last executing test programs: 13.436252367s ago: executing program 4 (id=3995): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000079, 0x8001) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffd, r2, &(0x7f00000003c0)="95", 0x1}]) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r3, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000080000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 12.589007724s ago: executing program 0 (id=3998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x88, 0x29, 0xec, 0x10, 0x93a, 0x260e, 0x1885, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0xb0, 0x8, "", [{{0x9, 0x4, 0x97, 0x6, 0x1, 0x10, 0x11, 0x2c, 0xd2, [], [{{0x9, 0x5, 0x85, 0x2, 0x400, 0x3, 0x5, 0xf5}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc01}}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c39000/0x2000)=nil, 0x4, 0x0, 0x0, 0x8000bff, 0x0, 0x0, 0x10, 0x6e}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x5, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x7c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x5c, 0x1, 0x0, 0x1, [@nested={0x58, 0x10, 0x0, 0x1, [@typed={0x54, 0x9, 0x0, 0x0, @str='\xff\x00k#\xfb/iy]\xf1\x9e\b\xb0\xc8f\xf1\x94@\xf9\xf6Mv\xe7\xcflZ6t\xa2T\x890x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000003c0)={0x9}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x17, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000680), 0x0, 0x0, 0x2d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xb, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010001000000000001000000180000000400000000000000010000000520ff0ffffeffff18340000020000000000000000000000950000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0100008500000006000000a718100001000000850000000900000018260000", @ANYRES32, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5f40d603, 0xbc, &(0x7f00000004c0)=""/188, 0x40e00, 0x30, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x8, 0x2}, 0x10, r6, 0xffffffffffffffff, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=[{0x5, 0x4, 0x6, 0xa}]}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1}, &(0x7f0000000500), 0x0}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x41e80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x100088}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r9, 0x40305829, &(0x7f0000000280)={0x1, 0x2, 0x5, 0x9, 0x1, 0x6}) 8.888847394s ago: executing program 2 (id=4006): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x80000, 0x0) ioctl$LOOP_SET_FD(r6, 0x7b9, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x4000) 8.362901292s ago: executing program 1 (id=4007): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = epoll_create(0x10002e78) (async) prlimit64(0x0, 0x2, &(0x7f0000000140)={0xfffffffffffffffb, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffff) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010000"], 0x0) (async) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0xc0045103, &(0x7f0000000040)) (async, rerun: 64) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_emit_ethernet(0xb4, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES16=r7, @ANYRES16=0x0, @ANYRES32=r3, @ANYRESHEX=r8, @ANYRES32=r4, @ANYRES16=r7, @ANYRES8=r8, @ANYRES16=r5], 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 8.168021096s ago: executing program 4 (id=4008): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x2002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) personality(0x8) uname(&(0x7f0000000000)=""/123) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x4ac, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x480, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PBURST={0x8, 0x7, 0x219d}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x80, 0x200, 0x8, 0x3}, {0x1, 0x3, 0x1b7d, 0xffff, 0x9, 0x6}, 0x1, 0x6, 0x1231}}, @TCA_TBF_RATE64={0xc, 0x4, 0x69a8cfbfc95a571}, @TCA_TBF_PRATE64={0xc, 0x5, 0xff7a464c1231c333}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x9, 0x9, 0x7, 0x5, 0x9, 0xd422, 0x0, 0xf, 0x4, 0x2, 0x4, 0x4, 0xfffff5b0, 0x2, 0x4, 0x6, 0x5, 0x9c, 0x4, 0xe, 0xdc5, 0x7, 0x200, 0x0, 0x6, 0xfffffe00, 0x4, 0x1ff, 0xfffffff8, 0x0, 0x8001, 0x5b0d, 0x1000, 0x10, 0x3, 0x51b, 0x9, 0x1, 0x7fff, 0xfffffffb, 0xffff8001, 0x2, 0x1, 0x2, 0x454, 0x7, 0x80, 0x62b, 0xf, 0x10000, 0x3, 0xcb67, 0x5, 0x6, 0x2, 0x8, 0x0, 0x1, 0x7db733f3, 0x10000, 0x200, 0x4, 0x3, 0x3, 0x5, 0x1, 0xa, 0x40, 0x6, 0x2, 0xffff0000, 0xc71, 0x3, 0x54, 0x3, 0xd49, 0x6, 0x80, 0x8001, 0x7, 0x5, 0x400, 0x6, 0x1, 0x5, 0x80000000, 0x1ff, 0x81, 0x5, 0x5, 0x7, 0x80000000, 0x3, 0x7, 0x800, 0x4, 0x592, 0xfffffff9, 0x0, 0x2, 0xf, 0x5, 0x4, 0xa117e86, 0x0, 0x2, 0x81, 0x5, 0x9, 0x5, 0x4, 0x1, 0x25f, 0xc, 0x4, 0xb97, 0x7, 0x6, 0x7fff, 0x6, 0x10000, 0x2, 0x10, 0x10, 0x4, 0x9, 0x7, 0x2, 0x4, 0xdc51, 0xb, 0x4, 0xffffffff, 0x8, 0xfffffff8, 0x0, 0x4, 0x6, 0x2, 0xfffffffe, 0x4, 0x6, 0x3, 0x1000, 0x0, 0xf2, 0x0, 0xfc4, 0x6, 0x6b, 0xf0, 0x165b, 0x7, 0x4c7, 0x1, 0x6, 0x8, 0x6, 0x5ec1, 0x1a89d80c, 0x2, 0x10000, 0xa, 0x97, 0x8, 0xe00000, 0x9, 0x0, 0x9, 0x7, 0x8, 0x4, 0x0, 0x100, 0x0, 0x7, 0x4941, 0x7, 0x80000001, 0x1ff, 0xfff, 0x5, 0x9, 0x8fc, 0x9, 0x1, 0x6, 0x1a, 0x7fff, 0x1, 0x9, 0x10001, 0xd7b4, 0xe1, 0xfffffbff, 0xded1, 0x6, 0x48, 0xd7bb, 0x2, 0x5, 0xe, 0x10, 0x8, 0x1, 0x5, 0x4504, 0x3, 0x7, 0x807, 0xa958, 0x4, 0x10001, 0x5, 0x0, 0x7, 0x3, 0x3ff, 0x400, 0x3ff, 0x3ff, 0x2, 0xfff, 0x4, 0x7fff, 0x84, 0xffffffff, 0x8001, 0xf, 0x800, 0x4, 0xee, 0x92, 0x2, 0x8001, 0x6, 0x8, 0x7bf, 0x7f, 0x5, 0x3ff, 0x80, 0x2, 0x2, 0x5, 0x401, 0x6, 0x68d, 0x4, 0x3, 0x8, 0x8, 0xb6a4, 0x2924]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0x6, 0x0, 0x9}, {0x1, 0x0, 0x8, 0x9, 0x0, 0x4c6}, 0x5, 0x3, 0xc2}}]}}]}, 0x4ac}}, 0xc840) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r5) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x14) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x30000010}, 0x20000080) 8.133516595s ago: executing program 0 (id=4009): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x600}}, 0x3c) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e21, 0xfffffffc, @loopback}, 0x1c) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) r4 = dup(r3) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) 7.722983445s ago: executing program 2 (id=4010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) unshare(0x22020600) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "e55fc591543217b2", "54e903a9e07110c7cecdf4568b05e8f1", "f2b35c07", "e7f1ebd4ddde66dc"}, 0x28) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000000280)={'#! ', './file0', [{0x20, '/dev/comedi3\x00'}, {0x20, 'tmpfs\x00'}, {0x20, '/dev/comedi3\x00'}, {0x20, 'noswap'}, {0x20, '/dev/comedi3\x00'}, {}, {0x20, '\'($'}, {0x20, ']/'}], 0xa, "8b2442ee985f23861a4ec0af"}, 0x57) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, 0x0) syz_emit_ethernet(0x288, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) 7.522012751s ago: executing program 4 (id=4011): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900010000000000000000000a0010000000fd000000000014000500000000000dfbc680e670e61f0d04c0aa"], 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00\a\x00', @ANYRES32=r7], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000130004"], 0x7c}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="78000000022c4dd082e4e86eab168a84a75437e71dac1fab99ad3dc5465a9fb4f25a", @ANYRES16=r6, @ANYBLOB="200027bd7000fddbdf2515000000640006804200040067636d28616573290000000000000000000000000000000000000000000000001a0000004d134c372ea814457d6a24d77d414d53f3f3817f3d9b6fa9292b000004000500080006000300000004000500040002000400020004000500"], 0x78}}, 0x0) 7.423223093s ago: executing program 1 (id=4012): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x777102) socket$pppl2tp(0x18, 0x1, 0x1) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) inotify_init1(0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x8000000000, 0xf, 0x80000006}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4) 7.349434809s ago: executing program 0 (id=4013): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x0, 0x24, 0x0, 0x0, 0x0, 0x10000}, 0x28) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') write$khugepaged_scan(r2, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write(r3, &(0x7f0000000fc0), 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x4, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x26}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x680e0}], 0x7, 0x2, 0x6, 0x1, 0x3}}}) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) syz_usb_connect$uac2(0x2, 0xd0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000101e0400304000010203010902be000301071001080b0202010020ff0904000000010120000924010700042e000d0a240b0805794d4fafc907240c0907030c08240906ed0a047b0c240302f905fe030e0400e0090401000001022000090401010101022000092402010f0405306909050109400007090d08250102300605000904023b5980a119c35012020101010220000924020108010f08020c240201000309063b324ee309240201fd0cf82b0109240201090104dd1f090582094803080df70825018230150010"], &(0x7f0000000680)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x6, 0x4, 0x8, 0x10, 0x1}, 0x37, &(0x7f0000000280)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "0e694f57e6150bf7da5d6673fed5284f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "35f981b75bb0995880a67034e493857b"}]}, 0x7, [{0xfa, &(0x7f00000002c0)=@string={0xfa, 0x3, "8b66f40d55552a22aef92236c3785e729b28d99e9b649508a60892f0e827778cabd39b2dd7121d9b801ea2f066410110bc427c7b1a0f17a218fd43d74766abc9cc3c2fd5c60f25074d3e21a11e5270b6f6542409c1a78309aa3490960c802139f4a689a54870951975baa04c1cc7f2a8c0b1b1d5420c987f0222581fa9e1a0251bab778c20a74a4a0e3d915958b238a3d91986e379aab3509c70f449a512dd2093f0c9d7011015114abceee9e94b831643edb131c5d37b170f380e796e1478e4c09964cd0fe9b026c5b1b306afca073973cca6870d042aa3719d6f10d397f11db32931e136385c7ac81dc56ec263c261deb77d14c02b613d"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41a}}, {0x68, &(0x7f0000000480)=@string={0x68, 0x3, "6cc6599a4f5c0f5aae100b1e16e7026d3de16794631319b351f41888c866748afce5c0e1daaa3ed2a651e705e1a2c79297562732ec6c790ff6429ae526f1dc6ef3089496f9b19d8654fd8f73b3363b2512b9ac400070b308aaf450aa0da9648d6f40bc5387d7"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x440a}}, {0xfd, &(0x7f0000000540)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}]}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) 6.8273357s ago: executing program 3 (id=4014): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (fail_nth: 3) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.310673474s ago: executing program 1 (id=4015): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) mmap$binder(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x9) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="bb6233c1eb870180c200000086dd6410f746004a2f0100000000000000000000ffffffffffffff0200000000000000000000000000010401000904000800010086ddef2f6de0080088be000000041c0930000100000000000003080022eb00"], 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x6a, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdir(&(0x7f0000000040)='./file0\x00', 0x14) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) preadv(r3, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b1300000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000400a8000100080098a41f0005000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) 5.665218829s ago: executing program 2 (id=4016): eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$pppoe(0x18, 0x1, 0x0) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r2, &(0x7f00000012c0)=[{{&(0x7f0000000840)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000900)=[{&(0x7f00000008c0)=""/32, 0x20}], 0x1, &(0x7f0000000dc0)=""/147, 0x93}, 0xc}, {{&(0x7f0000000e80)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f00)=""/165, 0xa5}, {&(0x7f0000000fc0)=""/25, 0x19}, {&(0x7f0000001000)=""/57, 0x39}, {&(0x7f0000001040)=""/16, 0x10}, {&(0x7f0000001080)=""/78, 0x4e}, {&(0x7f0000001100)=""/145, 0x91}], 0x6, &(0x7f0000001240)=""/117, 0x75}, 0x800}], 0x2, 0x2000, &(0x7f0000001340)={0x77359400}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="01076fd9310df4f6f04e918105ec6bdc301eedf1271fc077fdc0276ae6fbd0b47a8584d9ce0a5157b542ea22044a8c81c0d638e358f586de28d4ffdf1ce18bfb5537622dbd4d12316d295a272b92", 0x4e}], 0x1, &(0x7f00000003c0)}}, {{&(0x7f0000000400)={0xa, 0x4e22, 0xafe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f00000004c0)="6d816cde9ee338c2820c7540a9adfebd6b17724e3e2e089d1a35be7982d910ea76cc2bfa168275760f5f2b38afc8573b3e29ecf7f354ec439d7c5e1e2b7772e0d2b0c1eae9294c2cbc27dad37cc046a405fd772214b2298666133353c60b2d7e3c813b8710ff8d942a272d32ba634b14b8c714b6f71b11699f40d2b1083fa0d85bd6f1b85b552266e12e613a1d8910af4699", 0x92}, {&(0x7f0000000580)="b7af8fcca92f32152200e50885cb3efb4a7da8119d9b0c9af2f340829769c9ebda2078ec078cc1776e34d8f8c2935a74edc36d1cdb908746d7d9b800180db6b8678b31c31b6368bd2d583bf74669d087e754d74b041d541127d386168f5a213ae841c2c5e363e33cbc1edda73b35424a128b3a87e1b267077da35a5d75daea2d71551499dd7480e09c", 0x89}, {&(0x7f0000000640)="d1e7b47120697e65e66b6c6349636705153ff576d01755780680661ebf19b04406c6640ff7f03bc852da5f2eac5972d7e0ff9544701532d0588d11ed83ef685861957ebe426f23b7a75d3906bde74975735251341ee744ca050a5db23e1e78d663330d34660daa5d46873e436072fb3aa7a7ba9e72340c6f5dc218788d64f4117c244f57d5a6a5dc2b51c84a4a487c7bc5ec49f26e453c1d3c7b7bdc4c1581a2622588143404cf424755d3125d", 0xad}, {&(0x7f0000000700)="de970c275ecd", 0x6}, {&(0x7f0000000740)="ac0e293798bbcc07f7301a832f5597121c6ad7975f662fee37b76109ec404227353b42034ff3478d8d1b48a5ce3c93795de967168b292ffef1782d6d16d5c608a288a0ead599e03c9dafe90d8e37a09432ace30e599176de3f100e994bfb47dbaf1bda603a9bec7ee810935eaba62730f19678e6ddf813b6c9e56eeee2b205dc53c9e8473fc6f444be9e797d33983f459937beeb405b7fcaafd4acc6df89587520df1317a85d15a06e68d3a994f7a4f53dba2509795ca1c35b266121aaab26bc64b2b5b54045acfb9190e4eb9ff13349313fd8be", 0xd4}, {&(0x7f0000000940)="889f3802815c0db8107f17d377c984feb74cfd497f0370634a6e35de2860cd49b7191da4269ea30f14f85d12b2363568f897f36249c5af54b30ec99739e7df5441db80e7c913fcffc645318dd77c67ecfa2d3202dfb1fedede34d02d3644d28bb05678f5691ebb441f3bd5579cef84ebc2586566f1db33b15790e9607aa2d6b1eef25616753f525203fcf0da3c4951d8dfaec7f7627096006430c143aee6512b479f23f9d421708a8b132e5396c3843449f914f8f9286994b7445b468ca19d3cce2eec0fce91cc76b4c679d3024fee2c677e20f415444570c4e18328777fae735595e439ebff0cfd245b5c793fbabe626728", 0xf2}, {&(0x7f0000000a40)="5c72fe001b935f0f281825ac91d601f91e6f49c15a1fc2c72689ca87065d7a72a413b4154a86d5bbc13ef85008801c30c4cd756ea82173fda037317cc44e84b2d0fcea97533bbd85ae70dc10b23666965534", 0x52}], 0x7, &(0x7f0000000b40)=[@rthdr_2292={{0xb8, 0x29, 0x39, {0x33, 0x14, 0x2, 0x3, 0x0, [@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast2, @remote, @local, @local, @remote, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2e, 0x2, 0x2, 0x0, 0x0, [@local]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hopopts_2292={{0xa8, 0x29, 0x36, {0x67, 0x11, '\x00', [@generic={0x80, 0x62, "e8c8c710b5eae7747b44dec0f38326c227820fcfee723740e5461c2582d9da7d18f99e053160a861a9872c94c5cc6c778dba3f118c2120dfbce463126c2c5b662943e492263defbbd3425738ce752c4d96590005624f51ca04db9fd51c5ce44a0a53"}, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x7f}, @ra={0x5, 0x2, 0x40}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x2, [0x5]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x1a0}}], 0x3, 0x24018801) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) close_range(r4, 0xffffffffffffffff, 0x0) 4.709691202s ago: executing program 1 (id=4017): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0xa0, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0x6, 0x10, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "da0b"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xe973, 0x4, 0x7}, {0x6, 0x24, 0x1a, 0x61c5, 0x5}, [@country_functional={0xa, 0x24, 0x7, 0x80, 0x87d, [0xa, 0xdbd]}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xf7}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x6, [0x8, 0x9199, 0x9, 0x2, 0x6, 0x0]}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7, 0xb, 0x9, 0x100, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xf, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1f7, 0x1, 0x80, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf, 0x8, 0x9}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x22, 0x33, 0x8, 0x10, 0xf9}, 0x8, &(0x7f0000000440)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x37}]}, 0x1, [{0x86, &(0x7f0000000480)=@string={0x86, 0x3, "f5f220eab5851d6b99853556cc9fc691af08e8837521920517afcf88fbc597ffc2368d43d618717a7c37f1af708ac71a9892c7f2b4169839f3d35eb8b4a8c85fadb4c15e8a6002aa7c50d3e1ff5ad0281d9797dd9079619e2caf3286e206b8b6b30721d009f5ecdf035a790e022a5fb970838172b5b6440d24d06eee74272294df64d3ba"}}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) r5 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, r5) syz_usb_connect$uac2(0x1, 0xd8, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x2e, 0xa0, 0xa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x2, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x9, 0x1a, 0x80}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0xe5, "1bba7a32b2f6"}, @selector_unit={0x6, 0x24, 0xb, 0x2, 0x1, 'X'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x7, 0x88, 0xaa, 0x3}, @as_header={0x10, 0x24, 0x1, 0x1, 0x2, 0x2, 0x1002, 0x5, 0x60000000, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x9, 0x7, 0x4, 0x2}, @as_header={0x10, 0x24, 0x1, 0x4, 0xe, 0x3, 0x2, 0x5, 0x2, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9, 0x4, 0x3, 0x7, "eb70"}, @as_header={0x10, 0x24, 0x1, 0x0, 0x2, 0x2, 0x2, 0x9, 0x3, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x37, 0x1, 0x70, {0x8, 0x25, 0x1, 0x80, 0x63, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0xd, 0x9, {0x8, 0x25, 0x1, 0x82, 0xf, 0x6, 0x1}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x3, 0x7, 0x8, 0x0, 0xfc}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x65, &(0x7f0000000180)=@string={0x65, 0x3, "2925cd8aabbd21bdd53880884e5a36c76c4345a7acd72c8287faccbfc1a8b3ba48a7dab3dc7bb078553fee0260b53c9325f103364dcbfcc939527b74a7fad132b17848ea3d6999646a231a3341651ddb576e3cb7ff29131036c002761c16b66ff5717f"}}, {0xaa, &(0x7f0000000200)=@string={0xaa, 0x3, "92f23cff287cfed8281e9bfb6581506e8dee28bbf37e298e5cf48b9702289cb6676b1aa5a1d2b545b40ec95f0d454de2c12c23e52f5da178c15642f6e9fa0e27d47da717ca9536432919020693f2550c997d881a9059e20866fdfd048e18bda534934b71e6db250f98ca16c9c779d513179b28a5b2f93fd3d59747dda144f6cc324de6bb509c88468e829bfe3e0bb820da3e13538c961ff586756192e7dd254c88184af65d83ad71"}}]}) syz_usb_connect(0x4, 0x156, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0xe4, 0x4d, 0xa1, 0x40, 0xbb4, 0xa0e, 0xc455, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x144, 