last executing test programs: 6m14.830360314s ago: executing program 4 (id=3340): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000070000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010040000500250001000000050029000000000008000a00", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b14, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_GET_PIT2(r9, 0x8070ae9f, &(0x7f0000000100)) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0800a000c609000008009f000d000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, 0x0) 6m11.389253383s ago: executing program 4 (id=3346): ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x80000, 0x0, {[0x1, 0x3, 0x1, 0x8, 0x6, 0xfffffffffffffff7, 0x7, 0xffffffffffffff9b]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000440)="dbe697e591146e3739f05c1ad600", 0x0, 0xfd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000974000/0x1000)=nil, 0x1000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/27, 0x1b}], 0x1, 0x8000, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setscheduler(r4, 0x3, &(0x7f0000000200)=0xf04a) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r5, 0x80ad}], 0x1, 0x2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'rose0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "67f85cbf4594a8c3b741ef94858a44c02c83899be2603de8bc20b34e0923115b", "bd4034899093f58d3be4a371c4c6dcedfaa420fcd5dcd7d392d735d2284ef5d2", "b5a88e265f6fafb6f61db75a43544c5135f4cd9f122200", "a079be561f2b730b59c33cbfac5592057703b2ba6f168e403035c21d7dc1959d", "e1f7dcd29bc9c2a76a6d49943fe332ab0b1dc1a83d4d00", "d6ec31c30600", 0x0, 0x9, 0x1, 0x9, 0x1002}}) r7 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x8000) prlimit64(0x0, 0x1, &(0x7f0000000480)={0x8, 0x8b}, 0x0) ioctl$BLKOPENZONE(r3, 0x40101286, &(0x7f0000000340)={0xe8, 0x4}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6m7.956503042s ago: executing program 4 (id=3355): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r1, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r2, 0x32dc, 0x0, 0xe, 0x0, 0x0) 6m7.208764205s ago: executing program 4 (id=3357): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x40000000, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x600}}, 0x3c) 6m6.924656599s ago: executing program 4 (id=3359): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 6m6.537367724s ago: executing program 4 (id=3361): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 5m51.247194739s ago: executing program 32 (id=3361): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 27.652557323s ago: executing program 1 (id=4084): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) 27.015861856s ago: executing program 1 (id=4086): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000819000/0xa000)=nil, &(0x7f0000802000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f33000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000852000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f00008df000/0xa000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000280)={0x6031, 0x4}) io_uring_setup(0x7811, &(0x7f0000000600)={0x0, 0x20efcc, 0x10, 0x3, 0x79e}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001040), 0x120600) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400009626185e3db51cf5001000010000000000000000000000000a20000000020a01030000000000000000070000000c0004400000000000000003140000001100010000000000000000000000000a"], 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000841) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x8000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000045c352ebc7722f28975345e20f89c1d357dde290acf2c7b2c591d2244460d70d", @ANYBLOB="010000000000000000004d0000000600a800380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000"], 0x3c}}, 0x0) flock(0xffffffffffffffff, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000200), 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f00000002c0)='@', 0x1}], 0x1) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) 26.460897752s ago: executing program 1 (id=4088): io_uring_setup(0x6cb6, &(0x7f0000000880)={0x0, 0x8cbc, 0x2, 0x20000002, 0x10026c}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) ptrace(0x4208, r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3}, 0x1c) tee(r5, r0, 0x9, 0x4) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x50009405, &(0x7f0000000180)) 25.115506793s ago: executing program 3 (id=4095): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) 24.654460073s ago: executing program 1 (id=4096): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000140)={0x20, 0xec79f1f79ca56f35, 0x2, {0x2, 0x23}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003ec000000ec03ad7e025953dc90f70ea9d4e784eb74846ef8db73f47a20681317868759e28ec87600f6fcc830035612b42a76bdc1655a68ceeef7febfd9e46043bd778b3d011007bdf58238e8a6dd3395248e7e484e564d094e9c8bc9ad"], 0x0, 0x0}, &(0x7f0000000580)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xa}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x4}}) socket(0x11, 0x800000003, 0x0) syz_usb_ep_write(r0, 0x81, 0xbb, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a") 22.960074453s ago: executing program 3 (id=4101): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 18.952162955s ago: executing program 1 (id=4106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d0000008500000050000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) sysfs$1(0x1, 0x0) 18.866743309s ago: executing program 1 (id=4108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) unshare(0x62040200) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001500)="130000004e007f049e3ab018a75ab611b876", 0x12}], 0x1}, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) unshare(0x2000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000e1f070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 16.824226681s ago: executing program 3 (id=4110): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x75d180, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x0, 0x5a}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd601823250010"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_usb_connect(0x0, 0x62, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES64, @ANYRESOCT=r0, @ANYRES16=r0], 0x0) 16.719098434s ago: executing program 5 (id=4111): r0 = io_uring_setup(0x6cb6, &(0x7f0000000880)={0x0, 0x8cbc, 0x2, 0x20000002, 0x10026c}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) ptrace(0x4208, r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3}, 0x1c) tee(r6, r1, 0x9, 0x4) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000180)) 15.293834832s ago: executing program 5 (id=4114): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x20100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) 14.36781741s ago: executing program 2 (id=4115): syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1562, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.522284687s ago: executing program 5 (id=4117): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') pread64(r0, &(0x7f0000000140)=""/4095, 0x69, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000f80)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003380)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x2, 0x7, 0x4, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000, 0x80, 0x2, 0xe}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003080)={'syztnl0\x00', &(0x7f0000003000)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0xfd31, 0x80000000, {{0x13, 0x4, 0x1, 0x2b, 0x4c, 0x67, 0x0, 0xcd, 0x4, 0x0, @multicast2, @local, {[@noop, @lsrr={0x83, 0xf, 0x94, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xce, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @multicast1]}]}}}}}) getpeername$packet(r0, &(0x7f00000030c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003100)=0x14) getsockname$packet(r0, &(0x7f0000003140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003180)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r6, @ANYBLOB="049c01000750050008001300", @ANYRES32=r7, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r10, &(0x7f0000000400)={0x2, 0x0, @empty}, 0x10) 13.304477647s ago: executing program 3 (id=4118): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="8c") ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f000050e000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000395000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x4000, 0x0, 0x2}) socket(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240), &(0x7f00000002c0)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x480, 0x0, 0x8000000000000001}]}) 13.224626646s ago: executing program 2 (id=4119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x500, 0x0, 0x4810}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0xff2c}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x500, 0x0, 0x4810}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) (async) getpid() (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) syz_open_procfs(r3, &(0x7f0000000000)='net/ip6_tables_names\x00') (async) preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0xff2c}], 0x1, 0x0, 0x0) (async) 13.094269543s ago: executing program 2 (id=4120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 10.463521673s ago: executing program 2 (id=4121): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000038c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000039c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) 10.23625601s ago: executing program 2 (id=4122): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TIMEOUT={0xc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getpid() futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8800, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0xd) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) unshare(0xc000400) socket$packet(0x11, 0x3, 0x300) unshare(0x28000600) close_range(r1, 0xffffffffffffffff, 0x2) 9.991600241s ago: executing program 2 (id=4123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_setup(0x7, &(0x7f0000000040)) io_pgetevents(0x0, 0x101, 0x0, &(0x7f0000000580), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086de6012259200083a0000000000000000000000ffffac1414aafe8000000000000000000000000000aa0200907800000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) write$UHID_INPUT(r7, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) io_submit(r1, 0x2, &(0x7f00000005c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000000380)="a0dceef0bbda1dd6dcc54356e839bc4c2dabcd1e5e2bac2d3406dffed3f49fb631ddb649dce66d76fedddc4cf890042db75410557729e7c13c9c3f89e66ff56d88e01532cf26afdc960eb9e51fda05b987918f0caed61022b7252d30cd", 0x5d, 0x101, 0x0, 0x2}]) 9.22672001s ago: executing program 5 (id=4124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_setup(0x7, &(0x7f0000000040)) io_pgetevents(0x0, 0x101, 0x0, &(0x7f0000000580), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086de6012259200083a0000000000000000000000ffffac1414aafe8000000000000000000000000000aa0200907800000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) write$UHID_INPUT(r7, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) io_submit(r1, 0x2, &(0x7f00000005c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000000380)="a0dceef0bbda1dd6dcc54356e839bc4c2dabcd1e5e2bac2d3406dffed3f49fb631ddb649dce66d76fedddc4cf890042db75410557729e7c13c9c3f89e66ff56d88e01532cf26afdc960eb9e51fda05b987918f0caed61022b7252d30cd", 0x5d, 0x101, 0x0, 0x2}]) 5.879072299s ago: executing program 5 (id=4125): syz_emit_ethernet(0x5a, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xb, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @empty, @broadcast, {[@lsrr={0x83, 0x17, 0x4e, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, "3276ba29"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0, 0x100000}, &(0x7f0000000480)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r3, 0x0, 0x0) shutdown(r1, 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000080)=0xfff, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 4.408550157s ago: executing program 0 (id=4126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sysfs$1(0x1, 0x0) 4.230834672s ago: executing program 0 (id=4127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x300, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000280)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000200)=0x10001, 0x4) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x138) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000094ee1c13000100000000010000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r4, &(0x7f00000005c0)="494ab842cc9b65ecec49cfd9d50a05b3855fecf38fc686b29d3bd7092f8ab5b109ce51145ce0bc8a0cb7e87a563bf832847515fb94f5f2b03b030f6f8aa8dc60151bcfb4900c2ac0ecccb04e1e4b87fc821d094c69b1ce401aade2ee47a82a540a9904ca7ac7be7963603dd8c9c72fbfc8d8117f4594f3d67c2459b7cc82e71c6b65d30267987f5271d2dcba70e68ee033da4b", 0x0}, 0x20) 4.061163964s ago: executing program 3 (id=4128): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = dup(0xffffffffffffffff) futimesat(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.435631268s ago: executing program 33 (id=4108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) unshare(0x62040200) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001500)="130000004e007f049e3ab018a75ab611b876", 0x12}], 0x1}, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) unshare(0x2000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000e1f070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.422010747s ago: executing program 5 (id=4130): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 3.044613519s ago: executing program 0 (id=4131): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000580)='./file1\x00', 0x104) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x0, 0x5002) syz_open_procfs$pagemap(r3, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) unshare(0x6a040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.96562662s ago: executing program 3 (id=4132): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="8c") ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f000050e000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000395000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x4000, 0x0, 0x2}) socket(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240), &(0x7f00000002c0)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x480, 0x0, 0x8000000000000001}]}) 1.649967712s ago: executing program 0 (id=4133): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = signalfd(r3, &(0x7f00000000c0)={[0x9]}, 0x8) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000100)) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 300.567825ms ago: executing program 0 (id=4134): socket(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x177) write$binfmt_elf64(r1, &(0x7f0000005280)=ANY=[], 0xfffffffffffffe2e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) 0s ago: executing program 0 (id=4135): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x1e, 0x0, 0x101}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000940)={@broadcast, @local, @void, {@llc={0x8864, {@snap={0xab, 0xaa, '\x00', "fd27a7", 0x9000}}}}}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setitimer(0x2, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r5, r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40045b17, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) kernel