last executing test programs: 2m3.08988469s ago: executing program 4 (id=860): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) setxattr(0x0, &(0x7f0000000600)=@random={'user.', '\x00'}, 0x0, 0x0, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x5014) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "408b7c", 0x3}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) 2m2.06395285s ago: executing program 4 (id=861): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0x10e, 0x9) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_mr_cache\x00') getdents64(r3, &(0x7f0000000340)=""/79, 0x6e) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x884, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='ext4_mb_discard_preallocations\x00', r6}, 0x18) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r7 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_MKDIRAT={0x25, 0x62, 0x0, r3, 0x0, &(0x7f0000000440)='./file0\x00', 0x100, 0x0, 0x1}) io_uring_enter(r7, 0x207a98, 0x0, 0x0, 0x0, 0x0) getdents(r3, &(0x7f0000000940)=""/4096, 0x1000) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000001540)=[{{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000400)={0x93dd, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0x3, r11}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4, 0x38}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000004c0)={r11, 0xbc7, 0x9, 0x7, 0x1000, 0xffff, 0x5, 0x2, {r12, @in6={{0xa, 0x4e20, 0x1000, @empty, 0x7fff}}, 0x2, 0x5, 0x9, 0x0, 0x40000000}}, &(0x7f00000002c0)=0xb0) r13 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000000101040000000002f8000002000000240001801400010108000200000000100c000280050001000075e33a7f2d24000000240002800c00028005000100000000001400018008000100e000000108000200e0000002080007400000dcaa06000000000000000000"], 0x6c}}, 0x44004) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x5, 0x8, 0x800b, 0x3, 0x7, 0xeb4, 0x4, 0x7, r11}, 0x20) 1m58.613431917s ago: executing program 4 (id=873): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m58.049017505s ago: executing program 4 (id=876): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0000000706010100000000000000000a0000090900020073797a3100000000080006400000000608000640800000010900020073797a30005d15c2fbc46640c82c85caae831fa300000005000100070000000900020073797ab1000000000900020073797a300000000008000640000100000800064000007fff"], 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000242d1ee2a0d639df27ee8d330de6f3c862f96c35072f02132ac808bcbfdff86909f6f4dc01a6cfdee22e57089a9d80511891c8601b561348f2952bc19f4fe3dd4a1c31e53a9e9ba4aaeda6f6735892aa0b7c4c5966c57d39107241838a1d8e37a3763a00cb2a60228030c9ba4e21cb5b3abad30cbb792acaf407b1c8ddbdfe27bf87d3f499143e90f4073b9cabdfa7", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) 1m57.723282016s ago: executing program 4 (id=877): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = dup(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) io_setup(0x2017, &(0x7f00000009c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x5) read$FUSE(r3, &(0x7f0000005380)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f048, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a30000000000900030073797a381e28058e30300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000001c0008800c0002400000000000007fff0400014000000001000000001400000011000100000000000000"], 0xc0}}, 0x0) 1m56.258814167s ago: executing program 4 (id=883): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1008, 0xff}, &(0x7f0000000200)=0x80000000, 0x0, 0x10000000000f, 0x3, 0x80000000, 0x7f, 0x41, 0x6}}], 0x58, 0x4000000}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) 1m55.797708684s ago: executing program 32 (id=883): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1008, 0xff}, &(0x7f0000000200)=0x80000000, 0x0, 0x10000000000f, 0x3, 0x80000000, 0x7f, 0x41, 0x6}}], 0x58, 0x4000000}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) 19.338431432s ago: executing program 0 (id=1199): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0000000706010100000000000000000a0000090900020073797a3100000000080006400000000608000640800000010900020073797a30005d15c2fbc46640c82c85caae831fa300000005000100070000000900020073797ab1000000000900020073797a300000000008000640000100000800064000007fff"], 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x2, [@var, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x8e}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000242d1ee2a0d639df27ee8d330de6f3c862f96c35072f02132ac808bcbfdff86909f6f4dc01a6cfdee22e57089a9d80511891c8601b561348f2952bc19f4fe3dd4a1c31e53a9e9ba4aaeda6f6735892aa0b7c4c5966c57d39107241838a1d8e37a3763a00cb2a60228030c9ba4e21cb5b3abad30cbb792acaf407b1c8ddbdfe27bf87d3f499143e90f4073b9cabdfa7", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) 18.454968541s ago: executing program 0 (id=1203): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x10, 0x0, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000500)=""/205, 0xcd}], 0x1, 0x47, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB='\x00 \x00'], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x88c0) socket$nl_generic(0x10, 0x3, 0x10) 15.013241744s ago: executing program 0 (id=1213): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000240)) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f0000000040)='children\x00') syz_pidfd_open(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="7a14"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 10.303780996s ago: executing program 0 (id=1223): r0 = socket(0x1e, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x406, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)={0x12}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x40000014}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x400000000008, 0x4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000000000001, 0x0, 0x1, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x2c0000, 0x131) prctl$PR_CAPBSET_READ(0x59616d61, 0x2) pread64(r5, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) listen(r0, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000001240)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES32=r3], 0x5d8}, 0x1, 0x0, 0x0, 0x8000}, 0x4801) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, &(0x7f0000000180)) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323133", @ANYRES8=r10, @ANYRES8=r8], 0x20}}, 0x17c7826a660b8042) 10.102466766s ago: executing program 1 (id=1225): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) 9.931654982s ago: executing program 1 (id=1227): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x2c8, 0x0) 9.24738024s ago: executing program 2 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000240)='net/if_inet6\x00') r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'rmd160\x00'}}}]}, 0x138}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000400), 0x52, 0x2) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="2d0000003702000306000000000000002500000000"], 0x2d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="50001000100003040000000000000000000004008e76b95661b7358c66236845a912366eea8c6998801a572016dc14eb7a9d00c6c61c3a", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 8.960739362s ago: executing program 1 (id=1232): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x6ac4ce771fd9663b, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x1, 0x20001000, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, &(0x7f00000003c0)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000240)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000100)="010000000980ffff", 0xfffffffffffffd08) io_uring_enter(r3, 0x3516, 0xf400, 0x0, 0x0, 0xf4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x9d, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f00000001c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) 8.398037126s ago: executing program 2 (id=1235): socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x737222) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e", 0x36}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 7.594572518s ago: executing program 0 (id=1236): socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x737222) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e", 0x36}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 7.150390092s ago: executing program 2 (id=1238): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) 6.422337243s ago: executing program 2 (id=1239): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) unshare(0x42000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 6.407836663s ago: executing program 3 (id=1240): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000240)='net/if_inet6\x00') r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'rmd160\x00'}}}]}, 0x138}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000400), 0x52, 0x2) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="2d0000003702000306000000000000002500000000"], 0x2d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="50001000100003040000000000000000000004008e76b95661b7358c66236845a912366eea8c6998801a572016dc14eb7a9d00c6c61c3a", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 5.843848925s ago: executing program 1 (id=1241): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') read$qrtrtun(r3, &(0x7f00000004c0)=""/57, 0x39) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}}, 0x18) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)=0x9) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000080)={@broadcast, @multicast, @void, {@canfd={0xd, {{0x4, 0x0, 0x1, 0x1}, 0x22, 0x1, 0x0, 0x0, "ea318a8bd668976d22afa40cf120092b550c9ab4eb21baaffea743881d2066a12dffc951b5d343ce9b36240286da0735aa1d7f3d7dc61e464b95fd01740a238b"}}}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69ff07000020060ffe800000000000000000000000000039fe8000000000000000000000000000aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8104fffd9078005a171053eca400000000000000"], 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="964a6c5176e84b4d7a", 0x9}], 0x1}, 0x4048081) fsopen(&(0x7f0000000100)='befs\x00', 0x1) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x3, {0x0, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0xb}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 5.788934191s ago: executing program 5 (id=1242): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x2c8, 0x0) 4.740121038s ago: executing program 5 (id=1243): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newtaction={0x1bc, 0x30, 0x401, 0x0, 0x0, {}, [{0x1a8, 0x1, [@m_skbedit={0x138, 0x12, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xff, 0x0, 0x2ceb, 0x7}}]}, {0xf1, 0x6, "3b851e7c0cda0b110230d0af1c017dbc64e1e0e2e92bc269acd5ff2529b963019325ab11afa4228b5639c3ae6618782e1a080a53cb9cc21e1c326eac5b3178bb6b937d8097fe65e5e8ccf804cb141e6f3eea9bc8bd4f744889c8edb93a0fe758111184eab4936f544dc33ab4e2568c4db7c50caed4e5d2799caa9f639fcd9acc6ffd525ff572d34a7f5a6d0587383ef3d728e3341b2cdf5f3979a9ff0374198f86641a9e1e256f275c576f1c010303280f81d78abea9d8582fac9b8d804c2ad22169365a86ee31b15371d808b17551947af7d7daa1227f55015ed974c9d4afa09a3ad77c7ca9cb1e23334e6259"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x6c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x43, 0x6, "e60da5bb938492f7c09646b813e782f7913280a2af108c5c6b6f8082025c6eee92b53fa398c277f62b5fb79d7751b0d32bf4be3af0f75d77142c66387be73b"}, {0xc}, {0xc}}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000000000000000000000cdd32af1417f5195128c5629bebfe3e75a20e45775ca4d7a73c1ea9f36a9fdaab5b27a40995f52cc2df1b159e48abd7d263ed22b554c83cec8d7c815231b6059b86f5d6dd79e1b5884dc49df8a3c34bd5d2a87b4e596008d35faa8842d4ed2ce4cbc35ab3cb8ad8ff0284a6a14981d721e8e53a911058cce8a9771562043827bdb4f38efc7c6828d353eed637d040ee0a3"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r1, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$nl_route_sched(r4, 0x0, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r7, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000001040)={0x6, 0x118, 0xfa00, {{0x7, 0x57f8, "669c45f4ec60bff12e4890888348296a0a1e79424ddda61b15bedab068d4ea1bb7bef7630c4a8e9755efff90f85c12750a5c4382919d84bfb58ed40af09511a3ec419547f797e60d32f10039f2db430d25f4fea3d1e0897c2b3334a3c9f727c945624aea27468fdde417e1e04fa3543c78d48a143d6af22a0c0268d1945a52ed7674e8623452f77b4796af87978f3b3b932f01ec257b2b25b1351d303e2b1abc2ace4b273a65553c1d237f736aaf4e8bf19a7bf47aaeab957c75fe6567b10ddbedb89eb8ef4bd839198b4cc36c21cef7bb472031fd7a7c689e1e80b4855bf525b0cd689f3e6cf9c921da8a855fa8efbf4bbc5c82491fd490489e5b07a288b5d8", 0xfc, 0x8, 0x80, 0x80, 0x21, 0x6, 0x0, 0x1}, r7}}, 0x120) 4.466689179s ago: executing program 3 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x800004, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x4400, 0x0) 4.278785776s ago: executing program 3 (id=1245): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r1 = socket$inet6(0xa, 0xa, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x6c0, 0x4d0, 0x0, 0xffffffff, 0x4d0, 0x0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, &(0x7f0000000000), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0xff, 0xffffff00, 0x0, 0xffffffff], [0xffffffff], 'team_slave_0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0xc, 0xd, 0x2, 0x18}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e20], [0x4e23, 0x4e24], [0x9, 0x1, 0x1000, 0x3, 0x7fffffff, 0x2, 0x81, 0x4, 0x80000000, 0x401, 0xfff, 0x9, 0x8000, 0x80, 0x6, 0x7, 0x6, 0x3, 0x2, 0x10000, 0x443, 0x2f78, 0xffffffff, 0xc4b3, 0x401, 0x10001, 0x200, 0x100, 0x8, 0x0, 0x559a, 0xc, 0x8, 0x2, 0xf4, 0x0, 0xa56, 0xff, 0x9, 0xe6, 0x5e, 0x7fff, 0x6, 0x7, 0x1, 0x5, 0x1, 0x2, 0xfff, 0x3, 0xffffffff, 0x6, 0x7fff, 0x7, 0x57d0, 0x8, 0x96, 0xe, 0x4, 0xffffffff, 0x4, 0x8, 0xd, 0x2], 0x3, [{0x4, 0x4, 0x9}, {0xfe, 0x5, 0x2}, {0x5, 0xd, 0xe3}, {0x10, 0x2, 0xb}], 0x3, 0x0, 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@broadcast, @icmp_id=0x64, @gre_key=0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [0xff000000, 0xffffffff, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffff, 0xff000000], 'pim6reg0\x00', 'team0\x00', {}, {}, 0x3b, 0x3, 0x6, 0x20}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@mh={{0x28}, {'i(', 0x1}}, @common=@srh1={{0x90}, {0x87, 0x5, 0xe, 0xa8, 0xc000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast1, [0xff000000, 0xffffff00, 0xffffffff, 0xff], [0x0, 0xff, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff, 0xffffffff], 0x2000, 0x2b11}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x9, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}, @ipv4=@local, @gre_key=0x9, @gre_key=0x4}}}, {{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, [0xff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff], 'vxcan1\x00', 'sit0\x00', {0xff}, {0xff}, 0xe854de636a5e04de, 0x3, 0x0, 0x17}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@loopback, @ipv4=@rand_addr=0x64010102, @icmp_id=0x68, @gre_key=0x5}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, [0xffffff00, 0xff000000, 0xffffff00], [0xff, 0xffffffff, 0x0, 0xff000000], 'nr0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x6, 0x6, 0x4, 0x20}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x2, 0x0, 0x6, 0x1, 0x3080, 0x2004}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 4.08721785s ago: executing program 1 (id=1246): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x10, 0x0, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000500)=""/205, 0xcd}], 0x1, 0x47, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB='\x00 \x00'], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x88c0) socket$nl_generic(0x10, 0x3, 0x10) 3.48914794s ago: executing program 0 (id=1247): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x8000, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/135, 0x87}], 0x1, 0x7, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x4, @empty, 0xa09c}, {0xa, 0x4, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, r4, 0x40099d}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sync_file_range(r2, 0x26c8, 0x6, 0x6) 3.136159006s ago: executing program 3 (id=1248): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000240)='net/if_inet6\x00') r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'rmd160\x00'}}}]}, 0x138}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000400), 0x52, 0x2) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="2d0000003702000306000000000000002500000000"], 0x2d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="50001000100003040000000000000000000004008e76b95661b7358c66236845a912366eea8c6998801a572016dc14eb7a9d00c6c61c3a", @ANYRES32=0x0, @ANYBLOB="00a3000000000000280012800b0001006d616373656300001800", @ANYRES32=r4, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 3.086897122s ago: executing program 5 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000240)='net/if_inet6\x00') r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'rmd160\x00'}}}]}, 0x138}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000400), 0x52, 0x2) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="2d0000003702000306000000000000002500000000"], 