0x1, 0xc, 0x3, 0x40, 0x2, "", [{{0x9, 0x4, 0xd2, 0x0, 0x3, 0x15, 0x27, 0x89, 0x4, [], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x4, 0x8, 0x1, [@generic={0xb4, 0xa, "32430051a75069df4a61b61cc3b45f47b44194980759b4769f024c4c53198c47a8384eab4060bb1786cbfd87030fa3f8c78e804578c8402a35a8688dda3878ee1d74300ec0ff28bccf62ee4ac5b599e9afaa8149871a4b5fea307bf03c3cae29ceabe164c9881c58f4d0a47735dd7c98f0c6d6d04b9f38f0b3472e16763ee7fa23c855a89ae19d0147e85f7482b08450adb4c969e0bde80be7f0024e68c96bba5ea22ec1c9f9f774e657170e9ad3e99283e8"}, @generic={0x5c, 0x31, "c3855e4f04872791b87fb1c6c4a27d9aaea1ab2998c4a3ef7d74ddbe8039da4cb763f5633fae176fc19baed1232a9182369b58d967886b73fdf4d76bc535e86bfa97b81cb154637cf62f8dae4dacecdffdfe96f6d56ef93ce320"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xb, 0x6, 0x20}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x7, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x310, 0x4, 0x2, 0x81, 0x40, 0x2}, 0x2e, &(0x7f00000008c0)={0x5, 0xf, 0x2e, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "a703d4eaf614015cd4f6b0016f291042"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7f, 0x2, 0x8e}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x2, 0x5, 0x101, 0xed}]}, 0x3, [{0xf0, &(0x7f0000000900)=@string={0xf0, 0x3, "4d745102732792abd765b08b7d1bbc4d0fb45df6cae53b102db69b80b63602cf9b52bb1bf82b7eb579d9203ab65735ee227ec2f2b2f04d523e6490ae868e4f19126db2bca26c43f71e546123567b35acfc1cc14baf1517abd92c90847b13b46ea00a249c13c8e36569a39641498dc7a8c1599bf38eabfcf339bcabeaf4fe06e386d39766cbc0728100dbec28c4b89a222789038df86d14198a5279b0c502f25cb58c84af896a97976a7ea13d8e58c25a4b02016c53e957f7be05aa090aae449c891d56a43c51dcbee5a0ffea6bc85d8bd5442031731cbdbcde60a09d256377c6ca6c4bb1fb91258f0cca1bf123ab"}}, {0x66, &(0x7f0000000a00)=@string={0x66, 0x3, "ba715a930b9a12df2e0fb8aa381d8b0b01bb27a98e50642f74b3255b7dcc9f9385a288715bb065b11785163ad1ee6558db85310d52b134d502433c9452d322794dd377dd44791b57bae958035f87e721b26f26ce0cd3783fdc66ea84b259c185217e3e1b"}}, {0x8, &(0x7f0000000a80)=@string={0x8, 0x3, "5af1d30e1384"}}]}) 4.592403558s ago: executing program 3 (id=4018): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.57925626s ago: executing program 0 (id=4019): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d40)=@ipv4_getroute={0x1c, 0x1a, 0x300, 0x70bd28, 0x25dfdbff, {0x2, 0x10, 0x10, 0x8, 0xfd, 0x4, 0xfe, 0x0, 0x1e00}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) socket(0x2b, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f78ca810c4050a123237010203010902120201b3f45058"], 0x0) socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 3.515687801s ago: executing program 3 (id=4020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x21}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="2bf10dab213b"}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300230a07002c0012800e00010069703667726574617000000018000280140007000002000000000000000000000000000108001f000800000008000d"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3.352284785s ago: executing program 4 (id=4021): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x80000, 0x0) ioctl$LOOP_SET_FD(r6, 0x7b9, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x4000) 3.331041137s ago: executing program 2 (id=4022): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002200)={0x1, 0x0, [{0x70000, 0x75, &(0x7f0000002140)=""/117}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1100000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000036ffd83d581dbf0a5fd9d21430cc000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r1, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2f4dc1, 0x184) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) 2.401320975s ago: executing program 3 (id=4023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0xfffb, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) process_vm_writev(r1, &(0x7f0000000300)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/75, 0x4b}], 0x2, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040054}, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x4b2) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) r5 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r5, 0x1) 1.690729871s ago: executing program 0 (id=4024): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r0 = syz_open_procfs(0x0, 0x0) io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0xb, 0x2da, 0x0, r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xedf76eb538cd4226}}, [@NFT_MSG_DELRULE={0x24, 0x8, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x504, 0x0, 0x0, {0x6, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x41, 0xc, "efaf58087cc339bab932c2a160d5e47dda58c1a2ad7499e98722975db762ac79e2a35102d31f344fefe0e20298e9c9ac6a1c60d5729509d1f3a9ab9be5"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x9, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000003c0)={0x9}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x17, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000680), 0x0, 0x0, 0x2d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xb, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010001000000000001000000180000000400000000000000010000000520ff0ffffeffff18340000020000000000000000000000950000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0100008500000006000000a718100001000000850000000900000018260000", @ANYRES32, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5f40d603, 0xbc, &(0x7f00000004c0)=""/188, 0x40e00, 0x30, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x8, 0x2}, 0x10, r6, 0xffffffffffffffff, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=[{0x5, 0x4, 0x6, 0xa}]}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1}, &(0x7f0000000500), 0x0}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x41e80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x100088}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r9, 0x40305829, &(0x7f0000000280)={0x1, 0x2, 0x5, 0x9, 0x1, 0x6}) 1.567356321s ago: executing program 2 (id=4025): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0xa0, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0x6, 0x10, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "da0b"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xe973, 0x4, 0x7}, {0x6, 0x24, 0x1a, 0x61c5, 0x5}, [@country_functional={0xa, 0x24, 0x7, 0x80, 0x87d, [0xa, 0xdbd]}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xf7}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x6, [0x8, 0x9199, 0x9, 0x2, 0x6, 0x0]}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7, 0xb, 0x9, 0x100, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xf, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1f7, 0x1, 0x80, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf, 0x8, 0x9}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x22, 0x33, 0x8, 0x10, 0xf9}, 0x8, &(0x7f0000000440)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x37}]}, 0x1, [{0x86, &(0x7f0000000480)=@string={0x86, 0x3, "f5f220eab5851d6b99853556cc9fc691af08e8837521920517afcf88fbc597ffc2368d43d618717a7c37f1af708ac71a9892c7f2b4169839f3d35eb8b4a8c85fadb4c15e8a6002aa7c50d3e1ff5ad0281d9797dd9079619e2caf3286e206b8b6b30721d009f5ecdf035a790e022a5fb970838172b5b6440d24d06eee74272294df64d3ba"}}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) r5 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, r5) syz_usb_connect$uac2(0x1, 0xd8, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x2e, 0xa0, 0xa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x2, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x9, 0x1a, 0x80}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0xe5, "1bba7a32b2f6"}, @selector_unit={0x6, 0x24, 0xb, 0x2, 0x1, 'X'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x7, 0x88, 0xaa, 0x3}, @as_header={0x10, 0x24, 0x1, 0x1, 0x2, 0x2, 0x1002, 0x5, 0x60000000, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x9, 0x7, 0x4, 0x2}, @as_header={0x10, 0x24, 0x1, 0x4, 0xe, 0x3, 0x2, 0x5, 0x2, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9, 0x4, 0x3, 0x7, "eb70"}, @as_header={0x10, 0x24, 0x1, 0x0, 0x2, 0x2, 0x2, 0x9, 0x3, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x37, 0x1, 0x70, {0x8, 0x25, 0x1, 0x80, 0x63, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0xd, 0x9, {0x8, 0x25, 0x1, 0x82, 0xf, 0x6, 0x1}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x3, 0x7, 0x8, 0x0, 0xfc}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x65, &(0x7f0000000180)=@string={0x65, 0x3, "2925cd8aabbd21bdd53880884e5a36c76c4345a7acd72c8287faccbfc1a8b3ba48a7dab3dc7bb078553fee0260b53c9325f103364dcbfcc939527b74a7fad132b17848ea3d6999646a231a3341651ddb576e3cb7ff29131036c002761c16b66ff5717f"}}, {0xaa, &(0x7f0000000200)=@string={0xaa, 0x3, "92f23cff287cfed8281e9bfb6581506e8dee28bbf37e298e5cf48b9702289cb6676b1aa5a1d2b545b40ec95f0d454de2c12c23e52f5da178c15642f6e9fa0e27d47da717ca9536432919020693f2550c997d881a9059e20866fdfd048e18bda534934b71e6db250f98ca16c9c779d513179b28a5b2f93fd3d59747dda144f6cc324de6bb509c88468e829bfe3e0bb820da3e13538c961ff586756192e7dd254c88184af65d83ad71"}}]}) syz_usb_connect(0x4, 0x156, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0xe4, 0x4d, 0xa1, 0x40, 0xbb4, 0xa0e, 0xc455, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x144, 0x1, 0xc, 0x3, 0x40, 0x2, "", [{{0x9, 0x4, 0xd2, 0x0, 0x3, 0x15, 0x27, 0x89, 0x4, [], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x4, 0x8, 0x1, [@generic={0xb4, 0xa, "32430051a75069df4a61b61cc3b45f47b44194980759b4769f024c4c53198c47a8384eab4060bb1786cbfd87030fa3f8c78e804578c8402a35a8688dda3878ee1d74300ec0ff28bccf62ee4ac5b599e9afaa8149871a4b5fea307bf03c3cae29ceabe164c9881c58f4d0a47735dd7c98f0c6d6d04b9f38f0b3472e16763ee7fa23c855a89ae19d0147e85f7482b08450adb4c969e0bde80be7f0024e68c96bba5ea22ec1c9f9f774e657170e9ad3e99283e8"}, @generic={0x5c, 0x31, "c3855e4f04872791b87fb1c6c4a27d9aaea1ab2998c4a3ef7d74ddbe8039da4cb763f5633fae176fc19baed1232a9182369b58d967886b73fdf4d76bc535e86bfa97b81cb154637cf62f8dae4dacecdffdfe96f6d56ef93ce320"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xb, 0x6, 0x20}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x7, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x310, 0x4, 0x2, 0x81, 0x40, 0x2}, 0x2e, &(0x7f00000008c0)={0x5, 0xf, 0x2e, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "a703d4eaf614015cd4f6b0016f291042"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7f, 0x2, 0x8e}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x2, 0x5, 0x101, 0xed}]}, 0x3, [{0xf0, &(0x7f0000000900)=@string={0xf0, 0x3, "4d745102732792abd765b08b7d1bbc4d0fb45df6cae53b102db69b80b63602cf9b52bb1bf82b7eb579d9203ab65735ee227ec2f2b2f04d523e6490ae868e4f19126db2bca26c43f71e546123567b35acfc1cc14baf1517abd92c90847b13b46ea00a249c13c8e36569a39641498dc7a8c1599bf38eabfcf339bcabeaf4fe06e386d39766cbc0728100dbec28c4b89a222789038df86d14198a5279b0c502f25cb58c84af896a97976a7ea13d8e58c25a4b02016c53e957f7be05aa090aae449c891d56a43c51dcbee5a0ffea6bc85d8bd5442031731cbdbcde60a09d256377c6ca6c4bb1fb91258f0cca1bf123ab"}}, {0x66, &(0x7f0000000a00)=@string={0x66, 0x3, "ba715a930b9a12df2e0fb8aa381d8b0b01bb27a98e50642f74b3255b7dcc9f9385a288715bb065b11785163ad1ee6558db85310d52b134d502433c9452d322794dd377dd44791b57bae958035f87e721b26f26ce0cd3783fdc66ea84b259c185217e3e1b"}}, {0x8, &(0x7f0000000a80)=@string={0x8, 0x3, "5af1d30e1384"}}]}) 1.47911789s ago: executing program 3 (id=4026): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x420b41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x401, 0x40, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) ioctl$TCSETS(r2, 0x5402, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x26aadf42, 0x0) mq_unlink(&(0x7f0000000180)='\x00\xf6\a\x00\x00\x00\x00\x00\x00\x00\x12V\xd4\x17\x00\xff') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES64=r3], 0x6c}}, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x8f) fchdir(r5) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/54, 0x36, 0x0) close(r3) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) connect$inet(r6, &(0x7f0000000280)={0x2, 0x480, @remote}, 0x10) close(r6) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 192.073879ms ago: executing program 4 (id=4027): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000085000000320000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getpid() r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="cd2895701b8ae8e4daf03e55879ee3564d2dde628e844aeffd4360b531ced2523734db5e689eeb78b5608b9486646e83ca00b1df74f7db436276e65caae318d99104ea4726d7666006278611", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf25020000000800090002000000"], 0x1c}}, 0x40) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f0000000280)='\x00', 0x1, 0x0) 56.409603ms ago: executing program 0 (id=4028): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r6}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) sendmsg$kcm(r5, 0x0, 0x20000001) unshare(0x6a040000) 0s ago: executing program 1 (id=4029): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x10003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xffffffff, 0x32, 0x5, 0x7, 0x16, 0xb, 0x1, 0x1, 0x1, {0xffff1c72, 0x0, 0x7, 0x0, 0xffffffba, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r5, &(0x7f0000000240)="bad33075218151db00316f3a277f", 0x59, 0x22040001, &(0x7f0000000080)={0x11, 0x88a8, r4, 0x1, 0xda, 0x6, @link_local}, 0x14) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_emit_ethernet(0x3e, &(0x7f0000000740)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) write$tun(r10, &(0x7f0000000440)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@igmp={{0x10, 0x4, 0x3, 0x2d, 0x5c, 0x65, 0x0, 0x1, 0x2, 0x0, @remote, @local, {[@generic={0x88, 0x3, '('}, @ssrr={0x89, 0x1b, 0xed, [@remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0xc, 0x59, 0x3, 0x9, [{@loopback, 0x6aa}]}]}}, {0x14, 0x7, 0x0, @rand_addr=0x64010102, "121c78ace5f640b3c04d94f791874c6c6c5d6eb0"}}}, 0x6a) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xfffffffffffffffb) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) kernel console output (not intermixed with test programs): ialNumber: syz [ 1167.976697][T17593] usb 3-1: config 0 descriptor?? [ 1167.989254][T20309] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1168.280802][ T5887] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1168.337549][ T5887] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1168.631646][ T5887] usb 4-1: USB disconnect, device number 102 [ 1168.798864][T20346] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 1168.811317][ T30] audit: type=1400 audit(1775273230.202:5883): avc: denied { bind } for pid=20329 comm="syz.1.3562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1169.413420][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1170.198977][ T30] audit: type=1400 audit(1775273231.702:5884): avc: denied { getopt } for pid=20363 comm="syz.3.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1170.572782][T20283] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1170.625411][ T10] IPVS: starting estimator thread 0... [ 1171.556025][T20369] IPVS: using max 48 ests per chain, 115200 per kthread [ 1171.577923][T20283] usb 4-1: Using ep0 maxpacket: 16 [ 1171.591816][T17593] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1171.594903][T20283] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.800180][T17593] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 1171.811518][T20283] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1171.887040][T20283] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1171.899609][T20283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.927928][T17593] usb 3-1: USB disconnect, device number 2 [ 1171.997900][T20283] usb 4-1: Product: syz [ 1172.048140][T20283] usb 4-1: Manufacturer: syz [ 1172.053685][T20283] usb 4-1: SerialNumber: syz [ 1172.387131][T20283] usb 4-1: 0:2 : does not exist [ 1172.398010][T20283] usb 4-1: unit 9 not found! [ 1172.468015][T20408] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 1172.857665][T20283] usb 4-1: USB disconnect, device number 103 [ 1172.969868][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1173.208823][ T30] audit: type=1400 audit(1775273234.712:5885): avc: denied { block_suspend } for pid=20421 comm="syz.3.3576" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1173.388389][ T5887] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1173.594052][ T5887] usb 5-1: config 0 has no interfaces? [ 1173.604742][ T5887] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1173.658283][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1173.669793][ T5887] usb 5-1: Product: syz [ 1173.674894][ T5887] usb 5-1: Manufacturer: syz [ 1173.691283][ T30] audit: type=1400 audit(1775273235.192:5886): avc: denied { setopt } for pid=20423 comm="syz.2.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1173.715806][ T5887] usb 5-1: config 0 descriptor?? [ 1174.127977][ T5130] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 1174.206151][T20436] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1043 sclass=netlink_xfrm_socket pid=20436 comm=syz.3.3579 [ 1174.246170][T20420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.258335][T20420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.331197][ T5887] usb 5-1: USB disconnect, device number 111 [ 1174.356138][ T30] audit: type=1400 audit(1775273235.852:5887): avc: denied { create } for pid=20429 comm="syz.1.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1174.383255][T20434] netlink: 'syz.1.3578': attribute type 10 has an invalid length. [ 1174.400800][T20434] syz_tun: entered promiscuous mode [ 1174.413498][T20434] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1174.440087][ T30] audit: type=1400 audit(1775273235.882:5888): avc: denied { getopt } for pid=20429 comm="syz.1.