console output (not intermixed with test programs): 1310.569248][T19354] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1311.084993][T19360] netlink: 'syz.5.3470': attribute type 10 has an invalid length. [ 1311.093013][T19360] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3470'. [ 1311.824193][T19331] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1311.911113][T19331] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1311.917308][T19331] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1311.934490][T19360] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1311.942629][T19331] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1311.943541][T19360] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.948787][T19331] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1312.031965][T19360] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1312.164727][T19331] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1312.178270][T19331] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1312.199541][T19331] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1312.226693][T19331] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1312.264964][T19331] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1312.577577][T13701] Bluetooth: hci5: command 0x0406 tx timeout [ 1315.083498][T19373] ubi: mtd0 is already attached to ubi31 [ 1315.719293][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1315.726554][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 1315.726719][T19375] Bluetooth: hci4: command 0x0c1a tx timeout [ 1315.733621][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1317.670653][T19382] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3475'. [ 1317.757982][T19376] Bluetooth: hci1: command 0x0406 tx timeout [ 1317.767256][T19376] Bluetooth: hci4: command 0x0c1a tx timeout [ 1317.767402][T17321] Bluetooth: hci3: command 0x0406 tx timeout [ 1317.773317][T13701] Bluetooth: hci2: command 0x0406 tx timeout [ 1317.997247][T13232] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1318.198751][T13232] usb 6-1: Using ep0 maxpacket: 8 [ 1318.215753][T13232] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 1318.253222][T13232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1318.372293][T13232] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 189 [ 1318.491153][T13232] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1318.559654][T13232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 1318.618383][T13232] usb 6-1: SerialNumber: syz [ 1318.668658][ T6164] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1318.753233][T13232] usb 6-1: config 0 descriptor?? [ 1318.820061][T19382] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1318.827515][T19382] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1319.000915][ T6164] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1319.056737][ T6164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.075263][T13232] usb 6-1: USB disconnect, device number 3 [ 1319.088071][ T6164] usb 2-1: Product: syz [ 1319.096653][ T6164] usb 2-1: Manufacturer: syz [ 1319.101382][ T6164] usb 2-1: SerialNumber: syz [ 1319.404905][ T6164] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1319.476165][T19413] ubi: mtd0 is already attached to ubi31 [ 1320.350870][T13701] Bluetooth: hci4: command 0x0c1a tx timeout [ 1320.351594][ T6164] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1320.367677][ T6164] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1320.402355][ T6164] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1320.547798][T13232] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1320.570218][ T6164] usb 2-1: USB disconnect, device number 64 [ 1320.725810][T13232] usb 6-1: Using ep0 maxpacket: 8 [ 1320.736249][T13232] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1320.747015][T13232] usb 6-1: config 7 has an invalid interface number: 67 but max is 0 [ 1320.756925][T13232] usb 6-1: config 7 has no interface number 0 [ 1320.796863][T13232] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1320.844868][T13232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.868833][T13232] usb 6-1: Product: syz [ 1320.886667][T13232] usb 6-1: Manufacturer: syz [ 1320.901991][T13232] usb 6-1: SerialNumber: syz [ 1321.143244][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3481'. [ 1321.157202][ T6164] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1321.326527][ T6164] usb 2-1: Using ep0 maxpacket: 8 [ 1321.337062][ T6164] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1321.348730][ T6164] usb 2-1: config 0 has no interface number 0 [ 1321.357409][ T6164] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1321.367073][ T6164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.381854][ T6164] usb 2-1: config 0 descriptor?? [ 1321.397505][T13232] usb 6-1: USB disconnect, device number 4 [ 1321.496094][ T6164] viperboard 2-1:0.143: version 0.00 found at bus 002 address 065 [ 1321.526083][ T6164] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1321.536877][ T6164] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1321.595289][T17694] usb 2-1: USB disconnect, device number 65 [ 1321.830181][ T30] audit: type=1400 audit(1767082348.667:1029): avc: denied { setattr } for pid=19427 comm="syz.2.3489" name="" dev="pipefs" ino=66632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1322.105472][T17694] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1322.343570][T17694] usb 3-1: Using ep0 maxpacket: 16 [ 1322.545892][T17694] usb 3-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 1322.583126][T17694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1322.608075][T17694] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x37, changing to 0x7 [ 1322.650773][T17694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 240, changing to 11 [ 1322.695896][T17694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 49986, setting to 1024 [ 1322.730210][T17694] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1322.759410][T17694] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1322.769236][T17694] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1322.781695][T17694] usb 3-1: Manufacturer: syz [ 1322.803632][T17694] usb 3-1: config 0 descriptor?? [ 1322.886656][ T30] audit: type=1400 audit(1767082349.658:1030): avc: denied { mount } for pid=19447 comm="syz.3.3496" name="/" dev="hugetlbfs" ino=66654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1323.104599][T13232] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1323.350941][T19457] trusted_key: encrypted_key: insufficient parameters specified [ 1323.434750][T13232] usb 4-1: Using ep0 maxpacket: 32 [ 1323.439982][T17694] rc_core: IR keymap rc-hauppauge not found [ 1323.454465][T17694] Registered IR keymap rc-empty [ 1323.454572][ T6164] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1323.465701][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1323.479624][T13232] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 1323.494583][T13232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.514313][T13232] usb 4-1: Product: syz [ 1323.522890][T13232] usb 4-1: Manufacturer: syz [ 1323.529610][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1323.565028][T17694] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1323.594268][T13232] usb 4-1: SerialNumber: syz [ 1323.611065][T17694] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input75 [ 1324.125309][T13232] usb 4-1: config 0 descriptor?? [ 1324.137337][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1324.149598][T13232] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1324.174306][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1324.194524][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1324.224331][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1324.251805][ T6164] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1324.269673][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1324.269748][ T6164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.306250][ T6164] usb 1-1: Product: syz [ 1324.313933][ T6164] usb 1-1: Manufacturer: syz [ 1324.314152][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1324.318791][ T6164] usb 1-1: SerialNumber: syz [ 1324.384125][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1324.407216][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1324.444237][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1324.484806][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1324.514031][T17694] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1324.561981][T17694] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 1324.579094][ T6164] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1324.613608][T17694] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1324.620121][ T6164] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1324.651776][T19448] netlink: 'syz.3.3496': attribute type 4 has an invalid length. [ 1324.662492][ T6164] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1324.706301][ T6164] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1324.714407][T13232] gspca_vc032x: reg_w err -71 [ 1324.719915][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1324.726447][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1324.731790][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1324.737187][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1324.742730][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1324.749732][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1324.759047][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1324.765659][ T6164] usb 1-1: USB disconnect, device number 53 [ 1324.779325][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1324.785798][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1324.816139][T19466] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1324.822684][T19466] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1324.843912][T19466] vhci_hcd vhci_hcd.0: Device attached [ 1325.020951][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1325.030734][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1325.041392][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1325.071400][T19467] vhci_hcd: connection closed [ 1325.072539][ T3449] vhci_hcd vhci_hcd.5: stop threads [ 1325.083717][ T3449] vhci_hcd vhci_hcd.5: release socket [ 1325.089293][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1325.097270][ T3449] vhci_hcd vhci_hcd.5: disconnect device [ 1325.102983][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1325.112886][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1325.122749][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1325.131498][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1325.137949][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1325.143530][T13232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1325.164587][T13232] gspca_vc032x: Unknown sensor... [ 1325.172161][T13232] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1325.203684][T13232] usb 4-1: USB disconnect, device number 65 [ 1325.486607][T19097] usb 3-1: USB disconnect, device number 55 [ 1325.645810][T19475] FAULT_INJECTION: forcing a failure. [ 1325.645810][T19475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.703964][T19475] CPU: 0 UID: 0 PID: 19475 Comm: syz.2.3503 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.703996][T19475] Tainted: [L]=SOFTLOCKUP [ 1325.704003][T19475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1325.704014][T19475] Call Trace: [ 1325.704021][T19475] [ 1325.704030][T19475] dump_stack_lvl+0x16c/0x1f0 [ 1325.704058][T19475] should_fail_ex+0x512/0x640 [ 1325.704088][T19475] _copy_from_user+0x2e/0xd0 [ 1325.704115][T19475] do_sock_getsockopt+0x3a1/0x410 [ 1325.704140][T19475] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1325.704160][T19475] ? __fget_files+0x204/0x3c0 [ 1325.704199][T19475] __sys_getsockopt+0x12f/0x260 [ 1325.704221][T19475] __x64_sys_getsockopt+0xbd/0x160 [ 1325.704237][T19475] ? do_syscall_64+0x91/0xf80 [ 1325.704258][T19475] ? lockdep_hardirqs_on+0x7c/0x110 [ 1325.704279][T19475] do_syscall_64+0xcd/0xf80 [ 1325.704302][T19475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.704321][T19475] RIP: 0033:0x7f86e738f749 [ 1325.704336][T19475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1325.704352][T19475] RSP: 002b:00007f86e55f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1325.704368][T19475] RAX: ffffffffffffffda RBX: 00007f86e75e5fa0 RCX: 00007f86e738f749 [ 1325.704380][T19475] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000004 [ 1325.704390][T19475] RBP: 00007f86e55f6090 R08: 0000200000000040 R09: 0000000000000000 [ 1325.704402][T19475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.704412][T19475] R13: 00007f86e75e6038 R14: 00007f86e75e5fa0 R15: 00007ffeed2f8608 [ 1325.704440][T19475] [ 1326.162318][T19477] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3504'. [ 1326.392500][T19484] macvtap0: entered allmulticast mode [ 1326.398278][T19484] veth0_macvtap: entered allmulticast mode [ 1326.413400][T19484] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3507'. [ 1326.426378][ T5891] IPVS: starting estimator thread 0... [ 1326.455004][T19485] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1326.461550][T19485] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1326.502002][T19485] vhci_hcd vhci_hcd.0: Device attached [ 1326.572978][T19487] IPVS: using max 64 ests per chain, 153600 per kthread [ 1326.837848][T19486] vhci_hcd: connection closed [ 1326.839796][ T3457] vhci_hcd vhci_hcd.0: stop threads [ 1326.855752][ T5891] usb 34-1: SetAddress Request (2) to port 0 [ 1326.865830][ T5891] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1326.873541][ T3457] vhci_hcd vhci_hcd.0: release socket [ 1326.902888][ T3457] vhci_hcd vhci_hcd.0: disconnect device [ 1328.403197][T19376] Bluetooth: hci0: command 0x1003 tx timeout [ 1328.409672][T13701] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1329.180064][T19507] lo speed is unknown, defaulting to 1000 [ 1331.485862][T19514] sp0: Synchronizing with TNC [ 1331.910207][ T5891] usb 34-1: device descriptor read/8, error -110 [ 1331.934401][T19512] [U] è` [ 1333.555274][ T5891] usb usb34-port1: attempt power cycle [ 1335.337479][ T6164] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1335.603543][ T6164] usb 6-1: Using ep0 maxpacket: 16 [ 1335.620252][ T5891] usb usb34-port1: unable to enumerate USB device [ 1335.628499][ T6164] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.721998][ T6164] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1335.741054][ T6164] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.764878][ T6164] usb 6-1: config 0 descriptor?? [ 1336.194085][ T6164] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 1336.205729][ T6164] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 1336.232469][ T6164] mcp2221 0003:04D8:00DD.001B: item fetching failed at offset 2/5 [ 1336.264490][ T6164] mcp2221 0003:04D8:00DD.001B: can't parse reports [ 1336.280312][ T6164] mcp2221 0003:04D8:00DD.001B: probe with driver mcp2221 failed with error -22 [ 1336.340907][T19556] random: crng reseeded on system resumption [ 1336.402335][ T6164] usb 