0x2d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="50001000100003040000000000000000000004008e76b95661b7358c66236845a912366eea8c6998801a572016dc14eb7a9d00c6c61c3a", @ANYRES32=0x0, @ANYBLOB="00a3000000000000280012800b0001006d616373656300001800", @ANYRES32=r4, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 1.907404271s ago: executing program 3 (id=1250): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0000000706010100000000000000000a0000090900020073797a3100000000080006400000000608000640800000010900020073797a30005d15c2fbc46640c82c85caae831fa300000005000100070000000900020073797ab1000000000900020073797a300000000008000640000100000800064000007fff"], 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000242d1ee2a0d639df27ee8d330de6f3c862f96c35072f02132ac808bcbfdff86909f6f4dc01a6cfdee22e57089a9d80511891c8601b561348f2952bc19f4fe3dd4a1c31e53a9e9ba4aaeda6f6735892aa0b7c4c5966c57d39107241838a1d8e37a3763a00cb2a60228030c9ba4e21cb5b3abad30cbb792acaf407b1c8ddbdfe27bf87d3f499143e90f4073b9cabdfa7", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) 1.89107153s ago: executing program 2 (id=1251): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 1.848813645s ago: executing program 5 (id=1252): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000540)={0x1, 0x8, 0xc, 0x0, 0xa, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00180000"], 0x50) 1.743288753s ago: executing program 2 (id=1253): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x10, 0x0, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000500)=""/205, 0xcd}], 0x1, 0x47, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB='\x00 \x00'], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x88c0) socket$nl_generic(0x10, 0x3, 0x10) 1.698943078s ago: executing program 5 (id=1254): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f00000000c0), 0x2c8, 0x0) 747.387544ms ago: executing program 5 (id=1255): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x2, 0x1}}, 0x0, 0x6, 0x0}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$igmp(0x2, 0x3, 0x2) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket(0xa, 0x4, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500002c0000000000119078ffffffffe000000100004e20001890780400000000004166f6e8e808591c0000"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0xfffffffffffffffb, 0x7, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7f}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x84100) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4], 0x3, [0x4, 0x2, 0x6, 0x400, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3dc, 0x5], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xff06, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 369.381829ms ago: executing program 1 (id=1256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') read$qrtrtun(r3, &(0x7f00000004c0)=""/57, 0x39) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}}, 0x18) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)=0x9) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000080)={@broadcast, @multicast, @void, {@canfd={0xd, {{0x4, 0x0, 0x1, 0x1}, 0x22, 0x1, 0x0, 0x0, "ea318a8bd668976d22afa40cf120092b550c9ab4eb21baaffea743881d2066a12dffc951b5d343ce9b36240286da0735aa1d7f3d7dc61e464b95fd01740a238b"}}}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69ff07000020060ffe800000000000000000000000000039fe8000000000000000000000000000aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8104fffd9078005a171053eca400000000000000"], 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="964a6c5176e84b4d7a", 0x9}], 0x1}, 0x4048081) fsopen(&(0x7f0000000100)='befs\x00', 0x1) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x3, {0x0, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0xb}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 0s ago: executing program 3 (id=1257): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x1000000) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r4, &(0x7f0000000280)='./file0\x00', 0x200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x200, 0x0, 0x80, 0x6f62}, {0x6, 0x0, 0xfa, 0x8}]}) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000004c0)=0x1, r6}}, 0x20) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000480), 0x7fff, 0x428000) writev(r7, &(0x7f0000000ac0)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000006340)="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", 0x1000}], 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5, 0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f00000003c0)) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): e=1 [ 243.368355][ T8515] binder: 8513:8515 unknown command 1702257004 [ 243.375107][ T8518] binder: 8513:8518 ioctl c0306201 2000000003c0 returned -14 [ 243.382928][ T8515] binder: 8513:8515 ioctl c0306201 200000000080 returned -22 [ 243.394498][ T8514] FAULT_INJECTION: forcing a failure. [ 243.394498][ T8514] name failslab, interval 1, probability 0, space 0, times 0 [ 243.444193][ T8514] CPU: 1 UID: 0 PID: 8514 Comm: syz.0.735 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.444231][ T8514] Tainted: [L]=SOFTLOCKUP [ 243.444237][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.444249][ T8514] Call Trace: [ 243.444255][ T8514] [ 243.444262][ T8514] dump_stack_lvl+0x16c/0x1f0 [ 243.444295][ T8514] should_fail_ex+0x512/0x640 [ 243.444315][ T8514] ? fs_reclaim_acquire+0xae/0x150 [ 243.444341][ T8514] should_failslab+0xc2/0x120 [ 243.444364][ T8514] __kmalloc_noprof+0xeb/0x910 [ 243.444394][ T8514] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 243.444418][ T8514] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 243.444436][ T8514] tomoyo_realpath_from_path+0xc2/0x6e0 [ 243.444456][ T8514] ? tomoyo_profile+0x47/0x60 [ 243.444480][ T8514] tomoyo_path_number_perm+0x245/0x580 [ 243.444506][ T8514] ? tomoyo_path_number_perm+0x237/0x580 [ 243.444535][ T8514] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 243.444563][ T8514] ? find_held_lock+0x2b/0x80 [ 243.444613][ T8514] ? find_held_lock+0x2b/0x80 [ 243.444639][ T8514] ? hook_file_ioctl_common+0x144/0x410 [ 243.444666][ T8514] ? __fget_files+0x20e/0x3c0 [ 243.444696][ T8514] security_file_ioctl+0x9b/0x240 [ 243.444716][ T8514] __x64_sys_ioctl+0xb7/0x210 [ 243.444738][ T8514] do_syscall_64+0xcd/0xf80 [ 243.444767][ T8514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.444786][ T8514] RIP: 0033:0x7fa59a38f749 [ 243.444801][ T8514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.444819][ T8514] RSP: 002b:00007fa59b2d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.444837][ T8514] RAX: ffffffffffffffda RBX: 00007fa59a5e5fa0 RCX: 00007fa59a38f749 [ 243.444850][ T8514] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 243.444861][ T8514] RBP: 00007fa59b2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.444872][ T8514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.444882][ T8514] R13: 00007fa59a5e6038 R14: 00007fa59a5e5fa0 R15: 00007ffc69ce4c28 [ 243.444906][ T8514] [ 243.444913][ T8514] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.581360][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'. [ 243.915828][ T8532] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 243.932532][ T8532] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.940700][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.210720][ T8534] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.742'. [ 245.301798][ T5884] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 245.368097][ T30] audit: type=1400 audit(2000000020.800:411): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 245.408411][ T8544] FAULT_INJECTION: forcing a failure. [ 245.408411][ T8544] name failslab, interval 1, probability 0, space 0, times 0 [ 245.451278][ T8544] CPU: 0 UID: 0 PID: 8544 Comm: syz.2.746 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.451310][ T8544] Tainted: [L]=SOFTLOCKUP [ 245.451316][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.451327][ T8544] Call Trace: [ 245.451333][ T8544] [ 245.451341][ T8544] dump_stack_lvl+0x16c/0x1f0 [ 245.451373][ T8544] should_fail_ex+0x512/0x640 [ 245.451392][ T8544] ? __kvmalloc_node_noprof+0x129/0xa40 [ 245.451416][ T8544] should_failslab+0xc2/0x120 [ 245.451439][ T8544] __kvmalloc_node_noprof+0x14a/0xa40 [ 245.451459][ T8544] ? __pfx___mutex_lock+0x10/0x10 [ 245.451481][ T8544] ? __lock_acquire+0x436/0x2890 [ 245.451501][ T8544] ? _parse_integer_limit+0x17f/0x1d0 [ 245.451526][ T8544] ? traverse.part.0.constprop.0+0x397/0x650 [ 245.451557][ T8544] ? traverse.part.0.constprop.0+0x397/0x650 [ 245.451580][ T8544] traverse.part.0.constprop.0+0x397/0x650 [ 245.451613][ T8544] seq_read_iter+0x93c/0x12d0 [ 245.451647][ T8544] seq_read+0x3a3/0x570 [ 245.451669][ T8544] ? __pfx_seq_read+0x10/0x10 [ 245.451692][ T8544] ? get_pid_task+0xfc/0x250 [ 245.451713][ T8544] ? avc_policy_seqno+0x9/0x20 [ 245.451741][ T8544] ? rw_verify_area+0xcf/0x6c0 [ 245.451760][ T8544] ? __pfx_seq_read+0x10/0x10 [ 245.451783][ T8544] vfs_read+0x1e4/0xcf0 [ 245.451810][ T8544] ? __pfx_vfs_read+0x10/0x10 [ 245.451829][ T8544] ? find_held_lock+0x2b/0x80 [ 245.451854][ T8544] ? __fget_files+0x204/0x3c0 [ 245.451880][ T8544] ? __fget_files+0x20e/0x3c0 [ 245.451901][ T8544] ? __fget_files+0x1b0/0x3c0 [ 245.451932][ T8544] __x64_sys_pread64+0x1eb/0x250 [ 245.451956][ T8544] ? __pfx___x64_sys_pread64+0x10/0x10 [ 245.451987][ T8544] do_syscall_64+0xcd/0xf80 [ 245.452016][ T8544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.452035][ T8544] RIP: 0033:0x7fabae18f749 [ 245.452050][ T8544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.452068][ T8544] RSP: 002b:00007fabaf0f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 245.452087][ T8544] RAX: ffffffffffffffda RBX: 00007fabae3e5fa0 RCX: 00007fabae18f749 [ 245.452099][ T8544] RDX: 0000000000000011 RSI: 0000200000002140 RDI: 0000000000000005 [ 245.452110][ T8544] RBP: 00007fabaf0f4090 R08: 0000000000000000 R09: 0000000000000000 [ 245.452121][ T8544] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 245.452132][ T8544] R13: 00007fabae3e6038 R14: 00007fabae3e5fa0 R15: 00007ffe980434b8 [ 245.452158][ T8544] [ 245.753168][ T5884] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 245.765136][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.774705][ T5884] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 245.784203][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 245.792457][ T5884] usb 4-1: Product: syz [ 245.797481][ T5884] usb 4-1: Manufacturer: syz [ 245.802178][ T5884] usb 4-1: SerialNumber: syz [ 245.813607][ T5884] usb 4-1: config 0 descriptor?? [ 245.826097][ T5884] usb 4-1: selecting invalid altsetting 0 [ 246.451928][ T5884] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 247.346322][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 247.355786][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 247.368607][ T5884] usb 1-1: can't read configurations, error -71 [ 247.778025][ T8569] overlayfs: failed to resolve './file0': -2 [ 247.962224][ T7933] usb 4-1: USB disconnect, device number 19 [ 248.361567][ T8575] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.754'. [ 248.887273][ T8585] netlink: 44 bytes leftover after parsing attributes in process `syz.4.759'. [ 248.991180][ T8590] validate_nla: 36 callbacks suppressed [ 248.991195][ T8590] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 249.006975][ T8590] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 249.015027][ T30] audit: type=1400 audit(2000000024.440:412): avc: denied { accept } for pid=8583 comm="syz.1.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.140734][ T30] audit: type=1400 audit(2000000024.440:413): avc: denied { map } for pid=8583 comm="syz.1.758" path="socket:[18771]" dev="sockfs" ino=18771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.184179][ T8590] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 249.684281][ T8590] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 249.692392][ T30] audit: type=1400 audit(2000000024.450:414): avc: denied { create } for pid=8583 comm="syz.1.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 249.712744][ T8590] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 249.720645][ T8590] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 249.833508][ T8590] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 249.901828][ T8590] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 249.911245][ T8590] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 249.989490][ T8590] netlink: 'syz.4.759': attribute type 3 has an invalid length. [ 250.243761][ T8615] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.767'. [ 250.244314][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.272072][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.591835][ T7933] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 250.611796][ T5891] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 250.710000][ T8622] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 250.716527][ T8622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.730565][ T8622] vhci_hcd vhci_hcd.0: Device attached [ 250.759543][ T8626] vhci_hcd: connection closed [ 250.761239][ T4285] vhci_hcd vhci_hcd.0: stop threads [ 250.773666][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.787249][ T4285] vhci_hcd vhci_hcd.0: release socket [ 250.792888][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.804024][ T4285] vhci_hcd vhci_hcd.0: disconnect device [ 250.810861][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.827763][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.847343][ T5891] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.857071][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.873619][ T5891] usb 5-1: config 0 descriptor?? [ 251.291101][ T8609] mmap: syz.4.765 (8609): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 251.330177][ T5891] usbhid 5-1:0.0: can't add hid device: -71 [ 251.346188][ T5891] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 251.363976][ T7933] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.377206][ T7933] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 251.394881][ T5891] usb 5-1: USB disconnect, device number 36 [ 251.414574][ T7933] usb 3-1: can't read configurations, error -71 [ 251.721760][ T5891] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 251.938427][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.973089][ T8648] netlink: 44 bytes leftover after parsing attributes in process `syz.1.776'. [ 251.993778][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 252.011829][ T5891] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 252.037177][ T8639] syz.0.773 (8639): drop_caches: 2 [ 252.062307][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.074551][ T5891] usb 5-1: config 0 descriptor?? [ 252.753772][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 252.775457][ T8653] tmpfs: Unknown parameter 'indo64' [ 252.802667][ T8653] tmpfs: Bad value for 'mpol' [ 252.985546][ T5891] ath6kl: Failed to submit usb control message: -71 [ 253.044445][ T5891] ath6kl: unable to send the bmi data to the device: -71 [ 253.064713][ T5891] ath6kl: Unable to send get target info: -71 [ 253.200111][ T5891] ath6kl: Failed to init ath6kl core: -71 [ 253.206930][ T5891] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 253.651939][ T5891] usb 5-1: USB disconnect, device number 37 [ 254.784976][ T8683] random: crng reseeded on system resumption [ 255.246362][ T30] audit: type=1400 audit(2000000030.650:415): avc: denied { ioctl } for pid=8691 comm="syz.3.790" path="socket:[19548]" dev="sockfs" ino=19548 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 255.368454][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.375220][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.483240][ T30] audit: type=1400 audit(2000000032.920:416): avc: denied { mount } for pid=8717 comm="syz.2.799" name="/" dev="hugetlbfs" ino=19082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 257.764225][ T8718] vivid-004: disconnect [ 257.769353][ T8717] vivid-004: reconnect [ 258.148115][ T30] audit: type=1400 audit(2000000033.580:417): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 259.593497][ T30] audit: type=1400 audit(2000000035.030:418): avc: denied { create } for pid=8750 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 260.236391][ T30] audit: type=1400 audit(2000000035.270:419): avc: denied { execute_no_trans } for pid=8750 comm="syz.3.809" path="/166/file2" dev="tmpfs" ino=871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 260.888935][ T5896] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 260.941720][ T5979] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 261.037067][ T8761] team0 (unregistering): Port device team_slave_0 removed [ 261.053445][ T8761] team0 (unregistering): Port device team_slave_1 removed [ 261.104867][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.117731][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.135365][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.192996][ T5896] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.204370][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.220521][ T5896] usb 1-1: config 0 descriptor?? [ 261.434586][ T5979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 261.448231][ T5979] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 261.462532][ T5979] usb 4-1: can't read configurations, error -71 [ 261.674316][ T5896] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x6 [ 261.715021][ T5896] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 262.419949][ T8776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.464767][ T8777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.619802][ T5896] usb 1-1: USB disconnect, device number 21 [ 263.416121][ T8797] syz.0.820 (8797): drop_caches: 2 [ 263.432768][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 264.023567][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 264.032206][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 264.055709][ T10] usb 4-1: device descriptor read/64, error -71 [ 264.233195][ T8804] kAFS: unable to lookup cell '(,c¾ûL' [ 264.321728][ T30] audit: type=1400 audit(2000000039.700:420): avc: denied { bind } for pid=8802 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 264.542031][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 264.716210][ T10] usb 4-1: device descriptor read/64, error -71 [ 264.841854][ T10] usb usb4-port1: attempt power cycle [ 265.371805][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 265.432124][ T10] usb 4-1: device descriptor read/8, error -71 [ 265.844122][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 265.874592][ T10] usb 4-1: device descriptor read/8, error -71 [ 265.993587][ T10] usb usb4-port1: unable to enumerate USB device [ 266.031717][ T5940] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 266.051753][ T5884] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 266.094620][ T8837] sp0: Synchronizing with TNC [ 266.371814][ T30] audit: type=1400 audit(2000000041.580:421): avc: denied { mount } for pid=8833 comm="syz.4.833" name="/" dev="rpc_pipefs" ino=19831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 266.948972][ T8833] [U] è` [ 267.277456][ T8842] vivid-001: disconnect [ 267.652934][ T8838] vivid-001: reconnect [ 268.369715][ T5940] usb 2-1: device descriptor read/64, error -71 [ 268.615119][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 268.623529][ T5884] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 268.631696][ T5940] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 268.639319][ T5884] usb 3-1: can't read configurations, error -71 [ 268.664077][ T8861] netlink: 76 bytes leftover after parsing attributes in process `syz.4.836'. [ 268.787753][ T8859] syz.3.837 (8859): drop_caches: 2 [ 268.828225][ T5940] usb 2-1: device descriptor read/64, error -71 [ 268.877864][ T8864] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.977714][ T5940] usb usb2-port1: attempt power cycle [ 270.887982][ T30] audit: type=1400 audit(2000000046.320:422): avc: denied { connect } for pid=8886 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 272.022500][ T8904] syz.3.846 (8904): drop_caches: 2 [ 272.321744][ T5940] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 272.339712][ T8920] netlink: 76 bytes leftover after parsing attributes in process `syz.0.848'. [ 273.125641][ T30] audit: type=1400 audit(2000000048.540:423): avc: denied { accept } for pid=8922 comm="syz.1.854" lport=47637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.950836][ T5940] usb 5-1: unable to get BOS descriptor or descriptor too short [ 274.076263][ T5940] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 274.086205][ T5940] usb 5-1: can't read configurations, error -71 [ 275.895508][ T8958] netlink: 44 bytes leftover after parsing attributes in process `syz.0.863'. [ 276.124243][ T8963] netlink: 96 bytes leftover after parsing attributes in process `syz.4.861'. [ 276.730169][ T8967] validate_nla: 89 callbacks suppressed [ 276.730186][ T8967] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 276.752588][ T8967] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 276.766963][ T30] audit: type=1400 audit(2000000052.200:424): avc: denied { bind } for pid=8952 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 276.767677][ T8963] netlink: 52 bytes leftover after parsing attributes in process `syz.4.861'. [ 276.808262][ T8967] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 276.822555][ T8967] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 276.867116][ T8967] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 276.878393][ T8967] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 276.890276][ T8967] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 276.895118][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 276.898091][ T8967] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 276.917228][ T8967] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 276.926266][ T8967] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 278.791154][ T8988] FAULT_INJECTION: forcing a failure. [ 278.791154][ T8988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.806358][ T8988] CPU: 1 UID: 0 PID: 8988 Comm: syz.3.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.806395][ T8988] Tainted: [L]=SOFTLOCKUP [ 278.806401][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.806411][ T8988] Call Trace: [ 278.806418][ T8988] [ 278.806424][ T8988] dump_stack_lvl+0x16c/0x1f0 [ 278.806455][ T8988] should_fail_ex+0x512/0x640 [ 278.806478][ T8988] _copy_to_user+0x32/0xd0 [ 278.806498][ T8988] simple_read_from_buffer+0xcb/0x170 [ 278.806523][ T8988] proc_fail_nth_read+0x197/0x240 [ 278.806540][ T8988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.806557][ T8988] ? rw_verify_area+0xcf/0x6c0 [ 278.806574][ T8988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.806590][ T8988] vfs_read+0x1e4/0xcf0 [ 278.806609][ T8988] ? __pfx___mutex_lock+0x10/0x10 [ 278.806625][ T8988] ? __pfx_vfs_read+0x10/0x10 [ 278.806648][ T8988] ? __fget_files+0x20e/0x3c0 [ 278.806677][ T8988] ksys_read+0x12a/0x250 [ 278.806697][ T8988] ? __pfx_ksys_read+0x10/0x10 [ 278.806715][ T8988] ? rcu_is_watching+0x12/0xc0 [ 278.806736][ T8988] do_syscall_64+0xcd/0xf80 [ 278.806763][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.806780][ T8988] RIP: 0033:0x7f497478e15c [ 278.806794][ T8988] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 278.806809][ T8988] RSP: 002b:00007f49755f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.806824][ T8988] RAX: ffffffffffffffda RBX: 00007f49749e5fa0 RCX: 00007f497478e15c [ 278.806834][ T8988] RDX: 000000000000000f RSI: 00007f49755f30a0 RDI: 0000000000000006 [ 278.806843][ T8988] RBP: 00007f49755f3090 R08: 0000000000000000 R09: 0000000000000000 [ 278.806852][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.806861][ T8988] R13: 00007f49749e6038 R14: 00007f49749e5fa0 R15: 00007ffe6176f4f8 [ 278.806882][ T8988] [ 279.131885][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 279.433859][ T30] audit: type=1400 audit(2000000054.870:425): avc: denied { create } for pid=8996 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.529390][ T30] audit: type=1400 audit(2000000054.870:426): avc: denied { getopt } for pid=8996 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.600556][ T30] audit: type=1400 audit(2000000054.870:427): avc: denied { read } for pid=8996 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.646135][ T30] audit: type=1400 audit(2000000054.870:428): avc: denied { create } for pid=8996 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 279.734049][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 279.746140][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 279.761833][ T30] audit: type=1400 audit(2000000054.870:429): avc: denied { setopt } for pid=8996 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 279.790694][ T9007] netlink: 44 bytes leftover after parsing attributes in process `syz.4.876'. [ 279.810631][ T9] usb 2-1: can't read configurations, error -71 [ 280.315076][ T9015] FAULT_INJECTION: forcing a failure. [ 280.315076][ T9015] name failslab, interval 1, probability 0, space 0, times 0 [ 280.349277][ T30] audit: type=1400 audit(2000000055.780:430): avc: denied { ioctl } for pid=9012 comm="syz.2.878" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 280.389825][ T9015] CPU: 0 UID: 0 PID: 9015 Comm: syz.1.879 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.389847][ T9015] Tainted: [L]=SOFTLOCKUP [ 280.389851][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.389857][ T9015] Call Trace: [ 280.389862][ T9015] [ 280.389867][ T9015] dump_stack_lvl+0x16c/0x1f0 [ 280.389888][ T9015] should_fail_ex+0x512/0x640 [ 280.389900][ T9015] ? kmem_cache_alloc_noprof+0x62/0x770 [ 280.389913][ T9015] should_failslab+0xc2/0x120 [ 280.389928][ T9015] kmem_cache_alloc_noprof+0x83/0x770 [ 280.389939][ T9015] ? skb_clone+0x190/0x3f0 [ 280.389955][ T9015] ? skb_clone+0x190/0x3f0 [ 280.389968][ T9015] skb_clone+0x190/0x3f0 [ 280.389982][ T9015] nfnetlink_rcv_batch+0x1cf/0x2350 [ 280.390000][ T9015] ? __lock_acquire+0x436/0x2890 [ 280.390016][ T9015] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 280.390037][ T9015] ? avc_has_perm_noaudit+0x149/0x3b0 [ 280.390052][ T9015] ? __asan_memset+0x23/0x50 [ 280.390063][ T9015] ? __nla_validate_parse+0x600/0x2880 [ 280.390082][ T9015] ? __pfx___nla_validate_parse+0x10/0x10 [ 280.390097][ T9015] ? rcu_is_watching+0x12/0xc0 [ 280.390108][ T9015] ? cap_capable+0x10d/0x3f0 [ 280.390125][ T9015] ? __nla_parse+0x40/0x60 [ 280.390141][ T9015] nfnetlink_rcv+0x3c1/0x430 [ 280.390154][ T9015] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 280.390172][ T9015] netlink_unicast+0x5aa/0x870 [ 280.390191][ T9015] ? __pfx_netlink_unicast+0x10/0x10 [ 280.390212][ T9015] netlink_sendmsg+0x8c8/0xdd0 [ 280.390230][ T9015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.390252][ T9015] ____sys_sendmsg+0xa5d/0xc30 [ 280.390270][ T9015] ? copy_msghdr_from_user+0x10a/0x160 [ 280.390284][ T9015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.390307][ T9015] ___sys_sendmsg+0x134/0x1d0 [ 280.390322][ T9015] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.390351][ T9015] __sys_sendmsg+0x16d/0x220 [ 280.390365][ T9015] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.390392][ T9015] do_syscall_64+0xcd/0xf80 [ 280.390410][ T9015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.390422][ T9015] RIP: 0033:0x7fd2b798f749 [ 280.390431][ T9015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.390442][ T9015] RSP: 002b:00007fd2b8793038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.390453][ T9015] RAX: ffffffffffffffda RBX: 00007fd2b7be5fa0 RCX: 00007fd2b798f749 [ 280.390460][ T9015] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 280.390466][ T9015] RBP: 00007fd2b8793090 R08: 0000000000000000 R09: 0000000000000000 [ 280.390473][ T9015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.390479][ T9015] R13: 00007fd2b7be6038 R14: 00007fd2b7be5fa0 R15: 00007fff8436b878 [ 280.390493][ T9015] [ 281.904659][ T1133] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.009245][ T9033] netlink: 44 bytes leftover after parsing attributes in process `syz.2.887'. [ 282.070817][ T9035] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 282.094112][ T1133] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.114700][ T30] audit: type=1400 audit(2000000057.550:431): avc: denied { write } for pid=9030 comm="syz.1.886" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 282.172748][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.187320][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.195664][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.207601][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.215433][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.226628][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.228372][ T9033] validate_nla: 92 callbacks suppressed [ 282.228385][ T9033] netlink: 'syz.2.887': attribute type 3 has an invalid length. [ 282.356310][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.421720][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.430909][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.438883][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.439307][ T9033] netlink: 'syz.2.887': attribute type 3 has an invalid length. [ 282.454250][ T9033] netlink: 'syz.2.887': attribute type 3 has an invalid length. [ 282.501952][ T9033] netlink: 'syz.2.887': attribute type 3 has an invalid length. [ 282.509651][ T9033] netlink: 'syz.2.887': attribute type 3 has an invalid length. [ 282.548189][ T9033] netlink: 'syz.2.887': attribute type 3 has an invalid length. [ 282.584834][ T30] audit: type=1400 audit(2000000058.020:432): avc: denied { connect } for pid=9044 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 282.631792][ T9033] netlink: 'syz.2.887': attribute type 3 has an invalid length. [ 282.652959][ T9033] netlink: 'syz.2.887': attribute type 3 has an invalid length. [ 282.671879][ T9033] netlink: 'syz.2.887': attribute type 3 has an invalid length. [ 282.690751][ T9033] netlink: 'syz.2.887': attribute type 3 has an invalid length. [ 282.736621][ T1133] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.903975][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 283.028642][ T30] audit: type=1400 audit(2000000058.440:433): avc: denied { execute } for pid=9054 comm="syz.2.892" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 283.374026][ T1133] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.895280][ T9064] lo speed is unknown, defaulting to 1000 [ 283.901133][ T9064] lo speed is unknown, defaulting to 1000 [ 283.924736][ T9064] lo speed is unknown, defaulting to 1000 [ 283.933912][ T9064] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 283.948297][ T9064] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 283.990355][ T9064] lo speed is unknown, defaulting to 1000 [ 283.998354][ T9064] lo speed is unknown, defaulting to 1000 [ 284.014166][ T9064] lo speed is unknown, defaulting to 1000 [ 284.037330][ T9064] lo speed is unknown, defaulting to 1000 [ 284.049803][ T9064] lo speed is unknown, defaulting to 1000 [ 284.056863][ T9064] lo speed is unknown, defaulting to 1000 [ 284.495840][ T5828] Bluetooth: hci0: command tx timeout [ 284.548306][ T1133] bridge_slave_1: left allmulticast mode [ 284.562470][ T1133] bridge_slave_1: left promiscuous mode [ 284.597406][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.641106][ T1133] bridge_slave_0: left allmulticast mode [ 284.666660][ T1133] bridge_slave_0: left promiscuous mode [ 284.679374][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.988958][ T9088] syz.0.899 (9088): drop_caches: 2 [ 285.346989][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.371484][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.394640][ T1133] bond0 (unregistering): Released all slaves [ 285.571027][ T9037] chnl_net:caif_netlink_parms(): no params data found [ 285.579004][ T9095] netlink: 44 bytes leftover after parsing attributes in process `syz.1.902'. [ 286.014061][ T30] audit: type=1400 audit(2000000061.450:434): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 286.040278][ T30] audit: type=1400 audit(2000000061.450:435): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 286.229568][ T9037] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.249912][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.271460][ T9037] bridge_slave_0: entered allmulticast mode [ 286.293137][ T9037] bridge_slave_0: entered promiscuous mode [ 286.318116][ T9037] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.351017][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.371259][ T9037] bridge_slave_1: entered allmulticast mode [ 286.573404][ T5828] Bluetooth: hci0: command tx timeout [ 287.344881][ T30] audit: type=1400 audit(2000000062.780:436): avc: denied { read write } for pid=9122 comm="syz.1.906" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 287.450920][ T9037] bridge_slave_1: entered promiscuous mode [ 287.681676][ T5926] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 288.632364][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.651738][ T5828] Bluetooth: hci0: command tx timeout [ 288.754563][ T5926] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 288.763536][ T1133] hsr_slave_0: left promiscuous mode [ 288.764600][ T5926] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 288.779181][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.787491][ T1133] hsr_slave_1: left promiscuous mode [ 288.795137][ T5926] usb 2-1: config 0 descriptor?? [ 288.803007][ T5926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 288.815095][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.823254][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 288.834781][ T5926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 288.848932][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.882273][ T5926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 288.890597][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.905124][ T5926] usb 2-1: media controller created [ 288.907653][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.926089][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.952177][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 288.967792][ T5926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 288.991072][ T1133] veth1_macvtap: left promiscuous mode [ 288.998745][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 289.010183][ T1133] veth0_macvtap: left promiscuous