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1175.807977][T20452] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3581'. [ 1175.968085][T20452] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3581'. [ 1176.228063][T20452] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3581'. [ 1176.571459][T20491] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 1176.703557][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3581'. [ 1176.878054][ T5858] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1176.921302][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.937856][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.052631][ T5858] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.258193][ T5858] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1177.274418][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.307610][ T5858] usb 5-1: Product: syz [ 1177.327892][ T5858] usb 5-1: Manufacturer: syz [ 1177.353584][ T5858] usb 5-1: SerialNumber: syz [ 1178.034512][ T5858] usb 5-1: selecting invalid altsetting 1 [ 1178.248139][ T5858] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 1178.248238][ T5858] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 1178.390147][ T5858] usb 5-1: USB disconnect, device number 112 [ 1178.428471][ T5130] Bluetooth: hci0: command 0x0406 tx timeout [ 1178.458921][ T5130] Bluetooth: hci5: unexpected event for opcode 0x0c25 [ 1182.086014][T20617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1183.227489][ T30] audit: type=1400 audit(1775273244.722:5889): avc: denied { ioctl } for pid=20636 comm="syz.0.3602" path="/dev/sg0" dev="devtmpfs" ino=753 ioctlcmd=0x2271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1186.695131][T20729] team0: entered allmulticast mode [ 1186.717870][T20729] team_slave_0: entered allmulticast mode [ 1186.755997][T20729] team_slave_1: entered allmulticast mode [ 1186.786157][T20729] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1186.794975][T20732] xt_hashlimit: size too large, truncated to 1048576 [ 1186.825516][T20730] netlink: 'syz.2.3610': attribute type 12 has an invalid length. [ 1186.835406][T20730] netlink: 'syz.2.3610': attribute type 29 has an invalid length. [ 1186.867317][T20730] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1186.885726][T20730] netlink: 'syz.2.3610': attribute type 2 has an invalid length. [ 1186.896840][T20730] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1186.909265][T20734] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 1187.183455][ T5885] IPVS: starting estimator thread 0... [ 1187.199120][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 1187.209959][T20746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3612'. [ 1187.273015][T20747] FAULT_INJECTION: forcing a failure. [ 1187.273015][T20747] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.299631][T20747] CPU: 0 UID: 0 PID: 20747 Comm: syz.1.3611 Tainted: G L syzkaller #0 PREEMPT(full) [ 1187.299660][T20747] Tainted: [L]=SOFTLOCKUP [ 1187.299666][T20747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1187.299676][T20747] Call Trace: [ 1187.299681][T20747] [ 1187.299688][T20747] dump_stack_lvl+0x100/0x190 [ 1187.299722][T20747] should_fail_ex.cold+0x5/0xa [ 1187.299747][T20747] should_failslab+0xc2/0x120 [ 1187.299775][T20747] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1187.299803][T20747] ? __alloc_skb+0x140/0x710 [ 1187.299831][T20747] __alloc_skb+0x140/0x710 [ 1187.299853][T20747] ? __alloc_skb+0x5b7/0x710 [ 1187.299876][T20747] ? __pfx___alloc_skb+0x10/0x10 [ 1187.299906][T20747] netlink_alloc_large_skb+0x69/0x150 [ 1187.299937][T20747] netlink_sendmsg+0x680/0xda0 [ 1187.299970][T20747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1187.300006][T20747] ____sys_sendmsg+0x9e1/0xb70 [ 1187.300024][T20747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1187.300053][T20747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1187.300084][T20747] ___sys_sendmsg+0x190/0x1e0 [ 1187.300114][T20747] ? __pfx____sys_sendmsg+0x10/0x10 [ 1187.300136][T20747] ? irqentry_exit+0x180/0x670 [ 1187.300192][T20747] __sys_sendmsg+0x170/0x220 [ 1187.300219][T20747] ? __pfx___sys_sendmsg+0x10/0x10 [ 1187.300260][T20747] do_syscall_64+0x106/0xf80 [ 1187.300288][T20747] ? clear_bhb_loop+0x40/0x90 [ 1187.300311][T20747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.300329][T20747] RIP: 0033:0x7f173d59c819 [ 1187.300345][T20747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.300363][T20747] RSP: 002b:00007f173e489028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1187.300381][T20747] RAX: ffffffffffffffda RBX: 00007f173d816090 RCX: 00007f173d59c819 [ 1187.300393][T20747] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1187.300403][T20747] RBP: 00007f173e489090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.300413][T20747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.300423][T20747] R13: 00007f173d816128 R14: 00007f173d816090 R15: 00007ffcf0f5cb38 [ 1187.300448][T20747] [ 1187.377881][T20745] IPVS: using max 46 ests per chain, 110400 per kthread [ 1188.025264][T20756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3614'. [ 1188.207861][ T5960] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1189.367837][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 1189.530395][ T5960] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 1189.689342][ T5960] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.887884][ T5960] usb 4-1: config 8 has no interface number 0 [ 1189.930734][ T5960] usb 4-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1191.318722][ T5960] usb 4-1: config 8 interface 39 has no altsetting 0 [ 1191.467951][ T5960] usb 4-1: string descriptor 0 read error: -71 [ 1191.468076][ T5960] usb 4-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77 [ 1191.468098][ T5960] usb 4-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 1191.644555][ T5960] usb 4-1: can't set config #8, error -71 [ 1191.648679][ T5960] usb 4-1: USB disconnect, device number 104 [ 1191.732186][T20835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3621'. [ 1191.732211][T20835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3621'. [ 1191.732226][T20835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3621'. [ 1191.732357][T20835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3621'. [ 1191.738552][T20835] ucma_write: process 467 (syz.3.3621) changed security contexts after opening file descriptor, this is not allowed. [ 1191.770934][ T30] audit: type=1400 audit(1775273253.242:5890): avc: denied { ioctl } for pid=20834 comm="syz.3.3621" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1191.967865][ T5960] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1192.098690][ T5885] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1192.169211][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1192.184419][ T5960] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1192.213487][ T5960] usb 2-1: New USB device found, idVendor=1b9c, idProduct=1c0b, bcdDevice= 0.00 [ 1192.248985][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.250031][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 1192.273404][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 1192.274482][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.286473][ T5960] usb 2-1: config 0 descriptor?? [ 1192.303936][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.316303][ T5885] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1192.329541][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.341820][ T5885] usb 4-1: config 0 descriptor?? [ 1192.359414][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 1192.379037][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 1192.409092][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 1192.433816][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 1192.489525][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 1192.528346][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 1192.540456][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 1192.552587][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 1192.563607][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 1192.667859][ T10] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1192.755850][ T5885] hid_parser_main: 5 callbacks suppressed [ 1192.755870][ T5885] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 1192.771439][ T5885] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 1192.783024][ T5960] hid-generic 0003:1B9C:1C0B.0011: unknown main item tag 0x0 [ 1192.795200][ T5960] hid-generic 0003:1B9C:1C0B.0011: unknown main item tag 0x0 [ 1192.805195][ T5960] hid-generic 0003:1B9C:1C0B.0011: unknown main item tag 0x0 [ 1192.814613][ T5960] hid-generic 0003:1B9C:1C0B.0011: unknown main item tag 0x0 [ 1192.823865][ T5960] hid-generic 0003:1B9C:1C0B.0011: unknown main item tag 0x0 [ 1192.833692][ T5960] hid-generic 0003:1B9C:1C0B.0011: unknown main item tag 0x0 [ 1192.842747][ T5960] hid-generic 0003:1B9C:1C0B.0011: unknown main item tag 0x0 [ 1192.851778][ T5960] hid-generic 0003:1B9C:1C0B.0011: unknown main item tag 0x0 [ 1192.861078][ T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1192.872295][ T10] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1192.872480][ T5960] hid-generic 0003:1B9C:1C0B.0011: hidraw0: USB HID v7e.fd Device [HID 1b9c:1c0b] on usb-dummy_hcd.1-1/input0 [ 1192.891248][ T10] usb 5-1: Product: syz [ 1192.901679][ T10] usb 5-1: Manufacturer: syz [ 1192.907320][ T10] usb 5-1: SerialNumber: syz [ 1192.923468][ T10] usb 5-1: config 0 descriptor?? [ 1192.932123][ T10] ch341 5-1:0.0: ch341-uart converter detected [ 1192.955066][ T5885] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 1192.988744][ T9] usb 2-1: USB disconnect, device number 116 [ 1193.247673][ T5885] ft260 0003:0403:6030.0010: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1193.261066][ T30] audit: type=1326 audit(1775273254.762:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.4.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbeb9c819 code=0x7ffc0000 [ 1193.424855][ T30] audit: type=1326 audit(1775273254.762:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.4.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbeb9c819 code=0x7ffc0000 [ 1193.758426][ T30] audit: type=1326 audit(1775273254.762:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.4.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbeb9c819 code=0x7ffc0000 [ 1193.796168][ T5885] ft260 0003:0403:6030.0010: failed to retrieve status: -32, no wakeup [ 1193.812210][ T30] audit: type=1326 audit(1775273254.762:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.4.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dbeb9c819 code=0x7ffc0000 [ 1193.897627][T20860] fuse: Unknown parameter '' [ 1193.916077][ T30] audit: type=1326 audit(1775273254.762:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.4.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbeb9c819 code=0x7ffc0000 [ 1193.970971][ T10] usb 5-1: failed to receive control message: -110 [ 1193.989697][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1194.039879][T20862] overlay: ./file0 is not a directory [ 1194.048721][ T5885] usb 4-1: reset high-speed USB device number 105 using dummy_hcd [ 1194.079548][T20838] ft260 0003:0403:6030.0010: ft260_i2c_read: failed with -38 [ 1194.098382][ T30] audit: type=1326 audit(1775273254.762:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.4.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbeb9c819 code=0x7ffc0000 [ 1194.143370][ T30] audit: type=1326 audit(1775273254.762:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.4.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbeb9c819 code=0x7ffc0000 [ 1194.177437][ T30] audit: type=1326 audit(1775273254.762:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.4.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbeb9c819 code=0x7ffc0000 [ 1194.207884][ T30] audit: type=1326 audit(1775273254.762:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.4.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dbeb9c819 code=0x7ffc0000 [ 1194.527858][ T5858] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1194.689287][ T5858] usb 2-1: not running at top speed; connect to a high speed hub [ 1194.701261][ T5858] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1194.724111][ T5858] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1194.736068][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.746105][ T5858] usb 2-1: SerialNumber: Щ [ 1194.905366][T20283] usb 4-1: USB disconnect, device number 105 [ 1195.406895][ T5858] cdc_ncm 2-1:1.0: bind() failure [ 1195.428746][ T5858] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1195.437441][ T5858] cdc_ncm 2-1:1.1: bind() failure [ 1195.464107][ T5858] usb 2-1: USB disconnect, device number 117 [ 1196.619068][T20283] usb 5-1: USB disconnect, device number 113 [ 1196.712469][T20283] ch341 5-1:0.0: device disconnected [ 1196.870079][ T30] kauditd_printk_skb: 275 callbacks suppressed [ 1196.870095][ T30] audit: type=1400 audit(1775273258.372:6175): avc: denied { unlink } for pid=16484 comm="syz-executor" name="file0" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1197.031435][T20912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1197.238071][ T5858] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1197.326908][T20913] __nla_validate_parse: 47 callbacks suppressed [ 1197.326975][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1197.345437][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1197.359277][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1197.372955][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1197.384222][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1197.428046][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1197.439120][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 1197.460493][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1197.476947][ T5858] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1197.504958][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.558329][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1197.588333][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.588629][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1197.610948][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1197.623445][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1197.663488][T20921] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 1197.868152][ T10] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1198.073242][ T5858] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1198.084240][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.096735][ T5858] usb 3-1: config 0 descriptor?? [ 1198.104455][ T10] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1198.132301][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.156892][ T10] usb 1-1: config 0 has no interface number 0 [ 1198.174163][ T10] usb 1-1: config 0 interface 159 has no altsetting 0 [ 1198.193742][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1198.231555][ T10] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1198.241492][ T10] usb 1-1: Product: syz [ 1198.246584][ T10] usb 1-1: SerialNumber: syz [ 1198.254550][ T10] usb 1-1: config 0 descriptor?? [ 1198.396900][ T30] audit: type=1400 audit(1775273259.892:6176): avc: denied { ioctl } for pid=20925 comm="syz.3.3631" path="socket:[75975]" dev="sockfs" ino=75975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1198.413801][T20926] bridge0: port 3(dummy0) entered disabled state [ 1198.428440][ T30] audit: type=1400 audit(1775273259.902:6177): avc: denied { write } for pid=20927 comm="syz.4.3638" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1198.438517][ T5960] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1198.494874][T20926] dummy0 (unregistering): left allmulticast mode [ 1198.496352][T20919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.503055][T20926] dummy0 (unregistering): left promiscuous mode [ 1198.518890][T20919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.538212][T20926] bridge0: port 3(dummy0) entered disabled state [ 1198.717941][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1199.198945][T20936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.210089][T20936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.400298][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1199.419052][ T5858] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0012/input/input72 [ 1199.434301][ T5960] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1199.451957][ T5960] usb 2-1: New USB device found, idVendor=1b9c, idProduct=1c0b, bcdDevice= 0.00 [ 1199.467740][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.487565][T20938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1199.507439][ T5960] usb 2-1: config 0 descriptor?? [ 1199.532587][ T5858] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0012/input/input73 [ 1199.549517][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1199.567632][ T5887] usb 1-1: USB disconnect, device number 67 [ 1199.573645][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1199.613694][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1199.628705][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1199.652735][ T10] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1199.664046][ T5858] kye 0003:0458:5013.0012: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 1199.664222][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.701573][ T10] usb 4-1: Product: syz [ 1199.706824][ T10] usb 4-1: Manufacturer: syz [ 1199.721501][ T10] usb 4-1: SerialNumber: syz [ 1199.739694][ T10] usb 4-1: config 0 descriptor?? [ 1199.746339][T20930] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1199.760348][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 1199.767621][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1199.785076][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input74 [ 1199.847907][T19946] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1199.927185][ T5960] hid_parser_main: 224 callbacks suppressed [ 1199.927207][ T5960] hid-generic 0003:1B9C:1C0B.0013: unknown main item tag 0x0 [ 1199.943973][ T5960] hid-generic 0003:1B9C:1C0B.0013: unknown main item tag 0x0 [ 1199.952973][ T5960] hid-generic 0003:1B9C:1C0B.0013: unknown main item tag 0x0 [ 1199.977921][ T5960] hid-generic 0003:1B9C:1C0B.0013: unknown main item tag 0x0 [ 1199.986869][ T5960] hid-generic 0003:1B9C:1C0B.0013: unknown main item tag 0x0 [ 1200.003470][T19946] usb 5-1: device descriptor read/64, error -71 [ 1200.017859][ T5960] hid-generic 0003:1B9C:1C0B.0013: unknown main item tag 0x0 [ 1200.026791][ T5960] hid-generic 0003:1B9C:1C0B.0013: unknown main item tag 0x0 [ 1200.036928][ T5960] hid-generic 0003:1B9C:1C0B.0013: unknown main item tag 0x0 [ 1200.045919][ T5960] hid-generic 0003:1B9C:1C0B.0013: unknown main item tag 0x0 [ 1200.055082][ T5960] hid-generic 0003:1B9C:1C0B.0013: unknown main item tag 0x0 [ 1200.059227][ T30] audit: type=1400 audit(1775273261.562:6178): avc: denied { map } for pid=20925 comm="syz.3.3631" path="socket:[75969]" dev="sockfs" ino=75969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1200.068210][ T5960] hid-generic 0003:1B9C:1C0B.0013: hidraw1: USB HID v7e.fd Device [HID 1b9c:1c0b] on usb-dummy_hcd.1-1/input0 [ 1200.099739][ T10] usb 4-1: USB disconnect, device number 106 [ 1200.105879][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1200.136470][ T30] audit: type=1400 audit(1775273261.592:6179): avc: denied { read } for pid=20925 comm="syz.3.3631" path="socket:[75969]" dev="sockfs" ino=75969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1200.233968][ T5858] usb 3-1: USB disconnect, device number 3 [ 