6-1: USB disconnect, device number 5 [ 1336.846778][T19560] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1336.853318][T19560] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1336.914071][T19560] vhci_hcd vhci_hcd.0: Device attached [ 1337.250149][T19561] vhci_hcd: connection closed [ 1337.250575][ T6107] vhci_hcd vhci_hcd.3: stop threads [ 1337.386281][ T6164] usb 40-1: SetAddress Request (2) to port 0 [ 1337.393020][ T6164] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1338.268321][ T6107] vhci_hcd vhci_hcd.3: release socket [ 1338.276929][ T6107] vhci_hcd vhci_hcd.3: disconnect device [ 1338.299720][ T6164] usb 40-1: enqueue for inactive port 0 [ 1339.497639][T13701] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 1339.703152][ T6164] usb usb40-port1: attempt power cycle [ 1340.102753][ T5974] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1340.407671][T19594] sp0: Synchronizing with TNC [ 1340.451072][ T6164] usb usb40-port1: unable to enumerate USB device [ 1340.462238][ T5974] usb 6-1: Using ep0 maxpacket: 32 [ 1340.662410][ T5974] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1340.747814][ T5974] usb 6-1: config 0 has no interface number 0 [ 1340.809696][ T5974] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1340.947009][ T5974] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1341.032841][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.138218][ T5974] usb 6-1: Product: syz [ 1341.180951][ T5974] usb 6-1: Manufacturer: syz [ 1341.190065][T19592] [U] è` [ 1341.230582][ T5974] usb 6-1: SerialNumber: syz [ 1341.328271][ T5974] usb 6-1: config 0 descriptor?? [ 1341.344754][ T5974] f81534 6-1:0.12: required endpoints missing [ 1341.475446][ T30] audit: type=1400 audit(1767082368.287:1031): avc: denied { ioctl } for pid=19596 comm="syz.1.3537" path="socket:[66954]" dev="sockfs" ino=66954 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1342.838971][T18136] usb 6-1: USB disconnect, device number 6 [ 1343.334045][T19615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1345.744629][T13232] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1345.944074][T13232] usb 3-1: device descriptor read/64, error -71 [ 1346.195981][T13232] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1346.425470][T13232] usb 3-1: device descriptor read/64, error -71 [ 1347.401712][T13232] usb usb3-port1: attempt power cycle [ 1347.680923][T19641] sp0: Synchronizing with TNC [ 1347.729988][T19633] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1347.738479][T19633] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1347.930135][T19633] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1348.467358][T19637] [U] è` [ 1351.452591][ T30] audit: type=1400 audit(1767082378.302:1032): avc: denied { connect } for pid=19646 comm="syz.0.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1352.523727][T19669] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1352.847292][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'. [ 1353.455323][T19674] netlink: 'syz.5.3557': attribute type 10 has an invalid length. [ 1353.494955][T19674] batman_adv: batadv0: Adding interface: netdevsim0 [ 1353.524003][T19674] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.580276][T19674] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1354.002215][T19677] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3558'. [ 1354.676884][T19684] rdma_op ffff8880650ae9f0 conn xmit_rdma 0000000000000000 [ 1355.012372][T19685] sp0: Synchronizing with TNC [ 1355.114295][T13232] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1355.386656][T13232] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1355.465359][T13232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.498709][T19680] [U] è` [ 1355.556035][T13232] usb 6-1: Product: syz [ 1355.621276][T13232] usb 6-1: Manufacturer: syz [ 1355.625909][T13232] usb 6-1: SerialNumber: syz [ 1355.971195][T13232] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1355.990934][T13232] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1356.128269][T13232] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1356.224735][T19694] netlink: 'syz.3.3563': attribute type 10 has an invalid length. [ 1356.232651][T19694] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3563'. [ 1357.560101][T13232] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1357.616595][T13232] usb 6-1: USB disconnect, device number 7 [ 1357.735933][T19696] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1358.142362][T19708] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 1359.043773][ T30] audit: type=1400 audit(1767082385.005:1033): avc: denied { relabelto } for pid=19702 comm="syz.1.3567" name="142" dev="tmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1359.141956][T19710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.150569][T19710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.256623][T19710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1359.299838][T18905] lo speed is unknown, defaulting to 1000 [ 1359.385081][T18905] syz0: Port: 1 Link ACTIVE [ 1359.390092][ T30] audit: type=1400 audit(1767082385.005:1034): avc: denied { associate } for pid=19702 comm="syz.1.3567" name="142" dev="tmpfs" ino=751 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1359.429931][ T30] audit: type=1400 audit(1767082385.015:1035): avc: denied { prog_load } for pid=19702 comm="syz.1.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1359.494958][ T30] audit: type=1400 audit(1767082385.015:1036): avc: denied { prog_run } for pid=19702 comm="syz.1.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1359.515138][ T30] audit: type=1400 audit(1767082385.055:1037): avc: denied { mounton } for pid=19702 comm="syz.1.3567" path="/142" dev="tmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1359.593888][ T30] audit: type=1400 audit(1767082385.055:1038): avc: denied { mount } for pid=19702 comm="syz.1.3567" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1359.646559][ T30] audit: type=1400 audit(1767082386.026:1039): avc: denied { unmount } for pid=16559 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1359.734083][ T30] audit: type=1400 audit(1767082386.026:1040): avc: denied { remove_name } for pid=16559 comm="syz-executor" name="binderfs" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1359.838719][ T30] audit: type=1400 audit(1767082386.026:1041): avc: denied { rmdir } for pid=16559 comm="syz-executor" name="142" dev="tmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1359.899221][T19721] can0: slcan on ptm0. [ 1359.943256][ T30] audit: type=1400 audit(1767082386.166:1042): avc: denied { map_create } for pid=19697 comm="syz.5.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1360.226751][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.316154][T19720] can0 (unregistered): slcan off ptm0. [ 1362.523283][T19734] rdma_op ffff8880335159f0 conn xmit_rdma 0000000000000000 [ 1362.954640][T13232] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1363.131318][T13232] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1363.155918][T13232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.164833][T13232] usb 3-1: Product: syz [ 1363.173215][T13232] usb 3-1: Manufacturer: syz [ 1363.200361][T13232] usb 3-1: SerialNumber: syz [ 1363.512516][T13232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1363.552216][T13232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1363.617499][T13232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1363.661780][T13232] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1363.774181][T13232] usb 3-1: USB disconnect, device number 59 [ 1363.800658][T19740] netlink: 'syz.5.3576': attribute type 4 has an invalid length. [ 1364.766996][T19752] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1365.137554][T19761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3584'. [ 1365.172543][T19761] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1368.248210][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1368.248225][ T30] audit: type=1400 audit(1767082395.100:1045): avc: denied { write } for pid=19775 comm="syz.3.3588" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1368.353255][T19776] FAULT_INJECTION: forcing a failure. [ 1368.353255][T19776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.369540][T19776] CPU: 0 UID: 0 PID: 19776 Comm: syz.3.3588 Tainted: G L syzkaller #0 PREEMPT(full) [ 1368.369571][T19776] Tainted: [L]=SOFTLOCKUP [ 1368.369578][T19776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1368.369590][T19776] Call Trace: [ 1368.369597][T19776] [ 1368.369605][T19776] dump_stack_lvl+0x16c/0x1f0 [ 1368.369635][T19776] should_fail_ex+0x512/0x640 [ 1368.369665][T19776] _copy_from_user+0x2e/0xd0 [ 1368.369692][T19776] memdup_user+0x6b/0xe0 [ 1368.369713][T19776] strndup_user+0x78/0xe0 [ 1368.369733][T19776] __x64_sys_mount+0x136/0x310 [ 1368.369754][T19776] ? __pfx___x64_sys_mount+0x10/0x10 [ 1368.369780][T19776] do_syscall_64+0xcd/0xf80 [ 1368.369803][T19776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.369820][T19776] RIP: 0033:0x7f9352b8f749 [ 1368.369836][T19776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1368.369853][T19776] RSP: 002b:00007f93539e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1368.369871][T19776] RAX: ffffffffffffffda RBX: 00007f9352de5fa0 RCX: 00007f9352b8f749 [ 1368.369884][T19776] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1368.369897][T19776] RBP: 00007f93539e2090 R08: 0000200000002780 R09: 0000000000000000 [ 1368.369908][T19776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.369919][T19776] R13: 00007f9352de6038 R14: 00007f9352de5fa0 R15: 00007ffee40071d8 [ 1368.369947][T19776] [ 1370.499336][T18609] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1373.424951][T19797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1373.463985][T18609] usb 1-1: device descriptor read/all, error -71 [ 1373.849132][T19805] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1375.215356][T17694] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1375.451804][T17694] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.487395][T17694] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1375.517285][T17694] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1375.526425][T17694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.561207][T17694] usb 2-1: config 0 descriptor?? [ 1375.588801][T17694] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1375.612414][T17694] dvb-usb: bulk message failed: -22 (3/0) [ 1375.643824][T17694] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1375.673203][T17694] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1375.698287][T17694] usb 2-1: media controller created [ 1375.719245][T17694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1375.744269][T17694] dvb-usb: bulk message failed: -22 (6/0) [ 1375.768266][T17694] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1375.816136][T17694] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input78 [ 1375.908397][T17694] dvb-usb: schedule remote query interval to 150 msecs. [ 1375.908413][T17694] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1375.925527][T17694] usb 2-1: USB disconnect, device number 66 [ 1375.936172][T17694] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1376.178608][T19819] lo speed is unknown, defaulting to 1000 [ 1377.625119][ T30] audit: type=1400 audit(1767082404.485:1046): avc: denied { map } for pid=19827 comm="syz.3.3601" path="socket:[67454]" dev="sockfs" ino=67454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1377.791558][ T30] audit: type=1400 audit(1767082404.485:1047): avc: denied { read } for pid=19827 comm="syz.3.3601" path="socket:[67454]" dev="sockfs" ino=67454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1379.593749][T19850] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1379.608714][T19850] ipt_REJECT: ECHOREPLY no longer supported. [ 1381.350957][T19862] FAULT_INJECTION: forcing a failure. [ 1381.350957][T19862] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.369984][T19862] CPU: 0 UID: 0 PID: 19862 Comm: syz.0.3610 Tainted: G L syzkaller #0 PREEMPT(full) [ 1381.370016][T19862] Tainted: [L]=SOFTLOCKUP [ 1381.370023][T19862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1381.370035][T19862] Call Trace: [ 1381.370041][T19862] [ 1381.370049][T19862] dump_stack_lvl+0x16c/0x1f0 [ 1381.370078][T19862] should_fail_ex+0x512/0x640 [ 1381.370104][T19862] ? __kvmalloc_node_noprof+0x129/0xa40 [ 1381.370130][T19862] should_failslab+0xc2/0x120 [ 1381.370155][T19862] __kvmalloc_node_noprof+0x14a/0xa40 [ 1381.370176][T19862] ? bpf_lsm_capable+0x9/0x10 [ 1381.370197][T19862] ? security_capable+0x7e/0x260 [ 1381.370218][T19862] ? proc_sys_call_handler+0x2d6/0x5b0 [ 1381.370243][T19862] ? ns_capable_noaudit+0xda/0x110 [ 1381.370273][T19862] ? proc_sys_call_handler+0x2d6/0x5b0 [ 1381.370297][T19862] proc_sys_call_handler+0x2d6/0x5b0 [ 1381.370324][T19862] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1381.370351][T19862] ? __lock_acquire+0x436/0x2890 [ 1381.370378][T19862] do_iter_readv_writev+0x662/0x9e0 [ 1381.370402][T19862] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1381.370438][T19862] vfs_writev+0x35f/0xde0 [ 1381.370457][T19862] ? get_pid_task+0x106/0x250 [ 1381.370486][T19862] ? __pfx_vfs_writev+0x10/0x10 [ 1381.370509][T19862] ? find_held_lock+0x2b/0x80 [ 1381.370553][T19862] ? __fget_files+0x20e/0x3c0 [ 1381.370585][T19862] ? do_pwritev+0x1a6/0x270 [ 1381.370605][T19862] do_pwritev+0x1a6/0x270 [ 1381.370627][T19862] ? __pfx_do_pwritev+0x10/0x10 [ 1381.370662][T19862] do_syscall_64+0xcd/0xf80 [ 1381.370688][T19862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.370708][T19862] RIP: 0033:0x7efeb338f749 [ 1381.370724][T19862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1381.370744][T19862] RSP: 002b:00007efeb42ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1381.370760][T19862] RAX: ffffffffffffffda RBX: 00007efeb35e5fa0 RCX: 00007efeb338f749 [ 1381.370772][T19862] RDX: 1000000000000020 RSI: 0000200000000480 RDI: 0000000000000004 [ 1381.370783][T19862] RBP: 00007efeb42ec090 R08: 0000000000000080 R09: 0000000000000000 [ 1381.370794][T19862] R10: 00000000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 1381.370806][T19862] R13: 00007efeb35e6038 R14: 00007efeb35e5fa0 R15: 00007ffd2e34eec8 [ 1381.370831][T19862] [ 1381.694399][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 1381.703796][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 1384.520552][T19886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1387.468086][T19905] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1387.475970][T19905] ipt_REJECT: ECHOREPLY no longer supported. [ 1388.690408][ T5974] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1389.023147][ T5974] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1389.037859][ T5974] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.081734][ T5974] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1389.093312][T19914] FAULT_INJECTION: forcing a failure. [ 1389.093312][T19914] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.128103][ T5974] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1389.141523][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.150149][ T5974] usb 3-1: Product: syz [ 1389.154524][T19914] CPU: 