32137 res=0 errno=0 [ 402.948931][ T10] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 402.972219][ T6378] usb 5-1: unable to get BOS descriptor or descriptor too short [ 403.008376][ T6378] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.036230][ T6378] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 403.062866][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.068449][ T6378] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 403.083014][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.094286][ T6378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.102444][ T6378] usb 5-1: Product: syz [ 403.127824][ T6378] usb 5-1: Manufacturer: syz [ 403.132938][ T30] audit: type=1800 audit(1785937331.045:1255): pid=9492 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.863" name="addr_adrfam" dev="configfs" ino=32145 res=0 errno=0 [ 403.155048][ T9492] nvmet: Invalid value 'i' for adrfam [ 403.162395][ T6378] usb 5-1: SerialNumber: syz [ 403.171443][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 403.186317][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 403.212358][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 403.261512][ T10] usb 8-1: string descriptor 0 read error: -22 [ 403.269108][ T10] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 403.294276][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.321956][ T9483] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 403.344627][ T9483] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 403.469807][ T9496] UDC core: g1: couldn't find an available UDC or it's busy [ 403.999202][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 404.212393][ T10] usb 8-1: USB disconnect, device number 12 [ 404.259578][ T6378] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 404.275567][ T6378] usb 5-1: MIDIStreaming interface descriptor not found [ 404.827364][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.7.870'. [ 405.328014][ T6378] usb 5-1: USB disconnect, device number 37 [ 405.358059][ T30] audit: type=1326 audit(1785937333.275:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.7.870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619d9e0d9 code=0x7ffc0000 [ 405.617693][ T30] audit: type=1326 audit(1785937333.315:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.7.870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619d9e0d9 code=0x7ffc0000 [ 405.847590][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 405.931085][ T30] audit: type=1326 audit(1785937333.315:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.7.870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb619d9e0d9 code=0x7ffc0000 [ 406.059111][ T6385] usb 4-1: USB disconnect, device number 28 [ 406.170426][ T30] audit: type=1326 audit(1785937333.315:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.7.870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619d9e0d9 code=0x7ffc0000 [ 406.276257][ T9535] xt_hashlimit: size too large, truncated to 1048576 [ 406.823361][ T30] audit: type=1326 audit(1785937333.315:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.7.870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619d9e0d9 code=0x7ffc0000 [ 406.931305][ T30] audit: type=1326 audit(1785937333.315:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.7.870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb619d9e0d9 code=0x7ffc0000 [ 407.081897][ T9531] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 407.097128][ T30] audit: type=1326 audit(1785937333.325:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.7.870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619d9e0d9 code=0x7ffc0000 [ 407.327893][ T7230] udevd[7230]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 407.773588][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 407.799238][ T30] audit: type=1326 audit(1785937333.325:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.7.870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619d9e0d9 code=0x7ffc0000 [ 407.910181][ T30] audit: type=1326 audit(1785937333.325:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.7.870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb619d9f947 code=0x7ffc0000 [ 408.091560][ T9545] netlink: 'syz.3.875': attribute type 4 has an invalid length. [ 408.104727][ T30] audit: type=1326 audit(1785937333.325:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.7.870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb619d5e90e code=0x7ffc0000 [ 408.287820][ T9560] FAULT_INJECTION: forcing a failure. [ 408.287820][ T9560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.413625][ T9560] CPU: 0 UID: 0 PID: 9560 Comm: syz.6.880 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.413657][ T9560] Tainted: [L]=SOFTLOCKUP [ 408.413663][ T9560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 408.413673][ T9560] Call Trace: [ 408.413680][ T9560] [ 408.413688][ T9560] dump_stack_lvl+0x100/0x190 [ 408.413716][ T9560] should_fail_ex.cold+0x5/0xa [ 408.413739][ T9560] _copy_from_user+0x2e/0xd0 [ 408.413766][ T9560] copy_msghdr_from_user+0x9f/0x4c0 [ 408.413786][ T9560] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 408.413821][ T9560] ___sys_sendmsg+0x106/0x1e0 [ 408.413839][ T9560] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.413855][ T9560] ? __lock_acquire+0x49f/0x1a40 [ 408.413878][ T9560] ? get_pid_task+0x106/0x250 [ 408.413921][ T9560] __sys_sendmsg+0x160/0x210 [ 408.413945][ T9560] ? __pfx___sys_sendmsg+0x10/0x10 [ 408.413981][ T9560] do_syscall_64+0x115/0x870 [ 408.414009][ T9560] ? clear_bhb_loop+0x40/0x90 [ 408.414031][ T9560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.414049][ T9560] RIP: 0033:0x7fd200d9e0d9 [ 408.414065][ T9560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.414082][ T9560] RSP: 002b:00007fd201bf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.414101][ T9560] RAX: ffffffffffffffda RBX: 00007fd201025fa0 RCX: 00007fd200d9e0d9 [ 408.414113][ T9560] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 408.414124][ T9560] RBP: 00007fd201bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 408.414135][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.414144][ T9560] R13: 00007fd201026038 R14: 00007fd201025fa0 R15: 00007ffe1d3fab38 [ 408.414168][ T9560] [ 409.159105][ T6378] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 409.421904][ T6378] usb 6-1: Using ep0 maxpacket: 8 [ 409.433998][ T6378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.460933][ T6378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.471998][ T6378] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 409.596195][ T6378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.610138][ T6378] usb 6-1: config 0 descriptor?? [ 410.285426][ T6378] aquacomputer_d5next 0003:0C70:F0B6.0010: unknown main item tag 0x0 [ 410.351214][ T6378] aquacomputer_d5next 0003:0C70:F0B6.0010: unknown main item tag 0x0 [ 410.359729][ T6378] aquacomputer_d5next 0003:0C70:F0B6.0010: unknown main item tag 0x0 [ 410.368226][ T6378] aquacomputer_d5next 0003:0C70:F0B6.0010: unknown main item tag 0x0 [ 410.382384][ T6378] aquacomputer_d5next 0003:0C70:F0B6.0010: unknown main item tag 0x0 [ 410.418411][ T6378] aquacomputer_d5next 0003:0C70:F0B6.0010: unknown main item tag 0x0 [ 410.445907][ T6378] aquacomputer_d5next 0003:0C70:F0B6.0010: unknown main item tag 0x0 [ 410.505810][ T6378] aquacomputer_d5next 0003:0C70:F0B6.0010: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 411.420333][ T6378] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 411.522256][ T9611] block nbd4: shutting down sockets [ 411.749039][ T6379] usb 6-1: reset high-speed USB device number 15 using dummy_hcd [ 411.909845][ T6378] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 412.339881][ T9617] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.001097][ T6378] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.020634][ T6378] usb 7-1: config 0 has no interface number 0 [ 413.026809][ T6378] usb 7-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 413.041449][ T6378] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 413.050552][ T6378] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.061247][ T6378] usb 7-1: config 0 descriptor?? [ 413.202988][ T6378] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 413.268046][ T727] usb 7-1: Failed to submit usb control message: -71 [ 413.277413][ T6385] usb 7-1: USB disconnect, device number 10 [ 413.306777][ T727] usb 7-1: unable to send the bmi data to the device: -71 [ 413.333800][ T727] usb 7-1: unable to get target info from device [ 413.349279][ T727] usb 7-1: could not get target info (-71) [ 413.366122][ T727] usb 7-1: could not probe fw (-71) [ 413.514992][ T9631] ip_tables: iptables: counters copy to user failed while replacing table [ 413.669050][ T9617] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.870758][ T1222] usb 6-1: USB disconnect, device number 15 [ 414.029389][ T9632] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.502721][ T9617] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.152219][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 415.152231][ T30] audit: type=1400 audit(1785937343.075:1290): avc: denied { bind } for pid=9636 comm="syz.6.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 415.227102][ T9632] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.297819][ T30] audit: type=1400 audit(1785937343.175:1291): avc: denied { sys_module } for pid=9636 comm="syz.6.901" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 415.805940][ T9617] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.903749][ T9632] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.060814][ T9632] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.228962][ T5706] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 416.942030][ T5706] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 416.979143][ T1176] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.392177][ T30] audit: type=1800 audit(1785937345.045:1292): pid=9666 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.907" name="file0" dev="overlay" ino=1033 res=0 errno=0 [ 417.437449][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 417.606210][ T36] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.686633][ T36] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.792933][ T36] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.168996][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.179850][ T5706] usb 6-1: Product: syz [ 418.184041][ T5706] usb 6-1: Manufacturer: syz [ 418.188641][ T5706] usb 6-1: SerialNumber: syz [ 418.298885][ T30] audit: type=1400 audit(1785937346.155:1293): avc: denied { write } for pid=9672 comm="syz.7.