1200.350742][T19946] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1200.366501][ T5960] usb 2-1: USB disconnect, device number 118 [ 1200.393160][T20940] fido_id[20940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1200.587891][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1201.385985][ T30] audit: type=1400 audit(1775273262.082:6180): avc: denied { create } for pid=20941 comm="syz.0.3641" name="#4a" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1201.422743][T19946] usb 5-1: device descriptor read/64, error -71 [ 1201.560051][T19946] usb usb5-port1: attempt power cycle [ 1201.913776][ T30] audit: type=1400 audit(1775273262.092:6181): avc: denied { link } for pid=20941 comm="syz.0.3641" name="#4a" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1202.046579][ T30] audit: type=1400 audit(1775273262.092:6182): avc: denied { rename } for pid=20941 comm="syz.0.3641" name="#4b" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1202.111472][T20952] /dev/nullb0: Can't open blockdev [ 1202.179492][T19946] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1202.218449][T19946] usb 5-1: device descriptor read/8, error -71 [ 1202.469066][T19946] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1203.841510][T19946] usb 5-1: device not accepting address 117, error -71 [ 1204.055852][T19946] usb usb5-port1: unable to enumerate USB device [ 1205.387341][T21003] veth5: entered promiscuous mode [ 1205.410774][T21009] FAULT_INJECTION: forcing a failure. [ 1205.410774][T21009] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.435384][T21003] veth5: entered allmulticast mode [ 1205.498066][T21009] CPU: 0 UID: 0 PID: 21009 Comm: syz.2.3651 Tainted: G L syzkaller #0 PREEMPT(full) [ 1205.498095][T21009] Tainted: [L]=SOFTLOCKUP [ 1205.498101][T21009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1205.498108][T21009] Call Trace: [ 1205.498113][T21009] [ 1205.498117][T21009] dump_stack_lvl+0x100/0x190 [ 1205.498139][T21009] should_fail_ex.cold+0x5/0xa [ 1205.498154][T21009] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1205.498171][T21009] should_failslab+0xc2/0x120 [ 1205.498183][T21009] __kmalloc_noprof+0xe0/0x850 [ 1205.498202][T21009] tomoyo_realpath_from_path+0xb6/0x690 [ 1205.498223][T21009] tomoyo_path_number_perm+0x23c/0x580 [ 1205.498237][T21009] ? tomoyo_path_number_perm+0x22e/0x580 [ 1205.498253][T21009] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1205.498280][T21009] ? find_held_lock+0x2b/0x80 [ 1205.498295][T21009] ? __fget_files+0x215/0x3d0 [ 1205.498306][T21009] ? hook_file_ioctl_common+0x146/0x410 [ 1205.498320][T21009] ? __fget_files+0x21f/0x3d0 [ 1205.498334][T21009] security_file_ioctl+0xd3/0x230 [ 1205.498351][T21009] __x64_sys_ioctl+0xb7/0x210 [ 1205.498369][T21009] do_syscall_64+0x106/0xf80 [ 1205.498386][T21009] ? clear_bhb_loop+0x40/0x90 [ 1205.498399][T21009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.498410][T21009] RIP: 0033:0x7fb70dd9c819 [ 1205.498420][T21009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.498431][T21009] RSP: 002b:00007fb70ebdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1205.498442][T21009] RAX: ffffffffffffffda RBX: 00007fb70e016180 RCX: 00007fb70dd9c819 [ 1205.498449][T21009] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 1205.498455][T21009] RBP: 00007fb70ebdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.498461][T21009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.498467][T21009] R13: 00007fb70e016218 R14: 00007fb70e016180 R15: 00007fff1163fa78 [ 1205.498481][T21009] [ 1205.498486][T21009] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1206.697051][T21021] can0: slcan on ttyS3. [ 1206.729960][T21015] __nla_validate_parse: 45 callbacks suppressed [ 1206.729978][T21015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3654'. [ 1207.073257][ T30] audit: type=1326 audit(1775273268.572:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b54d9c819 code=0x7ffc0000 [ 1207.680687][ T30] audit: type=1326 audit(1775273268.572:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b54d9c819 code=0x7ffc0000 [ 1207.744915][ T30] audit: type=1326 audit(1775273268.572:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1b54d9c819 code=0x7ffc0000 [ 1207.775981][T21031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1207.872466][ T30] audit: type=1326 audit(1775273268.572:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b54d9c819 code=0x7ffc0000 [ 1207.908196][ T30] audit: type=1326 audit(1775273268.572:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b54d9c819 code=0x7ffc0000 [ 1207.937117][T21017] can0 (unregistered): slcan off ttyS3. [ 1207.947479][ T30] audit: type=1326 audit(1775273268.572:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b54d9c819 code=0x7ffc0000 [ 1208.065053][ T30] audit: type=1326 audit(1775273268.572:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b54d9c819 code=0x7ffc0000 [ 1208.186283][ T30] audit: type=1326 audit(1775273268.572:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1b54d9c819 code=0x7ffc0000 [ 1208.252338][ T30] audit: type=1326 audit(1775273268.572:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b54d9c819 code=0x7ffc0000 [ 1208.286601][ T30] audit: type=1326 audit(1775273268.572:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f1b54d9c819 code=0x7ffc0000 [ 1208.798415][T21069] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 1208.898934][T21070] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3663'. [ 1209.312695][T21073] ptrace attach of "./syz-executor exec"[17852] was attempted by "./syz-executor exec"[21073] [ 1210.456954][T21109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3668'. [ 1212.017858][T17593] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1212.297912][T17593] usb 3-1: Using ep0 maxpacket: 16 [ 1212.309230][T17593] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1212.366476][T21132] sp0: Synchronizing with TNC [ 1212.457257][T21132] geneve2: left promiscuous mode [ 1212.464237][T21132] veth5: left promiscuous mode [ 1213.255481][T17593] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1213.636116][T21139] netlink: 'syz.0.3676': attribute type 10 has an invalid length. [ 1213.660488][T21139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1214.200995][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1214.201074][ T30] audit: type=1800 audit(1775273275.692:6205): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3674" name="bus" dev="overlay" ino=930 res=0 errno=0 [ 1214.650041][T17593] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1214.687423][T17593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.741278][T17593] usb 3-1: Product: syz [ 1214.768628][T17593] usb 3-1: Manufacturer: syz [ 1214.868044][T17593] usb 3-1: can't set config #1, error -71 [ 1214.878605][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 1214.944514][T17593] usb 3-1: USB disconnect, device number 4 [ 1215.135731][T21166] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1216.384228][ T30] audit: type=1800 audit(1775273276.662:6206): pid=21166 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3681" name="file1" dev="overlay" ino=943 res=0 errno=0 [ 1216.471848][T21173] input: syz1 as /devices/virtual/input/input75 [ 1216.719655][ T30] audit: type=1400 audit(1775273278.222:6207): avc: denied { read } for pid=21175 comm="syz.3.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1216.774648][T21177] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 1216.815387][ T30] audit: type=1326 audit(1775273278.312:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21178 comm="syz.1.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173d59c819 code=0x7ffc0000 [ 1216.847291][ T30] audit: type=1326 audit(1775273278.312:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21178 comm="syz.1.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f173d59c819 code=0x7ffc0000 [ 1216.917954][ T30] audit: type=1326 audit(1775273278.312:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21178 comm="syz.1.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173d59c819 code=0x7ffc0000 [ 1216.946593][T17593] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1216.995481][ T30] audit: type=1326 audit(1775273278.312:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21178 comm="syz.1.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173d59c819 code=0x7ffc0000 [ 1217.097901][T17593] usb 3-1: device descriptor read/64, error -71 [ 1217.165215][ T30] audit: type=1326 audit(1775273278.312:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21178 comm="syz.1.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f173d59c819 code=0x7ffc0000 [ 1217.372073][ T30] audit: type=1326 audit(1775273278.312:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21178 comm="syz.1.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173d59c819 code=0x7ffc0000 [ 1217.628248][ T30] audit: type=1326 audit(1775273278.312:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21178 comm="syz.1.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173d59c819 code=0x7ffc0000 [ 1217.858773][T17593] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1218.027918][T17593] usb 3-1: device descriptor read/64, error -71 [ 1218.138486][T17593] usb usb3-port1: attempt power cycle [ 1218.499104][T17593] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1218.588120][T12188] Bluetooth: hci2: command 0x0406 tx timeout [ 1218.678391][T17593] usb 3-1: device descriptor read/8, error -71 [ 1218.710955][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1218.772924][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1218.811059][T21202] FAULT_INJECTION: forcing a failure. [ 1218.811059][T21202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1218.829364][T21202] CPU: 1 UID: 0 PID: 21202 Comm: syz.1.3693 Tainted: G L syzkaller #0 PREEMPT(full) [ 1218.829393][T21202] Tainted: [L]=SOFTLOCKUP [ 1218.829400][T21202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1218.829410][T21202] Call Trace: [ 1218.829416][T21202] [ 1218.829423][T21202] dump_stack_lvl+0x100/0x190 [ 1218.829458][T21202] should_fail_ex.cold+0x5/0xa [ 1218.829483][T21202] _copy_from_iter+0x1f4/0x1690 [ 1218.829508][T21202] ? __asan_memset+0x23/0x50 [ 1218.829534][T21202] ? __pfx__copy_from_iter+0x10/0x10 [ 1218.829553][T21202] ? __pfx___alloc_skb+0x10/0x10 [ 1218.829576][T21202] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1218.829612][T21202] netlink_sendmsg+0x808/0xda0 [ 1218.829645][T21202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1218.829672][T21202] ? __might_fault+0x50/0x140 [ 1218.829706][T21202] ____sys_sendmsg+0x9e1/0xb70 [ 1218.829724][T21202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1218.829754][T21202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1218.829784][T21202] ___sys_sendmsg+0x190/0x1e0 [ 1218.829804][T21202] ? __pfx____sys_sendmsg+0x10/0x10 [ 1218.829848][T21202] __sys_sendmsg+0x170/0x220 [ 1218.829872][T21202] ? __pfx___sys_sendmsg+0x10/0x10 [ 1218.829907][T21202] do_syscall_64+0x106/0xf80 [ 1218.829929][T21202] ? clear_bhb_loop+0x40/0x90 [ 1218.829947][T21202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.829963][T21202] RIP: 0033:0x7f173d59c819 [ 1218.829977][T21202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.829995][T21202] RSP: 002b:00007f173e4aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.830010][T21202] RAX: ffffffffffffffda RBX: 00007f173d815fa0 RCX: 00007f173d59c819 [ 1218.830020][T21202] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 1218.830029][T21202] RBP: 00007f173e4aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.830043][T21202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.830052][T21202] R13: 00007f173d816038 R14: 00007f173d815fa0 R15: 00007ffcf0f5cb38 [ 1218.830073][T21202] [ 1219.200916][T17593] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1219.230348][T17593] usb 3-1: device descriptor read/8, error -71 [ 1219.323585][T21200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1219.334655][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1219.334666][ T30] audit: type=1400 audit(1775273280.832:6224): avc: denied { bind } for pid=21211 comm="syz.0.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1219.348212][T17593] usb usb3-port1: unable to enumerate USB device [ 1219.432160][T21213] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 1219.536675][T21199] binder: Bad value for 'max' [ 1219.555840][ T30] audit: type=1400 audit(1775273281.032:6225): avc: denied { mounton } for pid=21198 comm="syz.3.3692" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1219.634006][T21218] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1220.854355][ T1558] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1220.922208][T21233] set match dimension is over the limit! [ 1221.037815][ T1558] usb 5-1: Using ep0 maxpacket: 16 [ 1222.312441][T21243] netlink: 'syz.3.3703': attribute type 2 has an invalid length. [ 1222.488633][ T30] audit: type=1400 audit(1775273283.802:6226): avc: denied { mount } for pid=21239 comm="syz.3.3703" name="/" dev="hugetlbfs" ino=77832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1222.529520][ T1558] usb 5-1: device descriptor read/all, error -71 [ 1224.148494][T21252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3705'. [ 1224.529619][T21259] veth5: entered promiscuous mode [ 1224.574140][T21259] veth5: entered allmulticast mode [ 1224.999860][T21273] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3710'. [ 1225.817940][T19946] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1225.988328][T19946] usb 5-1: Using ep0 maxpacket: 32 [ 1225.997685][T19946] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1226.156392][T19946] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1226.169523][T19946] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1226.181343][T19946] usb 5-1: Product: syz [ 1226.186439][T19946] usb 5-1: Manufacturer: syz [ 1226.194322][T19946] usb 5-1: SerialNumber: syz [ 1226.899220][T19946] usb 5-1: config 0 descriptor?? [ 1226.913731][T21286] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1227.157880][ T30] audit: type=1400 audit(1775273288.652:6227): avc: denied { write } for pid=21285 comm="syz.4.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1227.188015][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1227.221540][T20283] usb 5-1: USB disconnect, device number 120 [ 1227.387968][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1227.404769][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1227.441959][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1227.485395][ T10] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1227.516303][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.569390][ T10] usb 4-1: Product: syz [ 1227.597916][ T10] usb 4-1: Manufacturer: syz [ 1227.620216][ T10] usb 4-1: SerialNumber: syz [ 1228.408230][T20283] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1228.583159][T20283] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1228.597299][T20283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.613256][T20283] usb 2-1: Product: syz [ 1228.619513][T20283] usb 2-1: Manufacturer: syz [ 1228.625456][T20283] usb 2-1: SerialNumber: syz [ 1228.670902][T20283] usb 2-1: config 0 descriptor?? [ 1228.705632][T20283] hub 2-1:0.0: bad descriptor, ignoring hub [ 1228.716207][T20283] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1228.754269][T20283] f81232 2-1:0.0: f81534a converter detected [ 1229.020895][T20283] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1229.104914][T20283] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1229.194956][ T10] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1229.239843][T20283] usb 2-1: USB disconnect, device number 119 [ 1230.091618][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1230.103831][T20283] f81232 2-1:0.0: device disconnected [ 1230.164358][ T10] usb 4-1: USB disconnect, device number 107 [ 1230.372711][T21326] gre0 speed is unknown, defaulting to 1000 [ 1230.865013][T21326] gre0 speed is unknown, defaulting to 1000 [ 1230.908419][T20944] udevd[20944]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1230.958793][T21326] gre0 speed is unknown, defaulting to 1000 [ 1231.189880][T21349] syzkaller0: entered promiscuous mode [ 1231.212866][T21349] syzkaller0: entered allmulticast mode [ 1231.222285][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3724'. [ 1231.570016][ T30] audit: type=1400 audit(1775273293.072:6228): avc: denied { getopt } for pid=21338 comm="syz.4.3723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1231.921724][T21326] infiniband syz1: set active [ 1231.927505][T21326] infiniband syz1: added gre0 [ 1231.940367][T20283] gre0 speed is unknown, defaulting to 1000 [ 1231.963503][T21326] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1231.965106][T21326] infiniband syz1: Couldn't open port 1 [ 1232.229216][T21326] RDS/IB: syz1: added [ 1232.590922][T21326] smc: adding ib device syz1 with port count 1 [ 1232.590954][T21326] smc: ib device syz1 port 1 has no pnetid [ 1232.591646][T21326] gre0 speed is unknown, defaulting to 1000 [ 1232.595171][T17593] gre0 speed is unknown, defaulting to 1000 [ 1232.897834][T20283] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1233.547801][T20283] usb 1-1: Using ep0 maxpacket: 32 [ 1233.549161][T20283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.549189][T20283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.549219][T20283] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1233.549241][T20283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.551219][T20283] usb 1-1: config 0 descriptor?? [ 1233.609974][T21326] gre0 speed is unknown, defaulting to 1000 [ 1234.042641][T21326] gre0 speed is unknown, defaulting to 1000 [ 1234.068534][T21400] syz_tun: entered allmulticast mode [ 1234.148882][T21393] syz_tun: left allmulticast mode [ 1234.301666][T21326] gre0 speed is unknown, defaulting to 1000 [ 1234.356673][T20283] usbhid 1-1:0.0: can't add hid device: -32 [ 1234.364962][T20283] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1234.441119][ T30] audit: type=1400 audit(1775273295.942:6229): avc: denied { getopt } for pid=21376 comm="syz.0.