last executing test programs: 9.982059909s ago: executing program 1 (id=2079): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@ifindex, r2, 0x2f}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)={@ifindex, r4, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback=r4, r6, 0x2f, 0x2030, 0x4, @void, @void, @value=r7}, 0x20) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@my=0x0, 0x2}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) close_range(r0, 0xffffffffffffffff, 0x0) 9.633238941s ago: executing program 1 (id=2081): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x6a3, 0xccd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x10, 0xa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0xa, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x873}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xfc, 0x9b}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x7, 0x81}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xe, 0xf9, 0x3, 0x10, 0x6}, 0x44, &(0x7f0000000180)={0x5, 0xf, 0x44, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0xe, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x100, 0xf, 0x1, [0xff00f0, 0xc0, 0xc030, 0xcf, 0x4130, 0xffc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "5cb2c72962257ef8c5339ed72dbfc565"}]}, 0x1, [{0x8, &(0x7f0000000200)=@string={0x8, 0x3, "5a8c88f99c2f"}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000580)={0x24, &(0x7f0000000380)={0x0, 0x9, 0x87, {0x87, 0x2, "f6b65302b13c2f996e67d99bc4339ce24217b39bd5ae88d8265155599aa9e4bf4b3bb086abe417435c2e8c92c37eb4d6789218c173920a4fd8a906ee6d0985533fdf0e2ea9c8342d05bb7460166c1bcc19d86553395acabf563d370851ab3cd17dbbb6c0ec5637205493cd7bb6b339ab3996e99317eb49ca67f95c32bb694b3328754829f6"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, &(0x7f0000000500)={0x0, 0x22, 0x1c, {[@main=@item_012={0x2, 0x0, 0xb, "9cf4"}, @main=@item_4={0x3, 0x0, 0x9, "c47d591f"}, @main=@item_4={0x3, 0x0, 0xb, "fbcbe496"}, @local=@item_4={0x3, 0x2, 0x9, "c356326b"}, @local=@item_4={0x3, 0x2, 0x0, "5fd10cc2"}, @main=@item_4={0x3, 0x0, 0x0, "c2f6ee46"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x49b}}}}, &(0x7f0000000800)={0x2c, &(0x7f00000005c0)={0x40, 0x31, 0x17, "640a5d489594ff863df157c5a36c6338510ad8656bb9d7"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x1, 0xe8, "0bf321096f1f5b5f4f9c0f6a6630d6e85003f8a1965fa25758f2a07fa39ca03916a3ad00ec4819682a761578f75df9a88fe32e62827ce0c7e2ef9dc17ceee972d1d47bf89f22a4064da1a7d9a00385fc24248e9db02d081c26c8348d773e3f1abf6e55400200e7714365846ba2c2e066d8076d748c9b68f630c23a5f779478098888764a9b1201c1940a531369693ef4c4484b5ea347ec6674262ae865252a3a3c0d2921df836985ec12f513cbeca66cff772500cebe1e7ecbb71ca4105de226d31275366fdf8bb1eb742e45028243cb27cfc4b0a51800c3b9bc3429386a443d64573acbb157015f"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x2}}) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={r2, r3+10000000}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xfffffee2) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r5, 0xc0207511, &(0x7f0000000840)={0x0, 0xffff, 0x0, 0x0, 0x0}) timer_create(0xd13542737e3b7b6c, &(0x7f0000000900)={0x0, 0x38, 0x1, @tid=r6}, &(0x7f00000009c0)) r7 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000480)=0x0) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r9, 0xe) 9.357327172s ago: executing program 4 (id=2083): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) r4 = socket(0x2, 0x805, 0x0) r5 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x8000, 0x5, 0x7, 0x100, 0x2, 0x6, 0xc, 0x2, r6}, 0x20) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0xa5b0e764, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x1, 0x0, 0x1000000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x80000000, 0xfffffff9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x7, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x27], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x4000, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xfffffffb, 0x806, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000300)={0x2020}, 0x2020) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 9.155246272s ago: executing program 2 (id=2084): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"76ed837b6f00", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.247635881s ago: executing program 2 (id=2086): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) r4 = socket(0x2, 0x805, 0x0) r5 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x8000, 0x5, 0x7, 0x100, 0x2, 0x6, 0xc, 0x2, r6}, 0x20) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x150, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x150, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2000, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x0, 0x0, 0x4, 0x1], 0x2, 0x1}, {0x1, [0x2, 0x2, 0x6, 0x1, 0x6, 0x1], 0x1, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xffffff, 'wlan0\x00', 'vcan0\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2e0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0xa5b0e764, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x1, 0x0, 0x1000000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x80000000, 0xfffffff9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x7, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x27], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x4000, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xfffffffb, 0x806, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000300)={0x2020}, 0x2020) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="0003840000008403816fb7ad8331ad6280563f770aafac04ec4c870ac3a2368823db14b49e76f009bb0c6b93107dc2609d547f1f805bf1008d942ee7c98bb1a99057ffe411ef31d90d07566e528ba7ab71930549935acb3c65bc7dfe91a39349b5796e9b100ccaef666cc8aca17fcfb778b0f94201221bc41fa7132a95bc2cc098"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 7.640235866s ago: executing program 4 (id=2087): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$video4linux(0x0, 0x4, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121a03, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) 6.90114634s ago: executing program 4 (id=2089): socket(0x10, 0x803, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(0x0, 0xfff, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3, 0x1000000}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x40000cf, 0x0) 6.806645161s ago: executing program 0 (id=2091): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001300)=r4, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r5 = dup(r0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r9 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r9, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) recvfrom$inet_nvme(r9, 0x0, 0x0, 0x20, &(0x7f00000003c0)=@l2={0x1f, 0x4, @any, 0x8, 0x2}, 0x80) r10 = syz_open_dev$vcsa(0x0, 0x1, 0x48042) writev(r10, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) 5.669575147s ago: executing program 1 (id=2092): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) syz_usbip_server_init(0x1) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) r5 = accept4(r1, 0x0, 0x0, 0x800) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0x400, 0x3f, 0x32, 0x1c0, 0x20, 0x0, {}, {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64], 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000fffd05000000fbdbdf", @ANYRES32=0x0, @ANYBLOB="1414000021200000240012800c0001006d6163766c616e00140002800800010010000000080003000200", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) 5.32957593s ago: executing program 4 (id=2093): syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x53) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) 5.074535554s ago: executing program 0 (id=2094): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) sched_setattr(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x7f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r3, 0x2000) write$dsp(r0, &(0x7f0000000240)='O', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x5, &(0x7f0000000200)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) 4.545415594s ago: executing program 1 (id=2096): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.452724645s ago: executing program 2 (id=2097): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0x10, 0x1c, 0x50b}, 0x10}], 0x1}, 0x0) close(r4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x79}, 0x20) socket$netlink(0x10, 0x3, 0xb) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x4}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) uname(&(0x7f0000000080)=""/209) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r8}, 0x20) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 3.907254192s ago: executing program 3 (id=2098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) pipe(&(0x7f0000000040)) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="200088be0c00000000000000c200000208004506001400680000ffe6907800000000e0000001"], 0x26) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x6, 0x1, 0x8, 0xc41d1d0d564e5448, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000080), &(0x7f00000008c0)=""/177}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r3}, 0xc) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x200000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040efe05240c"], 0x7) 3.650405713s ago: executing program 3 (id=2099): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004380)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 3.577137712s ago: executing program 3 (id=2100): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$video4linux(0x0, 0x4, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121a03, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) 3.458460757s ago: executing program 2 (id=2101): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004380)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 3.434239641s ago: executing program 4 (id=2102): syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x53) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) 3.278213017s ago: executing program 1 (id=2103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r6}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x26044028}, 0x20000800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000040000000374000614000600697036677265300000000000000000000800070000000000080004006431010108000500"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) 2.574463616s ago: executing program 0 (id=2104): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) semget$private(0x0, 0x2, 0x48) r3 = dup(r2) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, &(0x7f0000000080)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r7, &(0x7f0000000300)=""/102400, 0x19000) r8 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008011}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8, 0x0, 0x0}}, 0x10) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[], 0x9) close_range(r1, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) 2.56839372s ago: executing program 2 (id=2105): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x13, &(0x7f00000000c0)=[{0x3b, '\x00', @st={0x4, [{0x3, @svalue=0x200}, {0x0, @svalue=0x1000}, {0x0, @svalue=0xa}, {0x3, @svalue=0x100000000}]}, 0x595b}]}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x7fffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100001200090400000190f19c00090584d9bf"], 0x0) 2.078093572s ago: executing program 1 (id=2106): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) sched_setattr(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x7f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r3, 0x2000) write$dsp(r0, &(0x7f0000000240)='O', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x5, &(0x7f0000000200)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) 1.922628833s ago: executing program 0 (id=2107): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) 