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 418.483372][ T1176] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.519600][ T1176] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.528180][ T5706] usb 6-1: config 0 descriptor?? [ 418.536287][ T1176] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.546663][ T1176] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.595436][ T9680] loop6: detected capacity change from 0 to 2640 [ 418.666156][ T9680] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.739160][ T9680] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.773472][ T5706] usb 6-1: ignoring: probably an ADSL modem [ 418.836837][ T9680] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.845326][ T9680] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.857708][ T9680] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.928326][ T1222] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 419.186530][ T9680] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.190217][ T30] audit: type=1400 audit(1785937347.105:1294): avc: denied { bind } for pid=9652 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 419.214999][ T9680] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.223215][ T9680] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.224062][ T9678] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 419.281005][ T9680] ldm_validate_partition_table(): Disk read failed. [ 419.287775][ T30] audit: type=1400 audit(1785937347.155:1295): avc: denied { write } for pid=9659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.311935][ T9680] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.320419][ T30] audit: type=1400 audit(1785937347.245:1296): avc: denied { ioctl } for pid=9676 comm="syz.7.911" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 419.349140][ T9678] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 419.350037][ T9680] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.396817][ T9680] Dev loop6: unable to read RDB block 0 [ 419.406207][ T9680] loop6: unable to read partition table [ 419.413295][ T1222] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 419.422427][ T1222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.432127][ T9680] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 419.443469][ T1222] usb 4-1: Product: syz [ 419.449352][ T6382] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 419.464344][ T1222] usb 4-1: Manufacturer: syz [ 419.469069][ T1222] usb 4-1: SerialNumber: syz [ 419.496498][ T30] audit: type=1400 audit(1785937347.415:1297): avc: denied { write } for pid=9693 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.561414][ T9678] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 419.574078][ T9678] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 419.603380][ T9678] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 419.626710][ T9678] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 419.701183][ T6382] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.711756][ T6382] usb 5-1: config 0 has no interface number 0 [ 419.733589][ T6382] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 420.011802][ T6382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.037145][ T6382] usb 5-1: Product: syz [ 420.046046][ T6382] usb 5-1: Manufacturer: syz [ 420.056843][ T6382] usb 5-1: SerialNumber: syz [ 420.081705][ T6382] usb 5-1: config 0 descriptor?? [ 420.109523][ T6382] usb 5-1: selecting invalid altsetting 1 [ 420.118062][ T9695] xt_hashlimit: size too large, truncated to 1048576 [ 420.137902][ T6382] dvb_ttusb_budget: ttusb_init_controller: error [ 420.165539][ T6382] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 420.373818][ T5706] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 420.458581][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.472810][ T5706] usb 6-1: USB disconnect, device number 16 [ 420.507281][ T6382] DVB: Unable to find symbol stv0299_attach() [ 420.529515][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.568505][ T30] audit: type=1800 audit(1785937348.485:1298): pid=9713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.915" name="attr_allow_any_host" dev="configfs" ino=33253 res=0 errno=0 [ 420.603458][ T9713] nvmet: adding nsid 1 to subsystem testnqn [ 420.668536][ T30] audit: type=1800 audit(1785937348.585:1299): pid=9713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.915" name="device_path" dev="configfs" ino=33255 res=0 errno=0 [ 420.694651][ T6382] DVB: Unable to find symbol tda8083_attach() [ 420.727646][ T6382] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 420.775333][ T30] audit: type=1800 audit(1785937348.635:1300): pid=9713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.915" name="enable" dev="configfs" ino=33256 res=0 errno=0 [ 420.825255][ T6382] usb 5-1: USB disconnect, device number 38 [ 420.862608][ T1222] speedtch 4-1:1.0: speedtch_bind: wrong device class 0 [ 420.887068][ T1222] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 420.910524][ T30] audit: type=1800 audit(1785937348.655:1301): pid=9713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.915" name="addr_trtype" dev="configfs" ino=33258 res=0 errno=0 [ 420.963258][ T1222] speedtch 4-1:1.1: speedtch_bind: wrong device class 0 [ 420.971158][ T1222] speedtch 4-1:1.1: usbatm_usb_probe: bind failed: -19! [ 421.046224][ T1222] usb 4-1: USB disconnect, device number 29 [ 421.205356][ T30] audit: type=1400 audit(1785937349.125:1302): avc: denied { write } for pid=9699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.763074][ T48] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:0c7c1b6b-5dd9-4eb9-a154-bdef9a8f3b09. [ 421.977631][ T30] audit: type=1400 audit(1785937349.795:1303): avc: denied { write } for pid=9732 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.066963][ T9713] nvme nvme0: creating 2 I/O queues. [ 422.245477][ T9713] nvme nvme0: new ctrl: "testnqn" [ 422.685578][ T1222] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 423.502264][ T1222] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 423.531042][ T9750] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.637425][ T1222] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 423.647338][ T1222] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 423.656461][ T1222] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.683641][ T9739] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 423.856514][ T1222] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 424.578920][ T9750] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.584020][ T1222] usb 8-1: USB disconnect, device number 14 [ 424.722608][ T9750] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.807807][ T9750] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.259010][ T6378] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 425.445925][ T6378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 425.469065][ T1023] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.492369][ T1023] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.506687][ T6378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 425.550089][ T6378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 425.566398][ T6959] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.614675][ T6378] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 425.652290][ T6378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.660717][ T6378] usb 6-1: Product: syz [ 425.666800][ T6378] usb 6-1: Manufacturer: syz [ 425.671782][ T6378] usb 6-1: SerialNumber: syz [ 425.701132][ T6378] usb 6-1: config 0 descriptor?? [ 425.714030][ T727] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.955493][ T30] audit: type=1400 audit(1785937353.875:1304): avc: denied { write } for pid=9761 comm="syz.5.929" path="socket:[33455]" dev="sockfs" ino=33455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 426.323456][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 426.523395][ T30] audit: type=1400 audit(1785937354.445:1305): avc: denied { read } for pid=9787 comm="syz.7.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 427.202448][ T30] audit: type=1800 audit(1785937355.125:1306): pid=9799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.937" name="size" dev="configfs" ino=33999 res=0 errno=0 [ 427.574092][ T9808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=475 sclass=netlink_route_socket pid=9808 comm=syz.6.938 [ 427.683024][ T9815] FAULT_INJECTION: forcing a failure. [ 427.683024][ T9815] name failslab, interval 1, probability 0, space 0, times 0 [ 427.739799][ T9815] CPU: 1 UID: 0 PID: 9815 Comm: syz.3.941 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.739831][ T9815] Tainted: [L]=SOFTLOCKUP [ 427.739837][ T9815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 427.739847][ T9815] Call Trace: [ 427.739853][ T9815] [ 427.739861][ T9815] dump_stack_lvl+0x100/0x190 [ 427.739887][ T9815] should_fail_ex.cold+0x5/0xa [ 427.739905][ T9815] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 427.739933][ T9815] should_failslab+0xc2/0x120 [ 427.739956][ T9815] kmem_cache_alloc_noprof+0x91/0x6a0 [ 427.739984][ T9815] ? skb_clone+0x190/0x400 [ 427.740009][ T9815] skb_clone+0x190/0x400 [ 427.740032][ T9815] netlink_deliver_tap+0xaed/0xcc0 [ 427.740055][ T9815] netlink_unicast+0x62b/0x850 [ 427.740076][ T9815] ? __pfx_netlink_unicast+0x10/0x10 [ 427.740101][ T9815] netlink_sendmsg+0x8b0/0xda0 [ 427.740123][ T9815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.740144][ T9815] ? selinux_socket_sendmsg+0x198/0x2f0 [ 427.740173][ T9815] sock_write_iter+0x53a/0x5b0 [ 427.740189][ T9815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.740206][ T9815] ? __pfx_sock_write_iter+0x10/0x10 [ 427.740229][ T9815] ? __pfx___file_has_perm+0x10/0x10 [ 427.740257][ T9815] do_iter_readv_writev+0x6f7/0x930 [ 427.740285][ T9815] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 427.740307][ T9815] ? selinux_file_permission+0x8f/0x6d0 [ 427.740336][ T9815] ? bpf_lsm_file_permission+0x9/0x10 [ 427.740362][ T9815] ? security_file_permission+0x76/0x210 [ 427.740380][ T9815] ? rw_verify_area+0xce/0x6d0 [ 427.740405][ T9815] vfs_writev+0x360/0xdd0 [ 427.740434][ T9815] ? __pfx_vfs_writev+0x10/0x10 [ 427.740460][ T9815] ? rcu_read_lock_any_held+0x6a/0xa0 [ 427.740490][ T9815] ? __fget_files+0x21f/0x3d0 [ 427.740514][ T9815] ? do_writev+0x28a/0x340 [ 427.740536][ T9815] do_writev+0x28a/0x340 [ 427.740560][ T9815] ? __pfx_do_writev+0x10/0x10 [ 427.740590][ T9815] do_syscall_64+0x115/0x870 [ 427.740611][ T9815] ? clear_bhb_loop+0x40/0x90 [ 427.740632][ T9815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.740649][ T9815] RIP: 0033:0x7fc9f159e0d9 [ 427.740665][ T9815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.740681][ T9815] RSP: 002b:00007fc9f2386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 427.740699][ T9815] RAX: ffffffffffffffda RBX: 00007fc9f1825fa0 RCX: 00007fc9f159e0d9 [ 427.740710][ T9815] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 427.740720][ T9815] RBP: 00007fc9f2386090 R08: 0000000000000000 R09: 0000000000000000 [ 427.740730][ T9815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.740740][ T9815] R13: 00007fc9f1826038 R14: 00007fc9f1825fa0 R15: 00007fff6b447848 [ 427.740763][ T9815] [ 427.740832][ T9815] netlink: 'syz.3.941': attribute