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1234.953630][T21326] gre0 speed is unknown, defaulting to 1000 [ 1235.924828][T21326] gre0 speed is unknown, defaulting to 1000 [ 1236.106703][ T30] audit: type=1400 audit(1775273297.522:6230): avc: denied { setopt } for pid=21423 comm="syz.1.3741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1236.400125][T20283] usb 1-1: USB disconnect, device number 68 [ 1236.731846][ T30] audit: type=1400 audit(1775273298.232:6231): avc: denied { mount } for pid=21437 comm="syz.2.3746" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1237.344562][ T30] audit: type=1400 audit(1775273298.842:6232): avc: denied { unmount } for pid=17852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1237.728510][T21464] IPVS: ip_vs_add_dest(): server weight less than zero [ 1237.844243][ T30] audit: type=1400 audit(1775273299.292:6233): avc: denied { ioctl } for pid=21456 comm="syz.1.3751" path="uts:[4026533843]" dev="nsfs" ino=4026533843 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1237.977601][T21463] gre0 speed is unknown, defaulting to 1000 [ 1238.254871][T21466] gre0 speed is unknown, defaulting to 1000 [ 1238.357206][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.365022][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.388255][ T1558] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1238.767906][ T1558] usb 3-1: device descriptor read/64, error -71 [ 1238.795521][T21461] gre0 speed is unknown, defaulting to 1000 [ 1238.896059][ T30] audit: type=1400 audit(1775273300.392:6234): avc: denied { create } for pid=21477 comm="syz.0.3756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1239.006379][T21478] evm: overlay not supported [ 1239.078095][ T1558] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1239.217911][ T1558] usb 3-1: device descriptor read/64, error -71 [ 1239.338131][ T1558] usb usb3-port1: attempt power cycle [ 1240.052727][ T1558] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1240.088241][ T1558] usb 3-1: device descriptor read/8, error -71 [ 1241.073581][ T1558] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1241.285262][T21498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64645 sclass=netlink_route_socket pid=21498 comm=syz.1.3760 [ 1241.465897][ T1558] usb 3-1: device descriptor read/8, error -71 [ 1241.578832][ T1558] usb usb3-port1: unable to enumerate USB device [ 1241.677957][T19946] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1241.757345][ T30] audit: type=1400 audit(1775273303.182:6235): avc: denied { checkpoint_restore } for pid=21499 comm="syz.4.3762" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1242.048093][T19946] usb 2-1: Using ep0 maxpacket: 8 [ 1242.287232][T19946] usb 2-1: config 10 has an invalid interface number: 238 but max is 0 [ 1242.297827][T19946] usb 2-1: config 10 has no interface number 0 [ 1242.307866][T19946] usb 2-1: config 10 interface 238 has no altsetting 0 [ 1242.335212][T19946] usb 2-1: New USB device found, idVendor=0557, idProduct=7820, bcdDevice=49.d0 [ 1242.369359][T19946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.397815][T19946] usb 2-1: Product: syz [ 1242.403016][T19946] usb 2-1: Manufacturer: syz [ 1242.414744][T19946] usb 2-1: SerialNumber: syz [ 1242.483019][T21515] netlink: 'syz.4.3766': attribute type 1 has an invalid length. [ 1242.529581][T21515] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.3766'. [ 1242.664849][ T30] audit: type=1400 audit(1775273304.162:6236): avc: denied { read } for pid=21518 comm="syz.3.3768" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1242.693990][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1243.554157][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1243.988893][ T9] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 1244.010504][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.434666][ T9] usb 3-1: Product: syz [ 1244.455942][ T9] usb 3-1: Manufacturer: syz [ 1244.475323][ T9] usb 3-1: SerialNumber: syz [ 1244.663004][T21536] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3772'. [ 1244.734211][T21511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.767980][T21511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.820576][T19946] mos7840 2-1:10.238: required endpoints missing [ 1244.859342][T19946] usb 2-1: USB disconnect, device number 120 [ 1244.887114][T20283] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1244.967314][T21541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1245.017931][ T30] audit: type=1400 audit(1775273306.512:6237): avc: denied { listen } for pid=21538 comm="syz.4.3773" lport=34202 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1245.162304][T20283] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1245.172245][T20283] usb 1-1: config 0 has no interface number 0 [ 1245.179619][T20283] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1245.194003][T20283] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1245.218432][T20283] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1245.309135][T21548] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 1245.435677][T21549] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3775'. [ 1245.650264][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1245.665937][T20283] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1245.692562][T20283] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1245.702643][T20283] usb 1-1: Product: syz [ 1245.707675][T20283] usb 1-1: SerialNumber: syz [ 1245.795239][T20283] usb 1-1: config 0 descriptor?? [ 1245.810742][T20283] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1245.825347][T20283] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input76 [ 1245.840007][ T9] usb 3-1: USB disconnect, device number 13 [ 1246.018015][T20944] udevd[20944]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1246.258867][ T30] audit: type=1400 audit(1775273307.712:6238): avc: denied { bind } for pid=21550 comm="syz.3.3776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1246.292948][T21534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.126401][T21534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.193447][ T30] audit: type=1400 audit(1775273307.712:6239): avc: denied { name_bind } for pid=21550 comm="syz.3.3776" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1248.797883][ T30] audit: type=1400 audit(1775273307.712:6240): avc: denied { node_bind } for pid=21550 comm="syz.3.3776" saddr=fc02::81 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1248.797930][ T30] audit: type=1400 audit(1775273309.742:6241): avc: denied { listen } for pid=21554 comm="syz.1.3777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1250.924767][T21567] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 1250.948549][T21567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21567 comm=syz.1.3780 [ 1250.980176][ C0] cm109_urb_ctl_callback: 6 callbacks suppressed [ 1250.980192][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1250.996290][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1251.004778][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1251.013240][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1251.022475][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1251.025249][T19946] usb 1-1: USB disconnect, device number 69 [ 1251.030796][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1251.106812][T19946] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1251.184291][ T30] audit: type=1400 audit(1775273312.682:6242): avc: denied { map } for pid=21581 comm="syz.0.3785" path="socket:[79559]" dev="sockfs" ino=79559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1251.359085][ T30] audit: type=1400 audit(1775273312.722:6243): avc: denied { setattr } for pid=21581 comm="syz.0.3785" name="v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1251.432360][ T30] audit: type=1400 audit(1775273312.932:6244): avc: denied { mount } for pid=21591 comm="syz.4.3788" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 1251.512146][T21595] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1251.512146][T21595] The task syz.0.3786 (21595) triggered the difference, watch for misbehavior. [ 1251.753286][T21604] futex_wake_op: syz.4.3790 tries to shift op by 144; fix this program [ 1252.263014][T21609] futex_wake_op: syz.4.3792 tries to shift op by 144; fix this program [ 1252.317707][T21609] FAULT_INJECTION: forcing a failure. [ 1252.317707][T21609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1252.333729][T21609] CPU: 0 UID: 0 PID: 21609 Comm: syz.4.3792 Tainted: G L syzkaller #0 PREEMPT(full) [ 1252.333756][T21609] Tainted: [L]=SOFTLOCKUP [ 1252.333761][T21609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1252.333768][T21609] Call Trace: [ 1252.333773][T21609] [ 1252.333777][T21609] dump_stack_lvl+0x100/0x190 [ 1252.333800][T21609] should_fail_ex.cold+0x5/0xa [ 1252.333815][T21609] _copy_to_user+0x32/0xd0 [ 1252.333829][T21609] simple_read_from_buffer+0xcb/0x170 [ 1252.333842][T21609] proc_fail_nth_read+0x1af/0x230 [ 1252.333859][T21609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1252.333876][T21609] ? rw_verify_area+0xce/0x6d0 [ 1252.333892][T21609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1252.333909][T21609] vfs_read+0x1e4/0xb30 [ 1252.333921][T21609] ? __pfx_vfs_read+0x10/0x10 [ 1252.333930][T21609] ? __fget_files+0x215/0x3d0 [ 1252.333945][T21609] ? __fget_files+0x21f/0x3d0 [ 1252.333961][T21609] ksys_read+0x12a/0x250 [ 1252.333971][T21609] ? __pfx_ksys_read+0x10/0x10 [ 1252.333984][T21609] ? __x64_sys_read+0x11/0xb0 [ 1252.334001][T21609] ? __x64_sys_read+0x2a/0xb0 [ 1252.334015][T21609] do_syscall_64+0x106/0xf80 [ 1252.334032][T21609] ? clear_bhb_loop+0x40/0x90 [ 1252.334046][T21609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.334057][T21609] RIP: 0033:0x7f1dbeb5d04e [ 1252.334067][T21609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1252.334077][T21609] RSP: 002b:00007f1dbf984fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1252.334088][T21609] RAX: ffffffffffffffda RBX: 00007f1dbf9856c0 RCX: 00007f1dbeb5d04e [ 1252.334094][T21609] RDX: 000000000000000f RSI: 00007f1dbf9850a0 RDI: 0000000000000009 [ 1252.334101][T21609] RBP: 00007f1dbf985090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.334107][T21609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.334112][T21609] R13: 00007f1dbee16128 R14: 00007f1dbee16090 R15: 00007ffc1383d3b8 [ 1252.334127][T21609] [ 1252.740298][ T30] audit: type=1400 audit(1775273314.202:6245): avc: denied { mount } for pid=21606 comm="syz.1.3791" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1252.927854][ T30] audit: type=1400 audit(1775273314.392:6246): avc: denied { accept } for pid=21616 comm="syz.4.3795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1253.202767][ T30] audit: type=1400 audit(1775273314.692:6247): avc: denied { remount } for pid=21621 comm="syz.1.3796" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1254.784649][T21626] netlink: 'syz.4.3797': attribute type 10 has an invalid length. [ 1254.828082][ T5858] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1254.963026][T21626] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3797'. [ 1255.012085][ T5858] usb 1-1: device descriptor read/64, error -71 [ 1255.560750][T21626] bridge0: port 3(dummy0) entered blocking state [ 1255.581571][T21626] bridge0: port 3(dummy0) entered disabled state [ 1255.777817][ T5858] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1255.957459][T21626] dummy0: entered allmulticast mode [ 1256.026031][T21626] dummy0: entered promiscuous mode [ 1256.078758][T21626] bridge0: port 3(dummy0) entered blocking state [ 1256.086440][T21626] bridge0: port 3(dummy0) entered forwarding state [ 1256.183329][T21650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3801'. [ 1256.194295][ T30] audit: type=1400 audit(1775273317.682:6248): avc: denied { getopt } for pid=21643 comm="syz.3.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1256.378179][ T5887] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1256.614854][T21658] veth7: entered promiscuous mode [ 1256.621247][T21658] veth7: entered allmulticast mode [ 1256.748892][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 1256.770776][ T5887] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1256.782284][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.796286][ T5887] usb 3-1: config 0 has no interface number 0 [ 1256.806832][ T5887] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 1256.820258][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.834631][ T5887] usb 3-1: Product: syz [ 1256.835339][T21656] veth7: entered promiscuous mode [ 1256.848118][T21656] veth7: entered allmulticast mode [ 1256.851411][ T5887] usb 3-1: Manufacturer: syz [ 1256.861419][ T5887] usb 3-1: SerialNumber: syz [ 1256.909757][ T5887] usb 3-1: config 0 descriptor?? [ 1256.930409][ T5887] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 1256.943590][ T5887] uvcvideo 3-1:0.105: No valid video chain found. [ 1256.998302][T19946] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1257.151365][T21649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1257.160177][T19946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1257.174336][T19946] usb 2-1: not running at top speed; connect to a high speed hub [ 1257.187356][ T5887] usb 3-1: USB disconnect, device number 14 [ 1257.199472][T21670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3810'. [ 1257.234639][T19946] usb 2-1: config 43 has an invalid interface number: 154 but max is 0 [ 1257.244892][T19946] usb 2-1: config 43 contains an unexpected descriptor of type 0x2, skipping [ 1257.265725][T19946] usb 2-1: config 43 has no interface number 0 [ 1257.285961][T19946] usb 2-1: config 43 interface 154 altsetting 130 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1257.317904][T19946] usb 2-1: config 43 interface 154 has no altsetting 0 [ 1257.339952][T19946] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff70, bcdDevice=ca.8d [ 1257.351325][T19946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.367843][T19946] usb 2-1: Product: syz [ 1257.372887][T19946] usb 2-1: Manufacturer: syz [ 1257.379045][T19946] usb 2-1: SerialNumber: syz [ 1258.024437][T19946] option 2-1:43.154: GSM modem (1-port) converter detected [ 1258.064081][T19946] usb 2-1: USB disconnect, device number 121 [ 1258.263566][T19946] option 2-1:43.154: device disconnected [ 1259.098768][ T1558] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1259.337910][ T1558] usb 5-1: Using ep0 maxpacket: 32 [ 1259.381553][ T1558] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1259.392149][ T1558] usb 5-1: config 0 has no interface number 0 [ 1259.392735][T21700] veth7: entered promiscuous mode [ 1259.478403][ T1558] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1259.494641][ T30] audit: type=1400 audit(1775273320.992:6249): avc: denied { map } for pid=21705 comm="syz.1.3821" path="socket:[80023]" dev="sockfs" ino=80023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1259.499493][ T1558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.522786][ T30] audit: type=1400 audit(1775273320.992:6250): avc: denied { read } for pid=21705 comm="syz.1.3821" path="socket:[80023]" dev="sockfs" ino=80023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1259.605632][ T1558] usb 5-1: Product: syz [ 1259.615956][ T1558] usb 5-1: Manufacturer: syz [ 1259.627818][ T1558] usb 5-1: SerialNumber: syz [ 1259.640987][ T1558] usb 5-1: config 0 descriptor?? [ 1259.656352][ T1558] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1259.669106][ T1558] usb 5-1: selecting invalid altsetting 1 [ 1259.683574][ T1558] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1259.769768][T21700] veth7: entered allmulticast mode [ 1259.823792][ T1558] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1259.836329][ T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1259.866728][ T1558] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1259.896288][ T1558] usb 5-1: media controller created [ 1259.988186][ T1558] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1260.024516][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1260.034748][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.058094][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3817'. [ 1260.099938][T21715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3817'. [ 1260.114449][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 1260.129505][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1260.150501][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.167488][ T9] usb 2-1: Product: syz [ 1260.173030][ T9] usb 2-1: Manufacturer: 㫲嵲äˆîª’╼㹪崞⋔茯莔시芥éªó‡¢ã¿´ [ 1260.183720][ T9] usb 2-1: SerialNumber: syz [ 1260.402007][ T30] audit: type=1400 audit(1775273321.902:6251): avc: denied { load_policy } for pid=21720 comm="syz.0.3825" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1260.420185][ T9] usb 2-1: bad CDC descriptors [ 1260.439044][T21721] No control pipe specified [ 1260.503130][ T9] usb 2-1: USB disconnect, device number 122 [ 1260.537949][ T30] audit: type=1400 audit(1775273321.962:6252): avc: denied { read write } for pid=21720 comm="syz.0.3825" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1260.624345][ T30] audit: type=1400 audit(1775273321.962:6253): avc: denied { open } for pid=21720 comm="syz.0.3825" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1260.677103][ T30] audit: type=1400 audit(1775273321.962:6254): avc: denied { ioctl } for pid=21720 comm="syz.0.3825" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1260.677292][T21724] tipc: Enabling not permitted [ 1260.759088][T21724] tipc: Enabling of bearer rejected, failed to enable media [ 1261.153415][ T30] audit: type=1400 audit(1775273321.962:6255): avc: denied { write } for pid=21720 comm="syz.0.3825" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1261.181363][ T30] audit: type=1400 audit(1775273322.122:6256): avc: denied { bind } for pid=21725 comm="syz.0.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1261.205761][ T30] audit: type=1400 audit(1775273322.162:6257): avc: denied { setopt } for pid=21725 comm="syz.0.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1261.238155][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1261.247630][ T1558] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1261.256210][ T1558] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1261.302133][ T30] audit: type=1326 audit(1775273322.272:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21725 comm="syz.0.