0 UID: 0 PID: 19914 Comm: syz.0.3624 Tainted: G L syzkaller #0 PREEMPT(full) [ 1389.154543][T19914] Tainted: [L]=SOFTLOCKUP [ 1389.154548][T19914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1389.154554][T19914] Call Trace: [ 1389.154559][T19914] [ 1389.154565][T19914] dump_stack_lvl+0x16c/0x1f0 [ 1389.154582][T19914] should_fail_ex+0x512/0x640 [ 1389.154599][T19914] ? fs_reclaim_acquire+0xae/0x150 [ 1389.154616][T19914] should_failslab+0xc2/0x120 [ 1389.154631][T19914] __kmalloc_noprof+0xeb/0x910 [ 1389.154648][T19914] ? tomoyo_encode2+0x100/0x3e0 [ 1389.154667][T19914] ? tomoyo_encode2+0x100/0x3e0 [ 1389.154680][T19914] tomoyo_encode2+0x100/0x3e0 [ 1389.154697][T19914] tomoyo_encode+0x29/0x50 [ 1389.154710][T19914] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1389.154730][T19914] tomoyo_path_number_perm+0x245/0x580 [ 1389.154742][T19914] ? tomoyo_path_number_perm+0x237/0x580 [ 1389.154755][T19914] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1389.154769][T19914] ? find_held_lock+0x2b/0x80 [ 1389.154799][T19914] ? find_held_lock+0x2b/0x80 [ 1389.154815][T19914] ? hook_file_ioctl_common+0x144/0x410 [ 1389.154835][T19914] ? __fget_files+0x20e/0x3c0 [ 1389.154860][T19914] security_file_ioctl+0x9b/0x240 [ 1389.154876][T19914] __x64_sys_ioctl+0xb7/0x210 [ 1389.154890][T19914] do_syscall_64+0xcd/0xf80 [ 1389.154906][T19914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.154918][T19914] RIP: 0033:0x7efeb338f749 [ 1389.154927][T19914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1389.154938][T19914] RSP: 002b:00007efeb42ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1389.154949][T19914] RAX: ffffffffffffffda RBX: 00007efeb35e5fa0 RCX: 00007efeb338f749 [ 1389.154957][T19914] RDX: 0000000000000000 RSI: 00000000c008aec1 RDI: 0000000000000003 [ 1389.154964][T19914] RBP: 00007efeb42ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.154970][T19914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.154979][T19914] R13: 00007efeb35e6038 R14: 00007efeb35e5fa0 R15: 00007ffd2e34eec8 [ 1389.154995][T19914] [ 1389.155018][T19914] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1389.375048][ T5974] usb 3-1: Manufacturer: syz [ 1389.379653][ T5974] usb 3-1: SerialNumber: syz [ 1389.596793][T19909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.625194][T19909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.818492][ T5974] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1389.843558][ T5974] usb 3-1: USB disconnect, device number 60 [ 1389.931603][ T6004] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1389.963813][T19924] netlink: 'syz.0.3626': attribute type 10 has an invalid length. [ 1389.973383][T19924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3626'. [ 1389.997802][T19924] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1390.004496][T19924] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.035477][T19924] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1391.050599][ T6004] usb 4-1: Using ep0 maxpacket: 8 [ 1391.130768][ T6004] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1391.160192][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.358981][ T6004] usb 4-1: Product: syz [ 1392.363207][ T6004] usb 4-1: Manufacturer: syz [ 1392.367793][ T6004] usb 4-1: SerialNumber: syz [ 1392.691987][T19934] lo speed is unknown, defaulting to 1000 [ 1393.491697][ T6004] usb 4-1: config 0 descriptor?? [ 1393.877653][ T6004] usb 4-1: can't set config #0, error -71 [ 1393.899440][T19939] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 1393.929999][ T6004] usb 4-1: USB disconnect, device number 66 [ 1393.941082][ T30] audit: type=1400 audit(1767082420.813:1048): avc: denied { relabelto } for pid=19937 comm="syz.2.3629" name="90" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 1394.065232][ T30] audit: type=1400 audit(1767082420.843:1049): avc: denied { associate } for pid=19937 comm="syz.2.3629" name="90" dev="tmpfs" ino=475 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 1394.149089][ T30] audit: type=1400 audit(1767082420.933:1050): avc: denied { remove_name } for pid=18103 comm="syz-executor" name="binderfs" dev="tmpfs" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 1394.178362][ T30] audit: type=1400 audit(1767082420.933:1051): avc: denied { rmdir } for pid=18103 comm="syz-executor" name="90" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 1394.299597][T19948] FAULT_INJECTION: forcing a failure. [ 1394.299597][T19948] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.312215][T19948] CPU: 1 UID: 0 PID: 19948 Comm: syz.2.3632 Tainted: G L syzkaller #0 PREEMPT(full) [ 1394.312233][T19948] Tainted: [L]=SOFTLOCKUP [ 1394.312237][T19948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1394.312244][T19948] Call Trace: [ 1394.312248][T19948] [ 1394.312253][T19948] dump_stack_lvl+0x16c/0x1f0 [ 1394.312271][T19948] should_fail_ex+0x512/0x640 [ 1394.312288][T19948] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1394.312302][T19948] should_failslab+0xc2/0x120 [ 1394.312317][T19948] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1394.312329][T19948] ? __alloc_skb+0x156/0x410 [ 1394.312349][T19948] ? __alloc_skb+0x156/0x410 [ 1394.312363][T19948] __alloc_skb+0x156/0x410 [ 1394.312378][T19948] ? __alloc_skb+0x35d/0x410 [ 1394.312393][T19948] ? __pfx___alloc_skb+0x10/0x10 [ 1394.312416][T19948] ? netlink_autobind.isra.0+0x158/0x370 [ 1394.312442][T19948] netlink_alloc_large_skb+0x69/0x140 [ 1394.312458][T19948] netlink_sendmsg+0x698/0xdd0 [ 1394.312474][T19948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1394.312492][T19948] ____sys_sendmsg+0xa5d/0xc30 [ 1394.312507][T19948] ? copy_msghdr_from_user+0x10a/0x160 [ 1394.312518][T19948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1394.312539][T19948] ___sys_sendmsg+0x134/0x1d0 [ 1394.312551][T19948] ? __pfx____sys_sendmsg+0x10/0x10 [ 1394.312580][T19948] __sys_sendmsg+0x16d/0x220 [ 1394.312591][T19948] ? __pfx___sys_sendmsg+0x10/0x10 [ 1394.312612][T19948] ? fput+0x70/0xf0 [ 1394.312624][T19948] do_syscall_64+0xcd/0xf80 [ 1394.312640][T19948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.312652][T19948] RIP: 0033:0x7f86e738f749 [ 1394.312662][T19948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1394.312673][T19948] RSP: 002b:00007f86e55f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1394.312684][T19948] RAX: ffffffffffffffda RBX: 00007f86e75e5fa0 RCX: 00007f86e738f749 [ 1394.312696][T19948] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1394.312703][T19948] RBP: 00007f86e55f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1394.312709][T19948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1394.312715][T19948] R13: 00007f86e75e6038 R14: 00007f86e75e5fa0 R15: 00007ffeed2f8608 [ 1394.312730][T19948] [ 1394.676666][ T30] audit: type=1400 audit(1767082421.533:1052): avc: denied { read } for pid=19950 comm="syz.3.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1399.411112][T19975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3640'. [ 1399.420139][ T30] audit: type=1400 audit(1767082426.286:1053): avc: denied { bind } for pid=19974 comm="syz.2.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1399.757165][T19986] ubi: mtd0 is already attached to ubi31 [ 1400.695752][ T5974] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1400.905638][ T5974] usb 1-1: Using ep0 maxpacket: 32 [ 1400.912917][ T5974] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1401.036594][ T5974] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1401.045962][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.054170][ T5974] usb 1-1: Product: syz [ 1401.059234][ T5974] usb 1-1: Manufacturer: syz [ 1401.063983][ T5974] usb 1-1: SerialNumber: syz [ 1401.071084][ T5974] usb 1-1: config 0 descriptor?? [ 1401.077156][T19977] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1401.088594][ T5974] hub 1-1:0.0: bad descriptor, ignoring hub [ 1401.094836][ T5974] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1402.146326][ T5974] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input79 [ 1402.605008][T20001] ubi: mtd0 is already attached to ubi31 [ 1403.805689][T18327] usb 1-1: USB disconnect, device number 56 [ 1403.805836][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1405.693652][ T30] audit: type=1400 audit(1767082432.539:1054): avc: denied { shutdown } for pid=20021 comm="syz.0.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1405.927160][T20026] bridge0: entered promiscuous mode [ 1406.310001][T20021] bridge0: left promiscuous mode [ 1406.944156][T20042] rdma_op ffff88804b78f9f0 conn xmit_rdma 0000000000000000 [ 1407.832960][T20046] lo speed is unknown, defaulting to 1000 [ 1409.182935][T17694] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1409.299772][T20063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.306966][T20063] bridge0: port 2(bridge_slave_1) entered listening state [ 1409.314380][T20063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.321486][T20063] bridge0: port 1(bridge_slave_0) entered listening state [ 1409.411944][T17694] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1409.435138][T20063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1409.450960][T17694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.465519][T17694] usb 1-1: Product: syz [ 1409.589896][T17694] usb 1-1: Manufacturer: syz [ 1409.632650][T17694] usb 1-1: SerialNumber: syz [ 1409.890628][T17694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1409.923100][T17694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1410.122585][T17694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1411.158358][T17694] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1411.407670][T17694] usb 1-1: USB disconnect, device number 57 [ 1412.202080][T20081] netlink: 'syz.1.3665': attribute type 10 has an invalid length. [ 1412.210033][T20081] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3665'. [ 1412.383154][T20082] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1412.436304][T13701] Bluetooth: hci4: ACL packet for unknown connection handle 6 [ 1413.207148][T20083] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1413.213692][T20083] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1413.414505][T20083] vhci_hcd vhci_hcd.0: Device attached [ 1413.552365][T20091] random: crng reseeded on system resumption [ 1413.749322][T18327] usb 34-1: SetAddress Request (6) to port 0 [ 1413.755465][T18327] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1413.763851][T20084] vhci_hcd: connection closed [ 1413.764065][ T73] vhci_hcd vhci_hcd.0: stop threads [ 1413.794790][ T73] vhci_hcd vhci_hcd.0: release socket [ 1413.809238][ T73] vhci_hcd vhci_hcd.0: disconnect device [ 1413.919943][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1414.179153][ T9] usb 2-1: device descriptor read/64, error -71 [ 1414.528815][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1414.698716][ T9] usb 2-1: device descriptor read/64, error -71 [ 1414.809036][ T9] usb usb2-port1: attempt power cycle [ 1415.249097][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1415.335608][ T9] usb 2-1: device descriptor read/8, error -71 [ 1415.648369][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1415.679305][ T9] usb 2-1: device descriptor read/8, error -71 [ 1415.788711][ T9] usb usb2-port1: unable to enumerate USB device [ 1416.272886][T20112] rdma_op ffff888024e369f0 conn xmit_rdma 0000000000000000 [ 1416.300998][ T9] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1416.648682][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.682627][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1416.702127][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1416.727648][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.766636][ T9] usb 3-1: config 0 descriptor?? [ 1416.806649][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1416.855608][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1416.867022][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1416.888503][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1416.966544][ T9] usb 3-1: media controller created [ 1417.008517][T20108] dvb-usb: bulk message failed: -22 (2/0) [ 1417.026217][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1417.046086][T20108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=20108 comm=syz.2.3671 [ 1417.077858][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1417.091254][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1417.169901][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input80 [ 1417.181552][T20108] netlink: 'syz.2.3671': attribute type 10 has an invalid length. [ 1417.197531][ T6004] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1417.244088][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1417.279405][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1417.403073][ T6004] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1417.439859][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.443443][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1417.479374][ T6004] usb 4-1: Product: syz [ 1417.483562][ T6004] usb 4-1: Manufacturer: syz [ 1417.522330][ T9] dvb-usb: error while querying for an remote control event. [ 1417.547302][ T6004] usb 4-1: SerialNumber: syz [ 1417.652751][T17694] usb 3-1: USB disconnect, device number 61 [ 1417.718577][T17694] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1417.823252][ T6004] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1417.866587][ T6004] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1417.892730][ T6004] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1417.907176][ T30] audit: type=1400 audit(1767082444.775:1055): avc: denied { read } for pid=20117 comm="syz.0.3674" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1417.907224][ T30] audit: type=1400 audit(1767082444.775:1056): avc: denied { open } for pid=20117 comm="syz.0.3674" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1417.907265][ T30] audit: type=1400 audit(1767082444.775:1057): avc: denied { ioctl } for pid=20117 comm="syz.0.3674" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1418.020961][ T6004] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1418.050999][ T6004] usb 4-1: USB disconnect, device number 67 [ 1418.246924][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1418.417594][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1418.424967][ T9] usb 1-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 1418.471442][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1418.486881][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.510538][ T9] usb 1-1: Product: syz [ 1418.514733][ T9] usb 1-1: Manufacturer: syz [ 1418.530769][ T9] usb 1-1: SerialNumber: syz [ 1418.548963][ T9] usb 1-1: config 0 descriptor?? [ 1418.563635][ T9] cdc_wdm 1-1:0.0: probe with driver cdc_wdm failed with error -22 [ 1418.826898][T18327] usb 34-1: device descriptor read/8, error -110 [ 1418.832906][T20128] rdma_op ffff8880344cb9f0 conn xmit_rdma 0000000000000000 [ 1419.034878][T20129] sp0: Synchronizing with TNC [ 1420.151462][T18136] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1420.168782][T20123] [U] è` [ 1420.520851][T20138] ubi: mtd0 is already attached to ubi31 [ 1421.492285][T18327] usb usb34-port1: attempt power cycle [ 