type 8 has an invalid length. [ 427.786823][ T9806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.790027][ T9816] device-mapper: ioctl: name not supplied when creating device [ 427.839004][ T30] audit: type=1400 audit(1785937355.655:1307): avc: denied { write } for pid=9783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.010860][ T6379] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 428.260139][ T24] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 428.274273][ T6379] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 428.303152][ T6379] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 428.333662][ T24] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 428.363830][ T30] audit: type=1400 audit(1785937356.005:1308): avc: denied { write } for pid=9819 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.412994][ T9809] bond2: (slave geneve2): making interface the new active one [ 428.414658][ T6379] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 428.455695][ T9809] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 428.478374][ T6379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.514231][ T9811] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 428.529026][ T1023] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.551746][ T6379] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.568888][ T1023] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.617520][ T1023] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.662323][ T1023] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.737278][ T9761] ALSA: mixer_oss: invalid OSS volume '0x0000000000000000' [ 428.762378][ T6378] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 429.159609][ T6378] usb 6-1: USB disconnect, device number 17 [ 429.208260][ T6379] usb 8-1: USB disconnect, device number 15 [ 429.537266][ T30] audit: type=1400 audit(1785937357.455:1309): avc: denied { write } for pid=9824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.824491][ T9846] netlink: 'syz.7.946': attribute type 8 has an invalid length. [ 429.856434][ T30] audit: type=1400 audit(1785937357.775:1310): avc: denied { write } for pid=9844 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.180216][ T6379] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 430.325496][ T9863] se_device not configured yet, cannot port link [ 430.358045][ T6379] usb 6-1: unable to get BOS descriptor or descriptor too short [ 430.380831][ T6379] usb 6-1: not running at top speed; connect to a high speed hub [ 430.411345][ T6379] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 430.445555][ T6379] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 430.463553][ T6379] usb 6-1: config 14 has no interface number 0 [ 430.463577][ T6379] usb 6-1: config 14 has no interface number 1 [ 430.463628][ T6379] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 430.463653][ T6379] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 430.463679][ T6379] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 430.463705][ T6379] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.463730][ T6379] usb 6-1: config 14 interface 57 has no altsetting 0 [ 430.463746][ T6379] usb 6-1: config 14 interface 228 has no altsetting 0 [ 430.465710][ T6379] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 430.465735][ T6379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.465758][ T6379] usb 6-1: Product: syz [ 430.465772][ T6379] usb 6-1: Manufacturer: syz [ 430.465786][ T6379] usb 6-1: SerialNumber: syz [ 430.768993][ T6378] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 430.941360][ T30] audit: type=1400 audit(1785937358.855:1311): avc: denied { write } for pid=9853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.009779][ T6378] usb 4-1: Using ep0 maxpacket: 16 [ 431.011400][ T6378] usb 4-1: config 0 has an invalid descriptor of length 60, skipping remainder of the config [ 431.011438][ T6378] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.013061][ T6378] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 431.013080][ T6378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.013091][ T6378] usb 4-1: Product: syz [ 431.013100][ T6378] usb 4-1: Manufacturer: syz [ 431.013110][ T6378] usb 4-1: SerialNumber: syz [ 431.014847][ T6378] usb 4-1: config 0 descriptor?? [ 431.105171][ T30] audit: type=1400 audit(1785937359.015:1312): avc: denied { write } for pid=9874 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.151326][ T6379] legousbtower 6-1:14.57: interrupt endpoints not found [ 431.225746][ T6378] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 431.225764][ T6378] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 431.237208][ T6378] usb 4-1: USB disconnect, device number 30 [ 431.626417][ T6379] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 51.63 build 1747 [ 431.633828][ T6379] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 432.454146][ T5616] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 432.618329][ T9895] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.098481][ C1] usb 6-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 433.125479][ T6379] usb 6-1: USB disconnect, device number 18 [ 433.270881][ T9895] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.648686][ T6379] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 433.742723][ T9895] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.763327][ T9906] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 433.772619][ T30] audit: type=1400 audit(1785937361.695:1313): avc: denied { mounton } for pid=9905 comm="syz.7.958" path="/78/file0" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 433.773932][ T9906] fuse: Unknown parameter 'group_id61&H@Þ' [ 433.886798][ T9895] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.968985][ T48] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.992903][ T5818] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 434.152059][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 434.157068][ T5818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 434.159052][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.159118][ T5818] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.165375][ T5818] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 434.165394][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.165406][ T5818] usb 4-1: Product: syz [ 434.165417][ T5818] usb 4-1: Manufacturer: syz [ 434.165426][ T5818] usb 4-1: SerialNumber: syz [ 434.232208][ T727] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.232266][ T727] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.232319][ T727] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.374527][ T5818] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 434.374809][ T5818] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 434.379921][ T30] audit: type=1400 audit(1785937362.305:1314): avc: denied { create } for pid=9921 comm="syz.6.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 434.700540][ T9932] netlink: 40 bytes leftover after parsing attributes in process `syz.5.964'. [ 434.829654][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 434.935376][ T5818] usb 4-1: USB disconnect, device number 31 [ 434.979968][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 434.981861][ T24] usb 7-1: config 135 has an invalid interface number: 230 but max is 0 [ 434.981887][ T24] usb 7-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 434.981919][ T24] usb 7-1: config 135 has no interface number 0 [ 434.981939][ T24] usb 7-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.984376][ T24] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 434.984405][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.984424][ T24] usb 7-1: Product: syz [ 434.984440][ T24] usb 7-1: Manufacturer: syz [ 434.984454][ T24] usb 7-1: SerialNumber: syz [ 435.022700][ T24] uvcvideo 7-1:135.230: probe with driver uvcvideo failed with error -22 [ 436.628608][ T9906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.950020][ T9946] SQUASHFS error: Failed to read block 0x0: -5 [ 436.968332][ T9946] unable to read squashfs_super_block [ 437.105406][ T9948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.967'. [ 437.700240][ T727] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.043048][ T727] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.270356][ T48] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.412718][ T6385] usb 7-1: USB disconnect, device number 11 [ 438.455227][ T30] audit: type=1400 audit(1785937366.125:1315): avc: denied { read } for pid=9953 comm="syz.4.973" name="c.1" dev="configfs" ino=20740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 438.584667][ T147] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.770353][ T30] audit: type=1400 audit(1785937366.135:1316): avc: denied { read open } for pid=9953 comm="syz.4.973" path="/195/config/usb_gadget/g1/configs/c.1" dev="configfs" ino=20740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 439.633598][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.640537][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.273627][ T9982] FAULT_INJECTION: forcing a failure. [ 440.273627][ T9982] name failslab, interval 1, probability 0, space 0, times 0 [ 440.286326][ T9982] CPU: 1 UID: 0 PID: 9982 Comm: syz.3.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.286355][ T9982] Tainted: [L]=SOFTLOCKUP [ 440.286362][ T9982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 440.286372][ T9982] Call Trace: [ 440.286380][ T9982] [ 440.286387][ T9982] dump_stack_lvl+0x100/0x190 [ 440.286413][ T9982] should_fail_ex.cold+0x5/0xa [ 440.286436][ T9982] should_failslab+0xc2/0x120 [ 440.286459][ T9982] kmem_cache_alloc_noprof+0x91/0x6a0 [ 440.286482][ T9982] ? security_file_alloc+0x34/0x2c0 [ 440.286504][ T9982] security_file_alloc+0x34/0x2c0 [ 440.286522][ T9982] init_file+0x95/0x480 [ 440.286544][ T9982] alloc_empty_file+0x79/0x1c0 [ 440.286567][ T9982] path_openat+0xe7/0x4280 [ 440.286586][ T9982] ? lockdep_hardirqs_on+0x78/0x100 [ 440.286608][ T9982] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 440.286636][ T9982] ? rcu_is_watching+0x12/0xc0 [ 440.286662][ T9982] ? trace_sched_exit_tp+0x120/0x160 [ 440.286689][ T9982] ? __schedule+0x126e/0x6730 [ 440.286708][ T9982] ? __pfx_path_openat+0x10/0x10 [ 440.286733][ T9982] do_file_open+0x20e/0x430 [ 440.286754][ T9982] ? __pfx_do_file_open+0x10/0x10 [ 440.286772][ T9982] ? __pfx___schedule+0x10/0x10 [ 440.286807][ T9982] ? alloc_fd+0x471/0x7a0 [ 440.286828][ T9982] ? do_getname+0x191/0x390 [ 440.286853][ T9982] do_sys_openat2+0x10f/0x1e0 [ 440.286875][ T9982] ? __pfx_do_sys_openat2+0x10/0x10 [ 440.286898][ T9982] ? irqentry_exit+0x24d/0xa00 [ 440.286926][ T9982] __x64_sys_openat+0x12d/0x210 [ 440.286948][ T9982] ? __pfx___x64_sys_openat+0x10/0x10 [ 440.286980][ T9982] ? trace_hardirqs_off+0x70/0x170 [ 440.287009][ T9982] do_syscall_64+0x115/0x870 [ 440.287030][ T9982] ? clear_bhb_loop+0x40/0x90 [ 440.287052][ T9982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.287069][ T9982] RIP: 0033:0x7fc9f159e0d9 [ 440.287084][ T9982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.287101][ T9982] RSP: 002b:00007fc9ef7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 440.287119][ T9982] RAX: ffffffffffffffda RBX: 00007fc9f1826180 RCX: 00007fc9f159e0d9 [ 440.287131][ T9982] RDX: 0000000000040980 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 440.287142][ T9982] RBP: 00007fc9ef7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 440.287152][ T9982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.287162][ T9982] R13: 00007fc9f1826218 R14: 00007fc9f1826180 R15: 00007fff6b447848 [ 440.287186][ T9982] [ 441.407779][ T30] audit: type=1400 audit(1785937369.325:1317): avc: denied { bind } for pid=9976 comm="syz.7.