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b54d9c819 code=0x7ffc0000 [ 1261.483742][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 1261.507010][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.617463][ T9] usb 3-1: Product: syz [ 1261.625985][ T9] usb 3-1: Manufacturer: syz [ 1261.635775][ T9] usb 3-1: SerialNumber: syz [ 1261.780926][ T9] usb 3-1: config 0 descriptor?? [ 1261.804772][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1261.838866][ T9] usb 3-1: Detected FT232HP [ 1262.014593][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1262.032253][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1262.046471][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1262.142821][ T9] usb 3-1: USB disconnect, device number 15 [ 1262.535573][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1262.561201][ T9] ftdi_sio 3-1:0.0: device disconnected [ 1262.720384][T19946] usb 5-1: USB disconnect, device number 121 [ 1263.744088][T21768] FAULT_INJECTION: forcing a failure. [ 1263.744088][T21768] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.759761][T21768] CPU: 1 UID: 0 PID: 21768 Comm: syz.2.3835 Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.759791][T21768] Tainted: [L]=SOFTLOCKUP [ 1263.759797][T21768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1263.759808][T21768] Call Trace: [ 1263.759815][T21768] [ 1263.759822][T21768] dump_stack_lvl+0x100/0x190 [ 1263.759857][T21768] should_fail_ex.cold+0x5/0xa [ 1263.759882][T21768] should_failslab+0xc2/0x120 [ 1263.759902][T21768] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1263.759928][T21768] ? skb_clone+0x190/0x400 [ 1263.759959][T21768] skb_clone+0x190/0x400 [ 1263.759989][T21768] netlink_deliver_tap+0xaed/0xcc0 [ 1263.760022][T21768] netlink_dump+0xa60/0xd30 [ 1263.760052][T21768] ? __pfx_netlink_dump+0x10/0x10 [ 1263.760090][T21768] ? __inet_diag_dump_start+0x3cb/0x8f0 [ 1263.760124][T21768] __netlink_dump_start+0x6d6/0x990 [ 1263.760161][T21768] inet_diag_rcv_msg_compat+0x275/0x2d0 [ 1263.760189][T21768] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 1263.760216][T21768] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 1263.760243][T21768] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 1263.760269][T21768] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 1263.760297][T21768] ? sock_diag_rcv_msg+0x33d/0x7a0 [ 1263.760321][T21768] ? sock_diag_rcv_msg+0x33d/0x7a0 [ 1263.760348][T21768] sock_diag_rcv_msg+0x375/0x7a0 [ 1263.760374][T21768] netlink_rcv_skb+0x159/0x420 [ 1263.760391][T21768] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1263.760416][T21768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1263.760443][T21768] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1263.760475][T21768] netlink_unicast+0x5aa/0x870 [ 1263.760507][T21768] ? __pfx_netlink_unicast+0x10/0x10 [ 1263.760545][T21768] netlink_sendmsg+0x8b0/0xda0 [ 1263.760578][T21768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1263.760604][T21768] ? __might_fault+0x50/0x140 [ 1263.760639][T21768] ____sys_sendmsg+0x9e1/0xb70 [ 1263.760657][T21768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1263.760688][T21768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1263.760719][T21768] ___sys_sendmsg+0x190/0x1e0 [ 1263.760741][T21768] ? __pfx____sys_sendmsg+0x10/0x10 [ 1263.760793][T21768] __sys_sendmsg+0x170/0x220 [ 1263.760820][T21768] ? __pfx___sys_sendmsg+0x10/0x10 [ 1263.760862][T21768] do_syscall_64+0x106/0xf80 [ 1263.760888][T21768] ? clear_bhb_loop+0x40/0x90 [ 1263.760911][T21768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.760930][T21768] RIP: 0033:0x7fb70dd9c819 [ 1263.760947][T21768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.760963][T21768] RSP: 002b:00007fb70ebdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.760981][T21768] RAX: ffffffffffffffda RBX: 00007fb70e016180 RCX: 00007fb70dd9c819 [ 1263.760993][T21768] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1263.761004][T21768] RBP: 00007fb70ebdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.761015][T21768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.761025][T21768] R13: 00007fb70e016218 R14: 00007fb70e016180 R15: 00007fff1163fa78 [ 1263.761051][T21768] [ 1265.379531][T21778] netlink: 'syz.2.3838': attribute type 1 has an invalid length. [ 1265.388832][T21778] netlink: 'syz.2.3838': attribute type 2 has an invalid length. [ 1265.398603][T21778] netlink: 'syz.2.3838': attribute type 3 has an invalid length. [ 1265.423206][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1265.423221][ T30] audit: type=1400 audit(1775273326.382:6269): avc: denied { read } for pid=21769 comm="syz.0.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1265.768429][T21788] ip_vti0: left promiscuous mode [ 1265.797060][T21788] team0: left allmulticast mode [ 1265.803259][T21788] team_slave_0: left allmulticast mode [ 1265.810101][T21788] team_slave_1: left allmulticast mode [ 1266.094325][T21788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1266.385141][T21798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3840'. [ 1266.871536][ T30] audit: type=1400 audit(1775273328.372:6270): avc: denied { watch watch_reads } for pid=21802 comm="syz.0.3842" path="/171" dev="tmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1267.059999][T21812] binder: 21810:21812 ioctl c0306201 0 returned -14 [ 1267.745192][T21819] gre0 speed is unknown, defaulting to 1000 [ 1268.373047][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1268.387413][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1268.426244][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1268.428150][T19946] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1268.441351][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1268.457510][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1268.470309][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1268.483266][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1268.494291][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1268.505287][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1268.544570][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1268.560713][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1268.584992][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1268.621846][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1268.661440][ T9] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1268.687803][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.713147][T19946] usb 5-1: config index 0 descriptor too short (expected 65535, got 18) [ 1268.720557][ T9] usb 3-1: Product: syz [ 1268.743743][ T9] usb 3-1: Manufacturer: syz [ 1268.759609][ T9] usb 3-1: SerialNumber: syz [ 1268.854525][T19946] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1268.932762][T19946] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1268.995754][T19946] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1269.076605][T21865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64645 sclass=netlink_route_socket pid=21865 comm=syz.0.3854 [ 1269.151101][T19946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.238014][T21868] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 1269.348079][ T5858] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1269.540440][T19946] usb 5-1: Product: syz [ 1269.551686][T19946] usb 5-1: Manufacturer: syz [ 1269.562241][T19946] usb 5-1: SerialNumber: syz [ 1269.667884][ T5858] usb 1-1: Using ep0 maxpacket: 8 [ 1269.674687][T19946] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 1269.702686][ T5858] usb 1-1: config 10 has an invalid interface number: 238 but max is 0 [ 1270.104129][T19946] usb 5-1: no configuration chosen from 1 choice [ 1270.124932][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1270.145039][ T5858] usb 1-1: config 10 has no interface number 0 [ 1271.027563][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1271.132832][ T5858] usb 1-1: config 10 interface 238 has no altsetting 0 [ 1271.182264][T19946] usb 5-1: USB disconnect, device number 122 [ 1271.334011][ T5858] usb 1-1: New USB device found, idVendor=0557, idProduct=7820, bcdDevice=49.d0 [ 1271.352509][T12188] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 1271.360947][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.360991][ T5858] usb 1-1: Product: syz [ 1271.361008][ T5858] usb 1-1: Manufacturer: syz [ 1271.361023][ T5858] usb 1-1: SerialNumber: syz [ 1271.428196][ T9] usb 3-1: USB disconnect, device number 16 [ 1271.958213][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1271.980250][T21889] __nla_validate_parse: 43 callbacks suppressed [ 1271.980268][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1272.072805][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1272.092837][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1272.126477][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1272.143664][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1272.148324][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1272.180039][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1272.204592][ T9] usb 3-1: New USB device found, idVendor=1b9c, idProduct=1c0b, bcdDevice= 0.00 [ 1272.236103][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1272.261297][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.291198][ T9] usb 3-1: config 0 descriptor?? [ 1272.308703][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1272.324171][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1272.347261][T12188] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 1272.364127][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1272.405370][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1273.320404][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1273.470774][ T5858] mos7840 1-1:10.238: required endpoints missing [ 1273.538853][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1273.553524][ T9] usb 3-1: USB disconnect, device number 17 [ 1273.581771][ T5858] usb 1-1: USB disconnect, device number 72 [ 1275.083309][ T30] audit: type=1400 audit(1775273335.282:6271): avc: denied { getopt } for pid=21897 comm="syz.3.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1275.402079][T12188] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1275.413726][T12188] Bluetooth: hci0: Injecting HCI hardware error event [ 1275.423851][ T5130] Bluetooth: hci0: hardware error 0x00 [ 1276.037900][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1276.546531][T21919] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 1276.641054][ T9] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 1276.670252][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.688619][T21921] overlayfs: failed to resolve './file0': -2 [ 1276.762543][ T9] usb 3-1: config 0 has no interface number 0 [ 1276.840828][ T9] usb 3-1: config 0 interface 159 has no altsetting 0 [ 1276.874837][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1277.017942][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1277.039836][ T9] usb 3-1: Product: syz [ 1277.045213][ T9] usb 3-1: SerialNumber: syz [ 1277.060502][ T9] usb 3-1: config 0 descriptor?? [ 1277.978192][ T5130] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1278.074094][T21928] netlink: 'syz.3.3873': attribute type 10 has an invalid length. [ 1278.107993][T21928] __nla_validate_parse: 43 callbacks suppressed [ 1278.108012][T21928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3873'. [ 1278.179619][T21911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.414732][T21911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.907454][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 1278.940840][T21946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3877'. [ 1278.967944][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 1279.010130][T21911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.020869][T21911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.038428][T21950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3877'. [ 1279.072668][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 1279.084391][ T10] usb 3-1: USB disconnect, device number 18 [ 1279.105302][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 1279.151678][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 1279.162756][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 1279.181707][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 1279.237277][ T7096] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.581300][ T30] audit: type=1400 audit(1775273340.932:6272): avc: denied { write } for pid=21956 comm="syz.3.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1279.581498][ T7096] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.300106][T20612] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.334013][T20612] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.570828][T19946] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1281.356263][T19946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1281.554495][ T5130] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 1281.591390][T19946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1281.675481][T19946] usb 4-1: New USB device found, idVendor=1b9c, idProduct=1c0b, bcdDevice= 0.00 [ 1281.696659][T19946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.726333][T19946] usb 4-1: config 0 descriptor?? [ 1281.897804][ T9] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1282.389989][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.404161][T19946] usbhid 4-1:0.0: can't add hid device: -71 [ 1282.413591][ T9] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1282.428368][T19946] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1282.448887][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.475491][T19946] usb 4-1: USB disconnect, device number 108 [ 1282.529284][ T9] usb 3-1: Product: syz [ 1282.541044][ T30] audit: type=1400 audit(1775273344.042:6273): avc: denied { create } for pid=22013 comm="syz.4.3886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1282.684178][ T9] usb 3-1: Manufacturer: syz [ 1282.697767][ T9] usb 3-1: SerialNumber: syz [ 1283.097908][T16423] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1283.139239][ T30] audit: type=1400 audit(1775273344.282:6274): avc: denied { write } for pid=22013 comm="syz.4.3886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1283.351275][ T9] usb 3-1: selecting invalid altsetting 1 [ 1283.404493][ T9] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 1283.404549][ T9] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 1283.424810][T16423] usb 5-1: Using ep0 maxpacket: 32 [ 1283.973436][T16423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.003280][ T9] usb 3-1: USB disconnect, device number 19 [ 1284.858638][T16423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.892340][T16423] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1284.931205][T16423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.971410][T16423] usb 5-1: config 0 descriptor?? [ 1284.989005][T19946] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1285.010901][T16423] hub 5-1:0.0: USB hub found [ 1285.167816][T19946] usb 2-1: Using ep0 maxpacket: 16 [ 1285.207950][T16423] hub 5-1:0.0: 1 port detected [ 1285.213050][T19946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1285.231853][T19946] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1285.286007][T19946] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1285.297225][T19946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.441648][T19946] usb 2-1: Product: syz [ 1285.447000][T19946] usb 2-1: Manufacturer: syz [ 1285.453605][T19946] usb 2-1: SerialNumber: syz [ 1286.057890][T17593] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1286.247858][T17593] usb 3-1: Using ep0 maxpacket: 16 [ 1286.273934][T22068] ªªªªªª: renamed from vlan0 (while UP) [ 1286.282313][T17593] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1286.351684][T17593] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1286.503755][T16423] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 1286.513338][T16423] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 1286.578262][T17593] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1286.620496][T17593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.654048][T17593] usb 3-1: Product: syz [ 1286.841350][T17593] usb 3-1: Manufacturer: syz [ 1287.107074][T16423] usbhid 5-1:0.0: can't add hid device: -71 [ 1287.110638][T19946] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1287.114352][T16423] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1287.125306][T17593] usb 3-1: SerialNumber: syz [ 1287.169096][T16423] usb 5-1: USB disconnect, device number 123 [ 1287.237455][T19946] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1287.289841][ T5130] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 1287.617590][T17593] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1287.675825][T19946] usb 2-1: USB disconnect, device number 123 [ 1287.800177][T17593] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1287.997636][T17593] usb 3-1: USB disconnect, device number 20 [ 1288.028851][T20632] udevd[20632]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1290.621071][T22113] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 1291.957420][ T5130] Bluetooth: hci5: unexpected event for opcode 0x0c25 [ 1292.568029][T17593] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1292.823508][T17593] usb 1-1: Using ep0 maxpacket: 16 [ 1292.874666][T17593] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1292.888838][T17593] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1292.907128][T17593] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1292.921462][T17593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.958927][T17593] usb 1-1: Product: syz [ 1293.191194][T17593] usb 1-1: Manufacturer: syz [ 1293.222581][T17593] usb 1-1: SerialNumber: syz [ 1294.338700][T22160] __nla_validate_parse: 47 callbacks suppressed [ 1294.338718][T22160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3916'. [ 1294.830729][T17593] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1294.831042][T17593] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1295.007536][T17593] usb 1-1: USB disconnect, device number 73 [ 1295.039669][T20944] udevd[20944]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1296.562639][ T5130] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 1296.690849][T22186] netlink: 'syz.2.3922': attribute type 10 has an invalid length. [ 1296.860113][T22186] batman_adv: batadv0: Adding interface: netdevsim0 [ 1296.895806][T22186] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.392492][T22186] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1299.657878][T17593] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1299.816136][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.824150][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.929827][T17593] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1300.118518][T17593] usb 5-1: config 0 has no interface number 0 [ 1300.140359][T17593] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1300.174794][T17593] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1300.199703][T17593] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1300.225574][T17593] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1300.387928][T17593] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1300.398077][T17593] usb 5-1: Product: syz [ 1300.403131][T17593] usb 5-1: SerialNumber: syz [ 1300.456959][T22232] veth7: entered promiscuous mode [ 1300.460254][T17593] usb 5-1: config 0 descriptor?? [ 1300.476397][T22232] veth7: entered allmulticast mode [ 1300.670992][ T5130] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 1300.690571][T17593] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1300.724087][T17593] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input77 [ 1300.886286][T22244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3935'. [ 1300.918350][T22211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.023801][T22211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.046732][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3935'. [ 1301.419310][T22211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.429643][T22211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.456708][T20612] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1301.481103][T20612] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1301.511919][T20612] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1301.512690][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1301.523317][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1301.541186][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1301.550141][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1301.559090][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1301.569036][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1301.578058][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1301.586621][T17593] usb 5-1: USB disconnect, device number 124 [ 1301.593920][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1301.593936][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1301.668602][T20612] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1301.690162][T17593] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1302.039032][T22257] netlink: 'syz.0.3936': attribute type 10 has an invalid length. [ 1302.048650][T22257] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3936'. [ 1303.951537][ T30] audit: type=1400 audit(1775273365.452:6275): avc: denied { read } for pid=22279 comm="syz.0.3943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1304.033127][ T30] audit: type=1400 audit(1775273365.512:6276): avc: denied { read } for pid=22279 comm="syz.0.3943" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1304.224865][ T30] audit: type=1400 audit(1775273365.512:6277): avc: denied { open } for pid=22279 comm="syz.0.3943" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1304.345367][ T5130] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 1304.388581][ T30] audit: type=1400 audit(1775273365.512:6278): avc: denied { ioctl } for pid=22279 comm="syz.0.3943" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1304.448080][ T30] audit: type=1400 audit(1775273365.512:6279): avc: denied { setopt } for pid=22279 comm="syz.0.3943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1305.267181][ T5887] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1305.557986][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 1305.602818][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1305.869244][ T5887] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1305.913921][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.952815][ T5887] usb 1-1: Product: syz [ 1305.969195][ T5887] usb 1-1: Manufacturer: syz [ 1305.994903][ T5887] usb 1-1: SerialNumber: syz [ 1306.867282][ T30] audit: type=1400 audit(1775273368.362:6280): avc: denied { wake_alarm } for pid=22303 comm="syz.1.3949" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1307.899791][ T5887] usb 1-1: can't set config #1, error -71 [ 1307.915022][ T5887] usb 1-1: USB disconnect, device number 74 [ 1308.047933][T22313] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1308.617856][ T5858] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1308.819710][ T5858] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1308.838019][ T5858] usb 1-1: config 0 has no interface number 0 [ 1308.855993][ T5858] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1308.900284][ T5858] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1309.196174][ T5858] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1309.223696][ T5858] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1309.270376][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1309.300907][ T5858] usb 1-1: Product: syz [ 1309.313433][ T5858] usb 1-1: SerialNumber: syz [ 1309.333856][ T5858] usb 1-1: config 0 descriptor?? [ 1309.353396][ T5858] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1309.371353][ T5858] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input78 [ 1309.499894][T22335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3957'. [ 1309.528993][T22335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3957'. [ 1309.604748][T22318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.644848][ T30] audit: type=1400 audit(1775273371.072:6281): avc: denied { accept } for pid=22330 comm="syz.2.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1309.673753][ T1040] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1309.737051][T22318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.760538][ T1040] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1309.876789][ T1040] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1310.110199][T22339] netlink: 'syz.3.3953': attribute type 5 has an invalid length. [ 1310.232491][ T1040] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.112838][T22318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.113092][T22318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.226027][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1312.227428][T20283] usb 1-1: USB disconnect, device number 75 [ 1312.234359][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1312.312710][ T5130] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 1312.522210][T20283] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1312.610227][T22377] netlink: 'syz.2.3964': attribute type 1 has an invalid length. [ 1312.625826][ T30] audit: type=1400 audit(1775273374.072:6282): avc: denied { read } for pid=22370 comm="syz.0.3966" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1312.831364][T22377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1312.849429][T22380] bond1: (slave geneve2): making interface the new active one [ 1312.861395][T22380] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1312.882488][T22379] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3966'. [ 1312.937484][ T30] audit: type=1400 audit(1775273374.072:6283): avc: denied { open } for pid=22370 comm="syz.0.3966" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1312.967865][T22382] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3966'. [ 1312.967883][ T30] audit: type=1400 audit(1775273374.082:6284): avc: denied { ioctl } for pid=22370 comm="syz.0.3966" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1313.091752][T22384] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1313.188014][ T30] audit: type=1400 audit(1775273374.092:6285): avc: denied { bind } for pid=22368 comm="syz.2.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1313.215975][ T30] audit: type=1400 audit(1775273374.092:6286): avc: denied { write } for pid=22368 comm="syz.2.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1314.418301][T22403] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 1314.452176][ T30] audit: type=1400 audit(1775273375.952:6287): avc: denied { write } for pid=22398 comm="syz.4.3974" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1314.517643][T22402] random: crng reseeded on system resumption [ 1314.874043][ T30] audit: type=1400 audit(1775273376.012:6288): avc: denied { open } for pid=22398 comm="syz.4.3974" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1315.475665][T22417] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1315.487811][ T5858] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1315.611197][T22426] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3982'. [ 1315.648268][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 1315.659152][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.688148][ T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1315.690297][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.727902][ T5858] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1315.739076][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.767903][ T5858] usb 1-1: config 0 descriptor?? [ 1315.857810][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1315.872499][ T10] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.887865][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1315.895795][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1315.996345][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.010627][ T5858] usbhid 1-1:0.0: can't add hid device: -71 [ 1316.023772][ T5858] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1316.050619][ T10] usb 4-1: config 0 descriptor?? [ 1316.266953][ T5858] usb 1-1: USB disconnect, device number 76 [ 1316.770521][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1316.868003][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1316.943954][ T10] usb 4-1: USB disconnect, device number 109 [ 1317.097410][T22447] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 1317.364206][T22452] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.011997][T22463] random: crng reseeded on system resumption [ 1318.296034][T22459] veth9: entered promiscuous mode [ 1318.309817][T22459] veth9: entered allmulticast mode [ 1318.362143][T22452] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.580060][T22452] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.653175][T22452] batman_adv: batadv0: Removing interface: netdevsim0 [ 1318.665156][T22452] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.696538][T22471] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.709651][T22471] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.885298][T22475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3994'. [ 1319.179574][T22471] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.219947][T22471] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.262676][T19338] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.287655][T22479] netlink: 'syz.4.3995': attribute type 10 has an invalid length. [ 1319.302671][T22471] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.318976][T22471] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.331271][T22479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3995'. [ 1319.355796][T20612] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.382846][T20612] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.408519][T22471] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.427615][T22471] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.468588][T20612] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.526024][T19338] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1319.540423][T19338] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.709334][T20612] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1319.719491][T20612] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.381718][T19338] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1320.401130][T19338] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.457259][T19338] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1320.467988][T19338] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.617910][ T10] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1320.717786][ T5960] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1320.777880][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1320.786034][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1320.797219][ T10] usb 1-1: config 1 has an invalid interface number: 151 but max is 0 [ 1320.809516][ T1558] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1320.818867][ T10] usb 1-1: config 1 has no interface number 0 [ 1320.826344][ T10] usb 1-1: config 1 interface 151 altsetting 6 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1320.839545][ T10] usb 1-1: config 1 interface 151 has no altsetting 0 [ 1320.850233][ T10] usb 1-1: string descriptor 0 read error: -22 [ 1320.853869][T22505] FAULT_INJECTION: forcing a failure. [ 1320.853869][T22505] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.857700][ T10] usb 1-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1320.874176][T22505] CPU: 1 UID: 0 PID: 22505 Comm: syz.3.4002 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.874200][T22505] Tainted: [L]=SOFTLOCKUP [ 1320.874205][T22505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1320.874214][T22505] Call Trace: [ 1320.874219][T22505] [ 1320.874229][T22505] dump_stack_lvl+0x100/0x190 [ 1320.874258][T22505] should_fail_ex.cold+0x5/0xa [ 1320.874279][T22505] ? tomoyo_encode2+0xfb/0x3c0 [ 1320.874301][T22505] should_failslab+0xc2/0x120 [ 1320.874318][T22505] __kmalloc_noprof+0xe0/0x850 [ 1320.874340][T22505] ? d_absolute_path+0x136/0x1b0 [ 1320.874366][T22505] tomoyo_encode2+0xfb/0x3c0 [ 1320.874392][T22505] tomoyo_encode+0x29/0x50 [ 1320.874413][T22505] tomoyo_realpath_from_path+0x18c/0x690 [ 1320.874441][T22505] tomoyo_path_number_perm+0x23c/0x580 [ 1320.874461][T22505] ? tomoyo_path_number_perm+0x22e/0x580 [ 1320.874482][T22505] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1320.874524][T22505] ? find_held_lock+0x2b/0x80 [ 1320.874543][T22505] ? __fget_files+0x215/0x3d0 [ 1320.874559][T22505] ? hook_file_ioctl_common+0x146/0x410 [ 1320.874580][T22505] ? __fget_files+0x21f/0x3d0 [ 1320.874600][T22505] security_file_ioctl+0xd3/0x230 [ 1320.874624][T22505] __x64_sys_ioctl+0xb7/0x210 [ 1320.874648][T22505] do_syscall_64+0x106/0xf80 [ 1320.874670][T22505] ? clear_bhb_loop+0x40/0x90 [ 1320.874689][T22505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.874704][T22505] RIP: 0033:0x7f4c60b9c819 [ 1320.874718][T22505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.874732][T22505] RSP: 002b:00007f4c61a67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1320.874748][T22505] RAX: ffffffffffffffda RBX: 00007f4c60e15fa0 RCX: 00007f4c60b9c819 [ 1320.874758][T22505] RDX: 0000200000000540 RSI: 00000000c0205647 RDI: 0000000000000006 [ 1320.874767][T22505] RBP: 00007f4c61a67090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.874776][T22505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.874785][T22505] R13: 00007f4c60e16038 R14: 00007f4c60e15fa0 R15: 00007ffc553a72b8 [ 1320.874807][T22505] [ 1320.875284][T22505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1320.884513][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.900305][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 1320.906351][T22493] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1320.925044][ T5960] usb 5-1: config index 0 descriptor too short (expected 530, got 18) [ 1320.937247][ T10] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1320.944619][ T5960] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.019204][ T1558] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1321.019775][ T5960] usb 5-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1321.026166][ T1558] usb 2-1: config 0 has no interface number 0 [ 1321.085672][ T5960] usb 5-1: New USB device found, idVendor=05c4, idProduct=120a, bcdDevice=37.32 [ 1321.154112][ T1558] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1321.175694][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.190153][ T1558] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1321.193825][ T5960] usb 5-1: Product: syz [ 1321.209368][ T1558] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1321.303948][ T1558] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1321.317138][ T1558] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1321.327417][ T1558] usb 2-1: Product: syz [ 1321.332638][ T1558] usb 2-1: SerialNumber: syz [ 1321.342335][ T5960] usb 5-1: Manufacturer: syz [ 1321.348823][ T5960] usb 5-1: SerialNumber: syz [ 1321.378944][ T1558] usb 2-1: config 0 descriptor?? [ 1321.891399][ T10] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -110 [ 1321.901260][ T10] pac7311 1-1:1.151: probe with driver pac7311 failed with error -110 [ 1321.941377][ T1558] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1321.953288][ T1558] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input79 [ 1321.956764][T22510] gre0 speed is unknown, defaulting to 1000 [ 1321.991395][T22496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1322.087816][T22498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.098881][T22498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.723533][T22491] openvswitch: netlink: Tunnel attr 9 has unexpected len 80 expected 2 [ 1322.866268][T22498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.876799][T22498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.897390][ T29] usb 1-1: USB disconnect, device number 77 [ 1322.944553][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1322.953097][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1322.962569][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1322.971241][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1322.980227][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1322.989281][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1322.998052][ T1558] usb 2-1: USB disconnect, device number 124 [ 1323.005339][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1323.005355][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1323.033405][ T1558] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1323.067815][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1323.095582][ T5960] usb 5-1: USB disconnect, device number 125 [ 1324.273522][T22535] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 1324.868051][ T30] audit: type=1400 audit(1775273386.362:6289): avc: denied { write } for pid=22564 comm="syz.0.