mode [ 289.011933][ T9123] dvb-usb: bulk message failed: -22 (2/0) [ 289.017164][ T1133] veth1_vlan: left promiscuous mode [ 289.365518][ T1133] veth0_vlan: left promiscuous mode [ 289.366362][ T5926] dvb-usb: schedule remote query interval to 150 msecs. [ 289.388494][ T5926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 289.429761][ T5926] usb 2-1: USB disconnect, device number 21 [ 289.462304][ T5926] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 289.679099][ T1133] pim6reg (unregistering): left allmulticast mode [ 289.697397][ T1133] pimreg (unregistering): left allmulticast mode [ 290.321760][ T5884] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 290.746046][ T5828] Bluetooth: hci0: command tx timeout [ 290.937181][ T9037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.075418][ T9161] FAULT_INJECTION: forcing a failure. [ 291.075418][ T9161] name failslab, interval 1, probability 0, space 0, times 0 [ 291.088283][ T9161] CPU: 0 UID: 0 PID: 9161 Comm: syz.2.915 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.088311][ T9161] Tainted: [L]=SOFTLOCKUP [ 291.088319][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.088328][ T9161] Call Trace: [ 291.088333][ T9161] [ 291.088339][ T9161] dump_stack_lvl+0x16c/0x1f0 [ 291.088371][ T9161] should_fail_ex+0x512/0x640 [ 291.088391][ T9161] should_failslab+0xc2/0x120 [ 291.088411][ T9161] kmem_cache_alloc_noprof+0x83/0x770 [ 291.088427][ T9161] ? skb_clone+0x190/0x3f0 [ 291.088448][ T9161] ? skb_clone+0x190/0x3f0 [ 291.088465][ T9161] skb_clone+0x190/0x3f0 [ 291.088484][ T9161] netlink_deliver_tap+0xabd/0xd30 [ 291.088509][ T9161] netlink_unicast+0x64c/0x870 [ 291.088533][ T9161] ? __pfx_netlink_unicast+0x10/0x10 [ 291.088559][ T9161] ? bpf_lsm_netlink_send+0x4/0x10 [ 291.088582][ T9161] netlink_sendmsg+0x8c8/0xdd0 [ 291.088607][ T9161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.088635][ T9161] ____sys_sendmsg+0xa5d/0xc30 [ 291.088659][ T9161] ? copy_msghdr_from_user+0x10a/0x160 [ 291.088678][ T9161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.088702][ T9161] ? kvm_sched_clock_read+0x11/0x20 [ 291.088723][ T9161] ? sched_clock+0x38/0x60 [ 291.088736][ T9161] ? sched_clock_cpu+0x6c/0x530 [ 291.088755][ T9161] ___sys_sendmsg+0x134/0x1d0 [ 291.088775][ T9161] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.088793][ T9161] ? __schedule+0x3bbb/0x6150 [ 291.088836][ T9161] __sys_sendmsg+0x16d/0x220 [ 291.088854][ T9161] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.088871][ T9161] ? irqentry_exit+0x1dd/0x8c0 [ 291.088905][ T9161] do_syscall_64+0xcd/0xf80 [ 291.088928][ T9161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.088943][ T9161] RIP: 0033:0x7fabae18f749 [ 291.088955][ T9161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.088969][ T9161] RSP: 002b:00007fabaf0d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.088995][ T9161] RAX: ffffffffffffffda RBX: 00007fabae3e6090 RCX: 00007fabae18f749 [ 291.089005][ T9161] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 291.089014][ T9161] RBP: 00007fabaf0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 291.089023][ T9161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.089031][ T9161] R13: 00007fabae3e6128 R14: 00007fabae3e6090 R15: 00007ffe980434b8 [ 291.089052][ T9161] [ 291.559149][ T9037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.660202][ T5884] usb 4-1: unable to get BOS descriptor or descriptor too short [ 291.675450][ T5884] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 291.698670][ T5884] usb 4-1: can't read configurations, error -71 [ 291.705351][ T9172] FAULT_INJECTION: forcing a failure. [ 291.705351][ T9172] name failslab, interval 1, probability 0, space 0, times 0 [ 291.721593][ T9037] team0: Port device team_slave_0 added [ 291.732460][ T30] audit: type=1400 audit(2000000067.170:437): avc: denied { read } for pid=9169 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 291.750202][ T9037] team0: Port device team_slave_1 added [ 291.758097][ T9172] CPU: 1 UID: 0 PID: 9172 Comm: syz.1.918 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.758131][ T9172] Tainted: [L]=SOFTLOCKUP [ 291.758136][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.758145][ T9172] Call Trace: [ 291.758151][ T9172] [ 291.758157][ T9172] dump_stack_lvl+0x16c/0x1f0 [ 291.758187][ T9172] should_fail_ex+0x512/0x640 [ 291.758204][ T9172] ? __kmalloc_cache_noprof+0x5f/0x800 [ 291.758231][ T9172] should_failslab+0xc2/0x120 [ 291.758253][ T9172] __kmalloc_cache_noprof+0x80/0x800 [ 291.758275][ T9172] ? trace_kmalloc+0x2b/0xb0 [ 291.758293][ T9172] ? __kmalloc_noprof+0x35d/0x910 [ 291.758315][ T9172] ? __alloc_workqueue+0x158/0x1810 [ 291.758336][ T9172] ? __alloc_workqueue+0x158/0x1810 [ 291.758351][ T9172] __alloc_workqueue+0x158/0x1810 [ 291.758375][ T9172] alloc_workqueue_noprof+0xd2/0x200 [ 291.758391][ T9172] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 291.758421][ T9172] hci_register_dev+0x1cf/0xce0 [ 291.758445][ T9172] hci_uart_tty_ioctl+0x89e/0xc80 [ 291.758464][ T9172] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 291.758478][ T9172] tty_ioctl+0x700/0x1650 [ 291.758502][ T9172] ? __pfx_tty_ioctl+0x10/0x10 [ 291.758524][ T9172] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 291.758558][ T9172] ? hook_file_ioctl_common+0x144/0x410 [ 291.758583][ T9172] ? selinux_file_ioctl+0x180/0x270 [ 291.758607][ T9172] ? selinux_file_ioctl+0xb4/0x270 [ 291.758632][ T9172] ? __pfx_tty_ioctl+0x10/0x10 [ 291.758654][ T9172] __x64_sys_ioctl+0x18e/0x210 [ 291.758674][ T9172] do_syscall_64+0xcd/0xf80 [ 291.758700][ T9172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.758716][ T9172] RIP: 0033:0x7fd2b798f749 [ 291.758730][ T9172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.758745][ T9172] RSP: 002b:00007fd2b8793038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.758762][ T9172] RAX: ffffffffffffffda RBX: 00007fd2b7be5fa0 RCX: 00007fd2b798f749 [ 291.758773][ T9172] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 291.758782][ T9172] RBP: 00007fd2b8793090 R08: 0000000000000000 R09: 0000000000000000 [ 291.758796][ T9172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.758805][ T9172] R13: 00007fd2b7be6038 R14: 00007fd2b7be5fa0 R15: 00007fff8436b878 [ 291.758828][ T9172] [ 291.758930][ T9172] Bluetooth: Can't register HCI device [ 291.963718][ T9176] validate_nla: 87 callbacks suppressed [ 291.963731][ T9176] netlink: 'syz.2.919': attribute type 10 has an invalid length. [ 292.068585][ T9178] binder: BINDER_SET_CONTEXT_MGR already set [ 292.075465][ T9178] binder: 9177:9178 ioctl 4018620d 200000000100 returned -16 [ 292.082161][ T9037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.093351][ T9037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.125576][ T30] audit: type=1400 audit(2000000067.560:438): avc: denied { call } for pid=9177 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 292.182942][ T9037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.203219][ T9037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.210166][ T9037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.278588][ T9037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.389922][ T9187] FAULT_INJECTION: forcing a failure. [ 292.389922][ T9187] name failslab, interval 1, probability 0, space 0, times 0 [ 292.406785][ T1133] IPVS: stop unused estimator thread 0... [ 292.446618][ T9187] CPU: 1 UID: 0 PID: 9187 Comm: syz.1.922 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.446648][ T9187] Tainted: [L]=SOFTLOCKUP [ 292.446655][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.446665][ T9187] Call Trace: [ 292.446671][ T9187] [ 292.446678][ T9187] dump_stack_lvl+0x16c/0x1f0 [ 292.446711][ T9187] should_fail_ex+0x512/0x640 [ 292.446731][ T9187] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 292.446756][ T9187] should_failslab+0xc2/0x120 [ 292.446780][ T9187] kmem_cache_alloc_noprof+0x83/0x770 [ 292.446799][ T9187] ? skb_clone+0x190/0x3f0 [ 292.446827][ T9187] ? skb_clone+0x190/0x3f0 [ 292.446847][ T9187] skb_clone+0x190/0x3f0 [ 292.446871][ T9187] netlink_deliver_tap+0xabd/0xd30 [ 292.446902][ T9187] netlink_unicast+0x71f/0x870 [ 292.446932][ T9187] ? __pfx_netlink_unicast+0x10/0x10 [ 292.446959][ T9187] ? genl_rcv_msg+0x4bb/0x800 [ 292.446984][ T9187] netlink_ack+0x696/0xb80 [ 292.447018][ T9187] netlink_rcv_skb+0x332/0x420 [ 292.447044][ T9187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.447063][ T9187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.447100][ T9187] ? netlink_deliver_tap+0x1ae/0xd30 [ 292.447128][ T9187] genl_rcv+0x28/0x40 [ 292.447144][ T9187] netlink_unicast+0x5aa/0x870 [ 292.447174][ T9187] ? __pfx_netlink_unicast+0x10/0x10 [ 292.447210][ T9187] netlink_sendmsg+0x8c8/0xdd0 [ 292.447240][ T9187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.447278][ T9187] ____sys_sendmsg+0xa5d/0xc30 [ 292.447308][ T9187] ? copy_msghdr_from_user+0x10a/0x160 [ 292.447331][ T9187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.447378][ T9187] ___sys_sendmsg+0x134/0x1d0 [ 292.447404][ T9187] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.447467][ T9187] __sys_sendmsg+0x16d/0x220 [ 292.447491][ T9187] ? __pfx___sys_sendmsg+0x10/0x10 [ 292.447535][ T9187] do_syscall_64+0xcd/0xf80 [ 292.447564][ T9187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.447583][ T9187] RIP: 0033:0x7fd2b798f749 [ 292.447598][ T9187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.447615][ T9187] RSP: 002b:00007fd2b8793038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.447633][ T9187] RAX: ffffffffffffffda RBX: 00007fd2b7be5fa0 RCX: 00007fd2b798f749 [ 292.447648][ T9187] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 292.447660][ T9187] RBP: 00007fd2b8793090 R08: 0000000000000000 R09: 0000000000000000 [ 292.447671][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.447682][ T9187] R13: 00007fd2b7be6038 R14: 00007fd2b7be5fa0 R15: 00007fff8436b878 [ 292.447709][ T9187] [ 292.796357][ T9037] hsr_slave_0: entered promiscuous mode [ 292.881778][ T9037] hsr_slave_1: entered promiscuous mode [ 293.446269][ T9198] evm: overlay not supported [ 294.307874][ T9209] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 294.317253][ T9209] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 294.327310][ T9209] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 294.333383][ T30] audit: type=1800 audit(2000000069.740:439): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.2.927" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 294.451502][ T9037] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 294.500684][ T30] audit: type=1400 audit(2000000069.740:440): avc: denied { firmware_load } for pid=9202 comm="syz.2.927" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 294.539166][ T9037] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 294.606673][ T30] audit: type=1400 audit(2000000069.760:441): avc: denied { firmware_load } for pid=9202 comm="syz.2.927" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 294.607861][ T9037] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 296.393006][ T9037] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 296.923290][ T5884] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 296.945480][ T9037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.325564][ T9037] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.363352][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.370503][ T4547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.401180][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.408307][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.805701][ T5884] usb 2-1: unable to get BOS descriptor or descriptor too short [ 297.819820][ T5884] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 297.861674][ T5884] usb 2-1: can't read configurations, error -71 [ 298.333306][ T9037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.591867][ T30] audit: type=1400 audit(2000000074.030:442): avc: denied { listen } for pid=9290 comm="syz.1.942" lport=56039 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.108724][ T30] audit: type=1400 audit(2000000074.030:443): avc: denied { accept } for pid=9290 comm="syz.1.942" lport=56039 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.531797][ T30] audit: type=1400 audit(2000000074.030:444): avc: denied { write } for pid=9290 comm="syz.1.942" lport=56039 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 299.906843][ T30] audit: type=1400 audit(2000000075.340:445): avc: denied { ioctl } for pid=9314 comm="syz.2.946" path="socket:[21357]" dev="sockfs" ino=21357 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 299.934824][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 300.046860][ T9310] syz.0.944 (9310): drop_caches: 2 [ 300.466470][ T9037] veth0_vlan: entered promiscuous mode [ 300.629382][ T9037] veth1_vlan: entered promiscuous mode [ 301.250029][ T9037] veth0_macvtap: entered promiscuous mode [ 301.379285][ T9037] veth1_macvtap: entered promiscuous mode [ 301.597909][ T9037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.713605][ T9037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.758606][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.894100][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.935515][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.953308][ T30] audit: type=1400 audit(2000000077.390:446): avc: denied { read } for pid=9354 comm="syz.2.954" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 302.005898][ T30] audit: type=1400 audit(2000000077.410:447): avc: denied { open } for pid=9354 comm="syz.2.954" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 302.031838][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.183755][ T30] audit: type=1400 audit(2000000077.430:448): avc: denied { map } for pid=9354 comm="syz.2.954" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.349996][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.361290][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.450722][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.476657][ T5189] Dev loop6: unable to read RDB block 1 [ 302.492620][ T5189] loop6: unable to read partition table [ 302.502027][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.516115][ T5189] loop6: partition table beyond EOD, truncated [ 302.738426][ T30] audit: type=1400 audit(2000000078.170:449): avc: denied { mounton } for pid=9037 comm="syz-executor" path="/root/syzkaller.qQ6LZG/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 302.914535][ T9369] lo speed is unknown, defaulting to 1000 [ 303.059648][ T30] audit: type=1400 audit(2000000078.200:450): avc: denied { mounton } for pid=9037 comm="syz-executor" path="/root/syzkaller.qQ6LZG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 303.094092][ T30] audit: type=1400 audit(2000000078.200:451): avc: denied { mounton } for pid=9037 comm="syz-executor" path="/root/syzkaller.qQ6LZG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 303.631073][ T30] audit: type=1400 audit(2000000079.060:452): avc: denied { mounton } for pid=9037 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 306.441718][ T48] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 307.068808][ T9405] syz.0.962 (9405): drop_caches: 2 [ 308.321681][ T48] usb 3-1: device descriptor read/64, error -71 [ 308.582392][ T48] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 308.863346][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.905813][ T48] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 308.922550][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.935899][ T48] usb 3-1: config 0 descriptor?? [ 309.678105][ T48] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 309.714626][ T48] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000B/input/input7 [ 309.975489][ T48] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 310.613596][ T9467] syz.5.979 (9467): drop_caches: 2 [ 311.007149][ T48] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 311.165435][ T48] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 311.193165][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.215788][ T48] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 311.234703][ T48] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 311.246095][ T48] usb 2-1: Manufacturer: syz [ 311.314896][ T48] usb 2-1: config 0 descriptor?? [ 311.461663][ T48] rc_core: IR keymap rc-hauppauge not found [ 311.511231][ T48] Registered IR keymap rc-empty [ 311.537017][ T30] audit: type=1400 audit(2000000086.960:453): avc: denied { getopt } for pid=9462 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 311.559182][ T48] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 311.573714][ T9458] lo speed is unknown, defaulting to 1000 [ 311.588451][ T48] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 311.673627][ T30] audit: type=1400 audit(2000000087.100:454): avc: denied { listen } for pid=9480 comm="syz.0.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 312.046627][ T30] audit: type=1400 audit(2000000087.140:455): avc: denied { accept } for pid=9480 comm="syz.0.