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 441.469943][ T30] audit: type=1400 audit(1785937369.345:1318): avc: denied { listen } for pid=9976 comm="syz.7.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 441.668675][ T30] audit: type=1400 audit(1785937369.515:1319): avc: denied { append } for pid=9974 comm="syz.5.977" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 441.822388][ T30] audit: type=1400 audit(1785937369.515:1320): avc: denied { open } for pid=9974 comm="syz.5.977" path="/84/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 441.845699][ T6379] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 441.854886][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 441.944987][ T9975] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 442.024178][ T9975] block device autoloading is deprecated and will be removed. [ 442.068995][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 442.076330][ T6379] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 442.085654][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.105375][ T6379] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.121057][ T6379] usb 6-1: config 0 has no interface number 0 [ 442.127786][ T6379] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.139459][ T6379] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.149766][ T6379] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.169007][ T24] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 442.184854][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.196254][ T24] usb 7-1: Product: syz [ 442.200657][ T24] usb 7-1: Manufacturer: syz [ 442.217005][ T6379] usb 6-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 442.228173][ T24] usb 7-1: SerialNumber: syz [ 442.234305][ T6379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.243667][ T24] usb 7-1: config 0 descriptor?? [ 442.249360][ T6378] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 442.258301][T10000] xt_hashlimit: size too large, truncated to 1048576 [ 442.286333][ T24] pegasus_notetaker 7-1:0.0: Invalid number of endpoints [ 442.297384][ T24] pegasus_notetaker 7-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 442.311205][ T6379] usb 6-1: config 0 descriptor?? [ 442.468013][ T6378] usb 8-1: Using ep0 maxpacket: 8 [ 442.475607][ T6378] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.513055][ T24] usb 7-1: USB disconnect, device number 12 [ 442.520022][ T6378] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.537897][ T6378] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 442.557933][ T6378] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.582823][ T6378] usb 8-1: config 0 descriptor?? [ 442.796371][ T9975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.821989][ T9975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.849626][ T6379] holtek_mouse 0003:04D9:A04A.0012: unknown main item tag 0x0 [ 442.867429][ T6379] holtek_mouse 0003:04D9:A04A.0012: unknown main item tag 0x0 [ 442.885383][ T6379] holtek_mouse 0003:04D9:A04A.0012: unknown main item tag 0x0 [ 442.903264][ T6379] holtek_mouse 0003:04D9:A04A.0012: unknown main item tag 0x0 [ 442.920846][ T6379] holtek_mouse 0003:04D9:A04A.0012: unknown main item tag 0x0 [ 442.938535][ T6379] holtek_mouse 0003:04D9:A04A.0012: unknown main item tag 0x0 [ 442.959302][ T6379] holtek_mouse 0003:04D9:A04A.0012: unknown main item tag 0x0 [ 442.976623][ T6379] holtek_mouse 0003:04D9:A04A.0012: unknown main item tag 0x0 [ 442.993749][ T6379] holtek_mouse 0003:04D9:A04A.0012: unknown main item tag 0x0 [ 443.015136][ T6378] aquacomputer_d5next 0003:0C70:F0B6.0013: unknown main item tag 0x0 [ 443.026755][ T6379] holtek_mouse 0003:04D9:A04A.0012: unexpected long global item [ 443.050032][ T9975] syzkaller1: entered promiscuous mode [ 443.057420][ T6378] aquacomputer_d5next 0003:0C70:F0B6.0013: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.7-1/input0 [ 443.077121][ T6379] holtek_mouse 0003:04D9:A04A.0012: hid parse failed: -22 [ 443.094738][ T9975] syzkaller1: entered allmulticast mode [ 443.110115][ T6379] holtek_mouse 0003:04D9:A04A.0012: probe with driver holtek_mouse failed with error -22 [ 443.135055][T10008] tipc: Started in network mode [ 443.155787][T10008] tipc: Node identity 080211000001, cluster identity 4711 [ 443.166289][ T9975] netlink: 'syz.5.977': attribute type 2 has an invalid length. [ 443.188632][T10008] tipc: Enabled bearer , priority 0 [ 443.213166][ T6378] usb 6-1: USB disconnect, device number 19 [ 443.842855][T10011] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 443.915610][T10011] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 443.993729][T10011] tipc: Resetting bearer [ 444.145234][ T1023] tipc: Resetting bearer [ 444.211686][ T5818] tipc: Node number set to 134418688 [ 444.620481][T10019] tipc: Resetting bearer [ 444.660032][ T5706] usb 8-1: reset high-speed USB device number 16 using dummy_hcd [ 444.689062][T10014] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.841039][T10014] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.052893][T10030] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.124031][ T24] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 445.275943][T10014] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.404685][ T24] usb 5-1: config index 0 descriptor too short (expected 2075, got 27) [ 445.486707][ T24] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 445.533725][T10030] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.565114][ T24] usb 5-1: config 0 has no interface number 0 [ 445.654301][ T24] usb 5-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 445.693238][T10014] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.762383][ T24] usb 5-1: config 0 interface 200 has no altsetting 0 [ 445.825173][ T24] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 445.865661][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.924654][ T24] usb 5-1: Product: syz [ 445.942621][ T24] usb 5-1: Manufacturer: syz [ 445.964913][ T24] usb 5-1: SerialNumber: syz [ 446.002519][T10030] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.054195][ T24] usb 5-1: config 0 descriptor?? [ 446.154079][ T6379] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz1] on syz0 [ 446.187128][T10030] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.208946][ T6382] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 446.279313][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.295803][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.327775][ T24] usbhid 5-1:0.200: couldn't find an input interrupt endpoint [ 446.359938][ T24] usb 5-1: USB disconnect, device number 39 [ 446.366123][ T6382] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 446.406757][ T48] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.569939][ T6378] usb 8-1: USB disconnect, device number 16 [ 446.740390][ T6382] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 446.740707][ T48] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.762876][ T6382] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 446.797906][ T6382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.837863][T10036] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 446.869850][ T6382] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.824541][T10045] vivid-001: disconnect [ 448.178899][ T5936] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.205661][ T5936] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.241777][T10035] vivid-001: reconnect [ 448.267459][ T5818] usb 4-1: USB disconnect, device number 32 [ 448.278385][ T30] audit: type=1400 audit(1785937376.195:1321): avc: denied { relabelfrom } for pid=10046 comm="syz.6.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 448.334645][ T30] audit: type=1400 audit(1785937376.225:1322): avc: denied { relabelto } for pid=10046 comm="syz.6.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 448.490733][ T6955] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.514351][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 448.526066][T10046] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 448.560088][ T5616] Bluetooth: hci1: SCO packet too small [ 449.124983][T10060] se_device not configured yet, cannot port link [ 449.207725][ T6378] hid_parser_main: 48 callbacks suppressed [ 449.207744][ T6378] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 449.269147][ T6378] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 449.741668][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 450.530150][ T6955] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.602624][T10071] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.633463][ T30] audit: type=1400 audit(1785937378.545:1323): avc: denied { mounton } for pid=10078 comm="syz.6.1007" path="/92/config" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 450.705272][T10082] FAULT_INJECTION: forcing a failure. [ 450.705272][T10082] name failslab, interval 1, probability 0, space 0, times 0 [ 450.722676][T10082] CPU: 1 UID: 0 PID: 10082 Comm: syz.4.1008 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.722705][T10082] Tainted: [L]=SOFTLOCKUP [ 450.722712][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 450.722721][T10082] Call Trace: [ 450.722727][T10082] [ 450.722733][T10082] dump_stack_lvl+0x100/0x190 [ 450.722760][T10082] should_fail_ex.cold+0x5/0xa [ 450.722782][T10082] should_failslab+0xc2/0x120 [ 450.722804][T10082] kmem_cache_alloc_noprof+0x91/0x6a0 [ 450.722822][T10082] ? bpf_ksym_find+0x128/0x1c0 [ 450.722848][T10082] ? skb_clone+0x190/0x400 [ 450.722872][T10082] skb_clone+0x190/0x400 [ 450.722895][T10082] nfnetlink_rcv_batch+0x1c8/0x2880 [ 450.722925][T10082] ? __lock_acquire+0x49f/0x1a40 [ 450.722945][T10082] ? __pfx_stack_trace_save+0x10/0x10 [ 450.722964][T10082] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 450.723001][T10082] ? avc_has_perm_noaudit+0x145/0x3b0 [ 450.723024][T10082] ? __asan_memset+0x23/0x50 [ 450.723041][T10082] ? __nla_validate_parse+0x1e7/0x28b0 [ 450.723065][T10082] ? __pfx___nla_validate_parse+0x10/0x10 [ 450.723082][T10082] ? rcu_is_watching+0x12/0xc0 [ 450.723106][T10082] ? cap_capable+0x107/0x430 [ 450.723133][T10082] ? __nla_parse+0x40/0x60 [ 