1421.531011][T18136] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1421.551077][T18136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.574801][T18136] usb 4-1: Product: syz [ 1421.636041][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1421.736463][ T9] usb 1-1: USB disconnect, device number 58 [ 1421.749781][T18136] usb 4-1: Manufacturer: syz [ 1422.713077][T18136] usb 4-1: SerialNumber: syz [ 1422.730853][T18327] usb usb34-port1: unable to enumerate USB device [ 1422.940129][T18136] usb 4-1: can't set config #1, error -71 [ 1422.986767][T18136] usb 4-1: USB disconnect, device number 68 [ 1423.143227][T20151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=20151 comm=syz.3.3682 [ 1423.286777][T20151] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1423.364027][T20158] netlink: 'syz.2.3684': attribute type 10 has an invalid length. [ 1423.371910][T20158] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3684'. [ 1423.660634][T20164] ubi: mtd0 is already attached to ubi31 [ 1424.586393][T20159] fuse: Bad value for 'fd' [ 1425.126034][T20168] rdma_op ffff888079bcd1f0 conn xmit_rdma 0000000000000000 [ 1425.450811][T18136] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1426.178059][T18136] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1426.187283][T18136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.195664][T18136] usb 1-1: Product: syz [ 1426.200399][T18136] usb 1-1: Manufacturer: syz [ 1426.205158][T18136] usb 1-1: SerialNumber: syz [ 1426.428105][T18136] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1426.589740][T18136] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1426.628327][T18136] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1426.728934][T18136] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1426.958178][T18136] usb 1-1: USB disconnect, device number 59 [ 1427.459596][ T30] audit: type=1326 audit(1767082454.330:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.0.3694" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efeb338f749 code=0x0 [ 1428.738676][T20212] netlink: 'syz.1.3699': attribute type 10 has an invalid length. [ 1428.746573][T20212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3699'. [ 1429.601306][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1429.771187][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1429.787347][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1429.819273][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.956926][T20220] ubi: mtd0 is already attached to ubi31 [ 1430.031939][ T9] usb 3-1: config 0 descriptor?? [ 1430.259955][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1430.284898][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1430.307049][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1430.370947][ T9] usb 3-1: media controller created [ 1430.414621][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1434.451235][ T9] az6027: usb out operation failed. (-71) [ 1434.457011][ T9] stb0899_attach: Driver disabled by Kconfig [ 1434.490411][ T9] az6027: no front-end attached [ 1434.490411][ T9] [ 1434.502860][ T9] az6027: usb out operation failed. (-71) [ 1434.508664][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1434.565572][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input81 [ 1434.701042][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 1434.786951][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1435.051063][ T9] usb 3-1: USB disconnect, device number 62 [ 1435.697145][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1436.076925][T20263] ubi: mtd0 is already attached to ubi31 [ 1438.208494][T20281] lo speed is unknown, defaulting to 1000 [ 1439.183347][T20291] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1439.267862][T20295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1439.547426][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1439.555689][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1440.569575][T20314] rdma_op ffff88807d72c1f0 conn xmit_rdma 0000000000000000 [ 1441.614747][T18043] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1442.921413][T18043] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1443.145384][T18043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.153383][T18043] usb 4-1: Product: syz [ 1443.214550][T18043] usb 4-1: Manufacturer: syz [ 1443.241813][T18043] usb 4-1: SerialNumber: syz [ 1443.864381][T18043] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1443.939768][T18043] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1443.978170][T18043] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1444.033443][T18043] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1444.095502][T18043] usb 4-1: USB disconnect, device number 69 [ 1444.350529][T20343] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1444.759903][ T30] audit: type=1400 audit(1767082471.649:1059): avc: denied { ioctl } for pid=20352 comm="syz.5.3736" path="socket:[70810]" dev="sockfs" ino=70810 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1445.006518][T20344] Process accounting resumed [ 1445.061024][T18136] Process accounting resumed [ 1445.087738][T20345] Process accounting resumed [ 1445.663407][T18043] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1446.930057][T18043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.962765][T18043] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1446.972620][T18043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.026653][T18043] usb 2-1: config 0 descriptor?? [ 1447.354973][T17694] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1447.765420][T18043] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 1447.797046][T17694] usb 4-1: Using ep0 maxpacket: 8 [ 1447.858636][T17694] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1447.984712][T17694] usb 4-1: can't read configurations, error -61 [ 1448.001872][T18043] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001C/input/input82 [ 1448.144819][T18043] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1448.170735][T17694] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1448.290882][T20391] ipt_REJECT: ECHOREPLY no longer supported. [ 1448.332235][T17694] usb 4-1: Using ep0 maxpacket: 8 [ 1448.345323][T17694] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1448.381903][T17694] usb 4-1: can't read configurations, error -61 [ 1448.595392][T17694] usb usb4-port1: attempt power cycle [ 1448.733326][T18043] usb 2-1: USB disconnect, device number 71 [ 1448.945642][T17694] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1448.974654][T17694] usb 4-1: Using ep0 maxpacket: 8 [ 1448.990325][T17694] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1449.003187][T17694] usb 4-1: can't read configurations, error -61 [ 1449.256074][T17694] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1449.292139][T17694] usb 4-1: Using ep0 maxpacket: 8 [ 1449.301720][T17694] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1449.329093][T20394] Process accounting resumed [ 1449.338196][T17694] usb 4-1: can't read configurations, error -61 [ 1449.350241][T17694] usb usb4-port1: unable to enumerate USB device [ 1451.930914][T19376] Bluetooth: hci4: command 0x0c1a tx timeout [ 1453.029830][T20427] sp0: Synchronizing with TNC [ 1454.009311][T13701] Bluetooth: hci4: command 0x0c1a tx timeout [ 1455.758944][T20424] [U] è` [ 1455.964743][T20433] ipt_REJECT: ECHOREPLY no longer supported. [ 1456.827940][T20448] random: crng reseeded on system resumption [ 1457.345042][T17694] Process accounting resumed [ 1458.054581][T20451] Process accounting resumed [ 1458.966037][T20468] random: crng reseeded on system resumption [ 1459.540536][T20479] syz1: rxe_newlink: already configured on syz_tun [ 1460.161289][T20483] ipt_REJECT: ECHOREPLY no longer supported. [ 1460.389838][T20490] sp0: Synchronizing with TNC [ 1461.191081][T20488] [U] è` [ 1461.440381][T20498] sp0: Synchronizing with TNC [ 1463.137250][T20495] [U] è` [ 1463.590672][T20511] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1463.598085][T20511] overlayfs: failed to set xattr on upper [ 1463.603927][T20511] overlayfs: ...falling back to redirect_dir=nofollow. [ 1463.610926][T20511] overlayfs: ...falling back to uuid=null. [ 1465.797802][ T30] audit: type=1400 audit(1767082492.699:1060): avc: denied { ioctl } for pid=20516 comm="syz.1.3782" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x744b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1465.981435][T20530] ipt_REJECT: ECHOREPLY no longer supported. [ 1466.324752][T20544] netlink: 'syz.0.3787': attribute type 10 has an invalid length. [ 1466.360145][T20545] rdma_op ffff888029d299f0 conn xmit_rdma 0000000000000000 [ 1466.418699][T20544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.589467][T20544] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1466.607909][T20550] random: crng reseeded on system resumption [ 1468.725384][T20566] rdma_op ffff888043bbf9f0 conn xmit_rdma 0000000000000000 [ 1468.772814][ T5985] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1468.800345][T20571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1469.026026][ T5985] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1469.061518][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.077230][ T5985] usb 2-1: Product: syz [ 1469.090066][ T5985] usb 2-1: Manufacturer: syz [ 1469.112707][ T5985] usb 2-1: SerialNumber: syz [ 1469.221501][T17694] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1469.358554][ T5985] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1469.371581][ T5985] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1469.383714][ T5985] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1469.397624][T17694] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1469.406730][T17694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.422934][ T5985] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1469.431033][T17694] usb 3-1: Product: syz [ 1469.435383][T17694] usb 3-1: Manufacturer: syz [ 1469.458598][T17694] usb 3-1: SerialNumber: syz [ 1469.472635][ T5985] usb 2-1: USB disconnect, device number 72 [ 1469.617118][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1469.624381][ C1] bridge0: topology change detected, propagating [ 1469.630977][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.638220][ C1] bridge0: topology change detected, propagating [ 1469.690482][T17694] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1469.723423][T17694] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1469.762720][T17694] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1469.824022][T17694] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1469.875764][T17694] usb 3-1: USB disconnect, device number 63 [ 1470.205165][T20593] FAULT_INJECTION: forcing a failure. [ 1470.205165][T20593] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.231247][T20593] CPU: 0 UID: 0 PID: 20593 Comm: syz.3.3798 Tainted: G L syzkaller #0 PREEMPT(full) [ 1470.231276][T20593] Tainted: [L]=SOFTLOCKUP [ 1470.231283][T20593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1470.231294][T20593] Call Trace: [ 1470.231301][T20593] [ 1470.231308][T20593] dump_stack_lvl+0x16c/0x1f0 [ 1470.231336][T20593] should_fail_ex+0x512/0x640 [ 1470.231361][T20593] ? fs_reclaim_acquire+0xae/0x150 [ 1470.231389][T20593] should_failslab+0xc2/0x120 [ 1470.231415][T20593] __kmalloc_noprof+0xeb/0x910 [ 1470.231442][T20593] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1470.231471][T20593] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1470.231494][T20593] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1470.231521][T20593] ? tomoyo_profile+0x47/0x60 [ 1470.231553][T20593] tomoyo_path_number_perm+0x245/0x580 [ 1470.231573][T20593] ? tomoyo_path_number_perm+0x237/0x580 [ 1470.231597][T20593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1470.231619][T20593] ? find_held_lock+0x2b/0x80 [ 1470.231672][T20593] ? find_held_lock+0x2b/0x80 [ 1470.231697][T20593] ? hook_file_ioctl_common+0x144/0x410 [ 1470.231729][T20593] ? __fget_files+0x20e/0x3c0 [ 1470.231758][T20593] security_file_ioctl+0x9b/0x240 [ 1470.231782][T20593] __x64_sys_ioctl+0xb7/0x210 [ 1470.231805][T20593] do_syscall_64+0xcd/0xf80 [ 1470.231830][T20593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.231861][T20593] RIP: 0033:0x7f9352b8f749 [ 1470.231877][T20593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1470.231894][T20593] RSP: 002b:00007f93539e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.231912][T20593] RAX: ffffffffffffffda RBX: 00007f9352de5fa0 RCX: 00007f9352b8f749 [ 1470.231925][T20593] RDX: 0000200000000480 RSI: 000000004020565a RDI: 0000000000000003 [ 1470.231938][T20593] RBP: 00007f93539e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.231949][T20593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.231961][T20593] R13: 00007f9352de6038 R14: 00007f9352de5fa0 R15: 00007ffee40071d8 [ 1470.231990][T20593] [ 1470.232020][T20593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1470.473367][T20595] ipt_REJECT: ECHOREPLY no longer supported. [ 1470.590037][T20600] random: crng reseeded on system resumption [ 1471.060853][T20616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1471.708793][T20609] Process accounting resumed [ 1473.186965][T20627] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1473.197978][T20627] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1473.208023][T20627] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1474.818431][T20632] ipt_REJECT: ECHOREPLY no longer supported. [ 1475.212003][T20642] random: crng reseeded on system resumption [ 1475.310234][T20646] fuse: Bad value for 'fd' [ 1475.475553][T18289] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1475.854480][T18289] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1475.936348][T18289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.216742][T18289] usb 3-1: config 0 descriptor?? [ 1476.267801][T18289] cp210x 3-1:0.0: cp210x converter detected [ 1476.597597][T20658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1476.662477][ T6164] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1476.693780][T18289] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1476.837704][ T6164] usb 1-1: Using ep0 maxpacket: 32 [ 1476.845858][ T6164] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.858572][ T6164] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1476.872388][ T6164] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1476.879723][ T6164] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1476.889394][ T6164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.903684][ T6164] usb 1-1: config 0 descriptor?? [ 1476.919619][T20666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1476.924089][T18289] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1476.947424][ T6164] usbhid 1-1:0.0: can't add hid device: -22 [ 1476.956633][ T6164] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1477.376282][T20659] Process accounting resumed [ 1477.413866][T18043] usb 3-1: USB disconnect, device number 64 [ 1477.533537][T18043] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1477.568809][T18043] cp210x 3-1:0.0: device disconnected [ 1479.668966][T18289] usb 1-1: USB disconnect, device number 60 [ 1480.724197][T20691] ubi: mtd0 is already attached to ubi31 [ 1480.995259][T20694] rdma_op ffff88803754a9f0 conn xmit_rdma 