last executing test programs: 6m14.364867458s ago: executing program 2 (id=2071): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x648, 0x368, 0x578, 0x368, 0x190, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'wg0\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0xff, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x700, 0x4, 0x7}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_bridge\x00', {0x6}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x32}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x8, @ipv4=@private=0xa010101, 0x4e23}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000300), 0x2, 0x800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001380)={0x200f, {"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", 0x1000}}, 0x1006) write(r6, &(0x7f0000000000)="1c00", 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FSGEOMETRY_V4(r5, 0x8070587c, &(0x7f0000000800)) syz_usb_connect$midi(0x6, 0x31, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r10, r9, 0x8000, 0x3) r11 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbe4250000000008001700", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48081}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000024ea400bd001e950000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x64) 6m11.273610079s ago: executing program 2 (id=2081): syz_usb_connect$midi(0x3, 0xbc, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x1, 0x1, 0x0, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x5, [@ms_header={0x7, 0x24, 0x1, 0x8001, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0xf, 0x3, [{0xa3, 0xb6}, {0x1, 0x10}, {0x1, 0xf8}], 0xf}, @midi_in_jack={0x6, 0x24, 0x2, 0x4, 0x3, 0x3}], [{{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x0, 0x2, 0x1, {0xc, 0x25, 0x1, 0x8, "31a5a932693c73c3"}}}, {{0x9, 0x5, 0x6, 0x11, 0x600, 0xf, 0xc3, 0xf8, {0x14, 0x25, 0x1, 0x10, "4761adcb178850ae6192401b0ba9a22b"}}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0xfb, 0x8, {0x5, 0x25, 0x1, 0x1, 'q'}}}, {{0x9, 0x5, 0x9, 0x3, 0x30, 0x4, 0x4, 0x7f, {0x12, 0x25, 0x1, 0xe, "628fde81b6abeea96f495332e9c4"}}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0x5, 0x81, 0x1b, {0x13, 0x25, 0x1, 0xf, "3c0f9d525f625bf6958c2516471719"}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x8, 0xd3, 0x2, 0x8, 0x10}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}}) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'macvtap0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) 6m8.86502405s ago: executing program 2 (id=2087): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000340)={0x20000072, &(0x7f0000000280)=[{}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}]}) socket$inet6(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000180)={r1, 0x8}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e23, @empty}}) 6m7.143051117s ago: executing program 2 (id=2089): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000500e5ff000000000000f66abf8f7c00"/33], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000000000000000000000000000000000010002122b472e41e24b11f381000000e5"], 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f00000002c0)) syz_clone(0x0, 0x0, 0xfffffffffffffd93, 0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x304008000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) read$rfkill(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r5 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xe, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r4, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000008208500160073000000850000000700000095b8228d2ecb331671b2d78bdb9ed6bd542f2948ee9e44262a6580468dd993c7b216c026ec6038746c570ed71515116cb0faf5d2af21204169f4b75982285c3d66fd449aa3b6dc51a3a428ca838c47784f4ec04690f51890cb5c4d81a6cbeca3868d61b84a86569f7e1b5051fba986d982901c6d9886d7f84c04e377ead93a7466a24ca0523b1b421622072a362b1435f1e1a42044a608f8c17823ea09f016c2b623c5f8f037d14d7a9a99a9a511989e35f10ce9fc8b615edb3bebf39973a598a910f3c3ad68b729e4a2b3a2da7e3a644421f98c1fec65c2ec2fa4619634bbc73cc510f48b78"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m5.856629415s ago: executing program 2 (id=2095): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x812}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x101000) read$midi(r3, 0x0, 0x3b) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, r4, {0xc3}, {0x0, 0x4}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x0, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6m4.26775013s ago: executing program 2 (id=2102): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket(0xf, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001880)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @local, 0x9}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="aa", 0x1}], 0x1}}], 0x2, 0x2000c8c0) syz_emit_ethernet(0x76, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x842c0, 0x8, 0x24}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5m48.875236823s ago: executing program 32 (id=2102): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket(0xf, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001880)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @local, 0x9}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="aa", 0x1}], 0x1}}], 0x2, 0x2000c8c0) syz_emit_ethernet(0x76, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x842c0, 0x8, 0x24}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5m0.478181099s ago: executing program 4 (id=2211): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x26}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xaf}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xeb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8040}, 0xc015) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x20004000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3677, 0x9a6d, 0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x1, 0x4, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r4, 0x431, 0x70bd28, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="4c7b40509f934d671e6b7964942f7f8de08eb7d1224f4e", @ANYRES16, @ANYRESOCT, @ANYRESOCT=r2], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x3, 0xdc, 0x48, 0x10, 0x55f, 0xa800, 0xdcfd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x80, 0x10, 0x18, "", [{{0x9, 0x4, 0xe2, 0x4, 0x0, 0xa, 0xf4, 0x4d, 0xb}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 4m55.463647496s ago: executing program 4 (id=2222): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x79) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x4, 0x40, 0xc, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xa2, 0x8, 0x5}, {0x6, 0x24, 0x1a, 0x1, 0x4}, [@obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x9, 0xee}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x89, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x71, 0xff, 0x8}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan4\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) 4m51.850804075s ago: executing program 4 (id=2228): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000300)={0x0, 0x8, 0x0, 'queue0\x00', 0x2}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6200, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0x4018aee3, &(0x7f0000000080)) close(0x3) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0xfffffffffffffdd6, 0x240c0807, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @empty, 0x3}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x4c) syz_open_dev$sg(&(0x7f0000000500), 0x8, 0x10000) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060005000d101000", 0x24) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB='>'], 0x1c}}, 0x20024090) r8 = ioctl$USERFAULTFD_IOC_NEW(r5, 0xaa00) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f00000002c0)) fchdir(r0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x8000000004, 0x4, 0x0, 0x4, 0x6, 0x6, 0x3, 0xa42c}) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4605100702000000000000000003003e00f9ffffffda0300000000000040000000000000008b000000000000002c0d000005003800010078000700040003000000030000000400000000000000040000000000000003000000000000000000000000000080ff7f0000000000000002000000000000336f3033933ed3b17f847f2f230ef3798d3a5844a60df4fdd38ca5d0222d34166828923c4b128461552724b008fc0178f02b20d8e272ed25d1c21d4c630149a48ac30f633a747826076ec6a03fd92118669bb34fcda09ea85863eec0e5e287ef2006b5c07f2b105e9142f91d932671da3aab081ce4444bb6552f40882e83529288bf6b009844ec6bc499a19eea24c421ee9742948e4dfb64ced99b743e341fdb8c13fd76fe63eb6ae34f1af0caacd6299a33ef921c9bbca4dd1dfd66a7aebb984253e1ec7a8892"], 0x78) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000040)=ANY=[@ANYBLOB='tro=\x00'/15, @ANYRES64, @ANYBLOB='no=\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 4m51.632408296s ago: executing program 4 (id=2229): r0 = socket(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r3, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000)=0x15, 0x4) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3f, 0x2, 0x0, 0x0, "ce6012e198d4a275f30c7a76ced776bcb73cf581648acaac9095323d45aaeab306611856f61d95a65039b79566cc2195c364a614b8e4c12138a77d4bd62ca783"}}, 0x80}, 0x1, 0x0, 0x0, 0x48485}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c80)='./cgroup\x00', &(0x7f0000004500), 0x0, &(0x7f0000000c00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0xf401) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x3, 0x6, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x4000, 0x7, 0x0, 0x80, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x7, 0x0, 0x0, 0xe3]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x4, @local, 0x8}, {0xa, 0x4e22, 0x9cc, @empty, 0x9}, 0xffffffffffffffff, {[0x10000, 0x6d, 0x3, 0xfffffff7, 0x931, 0x1, 0xffff, 0x3]}}, 0x5c) 4m49.729868544s ago: executing program 4 (id=2236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="53b748bf412183542dd1cd69f07c", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000002c00010000000000ffdbdf25027c000008000180"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000c80)=ANY=[@ANYBLOB="00000c0400"], 0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_clone(0x4000, 0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), &(0x7f0000000cc0)="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") syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)={0x20, 0xd, 0x7, "78abf4b714be3a"}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x48, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x48}}, 0x0) 4m46.475923056s ago: executing program 4 (id=2250): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1041) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x7}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r1, &(0x7f00000000c0)=0x58, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) listen(r0, 0xff) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000002200)={0xa, 0x4e1f, 0xfffffffd, @empty, 0xb}, 0x1c) listen(r6, 0xfffffffc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4040) r7 = syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000452000/0x3000)=nil, 0x3000, 0x15) preadv(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 4m31.379721628s ago: executing program 33 (id=2250): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1041) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x7}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r1, &(0x7f00000000c0)=0x58, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) listen(r0, 0xff) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000002200)={0xa, 0x4e1f, 0xfffffffd, @empty, 0xb}, 0x1c) listen(r6, 0xfffffffc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4040) r7 = syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000452000/0x3000)=nil, 0x3000, 0x15) preadv(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 13.738566517s ago: executing program 5 (id=2782): socket(0x2b, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x20, 0x0, 0x0, '\x00', 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) faccessat2(r5, &(0x7f0000000800)='./file0\x00', 0x0, 0x1200) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f00000003c0)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000203f343acd08aca46031382f6593eaa7f23e8bc504add1d36614ce04fa0074da2b40ce27f5debceebec0bb66067b57e7688638f61484cc745a0e0fcafdedf3d75d2ce4a4cbc32e38dcd1c0f1f59c9db6a7cbe4c8c435f96869398ff347bf0536f3526439abe779a95145c5560fb67d0b047fe0e8f59aa1cd02c807174dea6cb4396c56cb31a94ba7f458428a8519488b36db63c7aa548d11336db28ff28e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x60880, 0xf, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x2b}, 0x94) r9 = accept4(r7, &(0x7f0000000a40)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000004c0)=0xffffffffffffffae, 0x80800) r10 = syz_io_uring_setup(0x49e5, &(0x7f0000000680)={0x0, 0x641e, 0x400, 0x3, 0x107125b2}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r10, 0x18, &(0x7f0000000880)={0x5, r9, 0x38, {0xfffffffffffffff0, 0x6a3ee4f2}, 0xf7}, 0x1) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020e00f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, 0x0, 0x0, 0x4048800}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 13.628931508s ago: executing program 5 (id=2783): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x40000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r0, &(0x7f00000021c0)=""/149, 0x95, 0x8000000000005) r1 = socket$inet6(0xa, 0x2, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2800) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000002280)={0x7d, 0x7d, 0x2, {{0x0, 0x60, 0x89, 0x4, {0x8, 0x0, 0x3}, 0x2b000000, 0x3, 0x2, 0x6, 0x22, '/proc/sys/net/ipv4/vs/drop_packet\x00', 0x4, 'GPL\x00', 0x4, 'GPL\x00', 0x3, '\xc7-\x1d'}, 0x8, 'bridge0\x00', r2, r3, r2}}, 0x7d) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r7 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f00000000c0)) shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x5000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r8, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc, 0x0, 0x1}}, 0x40) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f00008b2000/0x4000)=nil, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106"], 0x18}], 0x1}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 12.341980567s ago: executing program 5 (id=2787): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0)}, 0x2b) 12.048436914s ago: executing program 0 (id=2788): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0xe7a, 0x8000000004, 0xc, 0x0, 0x6, 0x6, 0x6, 0x3, 0xa42c}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 12.043984402s ago: executing program 3 (id=2789): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x0, [0xfffff001, 0x4, 0x5]}, &(0x7f00000003c0)=0x44) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[], 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x8000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x184, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x71c, 0x4e23, 0x45, 0x2, 0x20, 0x0, 0x1d}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0x10000, 0x4000000008251a, 0x5, 0x20000081}, {0xffffffffffffffff, 0xa2a, 0x1f, 0xffdffffffffffffe}, {0xfffffffa, 0x3fc, 0xfb}, 0x80, 0x3500, 0x2, 0x2, 0x0, 0x69}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm_base(lrw-serpent-avx,cmac(aes))\x00'}, 0x0, 0xa0}}]}, 0x184}}, 0x844) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_clone(0x83200400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, 0x0, 0x140) wait4(r6, 0x0, 0x4000000a, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newnexthop={0x0, 0x68, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}, [@NHA_ENCAP={0x0, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_ID={0x0, 0x1, 0xfffffffffffffffc}}, @NHA_BLACKHOLE]}, 0x38}}, 0x10) 10.164242967s ago: executing program 3 (id=2791): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000000000000000000000000000000000010002122b472e41e24b11f381000000e5"], 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f00000002c0)) syz_clone(0x0, 0x0, 0xfffffffffffffd93, 0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x304008000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) read$rfkill(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r5 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xe, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r4, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.02876134s ago: executing program 0 (id=2792): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r4, 0x0, 0xee01) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r5 = syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e86", 0x5f}, {&(0x7f0000000240)="2857e5671ef0d8e3c39651a014a3a298466c68130e5b77e37f04a5cec22a4cc681c424e649ef28c1bd78afcb20e74b1ad3ac2c75e5c03189383f8e1d3e61a1", 0x3f}, {0x0}], 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xfffd, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r8 = socket$kcm(0x10, 0x2, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000280)={0x5, 0x0, 0x6}) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 9.905075951s ago: executing program 5 (id=2794): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4d0d8) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x13b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c4}, 0x4c004) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xfff1, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0xc801) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 9.891978359s ago: executing program 1 (id=2795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0)}, 0x2b) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000f40)={r1, &(0x7f0000000440)="306044fc250835e4c5234d89da042bae8439a41a7c88b34fe335a8e300b9c8202be45f73625f5ae42b9d72a145568119f99a38db8031bf9c7926370a7c16995580360ea5b2544c0c40f794c3c7be17cd990611b6971bef02398ed4d4aa5c8ed8432f326a8f01a374164d22b4fa543344ce5db5884dd48479b743ebad995baa938f23741c09c28d9bfde552657b5c8700", 0x0}, 0x20) 9.696883743s ago: executing program 1 (id=2796): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019c80)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580"], 0x80}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') read$alg(r6, &(0x7f0000000e80)=""/4096, 0x1000) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, &(0x7f0000000540), 0x0, 0x4040, 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0xfffffff9, 0xffffffff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000200)={0xb, &(0x7f0000000000)=[{0x4, '\x00', @st={0x4, [{0x1, @svalue=0xc}, {0x0, @uvalue=0x6}, {0x0, @svalue=0x6}, {0x1, @svalue=0xd43}]}, 0x4}]}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) 7.457103077s ago: executing program 3 (id=2799): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001080)}, &(0x7f0000000140)=0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000200080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6ed2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 6.449450259s ago: executing program 5 (id=2800): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001600)=""/171, 0xab}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000100)={{0x0, 0x550, 0x1, 0x2, 0x4, 0x1c, 0x8, 0xfa, 0xde, 0x3, 0x2, 0x0, 0x7ff, 0x4}, 0x8, [0x0]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000600, 0x0, &(0x7f0000000240)={0x1, 0x3, 0x0, 0xf2e49d4e5f9896ae}) r7 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)) write$char_usb(r8, &(0x7f0000000440)="04", 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000000)={{r5, 0x3, 0x40000005, 0x100, 0x9, 0x2, 0x40, 0x9, 0x0, 0x8001, 