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 313.122248][ T9506] FAULT_INJECTION: forcing a failure. [ 313.122248][ T9506] name failslab, interval 1, probability 0, space 0, times 0 [ 313.201576][ T9506] CPU: 0 UID: 0 PID: 9506 Comm: syz.5.987 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.201613][ T9506] Tainted: [L]=SOFTLOCKUP [ 313.201619][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.201630][ T9506] Call Trace: [ 313.201636][ T9506] [ 313.201644][ T9506] dump_stack_lvl+0x16c/0x1f0 [ 313.201677][ T9506] should_fail_ex+0x512/0x640 [ 313.201697][ T9506] ? __kmalloc_cache_noprof+0x5f/0x800 [ 313.201729][ T9506] should_failslab+0xc2/0x120 [ 313.201752][ T9506] __kmalloc_cache_noprof+0x80/0x800 [ 313.201780][ T9506] ? rcu_is_watching+0x12/0xc0 [ 313.201797][ T9506] ? call_usermodehelper_setup+0xaf/0x360 [ 313.201823][ T9506] ? __pfx_free_modprobe_argv+0x10/0x10 [ 313.201850][ T9506] ? call_usermodehelper_setup+0xaf/0x360 [ 313.201873][ T9506] call_usermodehelper_setup+0xaf/0x360 [ 313.201901][ T9506] __request_module+0x3bd/0x660 [ 313.201929][ T9506] ? __pfx___request_module+0x10/0x10 [ 313.201963][ T9506] ? find_held_lock+0x2b/0x80 [ 313.201991][ T9506] ? rtnl_link_ops_get+0x17b/0x2c0 [ 313.202021][ T9506] rtnl_newlink+0x1396/0x1f50 [ 313.202054][ T9506] ? __pfx_rtnl_newlink+0x10/0x10 [ 313.202083][ T9506] ? find_held_lock+0x2b/0x80 [ 313.202110][ T9506] ? avc_has_perm_noaudit+0x117/0x3b0 [ 313.202136][ T9506] ? avc_has_perm_noaudit+0x149/0x3b0 [ 313.202179][ T9506] ? find_held_lock+0x2b/0x80 [ 313.202203][ T9506] ? __pfx_rtnl_newlink+0x10/0x10 [ 313.202226][ T9506] ? __pfx_rtnl_newlink+0x10/0x10 [ 313.202248][ T9506] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 313.202273][ T9506] ? __pfx_rtnl_newlink+0x10/0x10 [ 313.202297][ T9506] rtnetlink_rcv_msg+0x95e/0xe90 [ 313.202323][ T9506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 313.202353][ T9506] ? ref_tracker_free+0x37c/0x830 [ 313.202377][ T9506] netlink_rcv_skb+0x158/0x420 [ 313.202403][ T9506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 313.202429][ T9506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 313.202464][ T9506] ? netlink_deliver_tap+0x1ae/0xd30 [ 313.202494][ T9506] netlink_unicast+0x5aa/0x870 [ 313.202523][ T9506] ? __pfx_netlink_unicast+0x10/0x10 [ 313.202559][ T9506] netlink_sendmsg+0x8c8/0xdd0 [ 313.202590][ T9506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.202625][ T9506] ____sys_sendmsg+0xa5d/0xc30 [ 313.202654][ T9506] ? copy_msghdr_from_user+0x10a/0x160 [ 313.202677][ T9506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.202715][ T9506] ___sys_sendmsg+0x134/0x1d0 [ 313.202739][ T9506] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.202793][ T9506] __sys_sendmsg+0x16d/0x220 [ 313.202816][ T9506] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.202856][ T9506] do_syscall_64+0xcd/0xf80 [ 313.202884][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.202902][ T9506] RIP: 0033:0x7fb742f8f749 [ 313.202918][ T9506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.202935][ T9506] RSP: 002b:00007fb743e09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.202953][ T9506] RAX: ffffffffffffffda RBX: 00007fb7431e6090 RCX: 00007fb742f8f749 [ 313.202965][ T9506] RDX: 000000000000c084 RSI: 0000200000000200 RDI: 0000000000000003 [ 313.202976][ T9506] RBP: 00007fb743e09090 R08: 0000000000000000 R09: 0000000000000000 [ 313.202986][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.202997][ T9506] R13: 00007fb7431e6128 R14: 00007fb7431e6090 R15: 00007ffc5bd14cc8 [ 313.203023][ T9506] [ 313.734739][ T9512] random: crng reseeded on system resumption [ 313.790215][ T30] audit: type=1400 audit(2000000089.180:456): avc: denied { read write } for pid=9511 comm="syz.5.989" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 313.864436][ T868] usb 3-1: USB disconnect, device number 21 [ 314.792201][ T30] audit: type=1400 audit(2000000089.180:457): avc: denied { open } for pid=9511 comm="syz.5.989" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 314.883583][ T1205] usb 2-1: USB disconnect, device number 24 [ 315.802126][ T9543] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.996'. [ 316.453961][ T9557] pimreg: entered allmulticast mode [ 316.610932][ T9534] lo speed is unknown, defaulting to 1000 [ 316.736409][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.744512][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.131816][ T868] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 318.734758][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1006'. [ 318.777745][ T30] audit: type=1400 audit(2000000094.210:458): avc: denied { write } for pid=9601 comm="syz.5.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 318.838396][ T868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 318.857105][ T868] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 318.875137][ T868] usb 3-1: can't read configurations, error -71 [ 319.477865][ T9624] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1007'. [ 319.989903][ T30] audit: type=1400 audit(2000000095.420:459): avc: denied { map } for pid=9631 comm="syz.2.1010" path="socket:[23973]" dev="sockfs" ino=23973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 321.156546][ T30] audit: type=1400 audit(2000000095.450:460): avc: denied { read accept } for pid=9631 comm="syz.2.1010" path="socket:[23973]" dev="sockfs" ino=23973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 321.182108][ T868] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 321.405715][ T868] usb 6-1: config 252 has an invalid interface number: 136 but max is 0 [ 321.951840][ T868] usb 6-1: config 252 has no interface number 0 [ 321.973045][ T868] usb 6-1: config 252 interface 136 has no altsetting 0 [ 321.995597][ T868] usb 6-1: New USB device found, idVendor=152d, idProduct=0578, bcdDevice= e.6d [ 322.008332][ T868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.064648][ T868] usb 6-1: Product: syz [ 322.085326][ T868] usb 6-1: Manufacturer: syz [ 322.095272][ T868] usb 6-1: SerialNumber: syz [ 322.112734][ T868] usb-storage 6-1:252.136: USB Mass Storage device detected [ 322.226974][ T868] usb-storage 6-1:252.136: Quirks match for vid 152d pid 0578: 1000000 [ 322.375934][ T9638] netlink: 'syz.5.1009': attribute type 2 has an invalid length. [ 322.398989][ T9638] netlink: 'syz.5.1009': attribute type 1 has an invalid length. [ 322.421758][ T9638] netlink: 'syz.5.1009': attribute type 1 has an invalid length. [ 322.429540][ T9638] netlink: 'syz.5.1009': attribute type 2 has an invalid length. [ 322.570597][ T9638] netlink: 'syz.5.1009': attribute type 1 has an invalid length. [ 322.585908][ T9638] netlink: 'syz.5.1009': attribute type 1 has an invalid length. [ 322.925660][ T9665] lo speed is unknown, defaulting to 1000 [ 322.987803][ T5896] usb 6-1: USB disconnect, device number 2 [ 323.399516][ T9670] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1020'. [ 324.082674][ T9677] netlink: 'syz.5.1021': attribute type 4 has an invalid length. [ 324.528504][ T30] audit: type=1400 audit(2000000099.960:461): avc: denied { load_policy } for pid=9676 comm="syz.5.1021" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 324.557032][ T9681] SELinux: failed to load policy [ 324.631907][ T8845] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 325.012255][ T8845] usb 3-1: Using ep0 maxpacket: 32 [ 325.026281][ T8845] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 325.037831][ T8845] usb 3-1: config 0 has no interface number 0 [ 325.044128][ T8845] usb 3-1: config 0 interface 196 has no altsetting 0 [ 325.055490][ T8845] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 325.066933][ T8845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.075256][ T8845] usb 3-1: Product: syz [ 325.079585][ T8845] usb 3-1: Manufacturer: syz [ 325.098263][ T8845] usb 3-1: SerialNumber: syz [ 325.111982][ T8845] usb 3-1: config 0 descriptor?? [ 325.120331][ T30] audit: type=1400 audit(2000000100.540:462): avc: denied { name_bind } for pid=9687 comm="syz.5.1024" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 325.523054][ T9694] netlink: 'syz.2.1022': attribute type 13 has an invalid length. [ 325.637489][ T30] audit: type=1400 audit(2000000100.850:463): avc: denied { getopt } for pid=9679 comm="syz.2.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 326.212249][ T9699] loop2: detected capacity change from 0 to 7 [ 326.223625][ T9699] Dev loop2: unable to read RDB block 7 [ 326.230297][ T9699] loop2: AHDI p2 p3 [ 326.234312][ T9699] loop2: partition table partially beyond EOD, truncated [ 326.243313][ T9699] loop2: p2 start 1702059890 is beyond EOD, truncated [ 326.470631][ T30] audit: type=1400 audit(2000000101.900:464): avc: denied { open } for pid=9700 comm="syz.5.1026" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 326.594132][ T9704] FAULT_INJECTION: forcing a failure. [ 326.594132][ T9704] name failslab, interval 1, probability 0, space 0, times 0 [ 326.607248][ T9704] CPU: 0 UID: 0 PID: 9704 Comm: syz.5.1026 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.607278][ T9704] Tainted: [L]=SOFTLOCKUP [ 326.607284][ T9704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.607295][ T9704] Call Trace: [ 326.607301][ T9704] [ 326.607308][ T9704] dump_stack_lvl+0x16c/0x1f0 [ 326.607339][ T9704] should_fail_ex+0x512/0x640 [ 326.607359][ T9704] ? __kmalloc_noprof+0xca/0x910 [ 326.607389][ T9704] should_failslab+0xc2/0x120 [ 326.607414][ T9704] __kmalloc_noprof+0xeb/0x910 [ 326.607441][ T9704] ? ovl_splice_write+0x3c5/0x6c0 [ 326.607460][ T9704] ? copy_splice_read+0x1a8/0xc20 [ 326.607489][ T9704] ? copy_splice_read+0x1a8/0xc20 [ 326.607513][ T9704] copy_splice_read+0x1a8/0xc20 [ 326.607539][ T9704] ? ovl_splice_write+0x3c5/0x6c0 [ 326.607562][ T9704] ? __pfx_copy_splice_read+0x10/0x10 [ 326.607585][ T9704] ? __pfx_ovl_splice_write+0x10/0x10 [ 326.607606][ T9704] ? __pfx_ovl_file_end_write+0x10/0x10 [ 326.607630][ T9704] ? find_held_lock+0x2b/0x80 [ 326.607662][ T9704] ? __pfx_ovl_splice_read+0x10/0x10 [ 326.607682][ T9704] do_splice_read+0x2bd/0x370 [ 326.607710][ T9704] splice_direct_to_actor+0x2a1/0xa30 [ 326.607736][ T9704] ? __pfx_direct_splice_actor+0x10/0x10 [ 326.607766][ T9704] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 326.607791][ T9704] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 326.607816][ T9704] ? lockdep_hardirqs_on+0x7c/0x110 [ 326.607844][ T9704] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 326.607872][ T9704] do_splice_direct+0x174/0x240 [ 326.607898][ T9704] ? __pfx_do_splice_direct+0x10/0x10 [ 326.607924][ T9704] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 326.607954][ T9704] ? rw_verify_area+0xcf/0x6c0 [ 326.607977][ T9704] do_sendfile+0xb06/0xe50 [ 326.608003][ T9704] ? __pfx_do_sendfile+0x10/0x10 [ 326.608037][ T9704] __x64_sys_sendfile64+0x154/0x220 [ 326.608065][ T9704] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 326.608099][ T9704] do_syscall_64+0xcd/0xf80 [ 326.608129][ T9704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.608146][ T9704] RIP: 0033:0x7fb742f8f749 [ 326.608162][ T9704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.608180][ T9704] RSP: 002b:00007fb743e09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 326.608197][ T9704] RAX: ffffffffffffffda RBX: 00007fb7431e6090 RCX: 00007fb742f8f749 [ 326.608209][ T9704] RDX: 0000200000000080 RSI: 0000000000000008 RDI: 0000000000000008 [ 326.608221][ T9704] RBP: 00007fb743e09090 R08: 0000000000000000 R09: 0000000000000000 [ 326.608231][ T9704] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 326.608243][ T9704] R13: 00007fb7431e6128 R14: 00007fb7431e6090 R15: 00007ffc5bd14cc8 [ 326.608268][ T9704] [ 327.111831][ T30] audit: type=1800 audit(2000000102.020:465): pid=9704 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1026" name="bus" dev="overlay" ino=107 res=0 errno=0 [ 327.406762][ T9712] fuse: Unknown parameter 'f¿l0x000000000000000a' [ 328.527675][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.535735][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.812285][ T5979] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 328.971706][ T5979] usb 4-1: Using ep0 maxpacket: 16 [ 328.978220][ T5979] usb 4-1: config 0 has an invalid interface number: 236 but max is 1 [ 328.990164][ T5979] usb 4-1: config 0 has an invalid interface number: 129 but max is 1 [ 329.012544][ T5979] usb 4-1: config 0 has no interface number 0 [ 329.026150][ T5979] usb 4-1: config 0 has no interface number 1 [ 329.040735][ T5979] usb 4-1: config 0 interface 236 has no altsetting 0 [ 329.051703][ T9705] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 329.061894][ T5828] Bluetooth: hci0: command 0x080f tx timeout [ 329.068279][ T5979] usb 4-1: config 0 interface 129 has no altsetting 0 [ 329.085351][ T5979] usb 4-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 329.098453][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.127020][ T5979] usb 4-1: Product: syz [ 329.131248][ T5979] usb 4-1: Manufacturer: syz [ 329.135962][ T5979] usb 4-1: SerialNumber: syz [ 329.143602][ T5979] usb 4-1: config 0 descriptor?? [ 329.394205][ T5979] ir_usb 4-1:0.236: required endpoints missing [ 329.414378][ T5979] usb 4-1: selecting invalid altsetting 0 [ 329.425667][ T5979] uvcvideo 4-1:0.129: Found UVC 2.26 device syz (1ace:e9b2) [ 329.434153][ T5979] uvcvideo 4-1:0.129: No valid video chain found. [ 329.443496][ T5979] usb 4-1: USB disconnect, device number 28 [ 329.731009][ T9711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.762417][ T72] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.770801][ T72] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.853405][ T72] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.888369][ T72] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.922562][ T8845] ipheth 3-1:0.196: Unable to find endpoints [ 329.949694][ T9718] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 329.959299][ T8845] usb 3-1: USB disconnect, device number 24 [ 329.972158][ T9719] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1032'. [ 330.608039][ T30] audit: type=1400 audit(2000000106.040:466): avc: denied { create } for pid=9728 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 330.768473][ T30] audit: type=1400 audit(2000000106.200:467): avc: denied { connect } for pid=9717 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 330.774023][ T9739] netlink: 'syz.5.1031': attribute type 7 has an invalid length. [ 330.795982][ T9739] netlink: 'syz.5.1031': attribute type 8 has an invalid length. [ 331.084298][ T9746] FAULT_INJECTION: forcing a failure. [ 331.084298][ T9746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.097426][ T9746] CPU: 0 UID: 0 PID: 9746 Comm: syz.1.1040 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.097457][ T9746] Tainted: [L]=SOFTLOCKUP [ 331.097463][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.097474][ T9746] Call Trace: [ 331.097483][ T9746] [ 331.097491][ T9746] dump_stack_lvl+0x16c/0x1f0 [ 331.097524][ T9746] should_fail_ex+0x512/0x640 [ 331.097550][ T9746] _copy_to_user+0x32/0xd0 [ 331.097573][ T9746] simple_read_from_buffer+0xcb/0x170 [ 331.097601][ T9746] proc_fail_nth_read+0x197/0x240 [ 331.097621][ T9746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.097642][ T9746] ? rw_verify_area+0xcf/0x6c0 [ 331.097662][ T9746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.097681][ T9746] vfs_read+0x1e4/0xcf0 [ 331.097704][ T9746] ? __pfx___mutex_lock+0x10/0x10 [ 331.097725][ T9746] ? __pfx_vfs_read+0x10/0x10 [ 331.097753][ T9746] ? __fget_files+0x20e/0x3c0 [ 331.097776][ T9746] ? __up_read+0x250/0x700 [ 331.097808][ T9746] ksys_read+0x12a/0x250 [ 331.097829][ T9746] ? __pfx_ksys_read+0x10/0x10 [ 331.097852][ T9746] ? __x64_sys_quotactl_fd+0x378/0x540 [ 331.097885][ T9746] do_syscall_64+0xcd/0xf80 [ 331.097914][ T9746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.097934][ T9746] RIP: 0033:0x7fd2b798e15c [ 331.097950][ T9746] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 331.097967][ T9746] RSP: 002b:00007fd2b8772030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.097985][ T9746] RAX: ffffffffffffffda RBX: 00007fd2b7be6090 RCX: 00007fd2b798e15c [ 331.097997][ T9746] RDX: 000000000000000f RSI: 00007fd2b87720a0 RDI: 0000000000000007 [ 331.098008][ T9746] RBP: 00007fd2b8772090 R08: 0000000000000000 R09: 0000000000000000 [ 331.098018][ T9746] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 331.098035][ T9746] R13: 00007fd2b7be6128 R14: 00007fd2b7be6090 R15: 00007fff8436b878 [ 331.098062][ T9746] [ 331.295667][ T5929] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 331.409740][ T9747] syz.3.1041 (9747): drop_caches: 2 [ 332.024611][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 332.316299][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 332.329389][ T5929] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 332.339214][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.348551][ T5929] usb 3-1: config 0 descriptor?? [ 332.357132][ T9740] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 333.515121][ T9767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1048'. [ 334.050393][ T9778] Invalid logical block size (253) [ 334.113506][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 334.122917][ T9780] FAULT_INJECTION: forcing a failure. [ 334.122917][ T9780] name failslab, interval 1, probability 0, space 0, times 0 [ 334.138791][ T9780] CPU: 0 UID: 0 PID: 9780 Comm: syz.1.1052 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.138821][ T9780] Tainted: [L]=SOFTLOCKUP [ 334.138828][ T9780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.138839][ T9780] Call Trace: [ 334.138846][ T9780] [ 334.138853][ T9780] dump_stack_lvl+0x16c/0x1f0 [ 334.138887][ T9780] should_fail_ex+0x512/0x640 [ 334.138907][ T9780] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 334.138930][ T9780] should_failslab+0xc2/0x120 [ 334.138955][ T9780] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 334.138975][ T9780] ? alloc_inode+0x64/0x240 [ 334.139000][ T9780] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 334.139026][ T9780] ? alloc_inode+0x64/0x240 [ 334.139043][ T9780] alloc_inode+0x64/0x240 [ 334.139063][ T9780] new_inode+0x22/0x1c0 [ 334.139084][ T9780] __debugfs_create_file+0x105/0x530 [ 334.139114][ T9780] debugfs_create_file_full+0x41/0x60 [ 334.139144][ T9780] ? __pfx_vlan_setup+0x10/0x10 [ 334.139164][ T9780] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 334.139187][ T9780] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 334.139230][ T9780] ? alloc_netdev_mqs+0xd7/0x1550 [ 334.139256][ T9780] ? lockdep_init_map_type+0x5c/0x270 [ 334.139283][ T9780] alloc_netdev_mqs+0x314/0x1550 [ 334.139315][ T9780] rtnl_create_link+0xc08/0xf60 [ 334.139349][ T9780] rtnl_newlink+0xb3b/0x1f50 [ 334.139382][ T9780] ? __pfx_rtnl_newlink+0x10/0x10 [ 334.139405][ T9780] ? find_held_lock+0x2b/0x80 [ 334.139433][ T9780] ? avc_has_perm_noaudit+0x117/0x3b0 [ 334.139460][ T9780] ? avc_has_perm_noaudit+0x149/0x3b0 [ 334.139504][ T9780] ? find_held_lock+0x2b/0x80 [ 334.139529][ T9780] ? __pfx_rtnl_newlink+0x10/0x10 [ 334.139553][ T9780] ? __pfx_rtnl_newlink+0x10/0x10 [ 334.139574][ T9780] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 334.139600][ T9780] ? __pfx_rtnl_newlink+0x10/0x10 [ 334.139624][ T9780] rtnetlink_rcv_msg+0x95e/0xe90 [ 334.139651][ T9780] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 334.139684][ T9780] ? ref_tracker_free+0x37c/0x830 [ 334.139709][ T9780] netlink_rcv_skb+0x158/0x420 [ 334.139737][ T9780] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 334.139763][ T9780] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.139803][ T9780] ? netlink_deliver_tap+0x1ae/0xd30 [ 334.139834][ T9780] netlink_unicast+0x5aa/0x870 [ 334.139864][ T9780] ? __pfx_netlink_unicast+0x10/0x10 [ 334.139901][ T9780] netlink_sendmsg+0x8c8/0xdd0 [ 334.139931][ T9780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.139969][ T9780] ____sys_sendmsg+0xa5d/0xc30 [ 334.139999][ T9780] ? copy_msghdr_from_user+0x10a/0x160 [ 334.140023][ T9780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.140063][ T9780] ___sys_sendmsg+0x134/0x1d0 [ 334.140087][ T9780] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.140144][ T9780] __sys_sendmsg+0x16d/0x220 [ 334.140169][ T9780] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.140212][ T9780] do_syscall_64+0xcd/0xf80 [ 334.140243][ T9780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.140262][ T9780] RIP: 0033:0x7fd2b798f749 [ 334.140278][ T9780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.140295][ T9780] RSP: 002b:00007fd2b8793038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.140312][ T9780] RAX: ffffffffffffffda RBX: 00007fd2b7be5fa0 RCX: 00007fd2b798f749 [ 334.140324][ T9780] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 334.140340][ T9780] RBP: 00007fd2b8793090 R08: 0000000000000000 R09: 0000000000000000 [ 334.140350][ T9780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.140360][ T9780] R13: 00007fd2b7be6038 R14: 00007fd2b7be5fa0 R15: 00007fff8436b878 [ 334.140387][ T9780] [ 334.140446][ T9780] debugfs: out of free dentries, can not create file 'netdev@ffff888074f64618' [ 334.540665][ T9780] vlan0: entered promiscuous mode [ 334.555911][ T9780] syz_tun: entered promiscuous mode [ 335.219394][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 335.236506][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 335.271207][ T5929] usb 3-1: USB disconnect, device number 25 [ 335.378288][ T9790] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 335.981683][ T5929] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 336.141654][ T5929] usb 3-1: Invalid ep0 maxpacket: 64 [ 336.291983][ T5929] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 336.316247][ T5928] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 336.399231][ T9807] netlink: 'syz.1.1056': attribute type 7 has an invalid length. [ 336.407165][ T9807] netlink: 'syz.1.1056': attribute type 8 has an invalid length. [ 336.491067][ T5929] usb 3-1: Invalid ep0 maxpacket: 64 [ 336.577376][ T5929] usb usb3-port1: attempt power cycle [ 336.941751][ T5929] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 336.952858][ T5928] usb 6-1: unable to get BOS descriptor or descriptor too short [ 336.962935][ T5929] usb 3-1: Invalid ep0 maxpacket: 64 [ 336.963152][ T5928] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 337.011321][ T5928] usb 6-1: can't read configurations, error -71 [ 337.093294][ T5929] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 337.122711][ T5929] usb 3-1: Invalid ep0 maxpacket: 64 [ 337.300586][ T5929] usb usb3-port1: unable to enumerate USB device [ 337.622927][ T9817] syz.3.1061 (9817): drop_caches: 2 [ 341.393330][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1074'. [ 341.552776][ T9862] batadv_slave_0: Caught tx_queue_len zero misconfig [ 341.768398][ T9867] syz.0.1076 (9867): drop_caches: 2 [ 341.991494][ T30] audit: type=1400 audit(2000000117.420:468): avc: denied { listen } for pid=9858 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 342.017096][ T9851] lo speed is unknown, defaulting to 1000 [ 342.264338][ T9852] lo speed is unknown, defaulting to 1000 [ 342.682347][ T9859] syz.1.1074 (9859) used greatest stack depth: 19688 bytes left [ 342.866820][ T9877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1078'. [ 344.370405][ T9896] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1085'. [ 344.379433][ T5929] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 345.065825][ T5929] usb 3-1: device descriptor read/64, error -71 [ 345.088166][ T9902] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 345.124727][ T9902] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 345.178013][ T9902] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 345.191534][ T9902] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 345.201505][ T9902] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 345.209664][ T9902] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 345.219678][ T9902] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 345.227833][ T9902] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 345.236085][ T9902] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 345.245835][ T9902] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 345.311689][ T5929] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 345.451807][ T5929] usb 3-1: device descriptor read/64, error -71 [ 345.487360][ T9908] syz.5.1086 (9908): drop_caches: 2 [ 345.562349][ T5929] usb usb3-port1: attempt power cycle [ 345.975124][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 345.984254][ T9916] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1087'. [ 346.039732][ T30] audit: type=1400 audit(2000000121.410:469): avc: denied { getopt } for pid=9912 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 346.111707][ T5929] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 346.134235][ T9916] bridge1: entered promiscuous mode [ 346.152173][ T5929] usb 3-1: device descriptor read/8, error -71 [ 346.160322][ T9916] bridge1: entered allmulticast mode [ 347.810794][ T9939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1093'. [ 348.255338][ T9936] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9936 comm=syz.0.1093 [ 348.269518][ T9936] capability: warning: `syz.0.1093' uses deprecated v2 capabilities in a way that may be insecure [ 348.284940][ T30] audit: type=1400 audit(2000000123.720:470): avc: denied { name_bind } for pid=9934 comm="syz.0.1093" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 348.815392][ T3511] Bluetooth: (null): Invalid header checksum [ 349.112144][ T9918] lo speed is unknown, defaulting to 1000 [ 349.333141][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 349.765583][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 350.719892][ T9923] lo speed is unknown, defaulting to 1000 [ 350.942221][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 350.959157][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 350.968645][ T10] usb 6-1: can't read configurations, error -71 [ 351.214952][ T30] audit: type=1400 audit(2000000126.620:471): avc: denied { read } for pid=9971 comm="syz.3.1100" path="socket:[25666]" dev="sockfs" ino=25666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 351.935480][ T9986] syz.3.1104 (9986): drop_caches: 2 [ 353.468546][ T30] audit: type=1400 audit(2000000128.900:472): avc: denied { create } for pid=10004 comm="syz.1.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 354.336804][T10011] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1112'. [ 354.375639][T10015] syz.2.1111 (10015): drop_caches: 2 [ 354.441484][T10011] bridge: RTM_NEWNEIGH with invalid ether address [ 354.460233][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1109'. [ 355.096760][T10028] FAULT_INJECTION: forcing a failure. [ 355.096760][T10028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.110199][T10028] CPU: 0 UID: 0 PID: 10028 Comm: syz.5.1114 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.110229][T10028] Tainted: [L]=SOFTLOCKUP [ 355.110235][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.110246][T10028] Call Trace: [ 355.110251][T10028] [ 355.110258][T10028] dump_stack_lvl+0x16c/0x1f0 [ 355.110291][T10028] should_fail_ex+0x512/0x640 [ 355.110317][T10028] _copy_to_user+0x32/0xd0 [ 355.110338][T10028] simple_read_from_buffer+0xcb/0x170 [ 355.110366][T10028] proc_fail_nth_read+0x197/0x240 [ 355.110386][T10028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.110407][T10028] ? rw_verify_area+0xcf/0x6c0 [ 355.110427][T10028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.110445][T10028] vfs_read+0x1e4/0xcf0 [ 355.110468][T10028] ? __pfx___mutex_lock+0x10/0x10 [ 355.110488][T10028] ? __pfx_vfs_read+0x10/0x10 [ 355.110516][T10028] ? __fget_files+0x20e/0x3c0 [ 355.110549][T10028] ksys_read+0x12a/0x250 [ 355.110570][T10028] ? __pfx_ksys_read+0x10/0x10 [ 355.110599][T10028] do_syscall_64+0xcd/0xf80 [ 355.110627][T10028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.110645][T10028] RIP: 0033:0x7fb742f8e15c [ 355.110660][T10028] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 355.110678][T10028] RSP: 002b:00007fb743e2a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.110695][T10028] RAX: ffffffffffffffda RBX: 00007fb7431e5fa0 RCX: 00007fb742f8e15c [ 355.110707][T10028] RDX: 000000000000000f RSI: 00007fb743e2a0a0 RDI: 0000000000000004 [ 355.110717][T10028] RBP: 00007fb743e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 355.110727][T10028] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 355.110738][T10028] R13: 00007fb7431e6038 R14: 00007fb7431e5fa0 R15: 00007ffc5bd14cc8 [ 355.110763][T10028] [ 355.468918][T10035] /dev/nullb0: Can't open blockdev [ 356.392064][ T30] audit: type=1400 audit(2000000130.900:473): avc: denied { mounton } for pid=10034 comm="syz.2.1119" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 356.438689][T10036] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1118'. [ 356.491242][T10040] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1120'. [ 356.501574][ T30] audit: type=1400 audit(2000000131.930:474): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=36002 daddr=10.128.1.210 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.181954][T10045] validate_nla: 42 callbacks suppressed [ 357.181973][T10045] netlink: 'syz.3.1118': attribute type 3 has an invalid length. [ 357.250342][T10045] netlink: 'syz.3.1118': attribute type 3 has an invalid length. [ 357.270172][T10045] netlink: 'syz.3.1118': attribute type 3 has an invalid length. [ 357.298297][ T30] audit: type=1400 audit(2000000132.730:475): avc: denied { create } for pid=10051 comm="syz.0.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 357.341686][T10045] netlink: 'syz.3.1118': attribute type 3 has an invalid length. [ 357.349459][T10045] netlink: 'syz.3.1118': attribute type 3 has an invalid length. [ 357.360340][ T30] audit: type=1400 audit(2000000132.730:476): avc: denied { bind } for pid=10051 comm="syz.0.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 357.411913][T10045] netlink: 'syz.3.1118': attribute type 3 has an invalid length. [ 357.419755][T10045] netlink: 'syz.3.1118': attribute type 3 has an invalid length. [ 357.455996][T10045] netlink: 'syz.3.1118': attribute type 3 has an invalid length. [ 357.481967][T10045] netlink: 'syz.3.1118': attribute type 3 has an invalid length. [ 357.489776][T10045] netlink: 'syz.3.1118': attribute type 3 has an invalid length. [ 357.531862][ T5877] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 357.740617][ T30] audit: type=1400 audit(2000000133.170:477): avc: denied { connect } for pid=10061 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 357.780646][ T30] audit: type=1400 audit(2000000133.200:478): avc: denied { write } for pid=10061 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 357.860811][ T30] audit: type=1400 audit(2000000133.290:479): avc: denied { sys_module } for pid=10061 comm="syz.3.1125" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 357.962461][ T7933] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 358.029886][T10074] FAULT_INJECTION: forcing a failure. [ 358.029886][T10074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.050402][T10074] CPU: 0 UID: 0 PID: 10074 Comm: syz.2.1122 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.050422][T10074] Tainted: [L]=SOFTLOCKUP [ 358.050425][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.050432][T10074] Call Trace: [ 358.050436][T10074] [ 358.050441][T10074] dump_stack_lvl+0x16c/0x1f0 [ 358.050462][T10074] should_fail_ex+0x512/0x640 [ 358.050480][T10074] _copy_from_user+0x2e/0xd0 [ 358.050493][T10074] kstrtouint_from_user+0xd6/0x1d0 [ 358.050509][T10074] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 358.050524][T10074] ? __lock_acquire+0x436/0x2890 [ 358.050539][T10074] ? lock_acquire+0x179/0x330 [ 358.050555][T10074] proc_fail_nth_write+0x83/0x220 [ 358.050568][T10074] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 358.050582][T10074] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 358.050593][T10074] vfs_write+0x2a0/0x11d0 [ 358.050608][T10074] ? __pfx___mutex_lock+0x10/0x10 [ 358.050620][T10074] ? __pfx_vfs_write+0x10/0x10 [ 358.050636][T10074] ? __fget_files+0x20e/0x3c0 [ 358.050656][T10074] ksys_write+0x12a/0x250 [ 358.050669][T10074] ? __pfx_ksys_write+0x10/0x10 [ 358.050686][T10074] do_syscall_64+0xcd/0xf80 [ 358.050704][T10074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.050716][T10074] RIP: 0033:0x7fabae18e1ff [ 358.050725][T10074] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 358.050736][T10074] RSP: 002b:00007fabaf0f4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 358.050747][T10074] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fabae18e1ff [ 358.050754][T10074] RDX: 0000000000000001 RSI: 00007fabaf0f40a0 RDI: 0000000000000004 [ 358.050760][T10074] RBP: 00007fabaf0f4090 R08: 0000000000000000 R09: 0000000000000000 [ 358.050767][T10074] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 358.050773][T10074] R13: 00007fabae3e6038 R14: 00007fabae3e5fa0 R15: 00007ffe980434b8 [ 358.050787][T10074] [ 358.311851][ T7933] usb 6-1: Invalid ep0 maxpacket: 64 [ 358.593476][ T5877] usb 2-1: unable to get BOS descriptor or descriptor too short [ 358.620725][ T5877] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 358.628373][ T7933] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 358.638470][ T5877] usb 2-1: can't read configurations, error -71 [ 358.735029][ T30] audit: type=1400 audit(2000000134.160:480): avc: denied { append } for pid=10079 comm="syz.2.1129" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 358.811919][ T7933] usb 6-1: Invalid ep0 maxpacket: 64 [ 358.817781][ T7933] usb usb6-port1: attempt power cycle [ 359.177901][ T7933] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 359.261198][ T7933] usb 6-1: Invalid ep0 maxpacket: 64 [ 359.443416][ T7933] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 359.487323][ T7933] usb 6-1: Invalid ep0 maxpacket: 64 [ 359.499451][ T7933] usb usb6-port1: unable to enumerate USB device [ 360.276126][T10103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1135'. [ 360.757010][T10117] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1137'. [ 360.775706][T10117] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1137'. [ 361.329305][ T30] audit: type=1400 audit(2000000136.760:481): avc: denied { set_context_mgr } for pid=10127 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 361.522821][ T30] audit: type=1400 audit(2000000136.960:482): avc: denied { append } for pid=10124 