0000000000000000 [ 1483.044095][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1483.124638][ T6164] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1483.163692][T20715] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1483.170231][T20715] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1483.204527][T20715] vhci_hcd vhci_hcd.0: Device attached [ 1483.578223][T18043] usb 40-1: SetAddress Request (6) to port 0 [ 1483.668034][ T6164] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1483.688334][ T6164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.709183][T18043] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1483.714135][ T6164] usb 3-1: Product: syz [ 1483.721512][ T6164] usb 3-1: Manufacturer: syz [ 1483.751440][ T6164] usb 3-1: SerialNumber: syz [ 1483.925929][ T6164] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1483.957536][T20716] vhci_hcd: connection reset by peer [ 1483.974221][T19374] vhci_hcd vhci_hcd.3: stop threads [ 1483.979486][T19374] vhci_hcd vhci_hcd.3: release socket [ 1483.994030][ T6164] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1484.012727][T19374] vhci_hcd vhci_hcd.3: disconnect device [ 1484.034335][ T6164] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1484.054290][T18289] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1484.067239][ T6164] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1484.209859][ T6164] usb 3-1: USB disconnect, device number 65 [ 1484.234045][T18289] usb 6-1: Using ep0 maxpacket: 8 [ 1485.196460][T18289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1485.214235][T18289] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1485.234460][T18289] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1486.751792][T18289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.791966][T18289] usb 6-1: config 0 descriptor?? [ 1486.954182][T18289] usb 6-1: can't set config #0, error -71 [ 1486.962307][T18289] usb 6-1: USB disconnect, device number 8 [ 1487.145796][T20738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3839'. [ 1487.289388][T20740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1489.632239][T18043] usb 40-1: device descriptor read/8, error -110 [ 1490.082931][T20760] random: crng reseeded on system resumption [ 1490.122124][T18043] usb usb40-port1: attempt power cycle [ 1490.430881][T17694] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1490.650753][T17694] usb 3-1: device descriptor read/64, error -71 [ 1490.741373][T18043] usb usb40-port1: unable to enumerate USB device [ 1490.920661][T17694] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1491.060617][T17694] usb 3-1: device descriptor read/64, error -71 [ 1491.175799][T17694] usb usb3-port1: attempt power cycle [ 1491.469859][T20765] binder: 20762:20765 ioctl c0306201 0 returned -14 [ 1491.487298][T20765] binder: 20762:20765 ioctl c0306201 200000000140 returned -11 [ 1491.590695][T17694] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1492.610225][T17694] usb 3-1: device descriptor read/8, error -71 [ 1492.879631][T17694] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1493.199660][T20772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1497.552297][T20785] ipt_REJECT: ECHOREPLY no longer supported. [ 1497.872852][T17694] usb 3-1: device descriptor read/8, error -71 [ 1498.026377][T17694] usb usb3-port1: unable to enumerate USB device [ 1498.047037][T18905] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1499.170727][T18905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.206418][T18905] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1499.227056][T18905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.272742][T18905] usb 2-1: config 0 descriptor?? [ 1499.654233][T20800] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1499.660751][T20800] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1499.758714][T20806] xt_cluster: node mask cannot exceed total number of nodes [ 1500.910697][T18905] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 1500.923634][T18905] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001D/input/input83 [ 1501.065944][T18905] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1501.085755][T20800] vhci_hcd vhci_hcd.0: Device attached [ 1501.098951][T18905] usb 2-1: USB disconnect, device number 73 [ 1501.352450][T20801] vhci_hcd: connection closed [ 1501.353166][ T1107] vhci_hcd vhci_hcd.2: stop threads [ 1501.369318][ T6164] usb 38-1: SetAddress Request (6) to port 0 [ 1501.421186][ T6164] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1501.485347][ T1107] vhci_hcd vhci_hcd.2: release socket [ 1501.535630][ T1107] vhci_hcd vhci_hcd.2: disconnect device [ 1502.021857][ T30] audit: type=1400 audit(1767082528.947:1061): avc: denied { write } for pid=20815 comm="syz.3.3862" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1503.947675][T20833] ipt_REJECT: ECHOREPLY no longer supported. [ 1504.226094][T20839] sp0: Synchronizing with TNC [ 1506.657072][ T6164] usb 38-1: device descriptor read/8, error -110 [ 1507.266176][ T30] audit: type=1400 audit(1767082532.789:1062): avc: denied { read } for pid=20843 comm="syz.3.3869" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1507.473281][ T6164] usb usb38-port1: attempt power cycle [ 1507.480786][T20841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1507.553700][T20851] lo speed is unknown, defaulting to 1000 [ 1507.672903][T20836] [U] è` [ 1507.678279][ T30] audit: type=1400 audit(1767082532.789:1063): avc: denied { open } for pid=20843 comm="syz.3.3869" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1507.740757][T17694] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1507.806675][ T30] audit: type=1400 audit(1767082532.799:1064): avc: denied { ioctl } for pid=20843 comm="syz.3.3869" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1507.990426][T19376] Bluetooth: hci1: Invalid handle: 0x74c9 > 0x0eff [ 1508.073602][ T6164] usb usb38-port1: unable to enumerate USB device [ 1508.678470][T20869] netlink: 'syz.1.3871': attribute type 10 has an invalid length. [ 1508.686546][T20869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3871'. [ 1510.325342][T20874] Process accounting resumed [ 1511.457853][T20896] rdma_op ffff88804bc211f0 conn xmit_rdma 0000000000000000 [ 1511.760210][T20902] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1511.766758][T20902] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1511.810432][T20902] vhci_hcd vhci_hcd.0: Device attached [ 1511.839505][T20901] openvswitch: netlink: Message has 8 unknown bytes. [ 1512.010285][ T6164] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1512.080041][T18289] usb 40-1: SetAddress Request (10) to port 0 [ 1512.086711][T18289] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1512.149944][T17694] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1512.199543][ T6164] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1512.218316][ T6164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.239142][ T6164] usb 3-1: Product: syz [ 1512.247638][ T6164] usb 3-1: Manufacturer: syz [ 1512.359868][T17694] usb 1-1: Using ep0 maxpacket: 8 [ 1512.365075][T20903] vhci_hcd: connection reset by peer [ 1512.372850][T19374] vhci_hcd vhci_hcd.3: stop threads [ 1512.374277][T17694] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1512.388795][T17694] usb 1-1: config 0 has no interface number 0 [ 1512.388850][ T6164] usb 3-1: SerialNumber: syz [ 1512.400131][T19374] vhci_hcd vhci_hcd.3: release socket [ 1512.406370][T19374] vhci_hcd vhci_hcd.3: disconnect device [ 1513.367105][T17694] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1513.378588][T17694] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1513.641307][T17694] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1513.652704][T17694] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 59256, setting to 1024 [ 1513.679189][T17694] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1513.859383][T17694] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1513.879196][T17694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.938596][T20915] FAULT_INJECTION: forcing a failure. [ 1513.938596][T20915] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.951519][T20915] CPU: 0 UID: 0 PID: 20915 Comm: syz.5.3884 Tainted: G L syzkaller #0 PREEMPT(full) [ 1513.951550][T20915] Tainted: [L]=SOFTLOCKUP [ 1513.951557][T20915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1513.951568][T20915] Call Trace: [ 1513.951576][T20915] [ 1513.951583][T20915] dump_stack_lvl+0x16c/0x1f0 [ 1513.951612][T20915] should_fail_ex+0x512/0x640 [ 1513.951648][T20915] should_failslab+0xc2/0x120 [ 1513.951672][T20915] __kmalloc_noprof+0xeb/0x910 [ 1513.951700][T20915] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1513.951731][T20915] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1513.951755][T20915] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1513.951782][T20915] ? tomoyo_profile+0x47/0x60 [ 1513.951811][T20915] tomoyo_path_number_perm+0x245/0x580 [ 1513.951831][T20915] ? tomoyo_path_number_perm+0x237/0x580 [ 1513.951855][T20915] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1513.951907][T20915] ? find_held_lock+0x2b/0x80 [ 1513.951933][T20915] ? hook_file_ioctl_common+0x144/0x410 [ 1513.951965][T20915] ? __fget_files+0x20e/0x3c0 [ 1513.951995][T20915] security_file_ioctl+0x9b/0x240 [ 1513.952020][T20915] __x64_sys_ioctl+0xb7/0x210 [ 1513.952044][T20915] do_syscall_64+0xcd/0xf80 [ 1513.952070][T20915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.952089][T20915] RIP: 0033:0x7fc37318f749 [ 1513.952105][T20915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1513.952123][T20915] RSP: 002b:00007fc37403f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1513.952141][T20915] RAX: ffffffffffffffda RBX: 00007fc3733e6180 RCX: 00007fc37318f749 [ 1513.952154][T20915] RDX: 00002000000000c0 RSI: 00000000000007a5 RDI: 0000000000000005 [ 1513.952166][T20915] RBP: 00007fc37403f090 R08: 0000000000000000 R09: 0000000000000000 [ 1513.952178][T20915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1513.952189][T20915] R13: 00007fc3733e6218 R14: 00007fc3733e6180 R15: 00007ffe9fcc8428 [ 1513.952219][T20915] [ 1513.952260][T20915] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1514.852214][T17694] usb 1-1: config 0 descriptor?? [ 1515.208528][T17694] usb 1-1: can't set config #0, error -71 [ 1515.248804][T17694] usb 1-1: USB disconnect, device number 61 [ 1515.487461][T18136] Process accounting resumed [ 1515.569519][T20918] Process accounting resumed [ 1515.634741][ T6164] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1515.677019][ T6164] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1515.708302][ T6164] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1515.859253][ T6164] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1515.881051][ T6164] usb 3-1: USB disconnect, device number 70 [ 1516.226833][T20937] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1517.517379][T18289] usb 40-1: device descriptor read/8, error -110 [ 1519.187491][T18289] usb usb40-port1: attempt power cycle [ 1520.631238][T18289] usb usb40-port1: unable to enumerate USB device [ 1520.925827][T20964] netlink: 'syz.5.3897': attribute type 10 has an invalid length. [ 1520.933709][T20964] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3897'. [ 1520.987460][T20966] netlink: 'syz.0.3899': attribute type 49 has an invalid length. [ 1520.998688][T20966] syzkaller0: entered promiscuous mode [ 1521.004372][T20966] syzkaller0: entered allmulticast mode [ 1522.557659][T20982] sp0: Synchronizing with TNC [ 1522.861790][T20975] [U] è` [ 1526.221941][T21004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3910'. [ 1526.272969][T18289] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1526.323644][T21004] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21004 comm=syz.3.3910 [ 1526.452954][T18289] usb 2-1: Using ep0 maxpacket: 16 [ 1526.462895][T18289] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1526.482335][T18289] usb 2-1: config 1 has no interface number 1 [ 1526.512829][T18289] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1526.554543][T18289] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1526.563772][T18289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.571781][T18289] usb 2-1: Product: syz [ 1526.603132][T18289] usb 2-1: Manufacturer: syz [ 1526.614146][T18289] usb 2-1: SerialNumber: syz [ 1526.861459][T18289] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1527.847279][T18289] usb 2-1: USB disconnect, device number 74 [ 1528.464260][T18905] Process accounting resumed [ 1528.525539][T21034] Process accounting resumed [ 1528.877816][T21050] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1528.884356][T21050] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1529.171985][T21050] vhci_hcd vhci_hcd.0: Device attached [ 1529.383138][T21052] vhci_hcd: connection closed [ 1529.399302][ T6009] vhci_hcd vhci_hcd.3: stop threads [ 1529.426071][ T6009] vhci_hcd vhci_hcd.3: release socket [ 1529.460096][ T6009] vhci_hcd vhci_hcd.3: disconnect device [ 1533.632503][T21081] hpfs: hpfs_map_sector(): read error [ 1534.047233][T21092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3932'. [ 1534.063205][T21092] ipt_REJECT: ECHOREPLY no longer supported. [ 1534.692027][ T30] audit: type=1804 audit(1767082561.613:1065): pid=21088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.3930" name="bus" dev="ramfs" ino=74520 res=1 errno=0 [ 1537.429229][T21128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3940'. [ 1539.157281][T21143] random: crng reseeded on system resumption [ 1540.147090][T21146] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3946'. [ 1540.156679][ T30] audit: type=1400 audit(1767082567.096:1066): avc: denied { write } for pid=21137 comm="syz.1.3946" path="socket:[74676]" dev="sockfs" ino=74676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1540.181076][T18327] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1540.396608][T18327] usb 1-1: Using ep0 maxpacket: 8 [ 1540.403008][T18327] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1540.411506][T18327] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1540.426975][T18327] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1540.458628][T18327] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1540.475768][T18327] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1540.488757][T18327] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1540.497777][T18327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.639599][T21161] sp0: Synchronizing with TNC [ 1542.523525][T19097] usb 1-1: USB disconnect, device number 62 [ 1542.530181][T21160] [U] è` [ 1542.964692][ T5891] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1543.135851][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1543.168421][ T5891] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1543.188573][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.217907][ T5891] usb 4-1: config 0 descriptor?? [ 1543.575707][T21174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1543.590231][T21174] IPVS: set_ctl: invalid protocol: 135 172.30.0.1:21 [ 1543.644897][T21174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1543.702795][ T5891] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 1543.851164][ T5891] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001E/input/input84 [ 1543.857881][T21174] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1544.032138][ T5891] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1544.057739][ T5891] usb 4-1: USB disconnect, device number 75 [ 1544.363921][T17694] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1544.408775][T21187] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1544.427101][T21187] bond0: (slave lo): Enslaving as a backup interface with an up link [ 1544.436531][T21187] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1544.457319][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1544.468171][T21187] bridge_slave_1: default FDB implementation only supports local addresses [ 1544.527304][T17694] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.543262][T17694] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1544.552361][T17694] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1544.561587][T17694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.572612][T17694] usb 6-1: config 0 descriptor?? [ 1544.764472][ T30] audit: type=1400 audit(1767082571.699:1067): avc: denied { write } for pid=21193 comm="syz.3.