0x3, 0x7e, 0x8000, 0xc, 0x80005}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000003c0)={{r10, 0x7, 0x3, 0xf9, 0xf45, 0x9, 0x1, 0x1, 0xe2fa, 0xd69, 0x6, 0x8, 0x4c, 0x10000, 0x80}}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000002c0)=""/233) dup2(r8, r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x1, 0x1, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r11, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 6.205150288s ago: executing program 6 (id=2801): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x6, 0x1, 0x0, 0x1}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x1, 0x85, &(0x7f0000000180)="e26c13ef09000000ce4828757d17a727c263173ad5ceecca02464def119f63f721e3cbb900b456d5e8165be1ff7b2f9da7047d388109eb8d032562b674f260d7220003e1c47c1c7b4832f33ab7c19ffc982601ea2d38aca425db4fd3a94ea0647cfd94b82e193bd72d8950294af9626221c36a9e378f918606ba21e9b21b77b61e5e0fe5d05e6726ef04532598e6d4a7d754acd6cef5a3ddbe450742640e37f9cd79f0aacccb2229cee0d2deaabde2b9133c125bd8178441eafce3d743f88437862ee7b8", 0xc4) setsockopt(r0, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000080)={@broadcast, @private=0xa010100}) 6.132555132s ago: executing program 0 (id=2802): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x3}, 0x10) io_setup(0x8, &(0x7f0000000080)=0x0) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f00000000c0)="29098be9473ccaa1bcef7df128737cc3a627f85195737e7b48405028059712e877554f4abf2b5f682aa61eb38ef8dee76f8c3123d9817029de12946ff2f0da2b38f74ceab6e31140d25fbf820361d40bca0d74e06b4b17e3f0e5a279b579cd13985c3dfbed2eaa02ea630b29c58c5363c1d053dd13cca5f648390f55cf70b5b105b3d21263d2fef7049f832c82d5af26eda628d2", 0x94, 0x1, 0x0, 0x1}, &(0x7f00000001c0)) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newspdinfo={0x24, 0x24, 0x2, 0x70bd29, 0x25dfdbfe, 0x3, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)={[&(0x7f0000000340)='/selinux/checkreqprot\x00', &(0x7f0000000380)='/selinux/checkreqprot\x00', &(0x7f00000003c0)='/selinux/checkreqprot\x00', &(0x7f0000000400)='\x00']}, &(0x7f0000000580)={[&(0x7f0000000480)=',#\'+,\x00', &(0x7f00000004c0)='/selinux/checkreqprot\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00']}) r2 = socket(0x27, 0x0, 0x6a) io_getevents(r1, 0x7f, 0x1, &(0x7f00000005c0)=[{}], &(0x7f0000000600)={0x0, 0x3938700}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x406, r2) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x140d, 0x2, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x40) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000780)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000800)={0x3, 0x4, 0x7, 0x8, 0x0, 0x80c, 0x2}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000840)={@local, @dev, 0x0}, &(0x7f0000000880)=0xc) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000008c0)={0x4000}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000001f00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ec0)={&(0x7f00000009c0)={0x14f4, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1248, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x122c, 0x4, 0x0, 0x1, [{0x1228, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_PATTERN={0xe1, 0x2, "9dc59cc26afdec1e55368ef7f4475fa9ed702a5e9a6a8b6b1daf41912f44e2419b612b0e6c7d6679f4cdefb70a55b04aaf698d4a515b13b259d7144896b26bce5e463905c9ad1b27c806494986a800c0c1064e196ef0c23299926c477cdfda8640bec1209608524c11218ad078247af85553e64c7277d09dcce912a871893d9e9032eda428e491173fc70267cd3a3c4a0cf7adb868c1850639d0a4e1dc6b802ec0ca5cf51c400e40afe6bdd2caffa871ad30c633a5663b318d8e5ecd876148b56eb382072be894f668db931872ae471930eec3e7fb513f90a7d29ae528"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xa312}, @NL80211_PKTPAT_PATTERN={0x5, 0x2, '['}, @NL80211_PKTPAT_PATTERN={0x86, 0x2, "7b8f5024fb2962872040f1696a984c291505caa13c858611b7ef95f794aedeed4dec3566272d500873a3e77d7c4a46433d41e754d60190561a2124c984d7509406459e751df0b115f3386e36f5b7ba51adc80fe5f0f437f023ae95718a494cbf30e858bb7d60f6aed0cd38bac2bf952ef98ab46c15b399c40b3c92fd794fed07383c"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0x9c, 0x2, "e3bb439b529bd0b25e6374888197baea6bfd72dacf5e416f9d8dd151a722f01f9d72d06e9415092a9ba9a521ff5edc465cb4ec9e92d14d4e5917297bf2a658dfe7b1302609124dedc3d423623e777ea5b0f751e9ed5ebe3be00e0052770187a8b856ab8d2319ca494bf8bbb639ed494c1162710dd61c9fbc69661ead233a8d817109bc8e85cf29f706a8c6e45e6fcdc73c301445075433b0"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x158, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xb0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xe}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x4}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x99, 0xa, "b4d57fa53aabb807e1df3f613d368cdd8a5bbc169ee29d91098729f30bf332bcb87940e0befa568a46ecb39218bdda4eff00f6c4b27e68f5ac39ae15895d9899090ea95c34420ab0d850176e2a5d22347812e88946b9bd40d75de0ff37ff4f418f8d258a6481fa2576d7e723f7b1560019d6b557336631762991341d92c2ac0924b5ebc0b1174ea5dead0ab21f1ea28b5985662404"}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x9c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7f}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xf}, {0x8}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x52a4d59a}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0xfffffff7}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x7}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xf}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ecf6a22dc519"}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x8, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xb8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x7}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x6, 0x0}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x9b, 0x6, "801f290c4806f4af07d5a2c3843f660986b821019fb39bf278db302d8e894ea66882ecf4e90754f862ecb33478ea038e7ba0ebe5af6daaf1a21e147c48c341b35113f994f9e665f7dc0f5724fe89d90cd1c8fe5175ee24eb4025319ca0d7053f44cc55e1ab87f8cf16a3ba1c435676ad64486de8e03df4969219c39a3d666736dddb5d4107a6bd05bb8bc567d1935ad0b61eb109fc6509"}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x1}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x14, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}, @NL80211_ATTR_SCAN_FLAGS={0x8}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x14f4}, 0x1, 0x0, 0x0, 0x10801}, 0x4005004) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000001f40)={0x0, 0x0, 0x4, r5, 0xc3}, 0xc) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001fc0), r4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000002180)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002140)={&(0x7f0000002000)={0x118, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x48000}, 0x4000002) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2c004004}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r9, &(0x7f0000002440)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0x88, r10, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa66d}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x660}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) socket$unix(0x1, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r11 = accept4$unix(r2, &(0x7f0000002480), &(0x7f0000002500)=0x6e, 0x80000) bind$unix(r11, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000025c0)={0x0, @reserved}) 5.983220848s ago: executing program 6 (id=2803): r0 = syz_usb_connect(0x5, 0x46, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x1000, @mcast2, 0x10000}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 5.774685803s ago: executing program 3 (id=2804): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0xe7a, 0x8000000004, 0xc, 0x0, 0x6, 0x6, 0x6, 0x3, 0xa42c}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 5.183672747s ago: executing program 0 (id=2805): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0}) (fail_nth: 5) 4.756271654s ago: executing program 6 (id=2806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 4.754097757s ago: executing program 1 (id=2807): socket(0x2b, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x20, 0x0, 0x0, '\x00', 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) faccessat2(r5, &(0x7f0000000800)='./file0\x00', 0x0, 0x1200) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f00000003c0)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000203f343acd08aca46031382f6593eaa7f23e8bc504add1d36614ce04fa0074da2b40ce27f5debceebec0bb66067b57e7688638f61484cc745a0e0fcafdedf3d75d2ce4a4cbc32e38dcd1c0f1f59c9db6a7cbe4c8c435f96869398ff347bf0536f3526439abe779a95145c5560fb67d0b047fe0e8f59aa1cd02c807174dea6cb4396c56cb31a94ba7f458428a8519488b36db63c7aa548d11336db28ff28e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x60880, 0xf, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x2b}, 0x94) r9 = accept4(r7, &(0x7f0000000a40)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000004c0)=0xffffffffffffffae, 0x80800) r10 = syz_io_uring_setup(0x49e5, &(0x7f0000000680)={0x0, 0x641e, 0x400, 0x3, 0x107125b2}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r10, 0x18, &(0x7f0000000880)={0x5, r9, 0x38, {0xfffffffffffffff0, 0x6a3ee4f2}, 0xf7}, 0x1) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020e00f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, 0x0, 0x0, 0x4048800}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 4.651849338s ago: executing program 6 (id=2808): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019c80)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580"], 0x80}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') read$alg(r6, &(0x7f0000000e80)=""/4096, 0x1000) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, &(0x7f0000000540), 0x0, 0x4040, 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0xfffffff9, 0xffffffff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() pipe2$watch_queue(&(0x7f00000001c0), 0x80) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000000)={0xfffffffffffff36e, 0x8, 0xc3}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 2.465124714s ago: executing program 6 (id=2811): io_uring_setup(0x30df, &(0x7f00000000c0)={0x0, 0xaefa, 0x100, 0x3, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000002d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff3d1401000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c4e704000000000000a04d1ffc187fa1a2ba7ba0c0d507b92de00435fd233cc0f0d9b2c312b68856656ca9caa2ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1d8bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6f902b261848d74096636ab6d8c63c8d62861cbc38d1e6bef45e672ac3d3d5243b85b3b15c7499ff39a3dadcbfbea9e050fb6940344dfbeebbf3e7e37d0a9a387518f926fba75479eacd4f51aeb28b6c56a75144ef6df55a275799897ca000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000005c0)=ANY=[], 0x0) r5 = accept4$llc(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x1000) bind$llc(r5, &(0x7f0000000380)={0x1a, 0x30f, 0x0, 0x6f, 0x0, 0x2, @local}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x40, r8, 0x637, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000) 2.265169961s ago: executing program 1 (id=2812): socket$kcm(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00"], 0x0, 0x34}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002580)={r1, 0x20, &(0x7f0000002540)={&(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000002480)=""/131, 0x83}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x6c, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000380)={0x3, 0x0, 0xeeee8000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, r1}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b1817a38eda0e802c9563b24b2532cec68138e9ae7a7b74ff80ea609aac963b162772d98f8f901010a36c2261d8b0a9c10c598ea15cba90c020c1437c300cd99a159ee1972badbf7", @ANYRES16=r7, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYBLOB="031c"], 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) fstat(r9, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r9, 0xc008561b, &(0x7f0000000080)={0x7, 0xfcda}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004f000000000000fcffffff950000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r11) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], &(0x7f0000000480)='GPL\x00'}, 0x94) 1.971245445s ago: executing program 5 (id=2813): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x10000, 0xffff, 0x0, 0x5], [], 0x0, [0x5, 0x3]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x20004010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[]) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xff5b) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2004}) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000040)=0xe5b9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000141200006000000003"], 0xfdef) syz_usb_connect(0x4, 0x3b3, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x6c, 0x2b, 0xc, 0x8, 0xbda, 0xb820, 0x9b6b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3a1, 0x1, 0x8, 0xe, 0x80, 0xff, "", [{{0x9, 0x4, 0xcd, 0x0, 0x9, 0xff, 0xff, 0xff, 0x5, [], [{{0x9, 0x5, 0x4, 0x1, 0x200, 0xdd, 0x6, 0x5, [@generic={0xd2, 0x0, "4fea30d95e11afad249a23398fb0d327c0dacf00ab1f3ea70cf03348d9419050905c1c59d3cca15538738314545e1a4786c52e507a6b119f41020a0800fd4e2432b7ad47cbf4769504f8232cc6ebd5f255065e6c9ef55ccc617e24135b6ba92d988e8dc832ff15f964db90595d784f463837894788db6a3c18056cbabf85c54278a2a067fcbaf34cd86217e4842581d8a920b4f38141561e4821e6613ae8849fc80eedb701794245c8b1d3b6186cfd1d2fe9b421e1d0a13ac1f9dfa6e6c2ff22442fde3e1c1c12002aa953b475bb5750"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x7f, 0x8, 0x7}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x22, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xeff}, @generic={0x8c, 0x7, "bdb4234de3949e21e58c53dae96a9f00d5bcd08c9024dac68deddb8b29466042c9054b4ede978dffe52fcedf5e50ebea20908edd3b77c65ef12fbefedd303990c569329c068f8dd1aa748ff052574f82c648c6da4d5db913e62cbbf1cc9f21633f7b668a83dd43d4f7a1ab7ead5e77608b7276a449030ee519a9ac5bc10257b30ae8048c49bdef142651"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0xe, 0xe0, 0x5, [@generic={0xb0, 0x30, "23a7c8e818f065dfd952854c39915cc84d0a34685cc9d149607448462f913b00e69cdb7e04116fec05b272de78f91268553c92f28dd0d01c6cb2be74e35c809d38c983157076648faf8c1ff291b30d3d8dec144cc3afc8415e11118f2bebc765a6ef8d73fdabfe938eae3350c3cee15c7ec0cbb7002e8da3c9b0d5c109889425d980b00c297ca0758ddb25f49cefa736390bc1683b4d2774828b52f78d8d0361519f39334725ce34dd9aa7d8ca94"}, @uac_iso={0x7, 0x25, 0x1, 0x14, 0x0, 0x4c8a}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0xf8, 0x7, 0xc, [@generic={0x4, 0x7, "20de"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x5, 0x6d, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}, @generic={0xa8, 0x1, "801715dbc9f48a93807d54b4b5b68629f7e4f72f973ef0b4d45d720add6691645aa65ca3e268a7c2318c8964b959dfd4674d0a5e70dcb21c6bf3444cffdcd77e2c3c7ff742923284eee9b67313537416577be33560cae8a241e3b08f7b617ce8a84de6f2b4a93f9062264ec2fa4dda77fe90de7413f93cc762da2f5bf812f97b87b8c2c11675ed1cc7e546b4c1317491426995bd5ce3aef54489df8cfd27e5d917a56d826f35"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x74, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x1, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xed, 0x1}, @generic={0x61, 0x22, "76fa08e6dab1474117b8ec2131b118c8d3716ce472c3f61ce8f3cd90207c72e04cc16a14cff7c515a862a59fe6837f4aab50c0b3976b63b73fa51865c4155868a5450fe63c3ca4c04822060f683d65941e1136965ed6bc258631ec1069e338"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0xfa, 0x7}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x300, 0x5, 0x6, 0xf7, 0xff, 0x19}, 0xd, &(0x7f00000006c0)={0x5, 0xf, 0xd, 0x1, [@generic={0x8, 0x10, 0xa, "3cd2e9ee61"}]}, 0x1, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x455}}]}) 1.818489027s ago: executing program 3 (id=2814): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket(0xf, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2000c8c0) syz_emit_ethernet(0x76, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000500)={0xb, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0xffffff81}}, 0x18) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x842c0, 0x8, 0x24}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x60ef, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.197988501s ago: executing program 0 (id=2815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8081, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' 16'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0010809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b90f0000004d0012"], 0xb4}}, 0x0) r2 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x0, 0x5, 0x24, 0x4}, {0x9, 0x5, 0xb, 0x2, 0x40, 0xac, 0x5, 0x3}, {0x9, 0x5, 0x3, 0x3, 0x10, 0x3, 0x3, 0xe1}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r2, &(0x7f0000000480)={0x14, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], &(0x7f0000000180)=ANY=[@ANYRES16=r1]}, &(0x7f0000000a00)={0x1c, &(0x7f0000000c40)=ANY=[@ANYBLOB="40008c0000003b6d2203d46661b728eb9974351234f39e98cda49c4d239de20bcc8aab8a474c37fa0449f1315e6ceef511e1213f5fd732ce4260cf75db557f06bc15cd01000000e48e3ab20b2004a107aaaa527fa4cbe6ebf8bbd83c89a0921311b4b3ecfb9d85a9f93001cc0f74e99c18827c8ef835cfd4c408d5a803e270988c57b4110b031c9e458b4253d399a46a6afcf5"], &(0x7f0000000580)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000009c0)}) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x7, 0x200000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000100)={0xc65f, {0x9, 0x0, 0x5, 0x5, 0x466, 0xd}}) rmdir(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2003}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r5, 0x8926, &(0x7f00000000c0)={0xfdfd, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) syz_usb_connect$midi(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000001030144b474000010203010902340001010580040904000001010320f4072403014700400724030006000b09058116200003030609250107"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000240)="33e3e995b1fd7f5160db9df48acea0f4", 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 77.328785ms ago: executing program 1 (id=2816): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc1, @loopback, 0x3c}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x0, {[0xc, 0x7, 0x4, 0x1, 0xffffff27, 0xff, 0x1, 0xde]}}, 0x5c) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='as\x9cI\xd4n\x1f\xf5ymmetPic`\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7iLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x91\xca\xe7$\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1b', r2) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000000100)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0xa, 0x2e, 0xf, 0x6, 0xfffffffe, 0xfe3, 0x0, 0x151}}) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 0s ago: executing program 6 (id=2817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000200)={0xb, &(0x7f0000000000)=[{0x4, '\x00', @st={0x4, [{0x1, @svalue=0xc}, {0x0, @uvalue=0x6}, {0x0, @svalue=0x6}, {0x1, @svalue=0xd43}]}, 0x4}]}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) kernel console output (not intermixed with test programs): device team_slave_1 removed [ 1099.473474][T15475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.483859][T15475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.504856][T15475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1099.514124][T15475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.542096][T15475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1099.565640][T10134] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.581773][T10134] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.594781][ T5716] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1099.615951][T15486] ath6kl: Failed to submit usb control message: -71 [ 1099.629379][T10134] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.640714][T15486] ath6kl: unable to send the bmi data to the device: -71 [ 1099.656777][T15486] ath6kl: Unable to send get target info: -71 [ 1099.671194][T15482] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 1099.690141][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.718516][T15486] ath6kl: Failed to init ath6kl core: -71 [ 1099.747415][T15486] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1099.777615][T15486] usb 7-1: USB disconnect, device number 9 [ 1099.816912][ T5716] usb 6-1: device descriptor read/64, error -71 [ 1099.932687][ T5716] usb usb6-port1: attempt power cycle [ 1100.104336][T15482] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 1100.121307][T15482] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1100.137175][T15482] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1100.144863][T15482] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1100.558879][T15482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.577647][T15482] usb 1-1: config 0 descriptor?? [ 1100.601302][ T5716] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1100.631905][ T5716] usb 6-1: device descriptor read/8, error -71 [ 1101.737929][T15482] hid_parser_main: 70 callbacks suppressed [ 1101.737969][T15482] ryos 0003:1E7D:3232.0016: unknown main item tag 0x0 [ 1101.752554][T15482] ryos 0003:1E7D:3232.0016: unknown main item tag 0x0 [ 1101.760210][T15482] ryos 0003:1E7D:3232.0016: unknown main item tag 0x0 [ 1101.768436][T15482] ryos 0003:1E7D:3232.0016: unknown main item tag 0x0 [ 1101.779263][T15482] ryos 0003:1E7D:3232.0016: unknown main item tag 0x0 [ 1101.787207][ T5716] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1101.796953][T15482] ryos 0003:1E7D:3232.0016: unknown main item tag 0x0 [ 1101.888796][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'. [ 1101.979588][T15522] batadv0: entered promiscuous mode [ 1101.987097][T15522] macsec1: entered promiscuous mode [ 1101.993155][T15522] macsec1: entered allmulticast mode [ 1101.998625][T15522] batadv0: entered allmulticast mode [ 1102.008750][T15522] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1102.065978][T15522] batadv0: left allmulticast mode [ 1102.072118][T15522] batadv0: left promiscuous mode [ 1102.429696][T15506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.439592][T15506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.541654][T15486] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1102.774814][T15486] usb 7-1: Using ep0 maxpacket: 32 [ 1102.787965][T15486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.865242][T15486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.929817][T15486] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1103.012671][T15486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.429721][T15486] usb 7-1: config 0 descriptor?? [ 1103.676709][T15486] hub 7-1:0.0: USB hub found [ 1103.774814][ T5716] usb 6-1: device not accepting address 20, error -71 [ 1103.947895][T15527] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2473'. [ 1103.983326][T15486] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1104.502196][T15482] ryos 0003:1E7D:3232.0016: unknown main item tag 0x0 [ 1105.120000][ T5716] usb usb6-port1: unable to enumerate USB device [ 1105.127158][T15482] ryos 0003:1E7D:3232.0016: unknown main item tag 0x0 [ 1105.140493][T15482] ryos 0003:1E7D:3232.0016: unknown main item tag 0x0 [ 1105.148018][T15482] ryos 0003:1E7D:3232.0016: unknown main item tag 0x0 [ 1105.168581][T15482] ryos 0003:1E7D:3232.0016: hidraw0: USB HID v80.81 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 1105.407573][T15482] usb 1-1: USB disconnect, device number 109 [ 1105.576571][ T29] audit: type=1400 audit(1778994750.908:1363): avc: denied { connect } for pid=15535 comm="syz.0.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1106.788445][T15486] usbhid 7-1:0.0: can't add hid device: -71 [ 1106.830536][T15486] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1106.888795][T15551] Bluetooth: MGMT ver 1.23 [ 1106.918953][T15538] fido_id[15538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1106.936722][T15551] Bluetooth: hci1: expected 2178 bytes, got 2 bytes [ 1106.962922][T15486] usb 7-1: USB disconnect, device number 10 [ 1108.846219][ T29] audit: type=1400 audit(1778994754.188:1364): avc: denied { write } for pid=15534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.033020][ T29] audit: type=1400 audit(1778994754.368:1365): avc: denied { write } for pid=15583 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.152441][T15486] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1109.233573][ T29] audit: type=1400 audit(1778994754.558:1366): avc: denied { getopt } for pid=15584 comm="syz.1.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1109.291079][T15486] usb 6-1: device descriptor read/64, error -71 [ 1109.358272][T15595] netlink: 'syz.6.2482': attribute type 21 has an invalid length. [ 1109.366231][T15595] IPv6: NLM_F_CREATE should be specified when creating new route [ 1109.585077][ T29] audit: type=1400 audit(1778994754.928:1367): avc: denied { write } for pid=15588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.623661][T15486] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1109.743136][ T29] audit: type=1400 audit(1778994755.088:1368): avc: denied { write } for pid=15601 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.772712][T15486] usb 6-1: device descriptor read/64, error -71 [ 1109.901819][T15486] usb usb6-port1: attempt power cycle [ 1110.498225][T15486] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1110.533756][T15486] usb 6-1: device descriptor read/8, error -71 [ 1110.751300][T15499] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1110.781522][T15486] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1110.822277][T15486] usb 6-1: device descriptor read/8, error -71 [ 1110.914037][T15499] usb 4-1: Using ep0 maxpacket: 32 [ 1110.926217][T15499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.938653][T15486] usb usb6-port1: unable to enumerate USB device [ 1110.957915][T15499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.970363][T15499] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1110.988518][T15499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.023373][T15499] usb 4-1: config 0 descriptor?? [ 1111.113630][T15499] hub 4-1:0.0: USB hub found [ 1111.296684][T15610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2488'. [ 1111.314730][T15499] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1111.383654][T15482] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1111.938329][T15482] usb 2-1: Using ep0 maxpacket: 8 [ 1112.549141][ T29] audit: type=1400 audit(1778994757.178:1369): avc: denied { accept } for pid=15615 comm="syz.0.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1115.708700][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.752060][T15499] usbhid 4-1:0.0: can't add hid device: -71 [ 1115.767668][T15499] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1115.848454][T15499] usb 4-1: USB disconnect, device number 89 [ 1115.936651][T15482] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1116.005957][T15482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.323969][T15482] usb 2-1: Product: syz [ 1116.698267][T15482] usb 2-1: Manufacturer: syz [ 1116.734957][T15482] usb 2-1: config 0 descriptor?? [ 1116.759333][T15482] usb 2-1: can't set config #0, error -71 [ 1116.916302][T15482] usb 2-1: USB disconnect, device number 79 [ 1117.687497][ T29] audit: type=1400 audit(1778994763.028:1370): avc: denied { read write } for pid=15647 comm="syz.3.2498" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1117.763364][ T29] audit: type=1400 audit(1778994763.028:1371): avc: denied { open } for pid=15647 comm="syz.3.2498" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1117.806287][T15486] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1117.938203][T15482] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1117.991125][T15486] usb 7-1: Using ep0 maxpacket: 16 [ 1118.002584][T15486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.031084][T15486] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1118.053720][T15486] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1118.058990][T15653] efs: cannot read volume header [ 1118.063674][T15486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.102722][T15486] usb 7-1: config 0 descriptor?? [ 1118.103620][T15482] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.120885][T15482] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1118.148513][T15482] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1118.148578][T15482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1118.148615][T15482] usb 4-1: SerialNumber: syz [ 1118.175215][T15482] usb 4-1: 0:2 : does not exist [ 1118.500680][T15654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15654 comm=syz.1.2494 [ 1118.591460][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2497'. [ 1118.663005][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2497'. [ 1118.695270][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2497'. [ 1118.768139][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2497'. [ 1118.834155][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2497'. [ 1118.979894][T15486] nintendo 0003:057E:2019.0017: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.6-1/input0 [ 1119.053195][T15486] nintendo 0003:057E:2019.0017: Failed to get joycon info; ret=-38 [ 1119.062853][T15486] nintendo 0003:057E:2019.0017: Failed to retrieve controller info; ret=-38 [ 1119.073293][T15486] nintendo 0003:057E:2019.0017: Failed to initialize controller; ret=-38 [ 1119.096085][T15486] nintendo 0003:057E:2019.0017: probe - fail = -38 [ 1119.102961][T15486] nintendo 0003:057E:2019.0017: probe with driver nintendo failed with error -38 [ 1119.312584][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.339416][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.388839][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.416429][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.452094][T15499] usb 7-1: USB disconnect, device number 11 [ 1119.540671][T15666] netlink: 'syz.0.2501': attribute type 21 has an invalid length. [ 1119.769688][T15664] fido_id[15664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1120.571126][T15499] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1120.635409][ T29] audit: type=1400 audit(1778994765.968:1372): avc: denied { write } for pid=15669 comm="syz.5.2503" path="socket:[51996]" dev="sockfs" ino=51996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1120.751174][T15499] usb 7-1: Using ep0 maxpacket: 32 [ 1120.764689][T15499] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.796195][T15499] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.816728][T15499] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1120.835817][T15499] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.862016][T15499] usb 7-1: config 0 descriptor?? [ 1120.897860][T15499] hub 7-1:0.0: USB hub found [ 1120.963321][T15482] usb 4-1: USB disconnect, device number 90 [ 1121.038930][T15223] udevd[15223]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1121.165518][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2502'. [ 1121.181783][T15499] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1122.113666][T15482] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1122.703702][T15482] usb 4-1: device descriptor read/64, error -71 [ 1122.996435][T15482] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1123.322091][T15482] usb 4-1: device descriptor read/64, error -71 [ 1123.445989][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'. [ 1123.488397][T15695] batadv0: entered promiscuous mode [ 1123.494510][T15695] macsec1: entered promiscuous mode [ 1123.501189][T15695] macsec1: entered allmulticast mode [ 1123.506800][T15695] batadv0: entered allmulticast mode [ 1123.517050][T15695] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1123.546122][T15695] batadv0: left allmulticast mode [ 1123.552212][T15695] batadv0: left promiscuous mode [ 1123.707340][T15499] usbhid 7-1:0.0: can't add hid device: -71 [ 1123.766299][T15482] usb usb4-port1: attempt power cycle [ 1123.789414][T15499] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1123.963655][T15499] usb 7-1: USB disconnect, device number 12 [ 1124.791941][T15499] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1124.835258][T15709] block device autoloading is deprecated and will be removed. [ 1125.551176][T15499] usb 7-1: Using ep0 maxpacket: 8 [ 1125.570544][T15710] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1125.596799][T15499] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1125.637915][T15499] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1125.654666][T15499] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1125.664889][T15499] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1125.691092][T15499] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1125.708718][T15499] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.725659][ T5708] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1125.861166][ T5716] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1125.891080][ T5708] usb 6-1: Using ep0 maxpacket: 16 [ 1125.908504][ T5708] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.940406][ T5708] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1125.974445][ T5708] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1125.994203][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.015187][ T5708] usb 6-1: config 0 descriptor?? [ 1126.029537][T15499] usb 7-1: GET_CAPABILITIES returned 0 [ 1126.049876][T15499] usbtmc 7-1:16.0: can't read capabilities [ 1126.141340][ T5716] usb 1-1: Using ep0 maxpacket: 8 [ 1126.153783][ T5716] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1126.176550][ T5716] usb 1-1: config 8 has an invalid interface number: 188 but max is 0 [ 1126.201172][ T5716] usb 1-1: config 8 has no interface number 0 [ 1126.220721][ T5716] usb 1-1: config 8 interface 188 has no altsetting 0 [ 1126.272995][T15700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.800304][T15700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.813269][ T5716] usb 1-1: New USB device found, idVendor=1b3d, idProduct=019a, bcdDevice= 2.2c [ 1127.841319][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.850969][ T5716] usb 1-1: Product: syz [ 1127.855183][ T5716] usb 1-1: Manufacturer: syz [ 1127.860669][ T5716] usb 1-1: SerialNumber: syz [ 1128.612729][ T5708] usbhid 6-1:0.0: can't add hid device: -71 [ 1128.620208][ T5708] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1128.672170][ T5708] usb 6-1: USB disconnect, device number 25 [ 1128.777821][ T5716] ftdi_sio 1-1:8.188: FTDI USB Serial Device converter detected [ 1128.874652][ T5716] ftdi_sio ttyUSB0: unknown device type: 0x22c [ 1129.015439][ T5716] usb 1-1: USB disconnect, device number 110 [ 1129.023038][ T5716] ftdi_sio 1-1:8.188: device disconnected [ 1129.064916][T15486] usb 7-1: USB disconnect, device number 13 [ 1129.881229][T15486] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1129.954432][T15726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1130.601827][T15738] netlink: 'syz.5.2518': attribute type 21 has an invalid length. [ 1130.822774][T15741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15741 comm=syz.1.2517 [ 1131.272551][T15739] vivid-000: kernel_thread() failed [ 1132.359369][T15486] usb 4-1: device descriptor read/all, error -71 [ 1132.868207][T15744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1133.038514][T15756] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2527'. [ 1133.049190][T15756] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2527'. [ 1133.058896][T15756] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2527'. [ 1133.121077][T15499] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1133.214873][ T5708] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1133.310090][T15759] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2528'. [ 1133.361104][T15486] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1133.370202][T15499] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.384225][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1133.401861][T15499] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1133.414376][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1133.490930][ T5708] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1133.608052][T15766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2530'. [ 1133.683954][T15486] usb 4-1: Using ep0 maxpacket: 8 [ 1133.684129][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.730377][T15766] batadv0: entered promiscuous mode [ 1133.739257][T15766] macsec1: entered promiscuous mode [ 1133.747781][T15766] macsec1: entered allmulticast mode [ 1133.753803][T15766] batadv0: entered allmulticast mode [ 1133.774581][T15766] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1133.844151][T15766] batadv0: left allmulticast mode [ 1133.886477][T15766] batadv0: left promiscuous mode [ 1134.662528][T15499] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1134.663138][ T5708] usb 1-1: config 0 descriptor?? [ 1134.908458][T15768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2529'. [ 1135.261846][T15486] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1135.971259][T15499] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1135.977546][ T5708] ath6kl: Failed to submit usb control message: -71 [ 1135.985499][T15499] usb 7-1: SerialNumber: syz [ 1135.985961][ T5708] ath6kl: unable to send the bmi data to the device: -71 [ 1135.997528][ T5708] ath6kl: Unable to send get target info: -71 [ 1136.026694][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1136.052658][ T5708] ath6kl: Failed to init ath6kl core: -71 [ 1136.059480][ T5708] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1136.073922][ T5708] usb 1-1: USB disconnect, device number 111 [ 1136.089349][T15499] usb 7-1: can't set config #1, error -32 [ 1136.098533][T15761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15761 comm=syz.1.2529 [ 1136.120999][ T5730] usb 7-1: USB disconnect, device number 14 [ 1136.823781][T15486] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1136.837845][T15486] usb 4-1: can't read configurations, error -71 [ 1136.857982][T15486] usb usb4-port1: attempt power cycle [ 1137.752424][T15786] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1137.942237][T15791] trusted_key: encrypted_key: master key parameter '`efault' is invalid [ 1138.743428][T15796] trusted_key: encrypted_key: insufficient parameters specified [ 1139.353302][T15799] netlink: 280 bytes leftover after parsing attributes in process `syz.5.2540'. [ 1141.237716][T15815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1141.950811][T15819] syz_tun: entered allmulticast mode [ 1142.609269][ T5730] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1143.176658][ T5730] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.191825][ T5730] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1143.210868][ T5730] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1143.222344][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.246647][ T5730] usb 2-1: Product: syz [ 1143.260843][ T5730] usb 2-1: Manufacturer: syz [ 1143.268021][ T5730] usb 2-1: SerialNumber: syz [ 1143.457780][ T29] audit: type=1400 audit(1778994788.798:1373): avc: denied { getopt } for pid=15829 comm="syz.3.