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1325.198050][ T10] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1325.318125][T20283] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 1325.459119][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.473510][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1325.905146][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1325.916508][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.936797][T20283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1325.994728][ T10] usb 1-1: config 0 descriptor?? [ 1326.005806][T20283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.025302][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1326.036634][T20283] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1326.062225][T20283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.631403][T20283] usb 5-1: config 0 descriptor?? [ 1326.638721][T22580] FAULT_INJECTION: forcing a failure. [ 1326.638721][T22580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.661889][T20283] hub 5-1:0.0: USB hub found [ 1326.800316][T22586] veth9: entered promiscuous mode [ 1326.816745][T22586] veth9: entered allmulticast mode [ 1326.857313][T22580] CPU: 1 UID: 0 PID: 22580 Comm: syz.3.4014 Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.857342][T22580] Tainted: [L]=SOFTLOCKUP [ 1326.857348][T22580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1326.857358][T22580] Call Trace: [ 1326.857362][T22580] [ 1326.857366][T22580] dump_stack_lvl+0x100/0x190 [ 1326.857389][T22580] should_fail_ex.cold+0x5/0xa [ 1326.857404][T22580] _copy_to_user+0x32/0xd0 [ 1326.857419][T22580] sctp_getsockopt+0x3485/0x7100 [ 1326.857442][T22580] ? find_held_lock+0x2b/0x80 [ 1326.857464][T22580] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1326.857482][T22580] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1326.857501][T22580] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1326.857515][T22580] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1326.857529][T22580] ? avc_has_perm+0x135/0x1e0 [ 1326.857541][T22580] ? __pfx_avc_has_perm+0x10/0x10 [ 1326.857555][T22580] ? __lock_acquire+0x4a5/0x2630 [ 1326.857571][T22580] ? sock_has_perm+0x258/0x2f0 [ 1326.857601][T22580] ? find_held_lock+0x2b/0x80 [ 1326.857620][T22580] ? __might_fault+0xc5/0x140 [ 1326.857642][T22580] ? __might_fault+0xc5/0x140 [ 1326.857662][T22580] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1326.857681][T22580] do_sock_getsockopt+0x259/0x3d0 [ 1326.857692][T22580] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1326.857719][T22580] __sys_getsockopt+0x148/0x260 [ 1326.857749][T22580] ? __x64_sys_getsockopt+0xbd/0x160 [ 1326.857771][T22580] __x64_sys_getsockopt+0xbd/0x160 [ 1326.857793][T22580] ? do_syscall_64+0x95/0xf80 [ 1326.857820][T22580] ? lockdep_hardirqs_on+0x78/0x100 [ 1326.857846][T22580] do_syscall_64+0x106/0xf80 [ 1326.857904][T22580] ? clear_bhb_loop+0x40/0x90 [ 1326.857926][T22580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.857944][T22580] RIP: 0033:0x7f4c60b9c819 [ 1326.857961][T22580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1326.857977][T22580] RSP: 002b:00007f4c61a67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1326.857996][T22580] RAX: ffffffffffffffda RBX: 00007f4c60e15fa0 RCX: 00007f4c60b9c819 [ 1326.858008][T22580] RDX: 0000000000000014 RSI: 0000000000000084 RDI: 0000000000000003 [ 1326.858018][T22580] RBP: 00007f4c61a67090 R08: 0000200000000300 R09: 0000000000000000 [ 1326.858029][T22580] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.858040][T22580] R13: 00007f4c60e16038 R14: 00007f4c60e15fa0 R15: 00007ffc553a72b8 [ 1326.858065][T22580] [ 1327.456046][T22596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.475707][T20283] hub 5-1:0.0: 9 ports detected [ 1327.478428][T22596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.493024][T22589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1327.494195][T20283] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1327.957869][ T1558] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1328.015844][ T9] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1328.032883][T18440] usb 5-1: Failed to suspend device, error -71 [ 1328.038125][T20283] usb 5-1: USB disconnect, device number 126 [ 1328.483038][ T1558] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1328.499288][ T1558] usb 2-1: config 0 has no interface number 0 [ 1328.581649][ T1558] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1328.607811][ T1558] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1328.621207][ T1558] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1328.634433][ T1558] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1328.645433][ T1558] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1328.692941][ T10] usb 1-1: USB disconnect, device number 78 [ 1328.707001][ T1558] usb 2-1: Product: syz [ 1328.727850][ T1558] usb 2-1: SerialNumber: syz [ 1328.750704][ T1558] usb 2-1: config 0 descriptor?? [ 1328.782050][ T1558] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1328.819477][ T1558] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input80 [ 1328.971343][T22598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.999021][T22598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.038978][T22606] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1329.149265][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1329.577782][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1329.594355][ T10] usb 1-1: config index 0 descriptor too short (expected 530, got 18) [ 1329.594374][ T10] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.594385][ T10] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1329.596852][ T10] usb 1-1: New USB device found, idVendor=05c4, idProduct=120a, bcdDevice=37.32 [ 1329.596869][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.596883][ T10] usb 1-1: Product: syz [ 1329.596892][ T10] usb 1-1: Manufacturer: syz [ 1329.596900][ T10] usb 1-1: SerialNumber: syz [ 1329.843752][T22598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.844030][T22598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.899293][ T10] usb 1-1: USB disconnect, device number 79 [ 1329.910847][ T30] audit: type=1400 audit(1775273391.412:6290): avc: denied { setopt } for pid=22615 comm="syz.3.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1330.162709][T22618] /dev/nullb0: Can't open blockdev [ 1331.877944][ T29] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1332.093896][ T29] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1332.128932][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1332.137508][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1332.146064][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1332.155039][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1332.160211][ T29] usb 3-1: config 0 has no interface number 0 [ 1332.163579][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1332.179393][T20283] usb 2-1: USB disconnect, device number 125 [ 1332.186777][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1332.186796][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1332.226577][ T29] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1332.256566][ T29] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1332.376378][ T29] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1332.389931][ T29] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1332.406695][ T29] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1332.431140][T20283] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1332.438447][ T29] usb 3-1: Product: syz [ 1332.448162][ T29] usb 3-1: SerialNumber: syz [ 1332.482161][ T29] usb 3-1: config 0 descriptor?? [ 1332.518313][ T29] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1332.567010][T22672] netlink: 'syz.1.4029': attribute type 1 has an invalid length. [ 1332.583415][T22672] syzkaller1: entered promiscuous mode [ 1332.590060][T22672] syzkaller1: entered allmulticast mode [ 1332.605481][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input81 [ 1332.851018][T22675] gre0 speed is unknown, defaulting to 1000 [ 1332.959049][T22623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.978074][T22623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.383045][ T29] ------------[ cut here ]------------ [ 1333.383071][ T29] URB ffff88807274a400 submitted while active [ 1333.383085][ T29] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#1: kworker/1:1/29 [ 1333.383126][ T29] Modules linked in: [ 1333.383162][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.383190][ T29] Tainted: [L]=SOFTLOCKUP [ 1333.383200][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1333.383215][ T29] Workqueue: usb_hub_wq hub_event [ 1333.383247][ T29] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 1333.383273][ T29] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 fd 38 b7 fa 48 8d 3d e6 c8 94 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 1333.383294][ T29] RSP: 0000:ffffc90000a56e50 EFLAGS: 00010283 [ 1333.383311][ T29] RAX: 00000000000978f4 RBX: ffff88807274a400 RCX: ffffc9001a8a8000 [ 1333.383325][ T29] RDX: 0000000000100000 RSI: ffff88807274a400 RDI: ffffffff90e68d10 [ 1333.383338][ T29] RBP: ffff888055513d00 R08: 0000000000000000 R09: fffffbfff21b3a02 [ 1333.383352][ T29] R10: ffffc90000a56ed8 R11: 0000000000000000 R12: ffff888075f750a0 [ 1333.383366][ T29] R13: ffff888075f75010 R14: ffff888075f7509f R15: ffff888075f75050 [ 1333.383381][ T29] FS: 0000000000000000(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 1333.383401][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1333.383415][ T29] CR2: 0000200000032000 CR3: 00000000430da000 CR4: 00000000003526f0 [ 1333.383429][ T29] Call Trace: [ 1333.383437][ T29] [ 1333.383445][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 1333.383476][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1333.383507][ T29] ? __pm_runtime_resume+0xc3/0x170 [ 1333.383533][ T29] cm109_input_open+0x27a/0x450 [ 1333.383564][ T29] ? __pfx_cm109_input_open+0x10/0x10 [ 1333.383592][ T29] input_open_device+0x24c/0x3d0 [ 1333.383619][ T29] kbd_connect+0x124/0x180 [ 1333.383647][ T29] input_attach_handler.isra.0+0x177/0x1e0 [ 1333.383681][ T29] input_register_device.cold+0x139/0x375 [ 1333.383716][ T29] cm109_usb_probe+0x128d/0x17f0 [ 1333.383758][ T29] usb_probe_interface+0x303/0x8f0 [ 1333.383784][ T29] ? __pfx_usb_probe_interface+0x10/0x10 [ 1333.383809][ T29] really_probe+0x241/0xa60 [ 1333.383834][ T29] __driver_probe_device+0x1de/0x400 [ 1333.383860][ T29] driver_probe_device+0x4c/0x1b0 [ 1333.383887][ T29] __device_attach_driver+0x1df/0x340 [ 1333.383911][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 1333.383933][ T29] bus_for_each_drv+0x159/0x1e0 [ 1333.383982][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1333.384011][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 1333.384043][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1333.384078][ T29] __device_attach+0x1e4/0x4d0 [ 1333.384101][ T29] ? __pfx___device_attach+0x10/0x10 [ 1333.384124][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 1333.384153][ T29] device_initial_probe+0xaf/0xd0 [ 1333.384176][ T29] bus_probe_device+0x64/0x160 [ 1333.384208][ T29] device_add+0x11d9/0x1950 [ 1333.384236][ T29] ? __pfx_device_add+0x10/0x10 [ 1333.384270][ T29] usb_set_configuration+0xd97/0x1c60 [ 1333.384317][ T29] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1333.384344][ T29] usb_generic_driver_probe+0xa1/0xe0 [ 1333.384372][ T29] usb_probe_device+0xef/0x400 [ 1333.384402][ T29] ? __pfx_usb_probe_device+0x10/0x10 [ 1333.384434][ T29] really_probe+0x241/0xa60 [ 1333.384458][ T29] __driver_probe_device+0x1de/0x400 [ 1333.384477][ T29] ? usb_driver_applicable+0x1c7/0x220 [ 1333.384500][ T29] driver_probe_device+0x4c/0x1b0 [ 1333.384522][ T29] __device_attach_driver+0x1df/0x340 [ 1333.384545][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 1333.384565][ T29] bus_for_each_drv+0x159/0x1e0 [ 1333.384592][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1333.384620][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 1333.384650][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1333.384684][ T29] __device_attach+0x1e4/0x4d0 [ 1333.384705][ T29] ? __pfx___device_attach+0x10/0x10 [ 1333.384726][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 1333.384756][ T29] device_initial_probe+0xaf/0xd0 [ 1333.384778][ T29] bus_probe_device+0x64/0x160 [ 1333.384812][ T29] device_add+0x11d9/0x1950 [ 1333.384838][ T29] ? __pfx_device_add+0x10/0x10 [ 1333.384860][ T29] ? add_device_randomness+0xb7/0xf0 [ 1333.384914][ T29] usb_new_device.cold+0x685/0x115c [ 1333.384968][ T29] ? do_raw_spin_lock+0x128/0x260 [ 1333.384993][ T29] ? __pfx_usb_new_device+0x10/0x10 [ 1333.385023][ T29] ? mark_held_locks+0x40/0x70 [ 1333.385049][ T29] hub_event+0x314d/0x4af0 [ 1333.385108][ T29] ? __pfx_hub_event+0x10/0x10 [ 1333.385135][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 1333.385178][ T29] ? rcu_is_watching+0x12/0xc0 [ 1333.385209][ T29] process_one_work+0xa23/0x19a0 [ 1333.385247][ T29] ? __pfx_process_one_work+0x10/0x10 [ 1333.385278][ T29] ? __pfx_hub_event+0x10/0x10 [ 1333.385310][ T29] worker_thread+0x5ef/0xe50 [ 1333.385345][ T29] ? kthread+0x13a/0x450 [ 1333.385364][ T29] ? __pfx_worker_thread+0x10/0x10 [ 1333.385385][ T29] kthread+0x370/0x450 [ 1333.385405][ T29] ? __pfx_kthread+0x10/0x10 [ 1333.385426][ T29] ret_from_fork+0x754/0xd80 [ 1333.385450][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 1333.385476][ T29] ? __switch_to+0x7b4/0x1120 [ 1333.385503][ T29] ? __pfx_kthread+0x10/0x10 [ 1333.385527][ T29] ret_from_fork_asm+0x1a/0x30 [ 1333.385566][ T29] [ 1333.385578][ T29] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1333.385594][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.385620][ T29] Tainted: [L]=SOFTLOCKUP [ 1333.385628][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1333.385641][ T29] Workqueue: usb_hub_wq hub_event [ 1333.385669][ T29] Call Trace: [ 1333.385676][ T29] [ 1333.385683][ T29] dump_stack_lvl+0x100/0x190 [ 1333.385716][ T29] vpanic+0x552/0x970 [ 1333.385736][ T29] ? __pfx_vpanic+0x10/0x10 [ 1333.385764][ T29] panic+0xd1/0xe0 [ 1333.385784][ T29] ? __pfx_panic+0x10/0x10 [ 1333.385817][ T29] check_panic_on_warn.cold+0x19/0x34 [ 1333.385839][ T29] ? usb_submit_urb+0x15fa/0x1910 [ 1333.385861][ T29] __warn.cold+0x191/0x348 [ 1333.385890][ T29] __report_bug+0x296/0x3d0 [ 1333.385917][ T29] ? usb_submit_urb+0x15fa/0x1910 [ 1333.385945][ T29] ? __pfx___report_bug+0x10/0x10 [ 1333.385986][ T29] ? preempt_schedule_common+0x42/0xc0 [ 1333.386016][ T29] ? preempt_schedule_thunk+0x16/0x30 [ 1333.386051][ T29] report_bug_entry+0xe1/0x290 [ 1333.386080][ T29] ? usb_submit_urb+0x15fd/0x1910 [ 1333.386103][ T29] handle_bug+0x1cd/0x2a0 [ 1333.386126][ T29] exc_invalid_op+0x17/0x50 [ 1333.386147][ T29] asm_exc_invalid_op+0x1a/0x20 [ 1333.386167][ T29] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 1333.386191][ T29] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 fd 38 b7 fa 48 8d 3d e6 c8 94 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 1333.386211][ T29] RSP: 0000:ffffc90000a56e50 EFLAGS: 00010283 [ 1333.386226][ T29] RAX: 00000000000978f4 RBX: ffff88807274a400 RCX: ffffc9001a8a8000 [ 1333.386238][ T29] RDX: 0000000000100000 RSI: ffff88807274a400 RDI: ffffffff90e68d10 [ 1333.386250][ T29] RBP: ffff888055513d00 R08: 0000000000000000 R09: fffffbfff21b3a02 [ 1333.386263][ T29] R10: ffffc90000a56ed8 R11: 0000000000000000 R12: ffff888075f750a0 [ 1333.386275][ T29] R13: ffff888075f75010 R14: ffff888075f7509f R15: ffff888075f75050 [ 1333.386302][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 1333.386333][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1333.386361][ T29] ? __pm_runtime_resume+0xc3/0x170 [ 1333.386385][ T29] cm109_input_open+0x27a/0x450 [ 1333.386411][ T29] ? __pfx_cm109_input_open+0x10/0x10 [ 1333.386436][ T29] input_open_device+0x24c/0x3d0 [ 1333.386461][ T29] kbd_connect+0x124/0x180 [ 1333.386486][ T29] input_attach_handler.isra.0+0x177/0x1e0 [ 1333.386517][ T29] input_register_device.cold+0x139/0x375 [ 1333.386547][ T29] cm109_usb_probe+0x128d/0x17f0 [ 1333.386582][ T29] usb_probe_interface+0x303/0x8f0 [ 1333.386598][ T29] ? __pfx_usb_probe_interface+0x10/0x10 [ 1333.386610][ T29] really_probe+0x241/0xa60 [ 1333.386623][ T29] __driver_probe_device+0x1de/0x400 [ 1333.386636][ T29] driver_probe_device+0x4c/0x1b0 [ 1333.386651][ T29] __device_attach_driver+0x1df/0x340 [ 1333.386671][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 1333.386688][ T29] bus_for_each_drv+0x159/0x1e0 [ 1333.386713][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1333.386736][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 1333.386754][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1333.386772][ T29] __device_attach+0x1e4/0x4d0 [ 1333.386784][ T29] ? __pfx___device_attach+0x10/0x10 [ 1333.386797][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 1333.386824][ T29] device_initial_probe+0xaf/0xd0 [ 1333.386844][ T29] bus_probe_device+0x64/0x160 [ 1333.386872][ T29] device_add+0x11d9/0x1950 [ 1333.386894][ T29] ? __pfx_device_add+0x10/0x10 [ 1333.386913][ T29] usb_set_configuration+0xd97/0x1c60 [ 1333.386940][ T29] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1333.386964][ T29] usb_generic_driver_probe+0xa1/0xe0 [ 1333.386988][ T29] usb_probe_device+0xef/0x400 [ 1333.387015][ T29] ? __pfx_usb_probe_device+0x10/0x10 [ 1333.387036][ T29] really_probe+0x241/0xa60 [ 1333.387049][ T29] __driver_probe_device+0x1de/0x400 [ 1333.387061][ T29] ? usb_driver_applicable+0x1c7/0x220 [ 1333.387074][ T29] driver_probe_device+0x4c/0x1b0 [ 1333.387089][ T29] __device_attach_driver+0x1df/0x340 [ 1333.387110][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 1333.387127][ T29] bus_for_each_drv+0x159/0x1e0 [ 1333.387151][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1333.387171][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 1333.387189][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1333.387208][ T29] __device_attach+0x1e4/0x4d0 [ 1333.387220][ T29] ? __pfx___device_attach+0x10/0x10 [ 1333.387236][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 1333.387264][ T29] device_initial_probe+0xaf/0xd0 [ 1333.387283][ T29] bus_probe_device+0x64/0x160 [ 1333.387309][ T29] device_add+0x11d9/0x1950 [ 1333.387324][ T29] ? __pfx_device_add+0x10/0x10 [ 1333.387337][ T29] ? add_device_randomness+0xb7/0xf0 [ 1333.387360][ T29] usb_new_device.cold+0x685/0x115c [ 1333.387383][ T29] ? do_raw_spin_lock+0x128/0x260 [ 1333.387404][ T29] ? __pfx_usb_new_device+0x10/0x10 [ 1333.387431][ T29] ? mark_held_locks+0x40/0x70 [ 1333.387451][ T29] hub_event+0x314d/0x4af0 [ 1333.387481][ T29] ? __pfx_hub_event+0x10/0x10 [ 1333.387497][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 1333.387526][ T29] ? rcu_is_watching+0x12/0xc0 [ 1333.387554][ T29] process_one_work+0xa23/0x19a0 [ 1333.387585][ T29] ? __pfx_process_one_work+0x10/0x10 [ 1333.387605][ T29] ? __pfx_hub_event+0x10/0x10 [ 1333.387623][ T29] worker_thread+0x5ef/0xe50 [ 1333.387641][ T29] ? kthread+0x13a/0x450 [ 1333.387652][ T29] ? __pfx_worker_thread+0x10/0x10 [ 1333.387671][ T29] kthread+0x370/0x450 [ 1333.387690][ T29] ? __pfx_kthread+0x10/0x10 [ 1333.387710][ T29] ret_from_fork+0x754/0xd80 [ 1333.387731][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 1333.387752][ T29] ? __switch_to+0x7b4/0x1120 [ 1333.387773][ T29] ? __pfx_kthread+0x10/0x10 [ 1333.387793][ T29] ret_from_fork_asm+0x1a/0x30 [ 1333.387829][ T29] [ 1333.388111][ T29] Kernel Offset: disabled