comm="syz.3.1140" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 361.736980][T10132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.771937][T10132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.643361][T10132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.644538][T10132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.138687][T10092] lo speed is unknown, defaulting to 1000 [ 363.547315][T10151] validate_nla: 84 callbacks suppressed [ 363.547331][T10151] netlink: 'syz.5.1147': attribute type 4 has an invalid length. [ 363.597518][ T8845] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 363.775627][ T8845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.787146][ T8845] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 363.796906][ T8845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.807678][ T8845] usb 2-1: config 0 descriptor?? [ 363.921738][ T7933] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 364.016471][ T8845] usbhid 2-1:0.0: can't add hid device: -71 [ 364.022666][ T8845] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 364.033060][ T8845] usb 2-1: USB disconnect, device number 27 [ 364.081818][ T7933] usb 6-1: Using ep0 maxpacket: 8 [ 364.089196][ T7933] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 364.099984][ T7933] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 364.109173][ T7933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.117252][ T7933] usb 6-1: Product: syz [ 364.121490][ T7933] usb 6-1: Manufacturer: syz [ 364.126398][ T7933] usb 6-1: SerialNumber: syz [ 364.134214][ T7933] usb 6-1: config 0 descriptor?? [ 364.141313][ T7933] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 364.149534][ T7933] usb 6-1: setting power ON [ 364.154392][ T7933] dvb-usb: bulk message failed: -22 (2/0) [ 364.163339][ T7933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 364.173065][ T7933] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 364.181570][ T7933] usb 6-1: media controller created [ 364.193506][ T7933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.208733][ T7933] usb 6-1: selecting invalid altsetting 6 [ 364.215581][ T7933] usb 6-1: digital interface selection failed (-22) [ 364.222246][ T7933] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 364.233201][ T7933] usb 6-1: setting power OFF [ 364.238109][ T7933] dvb-usb: bulk message failed: -22 (2/0) [ 364.245219][ T7933] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 364.254594][ T7933] (NULL device *): no alternate interface [ 364.270109][ T7933] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 364.336246][T10158] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1150'. [ 364.408885][ T8845] usb 6-1: USB disconnect, device number 11 [ 364.426388][T10160] netlink: 'syz.0.1150': attribute type 3 has an invalid length. [ 364.434338][T10160] netlink: 'syz.0.1150': attribute type 3 has an invalid length. [ 364.443381][T10160] netlink: 'syz.0.1150': attribute type 3 has an invalid length. [ 364.451235][T10160] netlink: 'syz.0.1150': attribute type 3 has an invalid length. [ 364.461757][T10160] netlink: 'syz.0.1150': attribute type 3 has an invalid length. [ 364.469698][T10160] netlink: 'syz.0.1150': attribute type 3 has an invalid length. [ 364.477760][T10160] netlink: 'syz.0.1150': attribute type 3 has an invalid length. [ 364.485850][T10160] netlink: 'syz.0.1150': attribute type 3 has an invalid length. [ 364.491668][ T7933] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 364.502355][T10160] netlink: 'syz.0.1150': attribute type 3 has an invalid length. [ 364.651690][ T7933] usb 2-1: Using ep0 maxpacket: 32 [ 364.658333][ T7933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.669472][ T7933] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 364.678768][ T7933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.689010][ T7933] usb 2-1: config 0 descriptor?? [ 364.696785][ T7933] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 364.707917][ T7933] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 364.914991][ T30] audit: type=1400 audit(2000000140.350:483): avc: denied { read } for pid=10152 comm="syz.1.1148" path="socket:[25147]" dev="sockfs" ino=25147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 365.277457][ T5929] usb 2-1: USB disconnect, device number 28 [ 365.343871][ T5929] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 365.455923][T10183] syz.5.1157 (10183): drop_caches: 2 [ 366.131926][ T8845] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 366.838853][ T8845] usb 3-1: Using ep0 maxpacket: 8 [ 366.855297][ T8845] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 366.881671][ T8845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.955869][ T8845] pvrusb2: Hardware description: Terratec Grabster AV400 [ 366.987867][ T8845] pvrusb2: ********** [ 366.989673][T10196] team_slave_0: entered promiscuous mode [ 366.997839][T10196] team_slave_1: entered promiscuous mode [ 367.003548][T10196] geneve0: entered promiscuous mode [ 367.032456][ T8845] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 367.033124][T10196] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 367.070604][ T8845] pvrusb2: Important functionality might not be entirely working. [ 367.092349][ T8845] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 367.103828][ T30] audit: type=1400 audit(2000000142.530:484): avc: denied { relabelfrom } for pid=10199 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 367.103874][ T30] audit: type=1400 audit(2000000142.530:485): avc: denied { relabelto } for pid=10199 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 367.171017][ T8845] pvrusb2: ********** [ 367.204493][ T30] audit: type=1400 audit(2000000142.640:486): avc: denied { attach_queue } for pid=10199 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 367.224902][ T2337] pvrusb2: Invalid write control endpoint [ 367.380433][ T2337] pvrusb2: Invalid write control endpoint [ 367.455134][T10209] sp0: Synchronizing with TNC [ 367.497905][ T30] audit: type=1400 audit(2000000142.920:487): avc: denied { mount } for pid=10207 comm="syz.0.1166" name="/" dev="rpc_pipefs" ino=26118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 367.581931][ T5884] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 367.642250][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 368.301744][ T30] audit: type=1400 audit(2000000143.410:488): avc: denied { connect } for pid=10172 comm="syz.2.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 368.312296][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 368.331844][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 368.342234][ T2337] pvrusb2: Device being rendered inoperable [ 368.368676][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 368.381821][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 368.417499][ T5884] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 368.444250][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 368.484248][ T5884] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 368.565127][ T2337] pvrusb2: Attached sub-driver cx25840 [ 368.620105][ T5884] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 368.637710][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 368.765222][ T5884] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 368.765358][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 368.830381][ T5884] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 368.888704][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.969517][ T5884] usb 2-1: Product: syz [ 368.995318][ T5884] usb 2-1: Manufacturer: syz [ 369.104725][ T5884] usb 2-1: SerialNumber: syz [ 369.207322][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 369.241173][ T5884] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input9 [ 369.301985][T10211] [U] è` [ 369.419818][ T5877] usb 3-1: USB disconnect, device number 34 [ 369.471661][ T5884] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 369.480546][ T5884] (id 0x00) [ 369.560873][T10223] syz.0.1168 (10223): drop_caches: 2 [ 369.601697][ T5884] rc_core: IR keymap rc-imon-pad not found [ 369.710556][ T5884] Registered IR keymap rc-empty [ 369.718550][ T5884] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 369.731715][ T5884] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 370.247397][ T5884] imon:send_packet: packet tx failed (-71) [ 370.271756][ T5884] imon 2-1:155.0: remote input dev register failed [ 370.280627][ T5884] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 370.347893][ T5884] imon 2-1:155.0: unable to initialize intf0, err 0 [ 370.359172][ T5884] imon:imon_probe: failed to initialize context! [ 370.399978][ T5884] imon 2-1:155.0: unable to register, err -19 [ 370.428332][ T5884] usb 2-1: USB disconnect, device number 29 [ 370.646958][T10236] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1171'. [ 371.401422][ T30] audit: type=1400 audit(2000000146.830:489): avc: denied { getopt } for pid=10246 comm="syz.1.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 371.987971][T10245] lo speed is unknown, defaulting to 1000 [ 374.343699][T10287] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1182'. [ 374.441725][ T5929] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 374.449405][ T5926] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 374.622504][ T5926] usb 6-1: Invalid ep0 maxpacket: 64 [ 374.825325][ T5926] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 375.401729][ T5926] usb 6-1: Invalid ep0 maxpacket: 64 [ 375.408590][ T5926] usb usb6-port1: attempt power cycle [ 375.712125][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 375.749629][ T5929] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 375.779035][ T5929] usb 3-1: can't read configurations, error -71 [ 375.792058][ T5926] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 376.162773][ T5926] usb 6-1: Invalid ep0 maxpacket: 64 [ 376.322244][ T5926] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 376.393897][ T5926] usb 6-1: Invalid ep0 maxpacket: 64 [ 376.403612][ T5926] usb usb6-port1: unable to enumerate USB device [ 377.357100][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'. [ 377.443279][T10315] lo speed is unknown, defaulting to 1000 [ 377.632074][T10330] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1194'. [ 378.013045][T10343] atomic_op ffff888032b90998 conn xmit_atomic 0000000000000000 [ 378.185262][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.191612][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.256311][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 378.274696][ T5926] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 378.451833][ T5926] usb 6-1: Invalid ep0 maxpacket: 64 [ 378.461710][T10352] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1199'. [ 378.631705][ T5926] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 378.661948][T10357] validate_nla: 48 callbacks suppressed [ 378.661965][T10357] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 378.812100][T10357] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 378.822688][T10357] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 378.892341][ T5926] usb 6-1: Invalid ep0 maxpacket: 64 [ 378.900676][ T5926] usb usb6-port1: attempt power cycle [ 378.955079][T10357] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 378.989535][T10357] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 379.017847][T10357] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 379.029471][T10357] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 379.042152][T10357] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 379.078498][T10357] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 379.096350][T10357] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 379.241667][ T5929] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 379.251688][ T5926] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 379.303149][ T5926] usb 6-1: Invalid ep0 maxpacket: 64 [ 379.315426][ T5884] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 379.318419][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'. [ 379.472047][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 379.479981][ T5929] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 379.489163][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.509267][ T5929] pvrusb2: Hardware description: Terratec Grabster AV400 [ 379.611723][ T5884] usb 2-1: Invalid ep0 maxpacket: 64 [ 379.741740][ T5884] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 379.961613][ T5926] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 379.969256][ T5929] pvrusb2: ********** [ 379.973595][ T5929] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 379.992006][ T5929] pvrusb2: Important functionality might not be entirely working. [ 379.999903][ T5929] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 380.021954][ T5926] usb 6-1: Invalid ep0 maxpacket: 64 [ 380.027945][ T5926] usb usb6-port1: unable to enumerate USB device [ 380.114463][ T5929] pvrusb2: ********** [ 380.124037][ T2337] pvrusb2: Invalid write control endpoint [ 380.285888][ T5884] usb 2-1: Invalid ep0 maxpacket: 64 [ 380.294207][ T5884] usb usb2-port1: attempt power cycle [ 380.687585][ T30] audit: type=1400 audit(2000000156.090:490): avc: denied { getopt } for pid=10376 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.809040][ T2337] pvrusb2: Invalid write control endpoint [ 380.820994][ T30] audit: type=1400 audit(2000000156.090:491): avc: denied { map } for pid=10376 comm="syz.2.1204" path="socket:[26388]" dev="sockfs" ino=26388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.854952][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 380.899465][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 380.907257][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 380.918350][ T30] audit: type=1400 audit(2000000156.090:492): avc: denied { accept } for pid=10376 comm="syz.2.1204" path="socket:[26388]" dev="sockfs" ino=26388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.942648][ T2337] pvrusb2: Device being rendered inoperable [ 380.948796][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 380.956506][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 380.990884][ T2337] pvrusb2: Attached sub-driver cx25840 [ 381.147073][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 381.159146][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 381.211971][ T5884] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 381.222247][ T5926] usb 4-1: USB disconnect, device number 30 [ 381.233546][ T5884] usb 2-1: Invalid ep0 maxpacket: 64 [ 381.392468][ T5884] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 381.412826][ T5884] usb 2-1: Invalid ep0 maxpacket: 64 [ 381.419517][ T5884] usb usb2-port1: unable to enumerate USB device [ 381.543077][T10390] lo speed is unknown, defaulting to 1000 [ 381.741934][ T7933] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 381.841270][ T30] audit: type=1400 audit(2000000157.270:493): avc: denied { accept } for pid=10396 comm="syz.1.