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1143.553627][ T29] audit: type=1400 audit(1778994788.798:1374): avc: denied { accept } for pid=15829 comm="syz.3.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1143.633446][ T29] audit: type=1400 audit(1778994788.798:1375): avc: denied { accept } for pid=15829 comm="syz.3.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1143.723764][T15821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.751634][ T5730] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1143.782318][T15821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.841726][T15841] trusted_key: encrypted_key: master key parameter '`efault' is invalid [ 1144.395432][ T5730] usb 2-1: USB disconnect, device number 80 [ 1144.445547][T15821] syz_tun: left allmulticast mode [ 1145.188446][T15849] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1145.222391][T15851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1145.483658][ T5708] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1145.609887][ T5730] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1145.699098][T15860] netlink: 'syz.6.2557': attribute type 10 has an invalid length. [ 1145.736702][T15860] macvlan1: entered allmulticast mode [ 1145.767670][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1145.773168][T15860] veth1_vlan: entered allmulticast mode [ 1145.785067][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1145.794731][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1145.809642][T15860] team0: Port device macvlan1 added [ 1146.340811][ T5708] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1146.384489][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1146.411255][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.420926][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1146.433478][ T5708] usb 1-1: Product: syz [ 1146.438852][ T5708] usb 1-1: Manufacturer: syz [ 1146.453209][ T5730] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1146.492819][ T5708] usb 1-1: SerialNumber: syz [ 1146.541581][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.918653][ T5708] usb 1-1: config 0 descriptor?? [ 1146.927032][ T5730] usb 2-1: config 0 descriptor?? [ 1146.988542][T15868] FAULT_INJECTION: forcing a failure. [ 1146.988542][T15868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1147.014769][T15868] CPU: 0 UID: 0 PID: 15868 Comm: syz.5.2560 Tainted: G L syzkaller #0 PREEMPT(full) [ 1147.014802][T15868] Tainted: [L]=SOFTLOCKUP [ 1147.014810][T15868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1147.014822][T15868] Call Trace: [ 1147.014828][T15868] [ 1147.014836][T15868] dump_stack_lvl+0x100/0x190 [ 1147.014867][T15868] should_fail_ex.cold+0x5/0xa [ 1147.014898][T15868] _copy_from_user+0x2e/0xd0 [ 1147.014930][T15868] move_addr_to_kernel+0x65/0x170 [ 1147.014960][T15868] __sys_bind+0x11d/0x260 [ 1147.014988][T15868] ? __pfx___sys_bind+0x10/0x10 [ 1147.015014][T15868] ? __fget_files+0x21f/0x3d0 [ 1147.015050][T15868] ? __pfx_ksys_write+0x10/0x10 [ 1147.015080][T15868] __x64_sys_bind+0x72/0xb0 [ 1147.015107][T15868] ? lockdep_hardirqs_on+0x78/0x100 [ 1147.015137][T15868] do_syscall_64+0x10b/0xf80 [ 1147.015166][T15868] ? clear_bhb_loop+0x40/0x90 [ 1147.015192][T15868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.015213][T15868] RIP: 0033:0x7f1e4679ce59 [ 1147.015232][T15868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.015254][T15868] RSP: 002b:00007f1e475c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1147.015275][T15868] RAX: ffffffffffffffda RBX: 00007f1e46a15fa0 RCX: 00007f1e4679ce59 [ 1147.015290][T15868] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000004 [ 1147.015303][T15868] RBP: 00007f1e475c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1147.015317][T15868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.015329][T15868] R13: 00007f1e46a16038 R14: 00007f1e46a15fa0 R15: 00007ffe3b5ceda8 [ 1147.015358][T15868] [ 1147.504718][ T5730] ath6kl: Failed to submit usb control message: -71 [ 1147.512194][ T5730] ath6kl: unable to send the bmi data to the device: -71 [ 1147.519930][ T5730] ath6kl: Unable to send get target info: -71 [ 1147.527503][ T5708] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1147.750219][T15877] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1148.508328][T15851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1148.537892][ T5730] ath6kl: Failed to init ath6kl core: -71 [ 1148.562705][ T5730] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1148.643534][ T5730] usb 2-1: USB disconnect, device number 81 [ 1148.876744][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2566'. [ 1149.321314][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2566'. [ 1149.325419][T10134] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.341298][T15890] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2565'. [ 1149.378790][T15890] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2565'. [ 1149.417545][ T35] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.464505][ T35] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.482867][ T35] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1150.299096][ T5715] usb 1-1: USB disconnect, device number 112 [ 1150.621449][T15904] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1150.659000][T15913] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1150.839986][T15918] FAULT_INJECTION: forcing a failure. [ 1150.839986][T15918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.856245][T15918] CPU: 1 UID: 0 PID: 15918 Comm: syz.0.2576 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.856278][T15918] Tainted: [L]=SOFTLOCKUP [ 1150.856286][T15918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1150.856299][T15918] Call Trace: [ 1150.856306][T15918] [ 1150.856314][T15918] dump_stack_lvl+0x100/0x190 [ 1150.856345][T15918] should_fail_ex.cold+0x5/0xa [ 1150.856373][T15918] _copy_from_user+0x2e/0xd0 [ 1150.856406][T15918] core_sys_select+0x2d0/0xbb0 [ 1150.856436][T15918] ? __pfx_core_sys_select+0x10/0x10 [ 1150.856458][T15918] ? find_held_lock+0x2b/0x80 [ 1150.856478][T15918] ? get_pid_task+0xfc/0x250 [ 1150.856527][T15918] ? __pfx_set_user_sigmask+0x10/0x10 [ 1150.856554][T15918] ? kernel_write+0x653/0x6c0 [ 1150.856576][T15918] ? __fget_files+0x215/0x3d0 [ 1150.856607][T15918] do_pselect.constprop.0+0x238/0x270 [ 1150.856638][T15918] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1150.856670][T15918] ? ksys_write+0x1ac/0x250 [ 1150.856694][T15918] __x64_sys_pselect6+0x149/0x1c0 [ 1150.856722][T15918] do_syscall_64+0x10b/0xf80 [ 1150.856747][T15918] ? clear_bhb_loop+0x40/0x90 [ 1150.856772][T15918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.856792][T15918] RIP: 0033:0x7effa7b9ce59 [ 1150.856810][T15918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.856840][T15918] RSP: 002b:00007effa8ae4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1150.856860][T15918] RAX: ffffffffffffffda RBX: 00007effa7e15fa0 RCX: 00007effa7b9ce59 [ 1150.856874][T15918] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1150.856887][T15918] RBP: 00007effa8ae4090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.856899][T15918] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1150.856911][T15918] R13: 00007effa7e16038 R14: 00007effa7e15fa0 R15: 00007ffe2cb798e8 [ 1150.856938][T15918] [ 1151.221842][T15499] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1151.492727][T15499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1151.504395][T15499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1151.528723][T15499] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1151.538071][T15499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.567046][T15499] usb 4-1: config 0 descriptor?? [ 1151.786051][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2581'. [ 1151.831167][T15938] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2582'. [ 1151.838505][T15499] ath6kl: Failed to submit usb control message: -71 [ 1151.870162][T15499] ath6kl: unable to send the bmi data to the device: -71 [ 1151.897749][T15499] ath6kl: Unable to send get target info: -71 [ 1152.103894][T15499] ath6kl: Failed to init ath6kl core: -71 [ 1152.120294][T15499] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1152.239881][T15499] usb 4-1: USB disconnect, device number 97 [ 1152.365421][T15948] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1153.071608][T15955] FAULT_INJECTION: forcing a failure. [ 1153.071608][T15955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.095856][T15955] CPU: 0 UID: 0 PID: 15955 Comm: syz.3.2587 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.095890][T15955] Tainted: [L]=SOFTLOCKUP [ 1153.095898][T15955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1153.095910][T15955] Call Trace: [ 1153.095917][T15955] [ 1153.095926][T15955] dump_stack_lvl+0x100/0x190 [ 1153.095956][T15955] should_fail_ex.cold+0x5/0xa [ 1153.095987][T15955] _copy_to_user+0x32/0xd0 [ 1153.096021][T15955] simple_read_from_buffer+0xcb/0x170 [ 1153.096051][T15955] proc_fail_nth_read+0x1af/0x230 [ 1153.096076][T15955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1153.096104][T15955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1153.096127][T15955] vfs_read+0x1e4/0xb30 [ 1153.096153][T15955] ? __pfx_vfs_read+0x10/0x10 [ 1153.096176][T15955] ? __fget_files+0x215/0x3d0 [ 1153.096209][T15955] ? __fget_files+0x21f/0x3d0 [ 1153.096246][T15955] ksys_read+0x12a/0x250 [ 1153.096269][T15955] ? __pfx_ksys_read+0x10/0x10 [ 1153.096295][T15955] ? rcu_is_watching+0x12/0xc0 [ 1153.096331][T15955] do_syscall_64+0x10b/0xf80 [ 1153.096360][T15955] ? clear_bhb_loop+0x40/0x90 [ 1153.096385][T15955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.096406][T15955] RIP: 0033:0x7f36f135d68e [ 1153.096423][T15955] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1153.096442][T15955] RSP: 002b:00007f36f22f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1153.096461][T15955] RAX: ffffffffffffffda RBX: 00007f36f22f56c0 RCX: 00007f36f135d68e [ 1153.096476][T15955] RDX: 000000000000000f RSI: 00007f36f22f50a0 RDI: 0000000000000004 [ 1153.096489][T15955] RBP: 00007f36f22f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.096502][T15955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.096515][T15955] R13: 00007f36f1616038 R14: 00007f36f1615fa0 R15: 00007ffe16ce3028 [ 1153.096545][T15955] [ 1154.026302][T15961] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1154.281222][T15499] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1154.853725][ T29] audit: type=1400 audit(1778994800.168:1376): avc: denied { map } for pid=15962 comm="syz.0.2589" path="socket:[54000]" dev="sockfs" ino=54000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1155.022135][T15499] usb 6-1: Using ep0 maxpacket: 32 [ 1155.032926][T15499] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1155.068444][T15499] usb 6-1: config 0 has no interface number 0 [ 1155.105307][T15499] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1155.130921][T15499] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1155.168815][ T29] audit: type=1326 audit(1778994800.488:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15966 comm="syz.0.2592" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effa7b9ce59 code=0x0 [ 1155.198300][T15499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.216707][T15499] usb 6-1: Product: syz [ 1155.221195][T15499] usb 6-1: Manufacturer: syz [ 1155.225864][T15499] usb 6-1: SerialNumber: syz [ 1155.240459][T15499] usb 6-1: config 0 descriptor?? [ 1155.442638][T15973] netlink: 212 bytes leftover after parsing attributes in process `syz.6.2593'. [ 1155.940615][T15499] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1155.964225][T15499] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1156.002922][T15985] gre2: entered promiscuous mode [ 1156.510898][T15499] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1157.088129][T15499] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1157.102913][T15499] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1157.115126][T15499] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 1157.488205][T15996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2600'. [ 1158.194221][T16008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16008 comm=syz.0.2604 [ 1158.784325][T16006] vivid-000: kernel_thread() failed [ 1159.918995][ T9766] usb 6-1: USB disconnect, device number 26 [ 1159.959063][T16013] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2605'. [ 1160.171460][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2608'. [ 1160.232144][T16017] ipt_ECN: cannot use operation on non-tcp rule [ 1160.468627][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2607'. [ 1160.558440][T15499] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1161.021080][T15499] usb 6-1: Using ep0 maxpacket: 16 [ 1161.040587][T16016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1161.067479][T16026] ipt_ECN: cannot use operation on non-tcp rule [ 1161.097975][T15499] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1161.142424][T15499] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1161.206980][T15499] usb 6-1: string descriptor 0 read error: -22 [ 1161.231971][T15499] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1161.271245][T15499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.283356][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2611'. [ 1161.313577][T16029] bond3: option mode: unable to set because the bond device is up [ 1161.350605][T15499] snd-ua101 6-1:1.0: invalid num_altsetting [ 1161.359644][T16030] ipt_ECN: cannot use operation on non-tcp rule [ 1161.371077][T15498] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1161.524288][ T29] audit: type=1400 audit(1778994806.868:1378): avc: denied { lock } for pid=16031 comm="syz.3.2612" path="socket:[55376]" dev="sockfs" ino=55376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1161.573127][T15498] usb 7-1: Using ep0 maxpacket: 16 [ 1161.583837][T15498] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1161.594677][ T29] audit: type=1400 audit(1778994806.898:1379): avc: denied { wake_alarm } for pid=16031 comm="syz.3.2612" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1161.626933][T15498] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1161.645340][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2608'. [ 1161.661766][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2608'. [ 1161.678221][T15498] usb 7-1: string descriptor 0 read error: -22 [ 1161.687604][T15498] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1161.696841][T15499] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1161.717549][T15498] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.768118][T15498] snd-ua101 7-1:1.0: invalid num_altsetting [ 1161.836834][T16016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.871106][T15499] usb 2-1: Using ep0 maxpacket: 16 [ 1161.895713][T16016] bond1: (slave bond0): making interface the new active one [ 1161.950873][T15499] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1161.960368][T16016] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1162.001830][T15499] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1162.018714][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2607'. [ 1162.050967][T15499] usb 2-1: string descriptor 0 read error: -22 [ 1162.074202][T15499] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1162.083438][T16022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2607'. [ 1162.119737][T15499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.213631][T15499] snd-ua101 2-1:1.0: invalid num_altsetting [ 1162.294606][ T5730] usb 7-1: USB disconnect, device number 15 [ 1162.574242][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2611'. [ 1162.586130][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2611'. [ 1162.606013][T16029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.637536][T16029] bond3: (slave bond0): Enslaving as an active interface with a down link [ 1162.826084][ T5730] usb 6-1: USB disconnect, device number 27 [ 1163.261215][T15499] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1163.293148][T15498] usb 2-1: USB disconnect, device number 82 [ 1163.521053][T15499] usb 7-1: Using ep0 maxpacket: 32 [ 1163.675952][ T29] audit: type=1326 audit(1778994808.998:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1163.742097][T16053] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2616'. [ 1164.021656][T15499] usb 7-1: config 1 has an invalid interface number: 32 but max is 2 [ 1164.061652][T15499] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1164.093333][T15499] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1164.109055][ T29] audit: type=1326 audit(1778994808.998:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1164.135737][T15499] usb 7-1: config 1 has an invalid interface number: 3 but max is 2 [ 1164.143954][T15499] usb 7-1: config 1 has an invalid interface number: 112 but max is 2 [ 1164.152250][T15499] usb 7-1: config 1 has no interface number 0 [ 1164.158475][T15499] usb 7-1: config 1 has no interface number 1 [ 1164.164807][ T29] audit: type=1326 audit(1778994809.008:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1164.215369][T15499] usb 7-1: config 1 has no interface number 2 [ 1164.232777][T15499] usb 7-1: config 1 interface 32 altsetting 254 endpoint 0xA has an invalid bInterval 109, changing to 10 [ 1164.274930][T15499] usb 7-1: config 1 interface 32 altsetting 254 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1164.311181][ T29] audit: type=1326 audit(1778994809.008:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1164.360410][T15499] usb 7-1: config 1 interface 32 altsetting 254 has a duplicate endpoint with address 0x1, skipping [ 1164.399207][T15499] usb 7-1: config 1 interface 32 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 1164.769953][T16061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16061 comm=syz.5.2617 [ 1165.261844][T16059] vivid-000: kernel_thread() failed [ 1166.037063][T15499] usb 7-1: config 1 interface 32 altsetting 254 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1166.069312][ T29] audit: type=1326 audit(1778994809.008:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1166.289778][T15499] usb 7-1: config 1 interface 32 altsetting 254 has a duplicate endpoint with address 0x84, skipping [ 1166.326579][ T29] audit: type=1326 audit(1778994809.008:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1166.374547][T15499] usb 7-1: config 1 interface 32 altsetting 254 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1166.409882][T15499] usb 7-1: config 1 interface 32 altsetting 254 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1166.647541][T16074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2619'. [ 1166.663813][T15499] usb 7-1: config 1 interface 32 altsetting 254 bulk endpoint 0xB has invalid maxpacket 1023 [ 1166.677557][ T29] audit: type=1326 audit(1778994809.008:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1166.764753][T15499] usb 7-1: config 1 interface 32 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 1166.809630][T15499] usb 7-1: config 1 interface 32 altsetting 254 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1166.844364][ T29] audit: type=1326 audit(1778994809.008:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1166.885057][T15499] usb 7-1: config 1 