450.723153][T10082] nfnetlink_rcv+0x3bd/0x440 [ 450.723175][T10082] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 450.723203][T10082] netlink_unicast+0x585/0x850 [ 450.723225][T10082] ? __pfx_netlink_unicast+0x10/0x10 [ 450.723248][T10082] netlink_sendmsg+0x8b0/0xda0 [ 450.723273][T10082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.723293][T10082] ? selinux_socket_sendmsg+0x198/0x2f0 [ 450.723328][T10082] ____sys_sendmsg+0xa4d/0xbe0 [ 450.723353][T10082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.723373][T10082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.723409][T10082] ___sys_sendmsg+0x190/0x1e0 [ 450.723427][T10082] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.723443][T10082] ? __lock_acquire+0x49f/0x1a40 [ 450.723462][T10082] ? get_pid_task+0x106/0x250 [ 450.723503][T10082] __sys_sendmsg+0x160/0x210 [ 450.723525][T10082] ? __pfx___sys_sendmsg+0x10/0x10 [ 450.723559][T10082] do_syscall_64+0x115/0x870 [ 450.723578][T10082] ? clear_bhb_loop+0x40/0x90 [ 450.723600][T10082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.723616][T10082] RIP: 0033:0x7f5b7f19e0d9 [ 450.723631][T10082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.723646][T10082] RSP: 002b:00007f5b7fff8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.723664][T10082] RAX: ffffffffffffffda RBX: 00007f5b7f425fa0 RCX: 00007f5b7f19e0d9 [ 450.723675][T10082] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 450.723685][T10082] RBP: 00007f5b7fff8090 R08: 0000000000000000 R09: 0000000000000000 [ 450.723694][T10082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.723704][T10082] R13: 00007f5b7f426038 R14: 00007f5b7f425fa0 R15: 00007ffed681c748 [ 450.723726][T10082] [ 450.821326][ T30] audit: type=1800 audit(1785937378.675:1324): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1004" name="num" dev="configfs" ino=34712 res=0 errno=0 [ 451.320599][T10071] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.935654][ T6382] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 451.959930][T10071] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.071398][T10071] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.240692][ T1222] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 452.297507][ T6382] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 452.468006][ T6382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.476147][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1016'. [ 452.483106][ T6382] usb 5-1: Product: syz [ 452.491478][ T1222] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 452.498855][ T6382] usb 5-1: Manufacturer: syz [ 452.531320][ T6382] usb 5-1: SerialNumber: syz [ 452.557845][ T1222] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 452.610418][ T1222] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 452.625881][ T13] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.635928][ T1222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.687668][T10100] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 452.720131][ T13] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.750222][ T1222] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 452.782015][T10113] tipc: Started in network mode [ 452.795614][T10091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.812859][T10113] tipc: Node identity 080211000001, cluster identity 4711 [ 452.867539][T10091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.912795][T10113] tipc: Enabled bearer , priority 0 [ 452.963849][T10110] smpboot: CPU 1 is now offline [ 452.990418][ T5818] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 453.070420][T10117] vivid-001: disconnect [ 453.080424][ T13] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.138948][ T13] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.228764][T10114] tipc: Resetting bearer [ 453.245217][ T5818] usb 7-1: config index 0 descriptor too short (expected 2075, got 27) [ 453.285750][T10099] vivid-001: reconnect [ 453.293276][ T6382] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 453.315947][ T5818] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 453.327518][ T6386] usb 4-1: USB disconnect, device number 33 [ 453.375107][ T5818] usb 7-1: config 0 has no interface number 0 [ 453.398208][ T6382] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 453.424329][ T5818] usb 7-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.577112][ T5818] usb 7-1: config 0 interface 200 has no altsetting 0 [ 453.644966][ T5818] usb 7-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 453.699089][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.736685][ T5818] usb 7-1: Product: syz [ 453.752233][ T5818] usb 7-1: Manufacturer: syz [ 453.773767][ T5818] usb 7-1: SerialNumber: syz [ 453.798073][ T5818] usb 7-1: config 0 descriptor?? [ 453.834966][T10091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.856142][T10091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.909017][ T6386] tipc: Node number set to 134418688 [ 454.151496][ T5818] usbhid 7-1:0.200: couldn't find an input interrupt endpoint [ 455.413220][ T5818] usb 7-1: USB disconnect, device number 13 [ 455.581473][ T30] audit: type=1400 audit(1785937383.495:1325): avc: denied { kexec_image_load } for pid=10134 comm="syz.5.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 455.677119][ T6382] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 455.769526][ T6382] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 455.818284][ T6382] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 455.890429][ T6382] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 455.950358][ T6382] usb 5-1: USB disconnect, device number 40 [ 456.008968][ T5818] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 456.259618][ T5818] usb 7-1: Using ep0 maxpacket: 8 [ 456.313077][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.488179][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.788851][ T5818] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 458.209152][T10154] ip_tables: iptables: counters copy to user failed while replacing table [ 458.227187][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.268438][ T5818] usb 7-1: config 0 descriptor?? [ 458.753813][ T5818] aquacomputer_d5next 0003:0C70:F0B6.0016: unknown main item tag 0x0 [ 458.829037][ T6385] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 458.837479][ T5818] aquacomputer_d5next 0003:0C70:F0B6.0016: unknown main item tag 0x0 [ 458.893434][ T5818] aquacomputer_d5next 0003:0C70:F0B6.0016: unknown main item tag 0x0 [ 458.919208][ T5818] aquacomputer_d5next 0003:0C70:F0B6.0016: unknown main item tag 0x0 [ 458.955550][ T5818] aquacomputer_d5next 0003:0C70:F0B6.0016: unknown main item tag 0x0 [ 459.020863][ T5818] aquacomputer_d5next 0003:0C70:F0B6.0016: unknown main item tag 0x0 [ 459.029148][ T6382] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 459.046634][ T6385] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 459.088438][ T5818] aquacomputer_d5next 0003:0C70:F0B6.0016: unknown main item tag 0x0 [ 459.112074][ T30] audit: type=1800 audit(1785937387.035:1326): pid=10170 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1036" name="size" dev="configfs" ino=36153 res=0 errno=0 [ 459.133782][ T6385] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 459.168296][ T5818] aquacomputer_d5next 0003:0C70:F0B6.0016: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0 [ 459.200910][ T6385] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 459.240145][ T6382] usb 6-1: Using ep0 maxpacket: 8 [ 459.267377][ T6382] usb 6-1: config 135 has an invalid interface number: 230 but max is 0 [ 459.286289][ T6385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.327943][ T6382] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 459.374375][T10161] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 459.410996][ T6385] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.648299][ T6382] usb 6-1: config 135 has no interface number 0 [ 459.747813][T10175] vivid-003: disconnect [ 459.754930][ T6386] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 459.764356][ T6382] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.924165][ T6382] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 459.979620][ T6386] usb 4-1: Using ep0 maxpacket: 16 [ 459.999105][ T6382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.018397][ T6386] usb 4-1: unable to get BOS descriptor or descriptor too short [ 460.041021][T10160] vivid-003: reconnect [ 460.075575][ T6385] usb 5-1: USB disconnect, device number 41 [ 460.089859][ T6386] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.103738][ T6382] usb 6-1: Product: syz [ 460.126014][ T6382] usb 6-1: Manufacturer: syz [ 460.162525][ T6382] usb 6-1: SerialNumber: syz [ 460.168210][ T6386] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 460.228559][ T6382] uvcvideo 6-1:135.230: probe with driver uvcvideo failed with error -22 [ 460.274018][ T5818] usb 7-1: USB disconnect, device number 14 [ 460.280204][ T6386] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 460.347247][ T6386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.569494][ T6386] usb 4-1: Product: syz [ 460.664868][ T6386] usb 4-1: Manufacturer: syz [ 460.702927][ T6386] usb 4-1: SerialNumber: syz [ 461.744459][T10191] se_device not configured yet, cannot port link [ 461.917860][ T6386] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 462.054974][T10196] xt_hashlimit: size too large, truncated to 1048576 [ 462.095786][ T6386] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 462.113358][T10173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.264077][ T6385] usb 6-1: USB disconnect, device number 20 [ 463.729244][T10173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.930020][ T6382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 464.016933][ T6382] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 464.229670][ T6386] usb 4-1: USB disconnect, device number 34 [ 464.257672][ T30] audit: type=1800 audit(1785937392.175:1327): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1047" name="size" dev="configfs" ino=36280 res=0 errno=0 [ 465.705985][ T6386] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 466.250754][ T6386] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 466.274331][ T30] audit: type=1800 audit(1785937394.195:1328): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1043" name="ipv4_address" dev="configfs" ino=36339 res=0 errno=0 [ 466.345198][ T6386] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 466.389668][ T5818] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 466.398074][ T6386] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 466.580681][ T6386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.668931][ T5818] usb 8-1: Using ep0 maxpacket: 32 [ 466.686655][T10218] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 466.708641][ T5818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.837818][ T6386] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 467.032213][ T5818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.133849][T10218] vivid-001: disconnect [ 467.150462][T10216] vivid-001: reconnect [ 467.197124][ T5818] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 467.313231][ T5818] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.376837][ T6386] usb 4-1: USB disconnect, device number 35 [ 467.395608][ T5818] usb 8-1: config 0 descriptor?? [ 467.439873][ T5818] hub 8-1:0.0: USB hub found [ 469.689773][T10243] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.843245][T10243] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.976376][ T30] audit: type=1800 audit(1785937397.895:1329): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1059" name="size" dev="configfs" ino=36518 res=0 errno=0 [ 470.053971][T10243] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.187469][T10243] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.309922][ T727] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.583553][ T727] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.701850][ T727] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.827754][ T727] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.838374][T10262] 9pnet_fd: p9_fd_create_tcp (10262): problem connecting socket to 127.0.0.1 [ 470.927281][ T5818] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 472.239954][ T5818] usbhid 8-1:0.0: can't add hid device: -71 [ 472.634654][T10265] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.662010][ T5818] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 472.789181][ T5818] usb 8-1: USB disconnect, device number 17 [ 472.845708][T10265] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.856081][T10275] FAULT_INJECTION: forcing a failure. [ 472.856081][T10275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.040745][T10275] CPU: 0 UID: 0 PID: 10275 Comm: syz.7.1067 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.040764][T10275] Tainted: [L]=SOFTLOCKUP [ 473.040768][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 473.040775][T10275] Call Trace: [ 473.040779][T10275] [ 473.040783][T10275] dump_stack_lvl+0x100/0x190 [ 473.040801][T10275] should_fail_ex.cold+0x5/0xa [ 473.040815][T10275] _copy_from_user+0x2e/0xd0 [ 473.040832][T10275] copy_msghdr_from_user+0x9f/0x4c0 [ 473.040844][T10275] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 473.040861][T10275] ___sys_sendmsg+0x106/0x1e0 [ 473.040872][T10275] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.040882][T10275] ? __lock_acquire+0x49f/0x1a40 [ 473.040896][T10275] ? get_pid_task+0x106/0x250 [ 473.040925][T10275] __sys_sendmsg+0x160/0x210 [ 473.040939][T10275] ? __pfx___sys_sendmsg+0x10/0x10 [ 473.040960][T10275] do_syscall_64+0x115/0x870 [ 473.040974][T10275] ? clear_bhb_loop+0x40/0x90 [ 473.040987][T10275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.040997][T10275] RIP: 0033:0x7fb619d9e0d9 [ 473.041007][T10275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.041017][T10275] RSP: 002b:00007fb617ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.041028][T10275] RAX: ffffffffffffffda RBX: 00007fb61a025fa0 RCX: 00007fb619d9e0d9 [ 473.041034][T10275] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 473.041040][T10275] RBP: 00007fb617ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 473.041047][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.041052][T10275] R13: 00007fb61a026038 R14: 00007fb61a025fa0 R15: 00007fffa2ba5948 [ 473.041065][T10275] [ 473.586523][T10265] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.735359][T10265] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.959221][ T30] audit: type=1400 audit(1785937402.705:1330): avc: denied { mounton } for pid=10285 comm="syz.6.1071" path="/syzcgroup/unified/syz6" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 475.119885][T10292] se_device not configured yet, cannot port link [ 475.325583][ T6385] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 475.457484][ T1023] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.503773][ T1023] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.670210][ T6385] usb 5-1: Using ep0 maxpacket: 8 [ 475.772676][ T6385] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.800523][ T1023] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.853907][ T1023] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.867360][ T6385] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.977282][ T6385] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 476.203926][ T6385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.525053][ T6385] usb 5-1: config 0 descriptor?? [ 477.124717][ T6385] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 477.145980][ T6385] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 477.293055][T10314] xt_hashlimit: size too large, truncated to 1048576 [ 478.072012][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 478.247175][ T6385] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 478.293195][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 478.328438][ T6385] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 478.357640][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 478.404425][ T6385] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 478.462132][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 478.504604][ T6385] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 478.561946][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.602060][ T6385] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 478.681190][T10310] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 478.711640][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 478.747829][ T6385] aquacomputer_d5next 0003:0C70:F0B6.0018: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 479.044527][ T6386] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 479.148325][T10334] vivid-000: disconnect [ 479.358963][ T6386] usb 8-1: Using ep0 maxpacket: 8 [ 479.440945][ T6386] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.867776][ T10] usb 5-1: USB disconnect, device number 42 [ 479.902934][ T6386] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.036265][T10308] vivid-000: reconnect [ 480.062582][ T6382] usb 6-1: USB disconnect, device number 21 [ 480.169100][ T6386] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 480.262187][ T6386] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.353359][ T6386] usb 8-1: config 0 descriptor?? [ 481.379347][ T10] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 481.950560][ T6386] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 481.973770][ T10] usb 4-1: config index 0 descriptor too short (expected 2075, got 27) [ 482.038854][ T6386] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 482.057422][ T10] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 482.108558][ T6386] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 482.140606][ T10] usb 4-1: config 0 has no interface number 0 [ 482.175563][ T10] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 482.191318][ T6386] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 482.237679][ T6386] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 482.254479][ T10] usb 4-1: config 0 interface 200 has no altsetting 0 [ 482.287908][ T6386] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 482.311401][ T10] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 482.398964][ T5818] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 483.163250][ T6386] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 483.468595][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.572327][ T10] usb 4-1: Product: syz [ 483.616362][ T6386] aquacomputer_d5next 0003:0C70:F0B6.0019: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.7-1/input0 [ 483.639016][ T10] usb 4-1: Manufacturer: syz [ 483.688386][ T10] usb 4-1: SerialNumber: syz [ 483.695881][ T5818] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 483.793507][ T10] usb 4-1: config 0 descriptor?? [ 484.098079][ T30] audit: type=1400 audit(1785937412.015:1331): avc: denied { name_bind } for pid=10369 comm="syz.3.1098" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 485.018943][ T5818] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 485.428969][ T10] usb 4-1: can't set config #0, error -71 [ 485.941147][ T6386] usb 8-1: USB disconnect, device number 18 [ 486.005719][ T10] usb 4-1: USB disconnect, device number 36 [ 486.011927][ T5818] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 486.124420][T10372] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.150693][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.213513][T10379] FAULT_INJECTION: forcing a failure. [ 486.213513][T10379] name failslab, interval 1, probability 0, space 0, times 0 [ 486.275969][ T5818] usb 6-1: can't set config #27, error -71 [ 486.470463][ T5818] usb 6-1: USB disconnect, device number 22 [ 486.543053][T10379] CPU: 0 UID: 0 PID: 10379 Comm: syz.7.1101 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.543075][T10379] Tainted: [L]=SOFTLOCKUP [ 486.543078][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 486.543084][T10379] Call Trace: [ 486.543089][T10379] [ 486.543093][T10379] dump_stack_lvl+0x100/0x190 [ 486.543110][T10379] should_fail_ex.cold+0x5/0xa [ 486.543124][T10379] should_failslab+0xc2/0x120 [ 486.543139][T10379] __kvmalloc_node_noprof+0x116/0x970 [ 486.543153][T10379] ? page_pool_create_percpu+0x2e0/0xd50 [ 486.543168][T10379] page_pool_create_percpu+0x2e0/0xd50 [ 486.543183][T10379] bpf_test_run_xdp_live+0x192/0x760 [ 486.543201][T10379] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 486.543217][T10379] ? __mutex_unlock_slowpath+0x35d/0x930 [ 486.543235][T10379] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 486.543251][T10379] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 486.543267][T10379] ? bpf_dispatcher_change_prog+0x2d9/0xa50 [ 486.543289][T10379] ? 0xffffffffa0205540 [ 486.543298][T10379] ? 0xffffffffa0205540 [ 486.543307][T10379] ? 