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 381.841920][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 381.937427][T10397] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.944681][T10397] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.163513][ T5929] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 382.787547][ T7933] usb 6-1: unable to get BOS descriptor or descriptor too short [ 382.796723][ T7933] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 382.804846][ T7933] usb 6-1: can't read configurations, error -71 [ 382.921049][T10413] sp0: Synchronizing with TNC [ 382.934791][T10422] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 383.029592][T10418] [U] è` [ 383.049598][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.057632][T10426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.070758][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.079407][T10426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.164935][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 383.185170][ T5929] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 383.193383][ T5929] usb 3-1: can't read configurations, error -71 [ 384.851444][T10441] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1217'. [ 385.081510][T10446] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1219'. [ 385.238105][T10449] validate_nla: 41 callbacks suppressed [ 385.238118][T10449] netlink: 'syz.3.1219': attribute type 3 has an invalid length. [ 385.257768][T10449] netlink: 'syz.3.1219': attribute type 3 has an invalid length. [ 385.403405][T10449] netlink: 'syz.3.1219': attribute type 3 has an invalid length. [ 385.491999][T10449] netlink: 'syz.3.1219': attribute type 3 has an invalid length. [ 385.501194][T10449] netlink: 'syz.3.1219': attribute type 3 has an invalid length. [ 385.525686][T10449] netlink: 'syz.3.1219': attribute type 3 has an invalid length. [ 385.541785][T10449] netlink: 'syz.3.1219': attribute type 3 has an invalid length. [ 385.819408][T10449] netlink: 'syz.3.1219': attribute type 3 has an invalid length. [ 385.827236][T10449] netlink: 'syz.3.1219': attribute type 3 has an invalid length. [ 385.835071][T10449] netlink: 'syz.3.1219': attribute type 3 has an invalid length. [ 385.857050][T10444] lo speed is unknown, defaulting to 1000 [ 385.980694][T10452] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1230'. [ 387.441342][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'. [ 387.923240][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 388.021114][T10484] FAULT_INJECTION: forcing a failure. [ 388.021114][T10484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.034278][T10484] CPU: 0 UID: 0 PID: 10484 Comm: syz.5.1228 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.034301][T10484] Tainted: [L]=SOFTLOCKUP [ 388.034305][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.034312][T10484] Call Trace: [ 388.034317][T10484] [ 388.034321][T10484] dump_stack_lvl+0x16c/0x1f0 [ 388.034342][T10484] should_fail_ex+0x512/0x640 [ 388.034358][T10484] _copy_from_iter+0x2a4/0x16c0 [ 388.034373][T10484] ? __alloc_skb+0x220/0x410 [ 388.034385][T10484] ? __alloc_skb+0x35d/0x410 [ 388.034396][T10484] ? __pfx__copy_from_iter+0x10/0x10 [ 388.034409][T10484] ? netlink_autobind.isra.0+0x158/0x370 [ 388.034431][T10484] netlink_sendmsg+0x820/0xdd0 [ 388.034450][T10484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.034471][T10484] ____sys_sendmsg+0xa5d/0xc30 [ 388.034490][T10484] ? copy_msghdr_from_user+0x10a/0x160 [ 388.034505][T10484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.034528][T10484] ___sys_sendmsg+0x134/0x1d0 [ 388.034543][T10484] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.034572][T10484] __sys_sendmsg+0x16d/0x220 [ 388.034587][T10484] ? __pfx___sys_sendmsg+0x10/0x10 [ 388.034609][T10484] do_syscall_64+0xcd/0xf80 [ 388.034627][T10484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.034639][T10484] RIP: 0033:0x7fb742f8f749 [ 388.034649][T10484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.034659][T10484] RSP: 002b:00007fb743e2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.034671][T10484] RAX: ffffffffffffffda RBX: 00007fb7431e5fa0 RCX: 00007fb742f8f749 [ 388.034678][T10484] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 388.034684][T10484] RBP: 00007fb743e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 388.034691][T10484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.034697][T10484] R13: 00007fb7431e6038 R14: 00007fb7431e5fa0 R15: 00007ffc5bd14cc8 [ 388.034711][T10484] [ 388.511507][ T30] audit: type=1400 audit(2000000163.940:494): avc: denied { listen } for pid=10468 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 389.419768][T10504] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1231'. [ 389.437298][T10506] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1234'. [ 389.513742][T10511] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1231'. [ 389.631712][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1231'. [ 389.860438][T10509] syz.2.1235 (10509): drop_caches: 2 [ 391.263864][T10521] syz.0.1236 (10521): drop_caches: 2 [ 392.379867][T10532] lo speed is unknown, defaulting to 1000 [ 393.247427][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'. [ 393.392098][T10550] Invalid source name [ 393.396080][T10550] UBIFS error (pid: 10550): cannot open "./file0", error -22 [ 393.396649][T10550] fuse: Bad value for 'fd' [ 393.482071][ T30] audit: type=1400 audit(2000000168.840:495): avc: denied { append } for pid=10549 comm="syz.3.1244" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 393.738432][T10556] siw: device registration error -23 [ 396.017410][T10580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1250'. [ 397.051970][T10580] validate_nla: 82 callbacks suppressed [ 397.051988][T10580] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 397.104793][T10580] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 397.149113][T10580] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 397.224855][ T30] audit: type=1326 audit(2000000172.660:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.5.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb742f8f749 code=0x7ffc0000 [ 397.266471][T10580] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 397.322860][ T30] audit: type=1326 audit(2000000172.660:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.5.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb742f8f749 code=0x7ffc0000 [ 397.394405][T10580] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 397.411726][ T30] audit: type=1326 audit(2000000172.660:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.5.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb742f8df90 code=0x7ffc0000 [ 397.439287][T10580] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 397.454803][T10580] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 397.477067][ T30] audit: type=1326 audit(2000000172.660:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.5.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb742f8f749 code=0x7ffc0000 [ 397.504150][T10580] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 397.519003][T10580] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 397.529762][ T30] audit: type=1326 audit(2000000172.660:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.5.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb742f8f749 code=0x7ffc0000 [ 397.587131][T10580] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 397.640542][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 397.660994][ T30] audit: type=1326 audit(2000000172.660:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.5.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb742f8f749 code=0x7ffc0000 [ 397.779605][ T30] audit: type=1326 audit(2000000172.660:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.5.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb742f8f749 code=0x7ffc0000 [ 397.939618][ T30] audit: type=1326 audit(2000000172.660:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.5.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb742f8f749 code=0x7ffc0000 [ 398.379221][ T30] audit: type=1326 audit(2000000172.660:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.5.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb742f8f749 code=0x7ffc0000 [ 398.458362][ T30] audit: type=1326 audit(2000000172.660:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.5.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb742f8f749 code=0x7ffc0000 [ 399.655293][T10625] lo speed is unknown, defaulting to 1000 [ 402.995900][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 402.995911][ T30] audit: type=1400 audit(2000000003.530:605): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.210 dest=57830 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 405.054314][ T30] audit: type=1400 audit(2000000005.590:606): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.210 dest=57830 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 405.851772][ T5824] Bluetooth: hci0: command 0x080f tx timeout [ 406.419916][ T30] audit: type=1400 audit(2000000006.950:607): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.210 dest=57830 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 412.094125][ T30] audit: type=1400 audit(2000000012.630:608): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.210 dest=57830 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 413.331857][ T30] audit: type=1400 audit(2000000013.870:609): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.210 dest=57830 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 419.133677][ T30] audit: type=1400 audit(2000000019.670:610): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 426.174261][ T30] audit: type=1400 audit(2000000026.710:611): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.210 dest=57830 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 426.899901][ T30] audit: type=1400 audit(2000000027.430:612): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.210 dest=57830 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 434.493388][ T30] audit: type=1400 audit(2000000035.030:613): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 439.615854][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.622333][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.693856][ T30] audit: type=1400 audit(2000000054.230:614): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.210 dest=57830 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 454.807770][ T30] audit: type=1400 audit(2000000055.340:615): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.210 dest=57830 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 501.053616][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.059920][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.100793][ T30] audit: type=1400 audit(2000000110.630:616): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.210 dest=57830 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 511.293409][ T30] audit: type=1400 audit(2000000111.830:617): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.210 dest=57830 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 531.772568][ T30] audit: type=1400 audit(2000000132.310:618): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 536.893440][ T30] audit: type=1400 audit(2000000137.430:619): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 547.771809][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 547.779390][ T31] Tainted: G L syzkaller #0 [ 547.785964][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.794681][ T31] task:kworker/1:0 state:D stack:22520 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 547.807418][ T31] Workqueue: usb_hub_wq hub_event [ 547.812542][ T31] Call Trace: [ 547.815823][ T31] [ 547.818754][ T31] ? __schedule+0x10b9/0x6150 [ 547.823507][ T31] __schedule+0x1139/0x6150 [ 547.828026][ T31] ? __pfx___schedule+0x10/0x10 [ 547.834471][ T31] ? find_held_lock+0x2b/0x80 [ 547.839613][ T31] ? schedule+0x2d7/0x3a0 [ 547.843994][ T31] schedule+0xe7/0x3a0 [ 547.848068][ T31] usb_kill_urb+0x253/0x320 [ 547.853171][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 547.858214][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 547.864321][ T31] usb_start_wait_urb+0x250/0x4e0 [ 547.869351][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 547.874937][ T31] ? __asan_memset+0x23/0x50 [ 547.879530][ T31] usb_control_msg+0x326/0x4a0 [ 547.884332][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 547.889617][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 547.895771][ T31] hub_port_init+0x690/0x3a90 [ 547.900456][ T31] hub_event+0x2ee7/0x52f0 [ 547.904928][ T31] ? __pfx_hub_event+0x10/0x10 [ 547.909683][ T31] ? assoc_array_delete+0x470/0xd10 [ 547.915089][ T31] ? finish_task_switch.isra.0+0x202/0xbd0 [ 547.920911][ T31] ? rcu_is_watching+0x12/0xc0 [ 547.925703][ T31] process_one_work+0x9ba/0x1b20 [ 547.930642][ T31] ? __pfx_process_one_work+0x10/0x10 [ 547.936089][ T31] ? assign_work+0x1a0/0x250 [ 547.941115][ T31] worker_thread+0x6c8/0xf10 [ 547.945815][ T31] ? __pfx_worker_thread+0x10/0x10 [ 547.950934][ T31] kthread+0x3c5/0x780 [ 547.955041][ T31] ? __pfx_kthread+0x10/0x10 [ 547.959719][ T31] ? rcu_is_watching+0x12/0xc0 [ 547.964518][ T31] ? __pfx_kthread+0x10/0x10 [ 547.969107][ T31] ret_from_fork+0x983/0xb10 [ 547.973774][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 547.978889][ T31] ? __switch_to+0x7af/0x10d0 [ 547.983605][ T31] ? __pfx_kthread+0x10/0x10 [ 547.988196][ T31] ret_from_fork_asm+0x1a/0x30 [ 547.993028][ T31] [ 547.996175][ T31] [ 547.996175][ T31] Showing all locks held in the system: [ 548.003919][ T31] 5 locks held by kworker/1:0/24: [ 548.008930][ T31] #0: ffff8880202fd548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 548.019818][ T31] #1: ffffc900001e7c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 548.031256][ T31] #2: ffff88802ac8b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 548.040259][ T31] #3: ffff88802ac8e518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b87/0x52f0 [ 548.050666][ T31] #4: ffff88802aa88768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bb0/0x52f0 [ 548.060373][ T31] 1 lock held by khungtaskd/31: [ 548.065230][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 548.075167][ T31] 2 locks held by kworker/u8:17/4547: [ 548.080510][ T31] #0: ffff88813ff69148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 548.091662][ T31] #1: ffffc9000ed47c90 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 548.103789][ T31] 2 locks held by getty/5581: [ 548.108462][ T31] #0: ffff88814e0dc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 548.118286][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 548.128436][ T31] [ 548.130757][ T31] ============================================= [ 548.130757][ T31] [ 548.139353][ T31] NMI backtrace for cpu 1 [ 548.139369][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 548.139393][ T31] Tainted: [L]=SOFTLOCKUP [ 548.139399][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.139409][ T31] Call Trace: [ 548.139415][ T31] [ 548.139421][ T31] dump_stack_lvl+0x116/0x1f0 [ 548.139452][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 548.139473][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 548.139495][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 548.139517][ T31] sys_info+0x133/0x180 [ 548.139533][ T31] watchdog+0xe66/0x1180 [ 548.139554][ T31] ? rcu_is_watching+0x12/0xc0 [ 548.139571][ T31] ? __pfx_watchdog+0x10/0x10 [ 548.139601][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.139629][ T31] ? __kthread_parkme+0x19e/0x250 [ 548.139647][ T31] ? __pfx_watchdog+0x10/0x10 [ 548.139666][ T31] kthread+0x3c5/0x780 [ 548.139686][ T31] ? __pfx_kthread+0x10/0x10 [ 548.139708][ T31] ? rcu_is_watching+0x12/0xc0 [ 548.139723][ T31] ? __pfx_kthread+0x10/0x10 [ 548.139743][ T31] ret_from_fork+0x983/0xb10 [ 548.139762][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 548.139781][ T31] ? __switch_to+0x7af/0x10d0 [ 548.139803][ T31] ? __pfx_kthread+0x10/0x10 [ 548.139822][ T31] ret_from_fork_asm+0x1a/0x30 [ 548.139857][ T31] [ 548.139863][ T31] Sending NMI from CPU 1 to CPUs 0: [ 548.280158][ C0] NMI backtrace for cpu 0 [ 548.280173][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.280193][ C0] Tainted: [L]=SOFTLOCKUP [ 548.280198][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.280207][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 548.280232][ C0] Code: f6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 13 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 548.280245][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 548.280261][ C0] RAX: 0000000001b029d9 RBX: 0000000000000000 RCX: ffffffff8b7726d9 [ 548.280271][ C0] RDX: 0000000000000000 RSI: ffffffff8dac2bb5 RDI: ffffffff8bf24880 [ 548.280280][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 548.280289][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 548.280298][ C0] R13: ffffffff8e097b40 R14: ffffffff908808d0 R15: 0000000000000000 [ 548.280307][ C0] FS: 0000000000000000(0000) GS:ffff888124907000(0000) knlGS:0000000000000000 [ 548.280321][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.280330][ C0] CR2: 000055a2eea8f660 CR3: 000000000e184000 CR4: 00000000003526f0 [ 548.280340][ C0] Call Trace: [ 548.280344][ C0] [ 548.280349][ C0] default_idle+0x13/0x20 [ 548.280363][ C0] default_idle_call+0x6c/0xb0 [ 548.280376][ C0] do_idle+0x38d/0x510 [ 548.280397][ C0] ? __pfx_do_idle+0x10/0x10 [ 548.280420][ C0] cpu_startup_entry+0x4f/0x60 [ 548.280439][ C0] rest_init+0x16b/0x2b0 [ 548.280454][ C0] ? acpi_subsystem_init+0x133/0x180 [ 548.280468][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 548.280482][ C0] start_kernel+0x3ef/0x4d0 [ 548.280503][ C0] x86_64_start_reservations+0x18/0x30 [ 548.280524][ C0] x86_64_start_kernel+0x130/0x190 [ 548.280545][ C0] common_startup_64+0x13e/0x148 [ 548.280566][ C0] [ 548.472794][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 548.479644][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 548.490305][ T31] Tainted: [L]=SOFTLOCKUP [ 548.494608][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.504633][ T31] Call Trace: [ 548.507886][ T31] [ 548.510791][ T31] dump_stack_lvl+0x3d/0x1f0 [ 548.515366][ T31] vpanic+0x640/0x6f0 [ 548.519321][ T31] panic+0xca/0xd0 [ 548.523013][ T31] ? __pfx_panic+0x10/0x10 [ 548.527399][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 548.533350][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 548.539474][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 548.545601][ T31] ? watchdog+0xe83/0x1180 [ 548.549987][ T31] ? watchdog+0xe76/0x1180 [ 548.554378][ T31] watchdog+0xe94/0x1180 [ 548.558595][ T31] ? rcu_is_watching+0x12/0xc0 [ 548.563335][ T31] ? __pfx_watchdog+0x10/0x10 [ 548.567983][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.573168][ T31] ? __kthread_parkme+0x19e/0x250 [ 548.578162][ T31] ? __pfx_watchdog+0x10/0x10 [ 548.582808][ T31] kthread+0x3c5/0x780 [ 548.586855][ T31] ? __pfx_kthread+0x10/0x10 [ 548.591416][ T31] ? rcu_is_watching+0x12/0xc0 [ 548.596149][ T31] ? __pfx_kthread+0x10/0x10 [ 548.600712][ T31] ret_from_fork+0x983/0xb10 [ 548.605276][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 548.610358][ T31] ? __switch_to+0x7af/0x10d0 [ 548.615018][ T31] ? __pfx_kthread+0x10/0x10 [ 548.619581][ T31] ret_from_fork_asm+0x1a/0x30 [ 548.624326][ T31] [ 548.627560][ T31] Kernel Offset: disabled [ 548.631880][ T31] Rebooting in 86400 seconds..