interface 32 altsetting 254 has a duplicate endpoint with address 0x1, skipping [ 1166.920263][T15499] usb 7-1: config 1 interface 3 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 1166.960398][T15499] usb 7-1: config 1 interface 3 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 1167.045374][ T29] audit: type=1326 audit(1778994809.008:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1167.203933][T15499] usb 7-1: config 1 interface 3 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1167.284424][T15499] usb 7-1: config 1 interface 3 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 1167.309990][ T29] audit: type=1326 audit(1778994809.008:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1167.354707][T15499] usb 7-1: config 1 interface 3 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 1167.406664][T15499] usb 7-1: config 1 interface 3 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 1167.440553][T15499] usb 7-1: config 1 interface 3 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 1167.451401][ T29] audit: type=1326 audit(1778994809.008:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1167.482698][T15499] usb 7-1: config 1 interface 112 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 1167.485578][T16079] ucma_write: process 1783 (syz.1.2623) changed security contexts after opening file descriptor, this is not allowed. [ 1167.528547][T15499] usb 7-1: config 1 interface 112 altsetting 14 has a duplicate endpoint with address 0x4, skipping [ 1167.549696][ T29] audit: type=1326 audit(1778994809.008:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1167.592979][T15499] usb 7-1: config 1 interface 112 altsetting 14 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1167.644721][T15499] usb 7-1: config 1 interface 112 altsetting 14 has a duplicate endpoint with address 0xB, skipping [ 1167.647238][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'. [ 1167.685438][T15499] usb 7-1: config 1 interface 112 altsetting 14 has a duplicate endpoint with address 0x7, skipping [ 1167.696730][ T29] audit: type=1326 audit(1778994809.008:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1167.744604][T15499] usb 7-1: config 1 interface 32 has no altsetting 0 [ 1167.745839][T16086] ipt_ECN: cannot use operation on non-tcp rule [ 1167.778854][T15499] usb 7-1: config 1 interface 3 has no altsetting 0 [ 1167.806827][T15499] usb 7-1: config 1 interface 112 has no altsetting 0 [ 1167.817848][ T29] audit: type=1326 audit(1778994809.118:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1167.863688][T15499] usb 7-1: string descriptor 0 read error: -71 [ 1167.884991][T15499] usb 7-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=3e.81 [ 1167.931309][T15499] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.974245][ T29] audit: type=1326 audit(1778994809.118:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.5.2616" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7ffc0000 [ 1168.017407][T15499] usb 7-1: can't set config #1, error -71 [ 1168.040965][T15499] usb 7-1: USB disconnect, device number 16 [ 1168.221179][ T9766] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1168.381120][T15499] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1168.396932][T16100] netlink: 'syz.1.2628': attribute type 10 has an invalid length. [ 1168.414824][ T9766] usb 4-1: Using ep0 maxpacket: 16 [ 1168.438017][ T9766] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1168.462635][ T9766] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1168.499970][ T9766] usb 4-1: string descriptor 0 read error: -22 [ 1168.511673][ T9766] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1168.542491][ T9766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.587047][ T9766] snd-ua101 4-1:1.0: invalid num_altsetting [ 1168.603761][T15499] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 1168.671094][T15499] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1168.689170][T16101] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1168.769975][T16104] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2620'. [ 1168.816025][T15499] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1168.864959][T15499] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1168.865975][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'. [ 1168.901419][T16084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 1168.917248][T15499] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.986897][T15499] usb 7-1: config 0 descriptor?? [ 1169.109946][T16084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.171678][T16084] bond2: (slave bond0): Enslaving as an active interface with a down link [ 1169.222262][T16110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1169.323437][T16109] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1169.379733][ T9766] usb 4-1: USB disconnect, device number 98 [ 1169.726582][T15499] hid_parser_main: 30 callbacks suppressed [ 1169.726606][T15499] ryos 0003:1E7D:3232.0018: unknown main item tag 0x0 [ 1169.801194][T15499] ryos 0003:1E7D:3232.0018: unknown main item tag 0x0 [ 1169.850013][T15499] ryos 0003:1E7D:3232.0018: unknown main item tag 0x0 [ 1169.882697][T15499] ryos 0003:1E7D:3232.0018: unknown main item tag 0x0 [ 1169.923998][ T5730] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1170.001780][T15499] ryos 0003:1E7D:3232.0018: unknown main item tag 0x0 [ 1170.099859][T16115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.110538][T16115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.304595][T15499] ryos 0003:1E7D:3232.0018: unknown main item tag 0x0 [ 1170.399779][T15499] ryos 0003:1E7D:3232.0018: unknown main item tag 0x0 [ 1170.442753][T15499] ryos 0003:1E7D:3232.0018: unknown main item tag 0x0 [ 1170.472834][T15499] ryos 0003:1E7D:3232.0018: unknown main item tag 0x0 [ 1170.504240][T15499] ryos 0003:1E7D:3232.0018: unknown main item tag 0x0 [ 1170.538031][T15499] ryos 0003:1E7D:3232.0018: hidraw0: USB HID v80.81 Device [HID 1e7d:3232] on usb-dummy_hcd.6-1/input0 [ 1170.551154][ T5730] usb 6-1: Using ep0 maxpacket: 16 [ 1170.669095][ T5730] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1170.710223][ T5730] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1536, setting to 1024 [ 1170.755266][ T5730] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1170.824254][ T5730] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1170.860299][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.889569][ T5730] usb 6-1: Product: ã [ 1170.927871][ T5730] usb 6-1: Manufacturer: à   [ 1170.944745][ T5730] usb 6-1: SerialNumber: Л [ 1171.199720][T16123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2634'. [ 1171.249629][ T5730] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1171.654678][T15499] usb 7-1: USB disconnect, device number 17 [ 1171.699510][ T5730] usb 6-1: USB disconnect, device number 28 [ 1171.989717][T15211] udevd[15211]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1172.588821][ T29] audit: type=1400 audit(1778994817.928:1395): avc: denied { write } for pid=16118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1172.658786][T15499] libceph: connect (1)[c::]:6789 error -101 [ 1172.669339][T15499] libceph: mon0 (1)[c::]:6789 connect error [ 1172.726688][T15499] libceph: connect (1)[c::]:6789 error -101 [ 1172.827801][T15499] libceph: mon0 (1)[c::]:6789 connect error [ 1172.938965][T16131] ceph: No mds server is up or the cluster is laggy [ 1173.018955][ T29] audit: type=1400 audit(1778994818.318:1396): avc: denied { write } for pid=16146 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1173.247492][T15499] libceph: connect (1)[c::]:6789 error -101 [ 1173.278577][T15499] libceph: mon0 (1)[c::]:6789 connect error [ 1173.373774][T16153] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1174.763806][T15486] libceph: connect (1)[c::]:6789 error -101 [ 1174.835253][T16143] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2635'. [ 1175.022604][T15486] libceph: mon0 (1)[c::]:6789 connect error [ 1175.483916][T15486] Process accounting resumed [ 1175.574954][T16165] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2641'. [ 1175.778767][T16170] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1175.822410][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2644'. [ 1175.880044][T16169] ipt_ECN: cannot use operation on non-tcp rule [ 1176.097478][T16170] bond0: (slave lo): Enslaving as an active interface with an up link [ 1176.138290][T16175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2645'. [ 1176.150328][T16170] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1176.412787][T15486] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1176.581885][T15486] usb 6-1: Using ep0 maxpacket: 16 [ 1176.617407][T15486] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1176.671994][T15486] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1176.685349][ T29] audit: type=1400 audit(1778994822.008:1397): avc: denied { write } for pid=16150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1176.791860][T15486] usb 6-1: string descriptor 0 read error: -22 [ 1176.815470][T15486] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1176.849084][ T5730] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1176.916928][T16184] netlink: 'syz.6.2642': attribute type 21 has an invalid length. [ 1177.015101][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.126264][T15486] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.154014][ T5730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.176430][ T5730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.211086][ T5730] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1177.223025][T15486] snd-ua101 6-1:1.0: invalid num_altsetting [ 1177.254086][ T5730] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1177.279752][ T29] audit: type=1400 audit(1778994822.608:1398): avc: denied { write } for pid=16186 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1177.304997][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.347613][ T5730] usb 1-1: config 0 descriptor?? [ 1177.504102][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2644'. [ 1177.545949][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2644'. [ 1177.549480][T16192] netlink: 'syz.3.2649': attribute type 1 has an invalid length. [ 1177.562799][T16192] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2649'. [ 1177.769004][ T5716] usb 6-1: USB disconnect, device number 29 [ 1177.858456][ T9766] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1177.867938][ T5757] bond1: (slave bond0): link status definitely down, disabling slave [ 1177.887658][ T5757] bond1: now running without any active interface! [ 1178.166053][ T5730] hid_parser_main: 30 callbacks suppressed [ 1178.166078][ T5730] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x4 [ 1178.193873][ T9766] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1178.233858][ T9766] usb 2-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 1178.245836][ T5730] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1178.262264][ T9766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.286407][ T9766] usb 2-1: config 0 descriptor?? [ 1178.607232][T15499] usb 1-1: USB disconnect, device number 113 [ 1178.844529][ T9766] lenovo 0003:04B3:3108.001A: unknown main item tag 0x0 [ 1178.882446][ T9766] lenovo 0003:04B3:3108.001A: unknown main item tag 0x0 [ 1178.910789][ T9766] lenovo 0003:04B3:3108.001A: unknown main item tag 0x0 [ 1178.943831][ T9766] lenovo 0003:04B3:3108.001A: unknown main item tag 0x0 [ 1178.950826][ T9766] lenovo 0003:04B3:3108.001A: unknown main item tag 0x0 [ 1178.958040][ T9766] lenovo 0003:04B3:3108.001A: unknown main item tag 0x0 [ 1178.965061][ T9766] lenovo 0003:04B3:3108.001A: unexpected long global item [ 1178.972762][ T9766] lenovo 0003:04B3:3108.001A: hid_parse failed [ 1178.979513][ T9766] lenovo 0003:04B3:3108.001A: probe with driver lenovo failed with error -22 [ 1179.038673][T16200] FAULT_INJECTION: forcing a failure. [ 1179.038673][T16200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.051739][T16200] CPU: 1 UID: 0 PID: 16200 Comm: syz.6.2651 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.051773][T16200] Tainted: [L]=SOFTLOCKUP [ 1179.051781][T16200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1179.051793][T16200] Call Trace: [ 1179.051801][T16200] [ 1179.051811][T16200] dump_stack_lvl+0x100/0x190 [ 1179.051841][T16200] should_fail_ex.cold+0x5/0xa [ 1179.051870][T16200] _copy_to_user+0x32/0xd0 [ 1179.051904][T16200] simple_read_from_buffer+0xcb/0x170 [ 1179.051934][T16200] proc_fail_nth_read+0x1af/0x230 [ 1179.051959][T16200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1179.051985][T16200] ? rw_verify_area+0xce/0x6d0 [ 1179.052006][T16200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1179.052030][T16200] vfs_read+0x1e4/0xb30 [ 1179.052057][T16200] ? __pfx_vfs_read+0x10/0x10 [ 1179.052086][T16200] ? __fget_files+0x215/0x3d0 [ 1179.052120][T16200] ? __fget_files+0x21f/0x3d0 [ 1179.052154][T16200] ksys_read+0x12a/0x250 [ 1179.052177][T16200] ? __pfx_ksys_read+0x10/0x10 [ 1179.052203][T16200] ? rcu_is_watching+0x12/0xc0 [ 1179.052240][T16200] do_syscall_64+0x10b/0xf80 [ 1179.052267][T16200] ? clear_bhb_loop+0x40/0x90 [ 1179.052294][T16200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.052317][T16200] RIP: 0033:0x7f5613f5d68e [ 1179.052336][T16200] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1179.052356][T16200] RSP: 002b:00007f5614d9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1179.052376][T16200] RAX: ffffffffffffffda RBX: 00007f5614da06c0 RCX: 00007f5613f5d68e [ 1179.052391][T16200] RDX: 000000000000000f RSI: 00007f5614da00a0 RDI: 0000000000000004 [ 1179.052404][T16200] RBP: 00007f5614da0090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.052417][T16200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.052430][T16200] R13: 00007f5614216038 R14: 00007f5614215fa0 R15: 00007ffefc3b7a58 [ 1179.052461][T16200] [ 1179.342932][T16204] FAULT_INJECTION: forcing a failure. [ 1179.342932][T16204] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.355550][T16204] CPU: 1 UID: 0 PID: 16204 Comm: syz.3.2652 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.355579][T16204] Tainted: [L]=SOFTLOCKUP [ 1179.355585][T16204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1179.355596][T16204] Call Trace: [ 1179.355603][T16204] [ 1179.355611][T16204] dump_stack_lvl+0x100/0x190 [ 1179.355642][T16204] should_fail_ex.cold+0x5/0xa [ 1179.355668][T16204] should_failslab+0xc2/0x120 [ 1179.355692][T16204] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1179.355722][T16204] ? __anon_vma_prepare+0x344/0x5e0 [ 1179.355756][T16204] __anon_vma_prepare+0x344/0x5e0 [ 1179.355789][T16204] uffd_lock_vma+0x647/0x700 [ 1179.355814][T16204] ? __pfx_uffd_lock_vma+0x10/0x10 [ 1179.355846][T16204] mfill_get_vma+0xd6/0x7a0 [ 1179.355872][T16204] mfill_atomic_zeropage+0x185/0x9e0 [ 1179.355897][T16204] ? __pfx_mfill_atomic_zeropage+0x10/0x10 [ 1179.355920][T16204] ? find_held_lock+0x2b/0x80 [ 1179.355949][T16204] userfaultfd_ioctl+0x1eba/0x3890 [ 1179.355976][T16204] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1179.356000][T16204] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1179.356023][T16204] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1179.356070][T16204] ? selinux_file_ioctl+0x13b/0x290 [ 1179.356098][T16204] ? selinux_file_ioctl+0xb6/0x290 [ 1179.356125][T16204] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1179.356154][T16204] ? __x64_sys_ioctl+0x18e/0x210 [ 1179.356173][T16204] __x64_sys_ioctl+0x18e/0x210 [ 1179.356197][T16204] do_syscall_64+0x10b/0xf80 [ 1179.356224][T16204] ? clear_bhb_loop+0x40/0x90 [ 1179.356249][T16204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.356267][T16204] RIP: 0033:0x7f36f139ce59 [ 1179.356282][T16204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.356299][T16204] RSP: 002b:00007f36f22f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.356317][T16204] RAX: ffffffffffffffda RBX: 00007f36f1615fa0 RCX: 00007f36f139ce59 [ 1179.356328][T16204] RDX: 0000200000000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1179.356340][T16204] RBP: 00007f36f22f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.356350][T16204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.356360][T16204] R13: 00007f36f1616038 R14: 00007f36f1615fa0 R15: 00007ffe16ce3028 [ 1179.356384][T16204] [ 1179.379666][T16206] netlink: 212 bytes leftover after parsing attributes in process `syz.6.2654'. [ 1179.698509][T16190] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2648'. [ 1179.711376][T16190] netlink: 'syz.1.2648': attribute type 2 has an invalid length. [ 1180.253835][T16217] netlink: 'syz.0.2657': attribute type 21 has an invalid length. [ 1181.667973][T16190] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 1181.702901][T16215] netlink: 'syz.3.2655': attribute type 10 has an invalid length. [ 1181.884108][T15486] usb 2-1: USB disconnect, device number 83 [ 1182.261195][ T5715] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1182.482910][ T5715] usb 7-1: Using ep0 maxpacket: 16 [ 1182.495390][ T5715] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1182.496565][T16226] ipt_ECN: cannot use operation on non-tcp rule [ 1182.515389][ T5715] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1536, setting to 1024 [ 1182.557829][ T5715] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1182.587297][ T5715] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1182.596799][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.605352][ T5715] usb 7-1: Product: ã [ 1182.609602][ T5715] usb 7-1: Manufacturer: à   [ 1182.614241][ T5715] usb 7-1: SerialNumber: Л [ 1182.872708][ T5715] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1182.954819][ T5715] usb 7-1: USB disconnect, device number 18 [ 1183.007879][ T9766] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1183.019321][ T5730] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1183.028195][T15547] udevd[15547]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1183.122363][T16237] netlink: 'syz.0.2662': attribute type 21 has an invalid length. [ 1183.592764][ T5730] usb 2-1: Using ep0 maxpacket: 16 [ 1183.608683][ T9766] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1183.621629][ T9766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.631878][ T9766] usb 4-1: Product: syz [ 1183.637692][ T9766] usb 4-1: Manufacturer: syz [ 1183.643259][ T5730] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1183.899983][T16242] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2664'. [ 1185.419048][ T9766] usb 4-1: SerialNumber: syz [ 1185.440085][ T5730] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1186.040702][ T5730] usb 2-1: string descriptor 0 read error: -71 [ 1186.055473][ T9766] usb 4-1: can't set config #1, error -71 [ 1186.074360][ T5730] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1186.097161][ T9766] usb 4-1: USB disconnect, device number 99 [ 1186.121447][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.925171][ T5730] usb 2-1: can't set config #1, error -71 [ 1187.051142][ T5730] usb 2-1: USB disconnect, device number 84 [ 1187.148920][ T29] audit: type=1400 audit(1778994832.458:1399): avc: denied { listen } for pid=16257 comm="syz.1.2667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1187.679431][ T29] audit: type=1400 audit(1778994832.458:1400): avc: denied { append } for pid=16257 comm="syz.1.2667" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1187.804239][ T29] audit: type=1400 audit(1778994832.458:1401): avc: denied { ioctl } for pid=16257 comm="syz.1.2667" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1187.881198][ T5730] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1188.030417][ T29] audit: type=1400 audit(1778994833.368:1402): avc: denied { write } for pid=16268 comm="syz.6.