1.864615635s ago: executing program 0 (id=2108): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.763815681s ago: executing program 0 (id=2109): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001300)=r4, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r5 = dup(r0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r9 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r9, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) recvfrom$inet_nvme(r9, 0x0, 0x0, 0x20, &(0x7f00000003c0)=@l2={0x1f, 0x4, @any, 0x8, 0x2}, 0x80) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) 1.57392651s ago: executing program 3 (id=2110): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0), 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0xa701fffc) set_mempolicy(0x3, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) setreuid(0xffffffffffffffff, 0xee01) setpriority(0x1, 0x0, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() r6 = getpid() sched_getparam(r1, &(0x7f0000000000)) prlimit64(r6, 0x8, &(0x7f0000000100)={0x3, 0x6}, 0x0) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 834.681767ms ago: executing program 4 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) syz_usbip_server_init(0x1) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = accept4(r1, 0x0, 0x0, 0x800) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0x400, 0x3f, 0x32, 0x1c0, 0x20, 0x0, {}, {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64], 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000fffd05000000fbdbdf", @ANYRES32=0x0, @ANYBLOB="1414000021200000240012800c0001006d6163766c616e00140002800800010010000000080003000200", @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) 626.849325ms ago: executing program 2 (id=2112): syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x53) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) 582.551064ms ago: executing program 3 (id=2113): r0 = dup(0xffffffffffffffff) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001300)=r3, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) recvfrom$inet_nvme(r6, 0x0, 0x0, 0x20, &(0x7f00000003c0)=@l2={0x1f, 0x4, @any, 0x8, 0x2}, 0x80) r7 = syz_open_dev$vcsa(0x0, 0x1, 0x48042) writev(r7, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) 0s ago: executing program 3 (id=2114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0xffffffff, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x300, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}]}, 0x48}, 0x9, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00"], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), 0x0}, 0x20) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000000200)=[0x80000001, 0x400]) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000100)) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000540)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400705"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r0, &(0x7f0000000040)="4843218f404e1a2fe12e09fca26e90b689a55823cdbfeb7e752230664083db63442acd29a8b8f53b49c4", &(0x7f0000001200)=@udp=r2, 0x4}, 0x20) kernel console output (not intermixed with test programs): idProduct=006d, bcdDevice= 0.00 [ 503.701300][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 503.711629][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.739395][ T808] usb 5-1: config 0 descriptor?? [ 503.748987][ T9] usb 4-1: USB disconnect, device number 82 [ 503.859602][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 504.427532][T12238] input: syz1 as /devices/virtual/input/input127 [ 504.638643][T12224] vhci_hcd: connection reset by peer [ 504.656466][ T13] vhci_hcd vhci_hcd.0: stop threads [ 504.670553][ T13] vhci_hcd vhci_hcd.0: release socket [ 504.670753][ T808] usbhid 5-1:0.0: can't add hid device: -32 [ 504.688341][ T808] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 504.711551][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 504.712498][ T808] usb 5-1: USB disconnect, device number 72 [ 504.792774][ T42] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 504.967518][ T42] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 504.989819][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.008499][ T42] usb 4-1: Product: syz [ 505.023520][ T42] usb 4-1: Manufacturer: syz [ 505.028905][ T42] usb 4-1: SerialNumber: syz [ 505.038446][ T42] usb 4-1: config 0 descriptor?? [ 505.054715][ T42] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 083 [ 505.180937][T12271] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 505.187478][T12271] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 505.197478][T12271] vhci_hcd vhci_hcd.0: Device attached [ 505.432776][ T9] usb 37-1: new low-speed USB device number 12 using vhci_hcd [ 505.488069][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.536195][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.585044][ T42] (null): failure reading functionality [ 505.599962][T12286] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 505.606490][T12286] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 505.622347][T12283] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1799'. [ 505.622867][ T5614] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 505.639872][T12286] vhci_hcd vhci_hcd.0: Device attached [ 505.646532][ T42] i2c i2c-1: connected i2c-tiny-usb device [ 505.774931][T12289] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1802'. [ 505.866330][ T5798] usb 4-1: USB disconnect, device number 83 [ 505.902923][ T808] usb 41-1: new low-speed USB device number 13 using vhci_hcd [ 505.982732][ T42] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 506.035183][T12287] vhci_hcd: connection reset by peer [ 506.041092][ T151] vhci_hcd vhci_hcd.4: stop threads [ 506.052950][ T151] vhci_hcd vhci_hcd.4: release socket [ 506.065940][ T151] vhci_hcd vhci_hcd.4: disconnect device [ 506.152682][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 