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1544.791793][T21179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=21179 comm=syz.5.3957 [ 1544.813938][T17694] usb 6-1: USB disconnect, device number 9 [ 1544.971463][T21203] netlink: 'syz.1.3961': attribute type 10 has an invalid length. [ 1544.979320][T21203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3961'. [ 1545.886447][T21202] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1547.340682][T21218] netlink: 'syz.2.3964': attribute type 3 has an invalid length. [ 1548.362495][T18327] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1548.552331][T18327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.582237][T18327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.657145][T18327] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1548.786739][T18327] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1548.853425][T18327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.063216][T18327] usb 2-1: config 0 descriptor?? [ 1549.741454][T18609] Process accounting resumed [ 1549.774149][T21233] Process accounting resumed [ 1549.885017][T18327] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xe [ 1549.902942][T18327] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1549.923422][T18327] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1550.011037][T18905] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1550.163293][T18905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.185993][T18905] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1550.215414][T18905] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1550.240955][T18905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.272572][T18905] usb 1-1: config 0 descriptor?? [ 1550.403846][T18327] usb 2-1: USB disconnect, device number 75 [ 1550.492245][T21239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=21239 comm=syz.0.3972 [ 1550.533300][T18609] usb 1-1: USB disconnect, device number 63 [ 1552.014609][T19376] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 1552.021365][T21265] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1552.142032][T21267] xt_connbytes: Forcing CT accounting to be enabled [ 1552.176448][T21267] Cannot find del_set index 1 as target [ 1552.379916][T21274] random: crng reseeded on system resumption [ 1552.729734][T18609] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1553.039993][T18609] usb 3-1: device descriptor read/64, error -71 [ 1553.290332][T18609] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1553.759223][T18609] usb 3-1: device descriptor read/64, error -71 [ 1553.904022][T18609] usb usb3-port1: attempt power cycle [ 1554.692896][T18609] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1554.729470][T18609] usb 3-1: device descriptor read/8, error -71 [ 1555.208646][T18609] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1555.521859][ T30] audit: type=1400 audit(1767082582.454:1068): avc: denied { connect } for pid=21285 comm="syz.1.3986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1558.793400][T21303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3990'. [ 1559.977656][T18609] usb 3-1: device descriptor read/8, error -71 [ 1560.176169][T21312] sp0: Synchronizing with TNC [ 1560.181216][T18609] usb usb3-port1: unable to enumerate USB device [ 1561.474345][T21311] [U] è` [ 1562.298066][T21330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1562.876084][T21339] overlayfs: failed to resolve './file1/file0': -20 [ 1564.904618][T21354] netlink: 'syz.3.4004': attribute type 2 has an invalid length. [ 1566.194284][T21362] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4005'. [ 1566.453187][T19097] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1566.633919][T21368] sp0: Synchronizing with TNC [ 1566.737256][T19097] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.754030][T19097] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1566.785482][T19097] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1566.809520][T19097] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1566.858807][T19097] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1566.869531][T19097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.878949][T21375] random: crng reseeded on system resumption [ 1566.902856][T19097] usb 2-1: Product: syz [ 1566.907051][T19097] usb 2-1: Manufacturer: syz [ 1566.911629][T19097] usb 2-1: SerialNumber: syz [ 1567.192529][T18136] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1567.332431][T18136] usb 6-1: device descriptor read/64, error -71 [ 1567.421213][ T30] audit: type=1400 audit(1767082594.370:1069): avc: denied { setopt } for pid=21376 comm="syz.0.4010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1567.532975][T21367] [U] è` [ 1567.572362][T18136] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1567.672379][T18905] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1567.712430][T18136] usb 6-1: device descriptor read/64, error -71 [ 1567.847072][T18136] usb usb6-port1: attempt power cycle [ 1567.890801][T18905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1567.911084][T18905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1567.959676][T18905] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 1567.976819][T18905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.988516][T18905] usb 1-1: Product: syz [ 1568.002144][T18905] usb 1-1: Manufacturer: syz [ 1568.002187][T18905] usb 1-1: SerialNumber: syz [ 1568.002872][T21362] batman_adv: batadv0: Adding interface: gretap1 [ 1568.002886][T21362] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1568.002919][T21362] batman_adv: batadv0: Interface activated: gretap1 [ 1568.058630][T18905] usb 1-1: config 0 descriptor?? [ 1568.079544][T21386] lo speed is unknown, defaulting to 1000 [ 1568.201971][T18136] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1568.222938][T18136] usb 6-1: device descriptor read/8, error -71 [ 1568.310788][T21377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.318278][T21377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.328671][T18905] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1568.354724][T18905] usb 1-1: USB disconnect, device number 64 [ 1568.461814][T18136] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1568.500992][T18136] usb 6-1: device descriptor read/8, error -71 [ 1568.752851][T18136] usb usb6-port1: unable to enumerate USB device [ 1570.365664][T19097] cdc_ncm 2-1:1.0: bind() failure [ 1570.449818][T19097] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1570.505386][T19097] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1570.565781][T19097] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1570.637569][T19097] usb 2-1: USB disconnect, device number 76 [ 1572.403900][T21416] FAULT_INJECTION: forcing a failure. [ 1572.403900][T21416] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.417334][T21416] CPU: 0 UID: 0 PID: 21416 Comm: syz.0.4017 Tainted: G L syzkaller #0 PREEMPT(full) [ 1572.417370][T21416] Tainted: [L]=SOFTLOCKUP [ 1572.417377][T21416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1572.417389][T21416] Call Trace: [ 1572.417396][T21416] [ 1572.417403][T21416] dump_stack_lvl+0x16c/0x1f0 [ 1572.417432][T21416] should_fail_ex+0x512/0x640 [ 1572.417457][T21416] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1572.417487][T21416] should_failslab+0xc2/0x120 [ 1572.417506][T21416] __kmalloc_cache_noprof+0x80/0x800 [ 1572.417533][T21416] ? alloc_pipe_info+0x10e/0x590 [ 1572.417557][T21416] ? avc_has_perm+0x144/0x1f0 [ 1572.417585][T21416] ? alloc_pipe_info+0x10e/0x590 [ 1572.417608][T21416] alloc_pipe_info+0x10e/0x590 [ 1572.417634][T21416] splice_direct_to_actor+0x77d/0xa30 [ 1572.417661][T21416] ? __pfx_direct_splice_actor+0x10/0x10 [ 1572.417685][T21416] ? inode_has_perm+0x16d/0x1d0 [ 1572.417708][T21416] ? file_has_perm+0x27b/0x350 [ 1572.417725][T21416] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1572.417749][T21416] ? __pfx_file_has_perm+0x10/0x10 [ 1572.417773][T21416] do_splice_direct+0x174/0x240 [ 1572.417797][T21416] ? __pfx_do_splice_direct+0x10/0x10 [ 1572.417822][T21416] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1572.417847][T21416] ? bpf_lsm_file_permission+0x9/0x10 [ 1572.417866][T21416] ? security_file_permission+0x71/0x210 [ 1572.417890][T21416] ? rw_verify_area+0xcf/0x6c0 [ 1572.417912][T21416] do_sendfile+0xb06/0xe50 [ 1572.417938][T21416] ? __pfx_do_sendfile+0x10/0x10 [ 1572.417960][T21416] ? sched_clock+0x38/0x60 [ 1572.417977][T21416] ? sched_clock_cpu+0x6c/0x530 [ 1572.418000][T21416] __x64_sys_sendfile64+0x1d8/0x220 [ 1572.418026][T21416] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1572.418059][T21416] do_syscall_64+0xcd/0xf80 [ 1572.418083][T21416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.418102][T21416] RIP: 0033:0x7efeb338f749 [ 1572.418118][T21416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.418135][T21416] RSP: 002b:00007efeb42aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1572.418153][T21416] RAX: ffffffffffffffda RBX: 00007efeb35e6180 RCX: 00007efeb338f749 [ 1572.418166][T21416] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 1572.418177][T21416] RBP: 00007efeb42aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.418188][T21416] R10: 00000000578410eb R11: 0000000000000246 R12: 0000000000000001 [ 1572.418200][T21416] R13: 00007efeb35e6218 R14: 00007efeb35e6180 R15: 00007ffd2e34eec8 [ 1572.418226][T21416] [ 1573.124839][T21419] sp0: Synchronizing with TNC [ 1573.741252][T21434] random: crng reseeded on system resumption [ 1573.879465][T18136] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1574.079467][T18327] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1574.333398][T18136] usb 4-1: Using ep0 maxpacket: 32 [ 1574.371233][T18136] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.384640][T21417] [U] è` [ 1574.387919][T18136] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.409269][T18327] usb 6-1: device descriptor read/64, error -71 [ 1574.521021][T18136] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.564240][T18136] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1574.598931][T18136] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1574.606879][T18136] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1574.622907][T18136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.635982][T18136] usb 4-1: config 0 descriptor?? [ 1574.648714][T18327] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1574.657332][T21448] netlink: 'syz.1.4032': attribute type 1 has an invalid length. [ 1574.808717][T18327] usb 6-1: device descriptor read/64, error -71 [ 1575.109695][T18327] usb usb6-port1: attempt power cycle [ 1575.127224][T21448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1575.278013][T21453] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1575.311511][T21448] netlink: 'syz.1.4032': attribute type 10 has an invalid length. [ 1575.347724][T21454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1575.363876][T21448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4032'. [ 1575.428656][T21448] dummy0: entered promiscuous mode [ 1575.472351][T18327] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1575.489781][T21458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4033'. [ 1575.519976][T18327] usb 6-1: device descriptor read/8, error -71 [ 1575.778203][T18327] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1575.983043][T18327] usb 6-1: device descriptor read/8, error -71 [ 1577.057729][T18327] usb usb6-port1: unable to enumerate USB device [ 1577.714806][T18136] usbhid 4-1:0.0: can't add hid device: -71 [ 1577.735425][T18136] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1577.775552][T18136] usb 4-1: USB disconnect, device number 76 [ 1577.909612][T21483] rdma_op ffff8880569241f0 conn xmit_rdma 0000000000000000 [ 1579.106669][T21489] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1579.809184][ T5891] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1579.830153][T21493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4042'. [ 1580.039863][ T5891] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1580.052531][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.060901][ T5891] usb 4-1: Product: syz [ 1580.065511][ T5891] usb 4-1: Manufacturer: syz [ 1580.073090][ T5891] usb 4-1: SerialNumber: syz [ 1580.285991][T18327] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1580.327894][ T5891] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1580.347899][ T5891] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1580.378280][ T5891] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1580.397007][ T5891] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1580.431097][ T5891] usb 4-1: USB disconnect, device number 77 [ 1580.455829][T18327] usb 1-1: Using ep0 maxpacket: 16 [ 1580.465798][T18327] usb 1-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 1580.482215][T18327] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 33, using maximum allowed: 30 [ 1580.536071][T18327] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 1580.888812][T18327] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1580.925843][T18327] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 1580.935023][T18327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.008010][T18327] usb 1-1: config 0 descriptor?? [ 1581.220152][T21493] overlayfs: failed lookup in lower (newroot/196, name='bus', err=-40): overlapping layers [ 1581.592024][T18327] usb 1-1: string descriptor 0 read error: -71 [ 1581.626921][T18327] usb 1-1: USB disconnect, device number 65 [ 1581.710884][T21523] rdma_op ffff88803407f9f0 conn xmit_rdma 0000000000000000 [ 1584.427862][T21538] /dev/nullb0: Can't open blockdev [ 1584.446452][T18327] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1586.618717][T21559] netlink: 'syz.0.4059': attribute type 10 has an invalid length. [ 1586.626724][T21559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4059'. [ 1588.028196][T18327] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1589.244104][T18327] usb 3-1: Using ep0 maxpacket: 16 [ 