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1188.062220][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 1188.079588][T16260] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1188.144702][T16274] trusted_key: encrypted_key: master key parameter '`efault' is invalid [ 1188.634175][ T5730] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1188.653428][ T5730] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1188.699867][ T5730] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.709977][ T5730] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1188.731350][ T5730] usb 2-1: config 1 has no interface number 0 [ 1188.737890][ T5730] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1188.803414][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.977409][ T5730] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1189.413413][T16282] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1192.428339][ T5730] snd_usb_pod 2-1:1.1: set_interface failed [ 1192.434924][ T5730] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1192.508707][ T5730] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1192.650084][ T5730] usb 2-1: USB disconnect, device number 85 [ 1193.024103][T16295] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2676'. [ 1194.628820][T16304] ipt_ECN: cannot use operation on non-tcp rule [ 1194.863895][ T29] audit: type=1400 audit(1778994840.198:1403): avc: denied { getopt } for pid=16294 comm="syz.0.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1194.987175][T16309] netlink: 'syz.1.2679': attribute type 21 has an invalid length. [ 1195.855280][ T5730] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1196.031408][ T5730] usb 6-1: Using ep0 maxpacket: 16 [ 1196.330646][T16318] kAFS: unable to lookup cell 'ÿ' [ 1196.689383][ T5730] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1196.717648][ T5730] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1196.754203][ T5730] usb 6-1: string descriptor 0 read error: -22 [ 1196.764873][ T5730] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1196.808957][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.821311][T15486] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1197.031246][T15486] usb 7-1: Using ep0 maxpacket: 32 [ 1197.047970][ T5730] snd-ua101 6-1:1.0: invalid num_altsetting [ 1197.056160][T15486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.082295][T15486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.110209][T15486] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1197.134051][T15486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.141780][T15482] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1197.145227][T15486] usb 7-1: config 0 descriptor?? [ 1197.248674][T15486] hub 7-1:0.0: USB hub found [ 1197.304890][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2677'. [ 1197.324015][T16302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2677'. [ 1197.358984][T16323] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2683'. [ 1197.394888][T15486] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1197.401153][T15482] usb 4-1: Using ep0 maxpacket: 8 [ 1197.423774][T15482] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1197.439692][ T5730] usb 6-1: USB disconnect, device number 30 [ 1197.487341][T15482] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1197.542256][T15482] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1197.570911][T15482] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1197.714359][T15482] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1197.727215][T15482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.187202][T16330] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2684'. [ 1198.202833][T15482] usb 4-1: GET_CAPABILITIES returned 0 [ 1198.209085][T15482] usbtmc 4-1:16.0: can't read capabilities [ 1198.676824][T16333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.787440][T16333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.192862][ T5715] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1199.776274][T15499] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1199.916102][ T5715] usb 6-1: config 0 has an invalid interface number: 148 but max is 0 [ 1199.943270][ T5715] usb 6-1: config 0 has no interface number 0 [ 1199.957768][ T5715] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1199.971104][T15486] usbhid 7-1:0.0: can't add hid device: -71 [ 1199.991135][T15486] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1200.000414][ T5715] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1200.015594][T15499] usb 1-1: Using ep0 maxpacket: 8 [ 1200.035397][T15499] usb 1-1: config 2 has an invalid interface number: 72 but max is 0 [ 1200.047959][ T5715] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 1200.058469][T15499] usb 1-1: config 2 has no interface number 0 [ 1200.068029][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.079790][T15486] usb 7-1: USB disconnect, device number 19 [ 1200.088265][T15499] usb 1-1: config 2 interface 72 has no altsetting 0 [ 1200.103144][ T5715] usb 6-1: Product: syz [ 1200.113114][ T5715] usb 6-1: Manufacturer: syz [ 1200.113241][T15499] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f [ 1200.127697][ T5715] usb 6-1: SerialNumber: syz [ 1200.144492][ T5715] usb 6-1: config 0 descriptor?? [ 1200.149515][T15499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.165328][ T5715] kobil_sct 6-1:0.148: KOBIL USB smart card terminal converter detected [ 1200.174106][T15499] usb 1-1: Product: syz [ 1200.181545][T15499] usb 1-1: Manufacturer: syz [ 1200.191286][T15499] usb 1-1: SerialNumber: syz [ 1200.199506][ T5715] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1200.335032][T15486] usb 4-1: USB disconnect, device number 100 [ 1200.385723][ T29] audit: type=1400 audit(1778994845.688:1404): avc: denied { getopt } for pid=16334 comm="syz.5.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1200.407056][ T5730] usb 6-1: USB disconnect, device number 31 [ 1200.417420][ T5730] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1200.427577][ T5730] kobil_sct 6-1:0.148: device disconnected [ 1200.453130][T16337] macsec0: entered promiscuous mode [ 1200.458422][T16337] macsec0: entered allmulticast mode [ 1200.469776][T15499] usb 1-1: No union descriptors [ 1200.478697][T15499] usb 1-1: USB disconnect, device number 114 [ 1200.938988][T16348] trusted_key: encrypted_key: master key parameter '`efault' is invalid [ 1201.644129][T16353] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2690'. [ 1203.931208][T16364] pim6reg: entered allmulticast mode [ 1204.245757][T16364] bridge0: port 1(macsec1) entered blocking state [ 1204.253392][ T29] audit: type=1400 audit(1778994849.568:1405): avc: denied { connect } for pid=16363 comm="syz.3.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1204.280831][T16364] bridge0: port 1(macsec1) entered disabled state [ 1204.295272][T16364] macsec1: entered allmulticast mode [ 1204.320459][T16364] bridge0: entered allmulticast mode [ 1204.335981][T16364] macsec1: left allmulticast mode [ 1204.349513][T16364] bridge0: left allmulticast mode [ 1206.694354][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2700'. [ 1206.757863][T16394] batadv0: entered promiscuous mode [ 1206.772604][T16394] macsec1: entered promiscuous mode [ 1206.819024][T16394] macsec1: entered allmulticast mode [ 1206.824322][T16394] batadv0: entered allmulticast mode [ 1206.852578][T16394] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1206.871302][T16394] batadv0: left allmulticast mode [ 1206.922161][T16394] batadv0: left promiscuous mode [ 1206.927331][ T5730] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1207.363506][T16401] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2704'. [ 1208.684244][ T5730] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1208.700853][ T5730] usb 2-1: not running at top speed; connect to a high speed hub [ 1208.719706][ T5730] usb 2-1: config 1 has an invalid interface number: 37 but max is 0 [ 1208.734842][ T5730] usb 2-1: config 1 has no interface number 0 [ 1208.776416][ T5730] usb 2-1: config 1 interface 37 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1208.817146][T16404] FAULT_INJECTION: forcing a failure. [ 1208.817146][T16404] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.847475][ T5730] usb 2-1: config 1 interface 37 altsetting 10 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1208.858842][ T5730] usb 2-1: config 1 interface 37 has no altsetting 0 [ 1208.875622][T16404] CPU: 0 UID: 0 PID: 16404 Comm: syz.0.2706 Tainted: G L syzkaller #0 PREEMPT(full) [ 1208.875644][T16404] Tainted: [L]=SOFTLOCKUP [ 1208.875648][T16404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1208.875661][T16404] Call Trace: [ 1208.875665][T16404] [ 1208.875670][T16404] dump_stack_lvl+0x100/0x190 [ 1208.875690][T16404] should_fail_ex.cold+0x5/0xa [ 1208.875708][T16404] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1208.875726][T16404] should_failslab+0xc2/0x120 [ 1208.875739][T16404] __kmalloc_noprof+0xe0/0x850 [ 1208.875760][T16404] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1208.875782][T16404] genl_family_rcv_msg_doit+0xc7/0x300 [ 1208.875800][T16404] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1208.875822][T16404] ? bpf_lsm_capable+0x9/0x10 [ 1208.875834][T16404] ? security_capable+0x80/0x260 [ 1208.875848][T16404] ? ns_capable+0xd2/0xf0 [ 1208.875865][T16404] genl_rcv_msg+0x560/0x800 [ 1208.875884][T16404] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1208.875901][T16404] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1208.875918][T16404] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 1208.875933][T16404] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1208.875952][T16404] ? __lock_acquire+0x4a5/0x2630 [ 1208.875970][T16404] netlink_rcv_skb+0x159/0x420 [ 1208.875986][T16404] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1208.876003][T16404] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1208.876025][T16404] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1208.876041][T16404] genl_rcv+0x28/0x40 [ 1208.876056][T16404] netlink_unicast+0x585/0x850 [ 1208.876074][T16404] ? __pfx_netlink_unicast+0x10/0x10 [ 1208.876093][T16404] netlink_sendmsg+0x8b0/0xda0 [ 1208.876111][T16404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1208.876125][T16404] ? __might_fault+0x30/0x140 [ 1208.876147][T16404] ____sys_sendmsg+0x9e1/0xb70 [ 1208.876162][T16404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1208.876178][T16404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1208.876200][T16404] ___sys_sendmsg+0x190/0x1e0 [ 1208.876216][T16404] ? __pfx____sys_sendmsg+0x10/0x10 [ 1208.876250][T16404] __sys_sendmsg+0x170/0x220 [ 1208.876262][T16404] ? __pfx___sys_sendmsg+0x10/0x10 [ 1208.876281][T16404] ? rcu_is_watching+0x12/0xc0 [ 1208.876300][T16404] do_syscall_64+0x10b/0xf80 [ 1208.876316][T16404] ? clear_bhb_loop+0x40/0x90 [ 1208.876330][T16404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.876342][T16404] RIP: 0033:0x7effa7b9ce59 [ 1208.876352][T16404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.876363][T16404] RSP: 002b:00007effa8ae4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1208.876374][T16404] RAX: ffffffffffffffda RBX: 00007effa7e15fa0 RCX: 00007effa7b9ce59 [ 1208.876382][T16404] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1208.876389][T16404] RBP: 00007effa8ae4090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.876396][T16404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1208.876402][T16404] R13: 00007effa7e16038 R14: 00007effa7e15fa0 R15: 00007ffe2cb798e8 [ 1208.876418][T16404] [ 1209.455727][T16407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1209.519573][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 1209.528546][T16409] bond3: option mode: unable to set because the bond device has slaves [ 1209.563473][T16409] ipt_ECN: cannot use operation on non-tcp rule [ 1209.695932][T16413] tipc: Started in network mode [ 1209.700978][T16413] tipc: Node identity 4, cluster identity 4711 [ 1209.707187][T16413] tipc: Node number set to 4 [ 1210.093279][ T5730] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0116, bcdDevice=63.56 [ 1210.149044][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.159791][ T5730] usb 2-1: Product: syz [ 1210.170391][ T5730] usb 2-1: can't set config #1, error -71 [ 1210.184697][ T5730] usb 2-1: USB disconnect, device number 86 [ 1210.272531][ T9766] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1210.493776][ T9766] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1210.531205][ T9766] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1210.568587][ T9766] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1210.585694][ T5730] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1210.596013][ T9766] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.825947][T16424] block nbd3: shutting down sockets [ 1210.832772][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2713'. [ 1210.845362][ T9766] usb 7-1: config 0 descriptor?? [ 1210.911826][ T5730] usb 2-1: Using ep0 maxpacket: 16 [ 1211.156742][T16431] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1211.313592][ T5730] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1211.360257][ T5730] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1211.382038][T16429] macsec1: entered promiscuous mode [ 1211.387761][T16429] batadv0: entered promiscuous mode [ 1211.388734][ T5730] usb 2-1: string descriptor 0 read error: -22 [ 1211.434855][ T5730] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1211.447072][T16429] macsec1: entered allmulticast mode [ 1211.455144][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.466871][T16429] batadv0: entered allmulticast mode [ 1211.472769][T16435] comedi comedi0: dt2814: I/O base address or length out of range [ 1211.483684][T16429] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1211.491336][T16429] batadv0: left allmulticast mode [ 1211.496832][T16429] batadv0: left promiscuous mode [ 1211.642182][ T5730] snd-ua101 2-1:1.0: invalid num_altsetting [ 1211.914075][T16438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2715'. [ 1213.104724][ T9766] ath6kl: Failed to submit usb control message: -71 [ 1213.211254][ T9766] ath6kl: unable to send the bmi data to the device: -71 [ 1213.241063][ T9766] ath6kl: Unable to send get target info: -71 [ 1213.360315][ T9766] ath6kl: Failed to init ath6kl core: -71 [ 1213.380268][ T9766] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1213.426160][T15486] usb 2-1: USB disconnect, device number 87 [ 1213.451670][ T9766] usb 7-1: USB disconnect, device number 20 [ 1213.727848][T16444] bond2: option arp_interval: invalid value (18446744073709551615) [ 1213.801321][T16444] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1213.939531][T16444] bond2 (unregistering): Released all slaves [ 1214.884724][ T9766] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1215.281694][ T9766] usb 1-1: Using ep0 maxpacket: 16 [ 1215.297456][ T9766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.329038][ T9766] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1215.371126][ T9766] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1215.395342][ T9766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.446517][ T9766] usb 1-1: config 0 descriptor?? [ 1215.645091][T16464] FAULT_INJECTION: forcing a failure. [ 1215.645091][T16464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1215.686500][T16464] CPU: 0 UID: 0 PID: 16464 Comm: syz.5.2724 Tainted: G L syzkaller #0 PREEMPT(full) [ 1215.686535][T16464] Tainted: [L]=SOFTLOCKUP [ 1215.686543][T16464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1215.686555][T16464] Call Trace: [ 1215.686562][T16464] [ 1215.686571][T16464] dump_stack_lvl+0x100/0x190 [ 1215.686603][T16464] should_fail_ex.cold+0x5/0xa [ 1215.686634][T16464] _copy_from_user+0x2e/0xd0 [ 1215.686667][T16464] kstrtouint_from_user+0xd6/0x1d0 [ 1215.686693][T16464] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1215.686716][T16464] ? __lock_acquire+0x4a5/0x2630 [ 1215.686748][T16464] ? lock_acquire+0x1b1/0x370 [ 1215.686780][T16464] proc_fail_nth_write+0x83/0x220 [ 1215.686805][T16464] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1215.686836][T16464] vfs_write+0x2aa/0x1070 [ 1215.686859][T16464] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1215.686886][T16464] ? __pfx_vfs_write+0x10/0x10 [ 1215.686908][T16464] ? __fget_files+0x215/0x3d0 [ 1215.686942][T16464] ? __fget_files+0x21f/0x3d0 [ 1215.686977][T16464] ksys_write+0x12a/0x250 [ 1215.687000][T16464] ? __pfx_ksys_write+0x10/0x10 [ 1215.687031][T16464] ? __pfx_ptp_ioctl+0x10/0x10 [ 1215.687065][T16464] ? rcu_is_watching+0x12/0xc0 [ 1215.687099][T16464] do_syscall_64+0x10b/0xf80 [ 1215.687127][T16464] ? clear_bhb_loop+0x40/0x90 [ 1215.687154][T16464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.687176][T16464] RIP: 0033:0x7f1e4675d68e [ 1215.687193][T16464] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1215.687212][T16464] RSP: 002b:00007f1e475c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1215.687233][T16464] RAX: ffffffffffffffda RBX: 00007f1e475c26c0 RCX: 00007f1e4675d68e [ 1215.687246][T16464] RDX: 0000000000000001 RSI: 00007f1e475c20a0 RDI: 0000000000000004 [ 1215.687258][T16464] RBP: 00007f1e475c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.687272][T16464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.687284][T16464] R13: 00007f1e46a16038 R14: 00007f1e46a15fa0 R15: 00007ffe3b5ceda8 [ 1215.687314][T16464] [ 1216.026538][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 1216.051572][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 1216.062455][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 1216.095344][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 1216.104347][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 1216.112675][T16472] FAULT_INJECTION: forcing a failure. [ 1216.112675][T16472] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1216.127492][T16472] CPU: 0 UID: 0 PID: 16472 Comm: syz.6.2726 Tainted: G L syzkaller #0 PREEMPT(full) [ 1216.127526][T16472] Tainted: [L]=SOFTLOCKUP [ 1216.127534][T16472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1216.127546][T16472] Call Trace: [ 1216.127553][T16472] [ 1216.127561][T16472] dump_stack_lvl+0x100/0x190 [ 1216.127592][T16472] should_fail_ex.cold+0x5/0xa [ 1216.127616][T16472] ? prepare_alloc_pages+0x16d/0x5f0 [ 1216.127644][T16472] should_fail_alloc_page+0xeb/0x140 [ 1216.127669][T16472] prepare_alloc_pages+0x1f0/0x5f0 [ 1216.127697][T16472] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1216.127736][T16472] ? do_sys_poll+0x273/0xe90 [ 1216.127760][T16472] ? stack_trace_save+0x8e/0xc0 [ 1216.127781][T16472] ? __pfx_stack_trace_save+0x10/0x10 [ 1216.127804][T16472] ? stack_depot_save_flags+0x27/0x9d0 [ 1216.127827][T16472] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1216.127859][T16472] ? look_up_lock_class+0x55/0x120 [ 1216.127897][T16472] ? register_lock_class+0x40/0x560 [ 1216.127923][T16472] ? __kasan_kmalloc+0xaa/0xb0 [ 1216.127938][T16472] ? __kmalloc_noprof+0x301/0x850 [ 1216.127966][T16472] ? do_sys_poll+0x273/0xe90 [ 1216.127987][T16472] ? __x64_sys_ppoll+0x2b5/0x350 [ 