0xffffffffa0205540 [ 486.543314][T10379] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 486.543329][T10379] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 486.543345][T10379] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 486.543360][T10379] ? fput+0x79/0x100 [ 486.543373][T10379] ? __bpf_prog_get+0x97/0x2a0 [ 486.543387][T10379] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 486.543398][T10379] __sys_bpf+0x2a12/0x4e80 [ 486.543413][T10379] ? __pfx___sys_bpf+0x10/0x10 [ 486.543423][T10379] ? find_held_lock+0x2b/0x80 [ 486.543433][T10379] ? get_pid_task+0xfc/0x250 [ 486.543443][T10379] ? get_pid_task+0xfc/0x250 [ 486.543456][T10379] ? find_held_lock+0x2b/0x80 [ 486.543468][T10379] ? rcu_read_lock_any_held+0x6a/0xa0 [ 486.543479][T10379] ? find_held_lock+0x2b/0x80 [ 486.543488][T10379] ? ksys_write+0x190/0x250 [ 486.543497][T10379] ? ksys_write+0x190/0x250 [ 486.543516][T10379] ? fput+0x79/0x100 [ 486.543530][T10379] ? __x64_sys_bpf+0xce/0x140 [ 486.543540][T10379] __x64_sys_bpf+0xce/0x140 [ 486.543552][T10379] ? do_syscall_64+0x90/0x870 [ 486.543566][T10379] do_syscall_64+0x115/0x870 [ 486.543578][T10379] ? clear_bhb_loop+0x40/0x90 [ 486.543591][T10379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.543602][T10379] RIP: 0033:0x7fb619d9e0d9 [ 486.543611][T10379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.543621][T10379] RSP: 002b:00007fb617ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.543632][T10379] RAX: ffffffffffffffda RBX: 00007fb61a025fa0 RCX: 00007fb619d9e0d9 [ 486.543639][T10379] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 486.543645][T10379] RBP: 00007fb617ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 486.543651][T10379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.543657][T10379] R13: 00007fb61a026038 R14: 00007fb61a025fa0 R15: 00007fffa2ba5948 [ 486.543670][T10379] [ 486.543675][T10379] page_pool_create_percpu() gave up with errno -12 [ 487.439741][T10372] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.625164][T10372] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.968575][T10372] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.097874][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.150252][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.189589][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.199829][ T10] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 488.247385][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.408259][ T10] usb 7-1: config index 0 descriptor too short (expected 2075, got 27) [ 489.422291][ T10] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 489.683477][ T10] usb 7-1: config 0 has no interface number 0 [ 489.738331][ T10] usb 7-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 490.122683][T10408] ieee802154 phy0 wpan0: encryption failed: -22 [ 490.289266][T10414] xt_hashlimit: size too large, truncated to 1048576 [ 492.018675][ T30] audit: type=1400 audit(1785937418.045:1332): avc: denied { write } for pid=10407 comm="syz.4.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 492.393314][ T10] usb 7-1: config 0 interface 200 has no altsetting 0 [ 492.472020][ T10] usb 7-1: string descriptor 0 read error: -71 [ 492.526331][ T10] usb 7-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 492.618968][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.746921][ T10] usb 7-1: config 0 descriptor?? [ 492.826145][ T10] usb 7-1: can't set config #0, error -71 [ 492.918413][ T10] usb 7-1: USB disconnect, device number 15 [ 492.966483][T10439] netlink: 200 bytes leftover after parsing attributes in process `syz.7.1119'. [ 492.977900][T10441] tmpfs: Bad value for 'size' [ 493.141838][ T30] audit: type=1800 audit(1785937421.065:1333): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1122" name="size" dev="configfs" ino=37822 res=0 errno=0 [ 493.581412][T10459] xt_hashlimit: size too large, truncated to 1048576 [ 494.468936][ T5818] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 494.588626][T10469] se_device not configured yet, cannot port link [ 494.719263][T10467] binder: 10466:10467 ioctl c0306201 200000000640 returned -22 [ 494.740016][ T5818] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.837596][ T5818] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 494.944260][ T5818] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 495.171931][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.247062][ T5818] usb 5-1: Product: syz [ 495.392965][ T5818] usb 5-1: Manufacturer: syz [ 495.437442][T10483] tmpfs: Bad value for 'size' [ 495.458407][ T5818] usb 5-1: SerialNumber: syz [ 495.528235][T10487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.537300][T10487] IPv6: NLM_F_CREATE should be set when creating new route [ 495.544744][T10487] IPv6: NLM_F_CREATE should be set when creating new route [ 495.663867][ T30] audit: type=1800 audit(1785937423.575:1334): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1135" name="size" dev="configfs" ino=38044 res=0 errno=0 [ 495.978974][ T6382] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 496.156247][ T6382] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.187087][ T6382] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 496.233406][ T6382] usb 8-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 496.248051][ T5818] usb 5-1: unit 4 not found! [ 496.287264][ T6382] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.300064][ T5818] usb 5-1: 6:0: failed to get current value for ch 0 (-71) [ 496.338306][ T6382] usb 8-1: Product: syz [ 496.374131][ T6382] usb 8-1: Manufacturer: syz [ 496.396927][ T6382] usb 8-1: SerialNumber: syz [ 496.568640][T10508] xt_hashlimit: size too large, truncated to 1048576 [ 497.807139][T10517] se_device not configured yet, cannot port link [ 497.827055][T10491] tipc: Started in network mode [ 497.959983][ T5818] usb 5-1: USB disconnect, device number 43 [ 498.025590][ T30] audit: type=1400 audit(1785937425.945:1335): avc: denied { cmd } for pid=10514 comm="iou-wrk-10516" path="socket:[38160]" dev="sockfs" ino=38160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 498.111678][T10491] tipc: Node identity ac14140f, cluster identity 4711 [ 498.135386][ T8668] udevd[8668]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.320754][T10491] tipc: Enabled bearer , priority 10 [ 498.345832][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 498.417799][ T10] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 499.391995][ T10] tipc: Node number set to 2886997007 [ 499.587104][ T6382] usb 8-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 500.448118][ T6382] usb 8-1: USB disconnect, device number 19 [ 500.605937][ T7226] udevd[7226]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.857428][T10555] »»»»»»: renamed from vlan0 (while UP) [ 501.040918][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.047385][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.725709][T10568] se_device not configured yet, cannot port link [ 504.515213][ T6382] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 504.676855][ T6382] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 505.068920][ T6382] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 505.294948][ T6382] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 505.694336][ T6382] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 505.796975][T10592] overlayfs: missing 'lowerdir' [ 505.813327][ T6382] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 505.876149][ T6382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.931734][T10594] syzkaller1: entered promiscuous mode [ 505.964734][T10589] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 505.977381][T10594] syzkaller1: entered allmulticast mode [ 506.152168][ T6382] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 506.478955][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 506.627991][T10604] se_device not configured yet, cannot port link [ 506.738092][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 506.795172][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.878547][ T30] audit: type=1400 audit(1785937434.795:1336): avc: denied { create } for pid=10608 comm="syz.7.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 506.914509][T10610] FAULT_INJECTION: forcing a failure. [ 506.914509][T10610] name failslab, interval 1, probability 0, space 0, times 0 [ 506.964495][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.008549][ T10] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 507.180873][T10610] CPU: 0 UID: 0 PID: 10610 Comm: syz.7.1169 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.180893][T10610] Tainted: [L]=SOFTLOCKUP [ 507.180897][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 507.180904][T10610] Call Trace: [ 507.180908][T10610] [ 507.180912][T10610] dump_stack_lvl+0x100/0x190 [ 507.180929][T10610] should_fail_ex.cold+0x5/0xa [ 507.180943][T10610] should_failslab+0xc2/0x120 [ 507.180957][T10610] __kmalloc_noprof+0xfc/0x820 [ 507.180969][T10610] ? rcu_is_watching+0x12/0xc0 [ 507.180986][T10610] ? tomoyo_realpath_from_path+0xb6/0x690 [ 507.181001][T10610] tomoyo_realpath_from_path+0xb6/0x690 [ 507.181015][T10610] tomoyo_path_number_perm+0x23c/0x580 [ 507.181030][T10610] ? tomoyo_path_number_perm+0x22e/0x580 [ 507.181046][T10610] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 507.181075][T10610] ? find_held_lock+0x2b/0x80 [ 507.181084][T10610] ? __fget_files+0x215/0x3d0 [ 507.181095][T10610] ? hook_file_ioctl_common+0x140/0x440 [ 507.181107][T10610] ? __fget_files+0x215/0x3d0 [ 507.181119][T10610] ? __fget_files+0x21f/0x3d0 [ 507.181132][T10610] security_file_ioctl+0xd3/0x230 [ 507.181150][T10610] __x64_sys_ioctl+0xb7/0x210 [ 507.181166][T10610] do_syscall_64+0x115/0x870 [ 507.181180][T10610] ? clear_bhb_loop+0x40/0x90 [ 507.181193][T10610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.181204][T10610] RIP: 0033:0x7fb619d9e0d9 [ 507.181213][T10610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.181223][T10610] RSP: 002b:00007fb617ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.181234][T10610] RAX: ffffffffffffffda RBX: 00007fb61a025fa0 RCX: 00007fb619d9e0d9 [ 507.181240][T10610] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000003 [ 507.181247][T10610] RBP: 00007fb617ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 507.181253][T10610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.181261][T10610] R13: 00007fb61a026038 R14: 00007fb61a025fa0 R15: 00007fffa2ba5948 [ 507.181274][T10610] [ 507.181279][T10610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 507.769211][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.023634][ T10] usb 4-1: config 0 descriptor?? [ 508.407354][ T5818] usb 6-1: USB disconnect, device number 23 [ 508.638290][ T10] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 508.808402][ T10] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 508.855461][ T10] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 508.863726][ T30] audit: type=1400 audit(1785937436.745:1337): avc: denied { getopt } for pid=10615 comm="syz.6.