1589.300809][T18327] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1589.318371][T18327] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1589.331384][T18327] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1589.345005][T18327] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1589.354484][T18327] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1589.369626][T18327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.379938][T18327] usb 3-1: Product: syz [ 1589.391417][T18327] usb 3-1: Manufacturer: syz [ 1589.396187][T18327] usb 3-1: SerialNumber: syz [ 1589.642275][T18327] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1589.725540][T21588] random: crng reseeded on system resumption [ 1590.057547][T21578] Process accounting resumed [ 1590.989566][T21594] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1591.239860][T19097] usb 3-1: USB disconnect, device number 75 [ 1591.311337][T19097] usblp0: removed [ 1591.611709][T21611] random: crng reseeded on system resumption [ 1600.378219][T21699] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1600.378399][T19097] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1600.566458][ T30] audit: type=1400 audit(1767082627.546:1070): avc: denied { create } for pid=21698 comm="syz.5.4098" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1600.568445][ T30] audit: type=1400 audit(1767082627.546:1071): avc: denied { associate } for pid=21698 comm="syz.5.4098" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 1600.667920][ T30] audit: type=1400 audit(1767082627.596:1072): avc: denied { mounton } for pid=21698 comm="syz.5.4098" path="/124/file0" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1600.697427][T19097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.764207][ T30] audit: type=1400 audit(1767082627.596:1073): avc: denied { setattr } for pid=21698 comm="syz.5.4098" name="work" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1600.875147][T19097] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1601.014924][ T30] audit: type=1400 audit(1767082627.596:1074): avc: denied { write } for pid=21698 comm="syz.5.4098" name="work" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1601.015714][ T30] audit: type=1400 audit(1767082627.596:1075): avc: denied { write open } for pid=21698 comm="syz.5.4098" path=2F202864656C6574656429 dev="tmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1601.110079][T19097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.223302][ T30] audit: type=1400 audit(1767082627.596:1076): avc: denied { write } for pid=21698 comm="syz.5.4098" name="work" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1601.223672][ T30] audit: type=1400 audit(1767082627.596:1077): avc: denied { add_name } for pid=21698 comm="syz.5.4098" name="#50" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1601.320396][T19097] usb 2-1: config 0 descriptor?? [ 1601.515271][ T30] audit: type=1400 audit(1767082627.596:1078): avc: denied { create } for pid=21698 comm="syz.5.4098" name="#50" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 1601.515527][ T30] audit: type=1400 audit(1767082627.596:1079): avc: denied { write } for pid=21698 comm="syz.5.4098" name="work" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1601.675152][T18043] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1602.544739][T18043] usb 3-1: Using ep0 maxpacket: 16 [ 1602.552344][T18043] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.573592][T18043] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1602.590507][T18043] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 1602.614682][T18043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.644967][T18043] usb 3-1: config 0 descriptor?? [ 1602.686016][T19097] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 1602.694669][T18136] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1602.706551][T19097] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0020/input/input85 [ 1602.826697][T19097] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1602.846307][T18136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.865291][T18136] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1602.905736][T18136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.969209][T18136] usb 6-1: config 0 descriptor?? [ 1603.063550][T18043] input: HID 05ac:8243 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8243.0021/input/input86 [ 1603.150594][T18043] appleir 0003:05AC:8243.0021: input,hiddev0,hidraw1: USB HID v0.05 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1603.185113][T17694] usb 2-1: USB disconnect, device number 77 [ 1603.449750][T18136] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 1604.420928][T18136] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0022/input/input87 [ 1604.978187][T18136] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1605.049799][T18136] usb 6-1: USB disconnect, device number 18 [ 1605.213903][ T5864] kworker/0:3 (5864) used greatest stack depth: 17752 bytes left [ 1605.383372][T21728] lo speed is unknown, defaulting to 1000 [ 1605.857989][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.232846][T19097] usb 3-1: USB disconnect, device number 76 [ 1607.622570][T18043] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1608.397352][T18136] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1608.721655][T18043] usb 4-1: device descriptor read/64, error -71 [ 1609.118000][T18043] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1609.261379][T18043] usb 4-1: device descriptor read/64, error -71 [ 1609.607939][T18043] usb usb4-port1: attempt power cycle [ 1610.454389][T18043] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1610.591355][T18043] usb 4-1: device descriptor read/8, error -71 [ 1617.930555][T21801] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1617.939954][T21801] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1617.949790][T21801] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1618.261602][T21805] rdma_op ffff888022b849f0 conn xmit_rdma 0000000000000000 [ 1619.296446][T18327] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1619.459345][T18327] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1619.487177][T18327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.515474][T18327] usb 6-1: Product: syz [ 1619.525676][T18327] usb 6-1: Manufacturer: syz [ 1619.536249][T18327] usb 6-1: SerialNumber: syz [ 1619.784098][T18327] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1619.816244][T18327] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1619.876121][T18327] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1619.898475][T18327] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1619.973526][T18327] usb 6-1: USB disconnect, device number 19 [ 1621.028129][T21826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1621.041443][T21826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1621.050478][T21826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1621.065147][T21826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1621.074134][T21826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1621.186939][T21821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1621.396784][T21835] lo speed is unknown, defaulting to 1000 [ 1621.889713][T21822] lo speed is unknown, defaulting to 1000 [ 1622.735790][T16447] smc: removing ib device syz1 [ 1622.815788][T18327] syz1: Port: 1 Link DOWN [ 1623.134470][T21826] Bluetooth: hci0: command tx timeout [ 1624.109453][T21822] chnl_net:caif_netlink_parms(): no params data found [ 1624.292439][T21855] random: crng reseeded on system resumption [ 1624.683768][T18136] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1624.823839][T18136] usb 1-1: device descriptor read/64, error -71 [ 1625.073536][T18136] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1625.160209][T21822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.212337][T21826] Bluetooth: hci0: command tx timeout [ 1625.233550][T21822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.240783][T21822] bridge_slave_0: entered allmulticast mode [ 1625.246747][T18136] usb 1-1: device descriptor read/64, error -71 [ 1625.316552][T21822] bridge_slave_0: entered promiscuous mode [ 1625.354936][T18136] usb usb1-port1: attempt power cycle [ 1625.385031][T21822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.393398][T21822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.400606][T21822] bridge_slave_1: entered allmulticast mode [ 1625.464849][T21822] bridge_slave_1: entered promiscuous mode [ 1625.723273][T18136] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1625.775307][T18136] usb 1-1: device descriptor read/8, error -71 [ 1625.789571][T21822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1625.851977][T21822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.996282][T21822] team0: Port device team_slave_0 added [ 1626.023050][T18136] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1626.086577][T21822] team0: Port device team_slave_1 added [ 1626.135488][T18136] usb 1-1: device descriptor read/8, error -71 [ 1626.196816][T16447] ------------[ cut here ]------------ [ 1626.202596][T16447] GID entry ref leak for dev syz1 index 2 ref=4 [ 1626.209252][T16447] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#1: kworker/u8:4/16447 [ 1626.221709][T16447] Modules linked in: [ 1626.226172][T16447] CPU: 1 UID: 0 PID: 16447 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1626.237506][T16447] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1626.241804][T16447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1626.252391][T16447] Workqueue: ib-unreg-wq ib_unregister_work [ 1626.258972][T16447] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 1626.265260][T16447] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 3a 7e 4d f9 48 8d 3d a3 c4 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 20 7e 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 1626.273518][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1626.273531][ T30] audit: type=1400 audit(1767082653.259:1088): avc: denied { write } for pid=5800 comm="syz-executor" path="pipe:[4538]" dev="pipefs" ino=4538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1626.285257][T16447] RSP: 0018:ffffc9000414fac8 EFLAGS: 00010293 [ 1626.320555][T16447] RAX: 0000000000000000 RBX: ffff88807612ee00 RCX: 0000000000000004 [ 1626.330724][T16447] RDX: 0000000000000002 RSI: ffff888033b50420 RDI: ffffffff90952f30 [ 1626.339300][T16447] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffed10051b2540 [ 1626.347505][T16447] R10: ffff888028d92a03 R11: 0000000000002ba1 R12: ffffed100ec25ddb [ 1626.355678][T16447] R13: ffff88805576c000 R14: 0000000000000002 R15: dffffc0000000000 [ 1626.363827][T16447] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1626.373094][T16447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1626.379681][T16447] CR2: 0000200000404030 CR3: 000000007570d000 CR4: 00000000003526f0 [ 1626.387867][T16447] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1626.396356][T16447] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1626.405051][T16447] Call Trace: [ 1626.408325][T16447] [ 1626.411237][T16447] ib_device_release+0xef/0x1e0 [ 1626.416315][T16447] ? __pfx_ib_device_release+0x10/0x10 [ 1626.421766][T16447] device_release+0xa4/0x240 [ 1626.426577][T16447] kobject_put+0x1ef/0x6f0 [ 1626.430988][T16447] put_device+0x1f/0x30 [ 1626.435365][T16447] process_one_work+0x9ba/0x1b20 [ 1626.440293][T16447] ? __pfx_process_one_work+0x10/0x10 [ 1626.445881][T16447] ? assign_work+0x1a0/0x250 [ 1626.450461][T16447] worker_thread+0x6c8/0xf10 [ 1626.455257][T16447] ? __kthread_parkme+0x19e/0x250 [ 1626.460269][T16447] ? __pfx_worker_thread+0x10/0x10 [ 1626.465578][T16447] kthread+0x3c5/0x780 [ 1626.469624][T16447] ? __pfx_kthread+0x10/0x10 [ 1626.474443][T16447] ? rcu_is_watching+0x12/0xc0 [ 1626.479205][T16447] ? __pfx_kthread+0x10/0x10 [ 1626.484017][T16447] ret_from_fork+0x983/0xb10 [ 1626.488587][T16447] ? __pfx_ret_from_fork+0x10/0x10 [ 1626.493891][T16447] ? __switch_to+0x7af/0x10d0 [ 1626.499032][T16447] ? __pfx_kthread+0x10/0x10 [ 1626.503986][T16447] ret_from_fork_asm+0x1a/0x30 [ 1626.508738][T16447] [ 1626.511754][T16447] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1626.519008][T16447] CPU: 1 UID: 0 PID: 16447 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1626.530084][T16447] Tainted: [L]=SOFTLOCKUP [ 1626.534378][T16447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1626.544402][T16447] Workqueue: ib-unreg-wq ib_unregister_work [ 1626.550276][T16447] Call Trace: [ 1626.553527][T16447] [ 1626.556429][T16447] dump_stack_lvl+0x3d/0x1f0 [ 1626.560994][T16447] vpanic+0x640/0x6f0 [ 1626.564952][T16447] ? gid_table_release_one+0x1ad/0x450 [ 1626.570385][T16447] panic+0xca/0xd0 [ 1626.574080][T16447] ? __pfx_panic+0x10/0x10 [ 1626.578472][T16447] ? check_panic_on_warn+0x1f/0xb0 [ 1626.583555][T16447] check_panic_on_warn+0xab/0xb0 [ 1626.588465][T16447] __warn+0x108/0x3c0 [ 1626.592419][T16447] __report_bug+0x2a0/0x520 [ 1626.596892][T16447] ? gid_table_release_one+0x1ad/0x450 [ 1626.602332][T16447] ? __pfx___report_bug+0x10/0x10 [ 1626.607342][T16447] report_bug_entry+0xe1/0x290 [ 1626.612078][T16447] ? gid_table_release_one+0x1b6/0x450 [ 1626.617509][T16447] handle_bug+0x18a/0x260 [ 1626.621829][T16447] exc_invalid_op+0x17/0x50 [ 1626.626305][T16447] asm_exc_invalid_op+0x1a/0x20 [ 1626.631129][T16447] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 1626.637175][T16447] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 3a 7e 4d f9 48 8d 3d a3 c4 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 20 7e 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 1626.656755][T16447] RSP: 0018:ffffc9000414fac8 EFLAGS: 00010293 [ 1626.662795][T16447] RAX: 0000000000000000 RBX: ffff88807612ee00 RCX: 0000000000000004 [ 1626.670743][T16447] RDX: 0000000000000002 RSI: ffff888033b50420 RDI: ffffffff90952f30 [ 1626.678683][T16447] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffed10051b2540 [ 1626.686623][T16447] R10: ffff888028d92a03 R11: 0000000000002ba1 R12: ffffed100ec25ddb [ 1626.694565][T16447] R13: ffff88805576c000 R14: 0000000000000002 R15: dffffc0000000000 [ 1626.702519][T16447] ? gid_table_release_one+0x1a6/0x450 [ 1626.707962][T16447] ib_device_release+0xef/0x1e0 [ 1626.712790][T16447] ? __pfx_ib_device_release+0x10/0x10 [ 1626.718224][T16447] device_release+0xa4/0x240 [ 1626.722790][T16447] kobject_put+0x1ef/0x6f0 [ 1626.727181][T16447] put_device+0x1f/0x30 [ 1626.731308][T16447] process_one_work+0x9ba/0x1b20 [ 1626.736228][T16447] ? __pfx_process_one_work+0x10/0x10 [ 1626.741576][T16447] ? assign_work+0x1a0/0x250 [ 1626.746139][T16447] worker_thread+0x6c8/0xf10 [ 1626.750706][T16447] ? __kthread_parkme+0x19e/0x250 [ 1626.755699][T16447] ? __pfx_worker_thread+0x10/0x10 [ 1626.760783][T16447] kthread+0x3c5/0x780 [ 1626.764825][T16447] ? __pfx_kthread+0x10/0x10 [ 1626.769389][T16447] ? rcu_is_watching+0x12/0xc0 [ 1626.774123][T16447] ? __pfx_kthread+0x10/0x10 [ 1626.778685][T16447] ret_from_fork+0x983/0xb10 [ 1626.783246][T16447] ? __pfx_ret_from_fork+0x10/0x10 [ 1626.788327][T16447] ? __switch_to+0x7af/0x10d0 [ 1626.792976][T16447] ? __pfx_kthread+0x10/0x10 [ 1626.797542][T16447] ret_from_fork_asm+0x1a/0x30 [ 1626.802290][T16447] [ 1626.805645][T16447] Kernel Offset: disabled [ 1626.809943][T16447] Rebooting in 86400 seconds..