1216.128009][T16472] ? do_syscall_64+0x10b/0xf80 [ 1216.128034][T16472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.128056][T16472] ? __lock_acquire+0x4a5/0x2630 [ 1216.128083][T16472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1216.128111][T16472] ? policy_nodemask+0xed/0x4f0 [ 1216.128137][T16472] alloc_pages_mpol+0x1fb/0x540 [ 1216.128162][T16472] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1216.128189][T16472] ? find_held_lock+0x2b/0x80 [ 1216.128213][T16472] alloc_pages_noprof+0x1a/0x160 [ 1216.128240][T16472] get_free_pages_noprof+0x10/0xb0 [ 1216.128263][T16472] __pollwait+0x29a/0x470 [ 1216.128290][T16472] ? __pfx___pollwait+0x10/0x10 [ 1216.128313][T16472] pipe_poll+0x17c/0x6b0 [ 1216.128340][T16472] ? __pfx_pipe_poll+0x10/0x10 [ 1216.128365][T16472] do_sys_poll+0x6e5/0xe90 [ 1216.128400][T16472] ? __pfx_do_sys_poll+0x10/0x10 [ 1216.128425][T16472] ? arch_stack_walk+0xa6/0xf0 [ 1216.128483][T16472] ? __pfx___pollwait+0x10/0x10 [ 1216.128511][T16472] ? __pfx_pollwake+0x10/0x10 [ 1216.128538][T16472] ? __pfx_pollwake+0x10/0x10 [ 1216.128564][T16472] ? __pfx_pollwake+0x10/0x10 [ 1216.128591][T16472] ? __pfx_pollwake+0x10/0x10 [ 1216.128618][T16472] ? __pfx_pollwake+0x10/0x10 [ 1216.128645][T16472] ? __pfx_pollwake+0x10/0x10 [ 1216.128671][T16472] ? __pfx_pollwake+0x10/0x10 [ 1216.128698][T16472] ? __pfx_pollwake+0x10/0x10 [ 1216.128726][T16472] ? __pfx_pollwake+0x10/0x10 [ 1216.128751][T16472] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1216.128781][T16472] ? kernel_write+0x653/0x6c0 [ 1216.128809][T16472] ? __fget_files+0x215/0x3d0 [ 1216.128834][T16472] ? set_user_sigmask+0x1e1/0x270 [ 1216.128864][T16472] ? __pfx_set_user_sigmask+0x10/0x10 [ 1216.128906][T16472] __x64_sys_ppoll+0x2b5/0x350 [ 1216.128936][T16472] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1216.128962][T16472] ? ksys_write+0x1ac/0x250 [ 1216.128985][T16472] ? __pfx_ksys_write+0x10/0x10 [ 1216.129011][T16472] ? rcu_is_watching+0x12/0xc0 [ 1216.129046][T16472] do_syscall_64+0x10b/0xf80 [ 1216.129073][T16472] ? clear_bhb_loop+0x40/0x90 [ 1216.129099][T16472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.129122][T16472] RIP: 0033:0x7f5613f9ce59 [ 1216.129140][T16472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.129161][T16472] RSP: 002b:00007f5614d7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1216.129181][T16472] RAX: ffffffffffffffda RBX: 00007f5614216090 RCX: 00007f5613f9ce59 [ 1216.129196][T16472] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1216.129210][T16472] RBP: 00007f5614d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.129223][T16472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.129236][T16472] R13: 00007f5614216128 R14: 00007f5614216090 R15: 00007ffefc3b7a58 [ 1216.129266][T16472] [ 1216.882454][T16473] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2727'. [ 1218.098395][ T9766] usbhid 1-1:0.0: can't add hid device: -71 [ 1218.108675][ T9766] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1218.136889][ T9766] usb 1-1: USB disconnect, device number 115 [ 1218.166152][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2729'. [ 1218.214956][T16477] bond0: option mode: unable to set because the bond device has slaves [ 1218.253178][T16477] ipt_ECN: cannot use operation on non-tcp rule [ 1218.495472][T15482] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1218.682876][T16479] bond1: (slave bond0): Releasing active interface [ 1218.703529][T16479] bridge_slave_0: left allmulticast mode [ 1218.709233][T16479] bridge_slave_0: left promiscuous mode [ 1218.721832][T16479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.735416][T16479] bridge_slave_1: left allmulticast mode [ 1218.746528][T16479] bridge_slave_1: left promiscuous mode [ 1218.760409][T16479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.787414][T16479] bond0: (slave bond_slave_0): Releasing backup interface [ 1218.796305][T15482] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1218.806458][T15482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.816032][T15482] usb 4-1: Product: syz [ 1218.820849][T15482] usb 4-1: Manufacturer: syz [ 1218.827210][ T9766] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1218.828648][T16479] bond0: (slave bond_slave_1): Releasing backup interface [ 1218.836268][T15482] usb 4-1: SerialNumber: syz [ 1218.874215][T15482] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1218.896138][ T5716] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1218.911710][T16479] team0: Port device team_slave_0 removed [ 1218.932057][T16479] team0: Port device team_slave_1 removed [ 1218.938826][T16479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1218.946221][T16479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.954882][T16479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1218.962269][T16479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.971367][T16479] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1219.073864][T15486] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1219.333517][T15486] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1219.339451][ T9766] usb 1-1: Using ep0 maxpacket: 16 [ 1219.352150][T15486] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1219.381061][T15486] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1219.390122][T15486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.413475][T15486] usb 6-1: config 0 descriptor?? [ 1219.450690][ T9766] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1219.462815][ T9766] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1219.483300][ T9766] usb 1-1: string descriptor 0 read error: -22 [ 1219.490680][ T9766] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1219.503134][ T9766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.675561][T15486] ath6kl: Failed to submit usb control message: -71 [ 1219.683627][T15486] ath6kl: unable to send the bmi data to the device: -71 [ 1219.696187][T15486] ath6kl: Unable to send get target info: -71 [ 1219.708333][T15486] ath6kl: Failed to init ath6kl core: -71 [ 1219.715965][T15486] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1219.750891][T15486] usb 6-1: USB disconnect, device number 32 [ 1219.759733][ T9766] snd-ua101 1-1:1.0: invalid num_altsetting [ 1219.973059][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2729'. [ 1219.983379][T16477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2729'. [ 1220.046100][ T9766] usb 1-1: USB disconnect, device number 116 [ 1220.607935][T16486] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1220.818630][ T5716] usb 4-1: Service connection timeout for: 258 [ 1220.824817][ T5716] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1221.071441][ T9766] usb 4-1: USB disconnect, device number 101 [ 1221.330513][ T5716] ath9k_htc: Failed to initialize the device [ 1221.821156][T16488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1222.434996][ T9766] usb 4-1: ath9k_htc: USB layer deinitialized [ 1222.805055][T16509] netlink: 'syz.6.2734': attribute type 30 has an invalid length. [ 1222.874492][T16512] netlink: 'syz.6.2734': attribute type 30 has an invalid length. [ 1222.920286][T16511] comedi: No check for data length of config insn id 5007 is implemented [ 1222.931731][ T5715] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1222.954939][T16511] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1222.992275][T16511] comedi: Assuming n=15 is correct [ 1223.055149][ T29] audit: type=1400 audit(1778994868.398:1406): avc: denied { setopt } for pid=16504 comm="syz.6.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1223.211702][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 1223.239389][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.623959][T16525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2738'. [ 1224.958775][ T9766] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1224.967145][ T5715] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1225.121267][ T9766] usb 4-1: device descriptor read/64, error -71 [ 1225.124198][ T5715] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1225.159492][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.204091][ T5715] usb 2-1: config 0 descriptor?? [ 1225.361468][ T9766] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1225.668322][ T9766] usb 4-1: device descriptor read/64, error -71 [ 1225.696860][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2735'. [ 1225.791631][ T9766] usb usb4-port1: attempt power cycle [ 1225.814370][ T5715] nintendo 0003:057E:2019.001B: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 1225.901495][ T5715] nintendo 0003:057E:2019.001B: Failed to get joycon info; ret=-38 [ 1225.924636][ T5715] nintendo 0003:057E:2019.001B: Failed to retrieve controller info; ret=-38 [ 1225.943313][ T5715] nintendo 0003:057E:2019.001B: Failed to initialize controller; ret=-38 [ 1225.968126][ T5715] nintendo 0003:057E:2019.001B: probe - fail = -38 [ 1225.979673][ T5715] nintendo 0003:057E:2019.001B: probe with driver nintendo failed with error -38 [ 1226.188260][T16507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.219304][T16507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.518347][T16507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.655064][T16507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.726706][ T5715] usb 2-1: USB disconnect, device number 88 [ 1226.747671][ T29] audit: type=1400 audit(1778994872.088:1407): avc: denied { setopt } for pid=16540 comm="syz.6.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1226.795838][T16541] FAULT_INJECTION: forcing a failure. [ 1226.795838][T16541] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.811254][T16541] CPU: 0 UID: 0 PID: 16541 Comm: syz.6.2742 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.811289][T16541] Tainted: [L]=SOFTLOCKUP [ 1226.811297][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1226.811310][T16541] Call Trace: [ 1226.811317][T16541] [ 1226.811326][T16541] dump_stack_lvl+0x100/0x190 [ 1226.811357][T16541] should_fail_ex.cold+0x5/0xa [ 1226.811387][T16541] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1226.811416][T16541] should_failslab+0xc2/0x120 [ 1226.811440][T16541] __kmalloc_noprof+0xe0/0x850 [ 1226.811471][T16541] ? kfree+0x1dd/0x6c0 [ 1226.811503][T16541] tomoyo_realpath_from_path+0xb6/0x690 [ 1226.811544][T16541] tomoyo_path_number_perm+0x23c/0x580 [ 1226.811569][T16541] ? tomoyo_path_number_perm+0x22e/0x580 [ 1226.811598][T16541] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1226.811654][T16541] ? find_held_lock+0x2b/0x80 [ 1226.811675][T16541] ? __fget_files+0x215/0x3d0 [ 1226.811700][T16541] ? hook_file_ioctl_common+0x149/0x410 [ 1226.811732][T16541] ? __fget_files+0x215/0x3d0 [ 1226.811763][T16541] ? __fget_files+0x21f/0x3d0 [ 1226.811795][T16541] security_file_ioctl+0xd3/0x230 [ 1226.811826][T16541] __x64_sys_ioctl+0xb7/0x210 [ 1226.811852][T16541] do_syscall_64+0x10b/0xf80 [ 1226.811881][T16541] ? clear_bhb_loop+0x40/0x90 [ 1226.811911][T16541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.811934][T16541] RIP: 0033:0x7f5613f9ce59 [ 1226.811952][T16541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.811973][T16541] RSP: 002b:00007f5614da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1226.811994][T16541] RAX: ffffffffffffffda RBX: 00007f5614215fa0 RCX: 00007f5613f9ce59 [ 1226.812009][T16541] RDX: 0000000000000000 RSI: 00000000000089ed RDI: 0000000000000003 [ 1226.812019][T16541] RBP: 00007f5614da0090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.812032][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.812044][T16541] R13: 00007f5614216038 R14: 00007f5614215fa0 R15: 00007ffefc3b7a58 [ 1226.812075][T16541] [ 1226.812135][T16541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1226.836588][ T29] audit: type=1400 audit(1778994872.138:1408): avc: denied { listen } for pid=16540 comm="syz.6.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1227.277441][ T29] audit: type=1400 audit(1778994872.188:1409): avc: denied { mount } for pid=16542 comm="syz.5.2743" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 1230.304898][T16571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2749'. [ 1231.788194][T16574] netlink: 'syz.1.2750': attribute type 1 has an invalid length. [ 1232.581617][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'. [ 1232.604177][T16574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1232.777227][T16586] batadv0: entered promiscuous mode [ 1232.789179][T16586] macsec1: entered promiscuous mode [ 1232.821085][T16586] macsec1: entered allmulticast mode [ 1232.827561][T16586] batadv0: entered allmulticast mode [ 1232.864951][T16584] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1233.052879][T16586] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1233.166942][T16586] batadv0: left allmulticast mode [ 1233.201577][T16586] batadv0: left promiscuous mode [ 1233.213309][ T29] audit: type=1400 audit(1778994878.558:1410): avc: denied { map } for pid=16590 comm="syz.1.2754" path="socket:[57085]" dev="sockfs" ino=57085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1234.301465][ T24] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1234.461320][ T24] usb 2-1: device descriptor read/64, error -71 [ 1234.743071][ T24] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1235.149567][ T24] usb 2-1: device descriptor read/64, error -71 [ 1235.311871][ T24] usb usb2-port1: attempt power cycle [ 1235.326923][T16605] bond2: (slave bond0): Releasing active interface [ 1235.519142][T16605] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1235.624324][ T5716] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1235.637036][ T29] audit: type=1326 audit(1778994880.978:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.2757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7fc00000 [ 1235.732566][ T29] audit: type=1326 audit(1778994880.978:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.2757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e4679ce59 code=0x7fc00000 [ 1235.781749][ T24] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1235.954834][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1236.023967][ T29] audit: type=1326 audit(1778994880.978:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.2757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7fc00000 [ 1236.050514][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1236.061377][ T29] audit: type=1326 audit(1778994880.978:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.2757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7fc00000 [ 1236.105179][ T24] usb 2-1: device descriptor read/8, error -71 [ 1236.114365][ T5716] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1236.123435][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.149557][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'. [ 1236.159461][ T5716] usb 4-1: config 0 descriptor?? [ 1236.167921][ T29] audit: type=1326 audit(1778994880.978:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.2757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7fc00000 [ 1236.195307][ T29] audit: type=1326 audit(1778994880.978:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.2757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7fc00000 [ 1236.240353][ T29] audit: type=1326 audit(1778994880.978:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.2757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7fc00000 [ 1236.271539][ T29] audit: type=1326 audit(1778994880.978:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.2757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7fc00000 [ 1236.485060][ T29] audit: type=1326 audit(1778994880.978:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.2757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4679ce59 code=0x7fc00000 [ 1236.514546][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'. [ 1237.136320][ T24] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1237.146833][ T5716] ath6kl: Failed to submit usb control message: -71 [ 1237.153979][ T5716] ath6kl: unable to send the bmi data to the device: -71 [ 1237.161932][ T5716] ath6kl: Unable to send get target info: -71 [ 1237.255733][ T5716] ath6kl: Failed to init ath6kl core: -71 [ 1237.267686][ T5716] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1237.390186][ T24] usb 2-1: device not accepting address 92, error -71 [ 1237.407932][ T24] usb usb2-port1: unable to enumerate USB device [ 1237.519559][ T5716] usb 4-1: USB disconnect, device number 105 [ 1237.860960][T16626] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2762'. [ 1239.365039][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1239.365070][ T29] audit: type=1400 audit(1778994884.698:1429): avc: denied { connect } for pid=16622 comm="syz.1.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1239.394992][ T29] audit: type=1400 audit(1778994884.698:1430): avc: denied { accept } for pid=16622 comm="syz.1.