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 508.919934][ T10] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 508.994157][ T10] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 509.053309][ T10] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 509.126211][ T10] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x0 [ 509.214998][ T10] aquacomputer_d5next 0003:0C70:F0B6.001C: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 509.568880][ T6386] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 509.874152][ T6386] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 509.893216][ T6386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.991120][ T6386] usb 5-1: Product: syz [ 510.006120][ T5818] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 510.024694][ T6386] usb 5-1: Manufacturer: syz [ 510.044499][ T5818] hid-generic 0000:0000:0000.001D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 510.077951][ T6386] usb 5-1: SerialNumber: syz [ 510.160937][ T10] usb 4-1: USB disconnect, device number 37 [ 510.206177][ T6385] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 510.284852][ T30] audit: type=1400 audit(1785937438.205:1338): avc: denied { ioctl } for pid=10608 comm="syz.7.1169" path="socket:[39783]" dev="sockfs" ino=39783 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 511.279139][ T6385] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 515.609839][ C0] sched: DL replenish lagged too much [ 517.509023][ C0] nvme nvme0: long keepalive RTT (3070 ms) [ 528.195556][ T6385] ath9k_htc: Failed to initialize the device [ 562.586960][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 611.120208][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.918932][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 626.925875][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10626/1:b..l [ 626.934341][ C0] rcu: (detected by 0, t=10502 jiffies, g=57017, q=1048 ncpus=1) [ 626.942116][ C0] task:syz.4.1173 state:R running task stack:27592 pid:10626 tgid:10625 ppid:5608 task_flags:0x400140 flags:0x00080002 [ 626.956548][ C0] Call Trace: [ 626.959819][ C0] [ 626.962728][ C0] __schedule+0x125c/0x6730 [ 626.967297][ C0] ? __lock_acquire+0x49f/0x1a40 [ 626.972243][ C0] ? __pfx___schedule+0x10/0x10 [ 626.977127][ C0] ? mark_held_locks+0x40/0x70 [ 626.981877][ C0] preempt_schedule_irq+0x50/0x90 [ 626.986894][ C0] irqentry_exit+0x205/0xa00 [ 626.991459][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 626.997419][ C0] RIP: 0010:unwind_next_frame+0xd42/0x2090 [ 627.003197][ C0] Code: df 48 c1 ee 03 4c 8b 44 24 18 80 3c 16 00 0f 85 b2 0f 00 00 48 8b 14 24 49 89 45 48 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 e8 0d 00 00 4c 89 e2 4d 89 75 38 48 b8 00 00 00 [ 627.022773][ C0] RSP: 0018:ffffc90003fff718 EFLAGS: 00000a02 [ 627.028809][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff921b8a06 [ 627.036759][ C0] RDX: 1ffff920007ffef8 RSI: 1ffff920007ffefa RDI: ffffc90003fffda8 [ 627.044701][ C0] RBP: ffffc90003fff7d0 R08: ffffffff921b8a0a R09: 0000000000000007 [ 627.052642][ C0] R10: 0000000000000200 R11: 0000000000055e24 R12: ffffc90003fff7d8 [ 627.060583][ C0] R13: ffffc90003fff788 R14: ffffc90003fffdb0 R15: ffffc90003fff7bc [ 627.068604][ C0] ? unwind_next_frame+0xd07/0x2090 [ 627.073800][ C0] ? driver_unregister+0x76/0xb0 [ 627.078742][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 627.084870][ C0] arch_stack_walk+0x94/0xf0 [ 627.089440][ C0] ? usb_gadget_unregister_driver+0x49/0x70 [ 627.095305][ C0] stack_trace_save+0x8e/0xc0 [ 627.099959][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 627.105303][ C0] ? __lock_acquire+0x49f/0x1a40 [ 627.110228][ C0] ? __lock_acquire+0x49f/0x1a40 [ 627.115149][ C0] save_stack+0x162/0x1e0 [ 627.119452][ C0] ? __pfx_save_stack+0x10/0x10 [ 627.124278][ C0] ? __free_frozen_pages+0x79f/0x1090 [ 627.129623][ C0] ? qlist_free_all+0x47/0xf0 [ 627.134284][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 627.139917][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 627.144929][ C0] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 627.151002][ C0] ? __alloc_skb+0x140/0x710 [ 627.155584][ C0] ? alloc_uevent_skb+0x7d/0x210 [ 627.160510][ C0] ? kobject_uevent_env+0xd2d/0x18b0 [ 627.165766][ C0] ? __kobject_del+0x168/0x220 [ 627.170592][ C0] ? kobject_put+0x348/0x640 [ 627.175167][ C0] ? bus_remove_driver+0x16e/0x2e0 [ 627.180253][ C0] ? driver_unregister+0x76/0xb0 [ 627.185170][ C0] ? page_ext_put+0x3e/0xd0 [ 627.189657][ C0] __reset_page_owner+0x84/0x190 [ 627.194589][ C0] __free_frozen_pages+0x79f/0x1090 [ 627.199763][ C0] ? __free_slab+0xd0/0x220 [ 627.204243][ C0] qlist_free_all+0x47/0xf0 [ 627.208723][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 627.214182][ C0] __kasan_slab_alloc+0x69/0x90 [ 627.219039][ C0] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 627.224949][ C0] ? __alloc_skb+0x140/0x710 [ 627.229539][ C0] __alloc_skb+0x140/0x710 [ 627.233970][ C0] ? __alloc_skb+0x5b7/0x710 [ 627.238679][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 627.243816][ C0] ? netlink_has_listeners+0x21b/0x430 [ 627.249266][ C0] ? netlink_has_listeners+0x21b/0x430 [ 627.254734][ C0] alloc_uevent_skb+0x7d/0x210 [ 627.259491][ C0] kobject_uevent_env+0xd2d/0x18b0 [ 627.264578][ C0] ? module_remove_driver+0xb0/0x260 [ 627.269852][ C0] __kobject_del+0x168/0x220 [ 627.274459][ C0] kobject_put+0x348/0x640 [ 627.278888][ C0] bus_remove_driver+0x16e/0x2e0 [ 627.283854][ C0] driver_unregister+0x76/0xb0 [ 627.288614][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 627.294326][ C0] raw_release+0x19b/0x260 [ 627.298755][ C0] ? __pfx_raw_release+0x10/0x10 [ 627.303689][ C0] __fput+0x3ff/0xb50 [ 627.308188][ C0] fput_close_sync+0x118/0x250 [ 627.312944][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 627.318205][ C0] __x64_sys_close+0x8b/0x120 [ 627.322856][ C0] do_syscall_64+0x115/0x870 [ 627.327418][ C0] ? clear_bhb_loop+0x40/0x90 [ 627.332118][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.338099][ C0] RIP: 0033:0x7f5b7f15e90e [ 627.342495][ C0] RSP: 002b:00007f5b7fff7f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 627.350894][ C0] RAX: ffffffffffffffda RBX: 00007f5b7fff86c0 RCX: 00007f5b7f15e90e [ 627.358868][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 627.366830][ C0] RBP: 00007f5b7f235024 R08: 0000000000000000 R09: 0000000000000000 [ 627.374785][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.382740][ C0] R13: 00007f5b7f426038 R14: 00007f5b7f425fa0 R15: 00007ffed681c748 [ 627.390703][ C0] [ 627.393705][ C0] rcu: rcu_preempt kthread starved for 345 jiffies! g57017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 627.404702][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 627.414658][ C0] rcu: RCU grace-period kthread stack dump: [ 627.420528][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 627.433971][ C0] Call Trace: [ 627.437222][ C0] [ 627.440128][ C0] __schedule+0x125c/0x6730 [ 627.444612][ C0] ? __pfx___schedule+0x10/0x10 [ 627.449446][ C0] ? find_held_lock+0x2b/0x80 [ 627.454122][ C0] ? schedule+0x225/0x2c0 [ 627.458447][ C0] schedule+0xdd/0x2c0 [ 627.462547][ C0] schedule_timeout+0x127/0x280 [ 627.467445][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 627.472813][ C0] ? __pfx_process_timeout+0x10/0x10 [ 627.478083][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 627.483861][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 627.489299][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 627.494042][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 627.499301][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 627.504225][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 627.509411][ C0] ? rcu_is_watching+0x12/0xc0 [ 627.514168][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 627.519948][ C0] rcu_gp_kthread+0x179/0x230 [ 627.524597][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 627.529764][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 627.535541][ C0] ? __kthread_parkme+0x18c/0x230 [ 627.540559][ C0] ? kthread+0x13a/0x450 [ 627.544780][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 627.549957][ C0] kthread+0x370/0x450 [ 627.553995][ C0] ? __pfx_kthread+0x10/0x10 [ 627.558580][ C0] ret_from_fork+0x72b/0xd50 [ 627.563207][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 627.568315][ C0] ? __switch_to+0x800/0x10f0 [ 627.572969][ C0] ? __pfx_kthread+0x10/0x10 [ 627.577550][ C0] ret_from_fork_asm+0x1a/0x30 [ 627.582313][ C0] [ 627.585328][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 627.591624][ C0] CPU: 0 UID: 0 PID: 3225 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 627.602879][ C0] Tainted: [L]=SOFTLOCKUP [ 627.607175][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 627.617296][ C0] Workqueue: bat_events batadv_tt_purge [ 627.622824][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 627.629223][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b [ 627.648813][ C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00000246 [ 627.654860][ C0] RAX: 0000000000000006 RBX: ffff88802aec8000 RCX: 0000000000000004 [ 627.662812][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a826d RDI: ffffffff8c402680 [ 627.670751][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 627.678780][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8881a2f5c910 [ 627.686741][ C0] R13: ffff8881a2f5c908 R14: ffff88802b22c4a3 R15: ffff88802b22c410 [ 627.694698][ C0] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 627.703631][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 627.710193][ C0] CR2: 000020000000a038 CR3: 000000005ccf1000 CR4: 00000000003526f0 [ 627.718316][ C0] Call Trace: [ 627.721568][ C0] [ 627.724472][ C0] dummy_timer+0x1d91/0x36f0 [ 627.729042][ C0] ? find_held_lock+0x2b/0x80 [ 627.733687][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 627.739386][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 627.744991][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 627.750765][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 627.756369][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 627.762319][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 627.767239][ C0] ? mark_held_locks+0x40/0x70 [ 627.771982][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 627.777757][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 627.782667][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 627.787851][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 627.792934][ C0] handle_softirqs+0x1ea/0x9b0 [ 627.797670][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 627.802933][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 627.808189][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 627.813796][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 627.818721][ C0] do_softirq+0xac/0xe0 [ 627.822858][ C0] [ 627.825769][ C0] [ 627.828671][ C0] __local_bh_enable_ip+0xf8/0x120 [ 627.833759][ C0] batadv_tt_purge+0x25d/0xbd0 [ 627.838506][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 627.843765][ C0] ? rcu_is_watching+0x12/0xc0 [ 627.848503][ C0] process_one_work+0xa23/0x1940 [ 627.853424][ C0] ? __pfx_process_one_work+0x10/0x10 [ 627.858766][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 627.864023][ C0] rescuer_thread+0x905/0x14a0 [ 627.868786][ C0] ? rescuer_thread+0x240/0x14a0 [ 627.873691][ C0] ? rescuer_thread+0x118/0x14a0 [ 627.878594][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 627.883764][ C0] ? __kthread_parkme+0x18c/0x230 [ 627.888846][ C0] ? kthread+0x13a/0x450 [ 627.893056][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 627.898248][ C0] kthread+0x370/0x450 [ 627.902304][ C0] ? __pfx_kthread+0x10/0x10 [ 627.906883][ C0] ret_from_fork+0x72b/0xd50 [ 627.911455][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 627.916555][ C0] ? __switch_to+0x800/0x10f0 [ 627.921223][ C0] ? __pfx_kthread+0x10/0x10 [ 627.925796][ C0] ret_from_fork_asm+0x1a/0x30 [ 627.930554][ C0]