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1239.934732][ T29] audit: type=1326 audit(1778994885.198:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16622 comm="syz.1.2761" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64fc99ce59 code=0x7ff70000 [ 1240.966517][T16644] 9p: Bad value for 'wfdno' [ 1241.441356][ T5715] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1241.614602][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1241.641789][ T5715] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1241.679475][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.691766][ T5715] usb 1-1: config 0 descriptor?? [ 1241.705198][T16640] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1241.801195][T15499] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1241.972262][T15499] usb 6-1: Using ep0 maxpacket: 16 [ 1242.172620][T15499] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.544098][T15499] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.610616][T15499] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1242.625094][T15499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.715486][ T5715] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 1242.726839][ T5715] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 1242.744252][ T5715] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 1242.935156][ T5715] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 1242.942757][ T5715] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 1242.951496][ T5715] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 1242.960907][ T5715] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 1242.968608][ T5715] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 1242.983114][ T5715] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 1243.168524][ T5715] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 1243.177368][ T5715] asus 0003:0B05:1ABE.001C: unexpected long global item [ 1243.185465][ T5715] asus 0003:0B05:1ABE.001C: Asus hid parse failed: -22 [ 1243.192866][ T5715] asus 0003:0B05:1ABE.001C: probe with driver asus failed with error -22 [ 1243.207042][ T5715] usb 1-1: USB disconnect, device number 117 [ 1243.806932][T15498] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1244.273026][T15498] usb 7-1: Using ep0 maxpacket: 32 [ 1244.307650][T15498] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1244.349744][T15498] usb 7-1: config 0 has no interface number 0 [ 1244.360613][T16665] bond0: (slave lo): Releasing backup interface [ 1244.384478][T15498] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1244.429518][T16665] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1244.445907][T15498] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1244.478923][T16665] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1244.504439][T15498] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1244.534242][T15498] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.562116][T15498] usb 7-1: Product: syz [ 1244.577842][T15498] usb 7-1: Manufacturer: syz [ 1244.597268][T15498] usb 7-1: SerialNumber: syz [ 1244.621437][T15498] usb 7-1: config 0 descriptor?? [ 1244.631303][ T5716] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1244.651786][T15482] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1244.669064][T15499] mcp2221 0003:04D8:00DD.001D: item fetching failed at offset 2/5 [ 1244.686993][T15499] mcp2221 0003:04D8:00DD.001D: can't parse reports [ 1244.705557][T15499] mcp2221 0003:04D8:00DD.001D: probe with driver mcp2221 failed with error -22 [ 1245.005280][T15498] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1245.028215][T15498] cx231xx 7-1:0.1: Not found matching IAD interface [ 1245.051479][T15498] usb 7-1: USB disconnect, device number 21 [ 1245.617341][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2779'. [ 1245.781156][T16678] ipt_ECN: cannot use operation on non-tcp rule [ 1245.781604][T16676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1245.958157][T15482] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1245.969922][T15482] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1245.986643][ T5716] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1245.996960][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.006158][T15482] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1246.015214][T15482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.023250][ T5716] usb 2-1: Product: syz [ 1246.027429][ T5716] usb 2-1: Manufacturer: syz [ 1246.032034][ T5716] usb 2-1: SerialNumber: syz [ 1246.055612][T15482] usb 1-1: config 0 descriptor?? [ 1246.114378][ T5716] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1246.137792][ T5730] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1246.171256][ T24] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1246.331863][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1246.353062][T15482] ath6kl: Failed to submit usb control message: -71 [ 1246.367300][T15482] ath6kl: unable to send the bmi data to the device: -71 [ 1246.375385][T15482] ath6kl: Unable to send get target info: -71 [ 1246.399059][T15482] ath6kl: Failed to init ath6kl core: -71 [ 1246.411441][T15482] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1246.435559][T15482] usb 1-1: USB disconnect, device number 118 [ 1246.830310][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1246.865300][ T24] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1246.906669][ T24] usb 7-1: string descriptor 0 read error: -22 [ 1246.914626][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1246.943580][T15498] usb 6-1: USB disconnect, device number 33 [ 1246.945551][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.000642][ T24] snd-ua101 7-1:1.0: invalid num_altsetting [ 1247.354505][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2779'. [ 1247.459112][T16676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2779'. [ 1247.653234][T16676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.662092][T16676] bond1: (slave bond0): Enslaving as an active interface with a down link [ 1247.736414][T15482] usb 7-1: USB disconnect, device number 22 [ 1248.744205][ T5730] usb 2-1: Service connection timeout for: 257 [ 1248.765297][ T5730] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1249.260430][ T5730] ath9k_htc: Failed to initialize the device [ 1249.781800][ T5730] usb 2-1: ath9k_htc: USB layer deinitialized [ 1250.654489][T15499] usb 2-1: USB disconnect, device number 93 [ 1251.177081][T16732] netlink: 'syz.0.2792': attribute type 10 has an invalid length. [ 1251.547234][T16735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2796'. [ 1253.046704][T16720] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1254.835064][ T29] audit: type=1400 audit(1778994900.178:1432): avc: denied { read } for pid=16750 comm="syz.5.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1255.189456][T16759] tipc: Started in network mode [ 1255.195223][T16759] tipc: Node identity 4, cluster identity 4711 [ 1255.202071][T16759] tipc: Node number set to 4 [ 1255.561083][T15498] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1255.702635][T16762] FAULT_INJECTION: forcing a failure. [ 1255.702635][T16762] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.735953][T16762] CPU: 0 UID: 0 PID: 16762 Comm: syz.0.2805 Tainted: G L syzkaller #0 PREEMPT(full) [ 1255.735989][T16762] Tainted: [L]=SOFTLOCKUP [ 1255.735997][T16762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1255.736010][T16762] Call Trace: [ 1255.736017][T16762] [ 1255.736026][T16762] dump_stack_lvl+0x100/0x190 [ 1255.736058][T16762] should_fail_ex.cold+0x5/0xa [ 1255.736089][T16762] should_failslab+0xc2/0x120 [ 1255.736113][T16762] __kvmalloc_node_noprof+0xfa/0xa00 [ 1255.736146][T16762] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 1255.736180][T16762] ? lockdep_init_map_type+0x5c/0x250 [ 1255.736214][T16762] v4l2_ctrl_handler_init_class+0x201/0x350 [ 1255.736249][T16762] v4l2_ctrls_find_req_obj+0x17f/0x2b0 [ 1255.736276][T16762] try_set_ext_ctrls_request+0x16d/0x6c0 [ 1255.736308][T16762] try_set_ext_ctrls+0x11b/0x140 [ 1255.736335][T16762] v4l_s_ext_ctrls+0x268/0x2f0 [ 1255.736364][T16762] __video_do_ioctl+0xb2a/0xdf0 [ 1255.736398][T16762] ? __might_fault+0xc5/0x140 [ 1255.736427][T16762] ? __pfx___video_do_ioctl+0x10/0x10 [ 1255.736466][T16762] video_usercopy+0x47d/0x1700 [ 1255.736498][T16762] ? __pfx___video_do_ioctl+0x10/0x10 [ 1255.736529][T16762] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1255.736569][T16762] ? __pfx_video_usercopy+0x10/0x10 [ 1255.736617][T16762] v4l2_ioctl+0x1bd/0x250 [ 1255.736647][T16762] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1255.736679][T16762] __x64_sys_ioctl+0x18e/0x210 [ 1255.736705][T16762] do_syscall_64+0x10b/0xf80 [ 1255.736734][T16762] ? clear_bhb_loop+0x40/0x90 [ 1255.736760][T16762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.736781][T16762] RIP: 0033:0x7effa7b9ce59 [ 1255.736799][T16762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.736820][T16762] RSP: 002b:00007effa8ae4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1255.736840][T16762] RAX: ffffffffffffffda RBX: 00007effa7e15fa0 RCX: 00007effa7b9ce59 [ 1255.736855][T16762] RDX: 0000200000000000 RSI: 00000000c0205648 RDI: 0000000000000005 [ 1255.736868][T16762] RBP: 00007effa8ae4090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.736881][T16762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.736894][T16762] R13: 00007effa7e16038 R14: 00007effa7e15fa0 R15: 00007ffe2cb798e8 [ 1255.736925][T16762] [ 1256.205803][T15498] usb 6-1: Using ep0 maxpacket: 32 [ 1256.218262][T15498] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1256.226730][T15498] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1256.235493][T15498] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1256.244566][T15498] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1256.254322][T15498] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1256.265117][T15498] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1256.278184][T15498] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1256.287419][T15498] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.298036][T15498] usb 6-1: config 0 descriptor?? [ 1256.638225][T16770] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2808'. [ 1258.509611][T15498] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1258.578298][T15498] usb 6-1: USB disconnect, device number 34 [ 1258.621928][T15498] usblp0: removed [ 1258.773377][T16779] bond3: (slave bond0): Releasing active interface [ 1258.921611][ T5715] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1258.946308][T16779] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1259.041107][T15499] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1259.205662][T15499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1259.882078][T15499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1259.910434][T15499] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1259.919585][T15499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.930164][T15499] usb 2-1: config 0 descriptor?? [ 1260.159748][T15499] ath6kl: Failed to submit usb control message: -71 [ 1260.169934][T15499] ath6kl: unable to send the bmi data to the device: -71 [ 1260.178239][T15499] ath6kl: Unable to send get target info: -71 [ 1260.193786][T15499] ath6kl: Failed to init ath6kl core: -71 [ 1260.201816][T15499] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1260.226373][T15499] usb 2-1: USB disconnect, device number 94 [ 1260.461388][ T5716] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1365.940991][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1365.947971][ C0] rcu: 1-...!: (1 GPs behind) idle=970c/1/0x4000000000000000 softirq=93275/93275 fqs=1 [ 1365.959012][ C0] rcu: (detected by 0, t=10502 jiffies, g=116369, q=509 ncpus=2) [ 1365.966833][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1365.966872][ C1] NMI backtrace for cpu 1 [ 1365.966891][ C1] CPU: 1 UID: 0 PID: 16803 Comm: syz.1.2816 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.966917][ C1] Tainted: [L]=SOFTLOCKUP [ 1365.966923][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1365.966936][ C1] RIP: 0010:lock_is_held_type+0xd7/0x140 [ 1365.966967][ C1] Code: 03 0f 95 c0 44 39 e0 0f 94 c0 0f b6 c0 48 c7 c7 06 cf ef 8d 89 44 24 04 e8 a6 17 00 00 ba ff ff ff ff 65 0f c1 15 f1 95 80 08 <83> fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 [ 1365.966986][ C1] RSP: 0018:ffffc90000a08d98 EFLAGS: 00000057 [ 1365.967001][ C1] RAX: 0000000000000001 RBX: ffff88802c6652c0 RCX: 0000000000000001 [ 1365.967013][ C1] RDX: 0000000000000001 RSI: ffffffff8defcf06 RDI: ffffffff8c1c3a00 [ 1365.967025][ C1] RBP: ffff888026a3ca00 R08: 0000000000000005 R09: 0000000000000000 [ 1365.967037][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 1365.967048][ C1] R13: 0000000000000046 R14: ffff888026a3d630 R15: 0000000000000004 [ 1365.967059][ C1] FS: 0000000000000000(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000 [ 1365.967076][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1365.967088][ C1] CR2: 0000001b3340eff8 CR3: 0000000037356000 CR4: 00000000003526f0 [ 1365.967100][ C1] Call Trace: [ 1365.967107][ C1] [ 1365.967118][ C1] advance_sched+0x8c6/0xd20 [ 1365.967138][ C1] ? find_held_lock+0x2b/0x80 [ 1365.967156][ C1] ? __hrtimer_run_queues+0x383/0xa00 [ 1365.967211][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1365.967259][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1365.967288][ C1] __hrtimer_run_queues+0x470/0xa00 [ 1365.967318][ C1] ? rcu_is_watching+0x12/0xc0 [ 1365.967347][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1365.967371][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1365.967399][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1365.967424][ C1] [ 1365.967430][ C1] [ 1365.967437][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1365.967458][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 1365.967480][ C1] Code: 05 3b a2 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 46 41 f3 0e 0f 82 a4 02 00 00 8b 35 ce 74 f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd a1 26 12 0f 85 ed 02 00 00 48 83 c4 [ 1365.967497][ C1] RSP: 0018:ffffc90005177670 EFLAGS: 00000206 [ 1365.967511][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000003 [ 1365.967522][ C1] RDX: 0000000000000000 RSI: ffffffff8defcf06 RDI: ffffffff8c1c3a00 [ 1365.967534][ C1] RBP: ffffffff8e7e57a0 R08: 00000000acf70bd3 R09: 0000000000000007 [ 1365.967545][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1365.967556][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1365.967575][ C1] ? page_table_check_clear+0x175/0x8f0 [ 1365.967594][ C1] ? page_table_check_clear+0x175/0x8f0 [ 1365.967615][ C1] page_table_check_clear+0x2ae/0x8f0 [ 1365.967633][ C1] ? page_table_check_clear+0x299/0x8f0 [ 1365.967653][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 1365.967673][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 1365.967692][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 1365.967716][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 1365.967744][ C1] __zap_vma_range+0x2da3/0x4bf0 [ 1365.967777][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1365.967800][ C1] ? find_held_lock+0x2b/0x80 [ 1365.967820][ C1] unmap_vmas+0x299/0x5f0 [ 1365.967843][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1365.967863][ C1] ? mas_next_slot+0x10a3/0x1960 [ 1365.967898][ C1] exit_mmap+0x1ef/0xa10 [ 1365.967921][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1365.967942][ C1] ? trace_contention_end+0x122/0x170 [ 1365.967969][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1365.967996][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1365.968026][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1365.968054][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 1365.968081][ C1] __mmput+0x12a/0x410 [ 1365.968109][ C1] mmput+0x67/0x80 [ 1365.968134][ C1] do_exit+0x8b2/0x2af0 [ 1365.968153][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1365.968172][ C1] ? __pfx_do_exit+0x10/0x10 [ 1365.968196][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1365.968217][ C1] do_group_exit+0xd5/0x2a0 [ 1365.968237][ C1] __x64_sys_exit_group+0x3e/0x50 [ 1365.968257][ C1] x64_sys_call+0x102c/0x1530 [ 1365.968283][ C1] do_syscall_64+0x10b/0xf80 [ 1365.968307][ C1] ? clear_bhb_loop+0x40/0x90 [ 1365.968328][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.968347][ C1] RIP: 0033:0x7f64fc99ce59 [ 1365.968361][ C1] Code: Unable to access opcode bytes at 0x7f64fc99ce2f. [ 1365.968369][ C1] RSP: 002b:00007ffc33932ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1365.968384][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f64fc99ce59 [ 1365.968396][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1365.968407][ C1] RBP: 00007ffc33932b4c R08: 0000000000000000 R09: 00000000000927c0 [ 1365.968418][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000021b [ 1365.968429][ C1] R13: 00000000000927c0 R14: 0000000000133c08 R15: 00007ffc33932ba0 [ 1365.968448][ C1] [ 1365.968866][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g116369 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1366.477367][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1366.487325][ C0] rcu: RCU grace-period kthread stack dump: [ 1366.493198][ C0] task:rcu_preempt state:R running task stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1366.506702][ C0] Call Trace: [ 1366.509968][ C0] [ 1366.512890][ C0] __schedule+0x1295/0x67a0 [ 1366.517418][ C0] ? __pfx___schedule+0x10/0x10 [ 1366.522267][ C0] ? find_held_lock+0x2b/0x80 [ 1366.526938][ C0] ? schedule+0x2bf/0x390 [ 1366.531274][ C0] schedule+0xdd/0x390 [ 1366.535339][ C0] schedule_timeout+0x127/0x280 [ 1366.540186][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1366.545555][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1366.550836][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1366.556639][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1366.562098][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1366.566860][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1366.572141][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 1366.577602][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1366.582538][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1366.587742][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1366.593548][ C0] rcu_gp_kthread+0x179/0x230 [ 1366.598222][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1366.603418][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1366.609225][ C0] ? __kthread_parkme+0x18c/0x230 [ 1366.614256][ C0] ? kthread+0x13a/0x450 [ 1366.618491][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1366.623684][ C0] kthread+0x370/0x450 [ 1366.627749][ C0] ? __pfx_kthread+0x10/0x10 [ 1366.632339][ C0] ret_from_fork+0x72b/0xd50 [ 1366.636929][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1366.642038][ C0] ? __switch_to+0x800/0x1100 [ 1366.646720][ C0] ? __pfx_kthread+0x10/0x10 [ 1366.651307][ C0] ret_from_fork_asm+0x1a/0x30 [ 1366.656089][ C0] [ 1366.659094][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1366.665405][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1366.676249][ C0] Tainted: [L]=SOFTLOCKUP [ 1366.680555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1366.690605][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1366.697103][ C0] RIP: 0010:smp_call_function_many_cond+0x5a6/0x1700 [ 1366.703773][ C0] Code: 01 c5 41 83 c4 03 e8 39 83 0c 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 ff 83 e0 01 41 89 c6 <89> c6 e8 c3 7d 0c 00 45 85 f6 75 d0 e8 09 83 0c 00 e8 04 83 0c 00 [ 1366.723371][ C0] RSP: 0018:ffffc90000127870 EFLAGS: 00000202 [ 1366.729427][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81fc2bcd [ 1366.737386][ C0] RDX: ffff88801e2b8000 RSI: ffffffff81fc2ba7 RDI: 0000000000000000 [ 1366.745347][ C0] RBP: ffff8880b8540f40 R08: 0000000000000005 R09: 0000000000000000 [ 1366.753307][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1366.761265][ C0] R13: ffffed10170a81e9 R14: 0000000000000001 R15: ffff8880b843c5c0 [ 1366.769312][ C0] FS: 0000000000000000(0000) GS:ffff88812436d000(0000) knlGS:0000000000000000 [ 1366.778245][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1366.784817][ C0] CR2: 000000110c323057 CR3: 000000000e596000 CR4: 00000000003526f0 [ 1366.792780][ C0] Call Trace: [ 1366.796048][ C0] [ 1366.798970][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1366.804003][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1366.810326][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1366.815793][ C0] ? __pfx___text_poke+0x10/0x10 [ 1366.820741][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1366.825767][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1366.830876][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 1366.837373][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 1366.843090][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1366.849327][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1366.855559][ C0] ? find_held_lock+0x2b/0x80 [ 1366.860239][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1366.866212][ C0] jump_label_update+0x37a/0x550 [ 1366.871151][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 1366.877040][ C0] static_key_enable+0x1a/0x20 [ 1366.881799][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 1366.887078][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1366.892965][ C0] ? rcu_is_watching+0x12/0xc0 [ 1366.897823][ C0] process_one_work+0xa0e/0x1980 [ 1366.902775][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1366.908170][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1366.914058][ C0] worker_thread+0x5ef/0xe50 [ 1366.918658][ C0] ? kthread+0x13a/0x450 [ 1366.922895][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1366.928002][ C0] kthread+0x370/0x450 [ 1366.932067][ C0] ? __pfx_kthread+0x10/0x10 [ 1366.936653][ C0] ret_from_fork+0x72b/0xd50 [ 1366.941241][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1366.946351][ C0] ? __switch_to+0x800/0x1100 [ 1366.951029][ C0] ? __pfx_kthread+0x10/0x10 [ 1366.955614][ C0] ret_from_fork_asm+0x1a/0x30 [ 1366.960481][ C0]