506.166470][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.177473][T12268] comedi comedi0: reset error (fatal) [ 506.183511][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.193568][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 506.193725][ T42] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 506.193783][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.208905][ T42] usb 1-1: config 0 descriptor?? [ 506.279510][T12272] vhci_hcd: connection reset by peer [ 506.286376][ T151] vhci_hcd vhci_hcd.2: stop threads [ 506.301948][ T151] vhci_hcd vhci_hcd.2: release socket [ 506.314504][ T151] vhci_hcd vhci_hcd.2: disconnect device [ 506.588185][T12295] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1805'. [ 506.617576][ T42] hid_parser_main: 34 callbacks suppressed [ 506.617596][ T42] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 506.635276][ T42] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 506.642100][ T42] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 506.649999][ T42] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 506.657191][ T42] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 506.664018][ T42] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 506.670896][ T42] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 506.677821][ T42] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 506.684722][ T42] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 506.691581][ T42] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 506.698472][ T5798] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 506.707602][ T42] kone 0003:1E7D:2CED.0027: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 506.842881][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 506.863765][ T5798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.886671][ T5798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.906644][ T5798] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 506.927025][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.965231][ T5798] usb 4-1: config 0 descriptor?? [ 507.022932][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 507.043563][ T10] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 507.062843][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.076979][ T10] usb 5-1: Product: syz [ 507.081887][ T10] usb 5-1: Manufacturer: syz [ 507.087131][ T10] usb 5-1: SerialNumber: syz [ 507.094429][ T10] usb 5-1: config 0 descriptor?? [ 507.106375][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 507.115663][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 507.121956][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 507.133551][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 507.140173][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 507.165323][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 507.182320][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 507.197225][ T10] usb 5-1: media controller created [ 507.242471][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.282965][ T5794] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 507.304829][ T10] usb 5-1: selecting invalid altsetting 3 [ 507.312264][ T10] ttusb2: set interface to alts=3 failed [ 507.319464][T12295] dvb-usb: bulk message failed: -22 (7/0) [ 507.338983][T12295] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0) [ 507.384065][T12295] ttusb2: i2c transfer failed. [ 507.429965][ T10] DVB: Unable to find symbol tda10086_attach() [ 507.447845][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 507.461256][ T5728] usb 1-1: USB disconnect, device number 70 [ 507.483216][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 507.498357][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 507.529426][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 507.537427][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 507.550333][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 507.575826][ T10] usb 5-1: USB disconnect, device number 73 [ 507.602114][T12293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.647298][T12293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.674259][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 508.442606][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 508.592678][ T5728] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 508.607978][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.643188][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 508.662578][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.686990][ T10] usb 3-1: config 0 descriptor?? [ 508.700182][ T5798] usb 4-1: string descriptor 0 read error: -71 [ 508.707787][ T5798] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #200: -71 [ 508.717808][ T5798] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71 [ 508.721086][T12326] netlink: 'syz.1.1814': attribute type 2 has an invalid length. [ 508.726596][ T5798] uclogic 0003:256C:006D.0028: failed probing pen v2 parameters: -71 [ 508.733614][T12326] netlink: 'syz.1.1814': attribute type 2 has an invalid length. [ 508.750297][ T5794] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 508.761023][ T5798] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 508.768951][ T5798] uclogic 0003:256C:006D.0028: probe with driver uclogic failed with error -71 [ 508.781217][ T5798] usb 4-1: USB disconnect, device number 84 [ 508.798158][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 508.893673][ T5794] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 508.894179][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.902287][ T5794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.902324][ T5794] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 508.902351][ T5794] usb 5-1: config 0 has no interface number 0 [ 508.902390][ T5794] usb 5-1: config 0 has no interface number 1 [ 508.903008][ T5794] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 508.914299][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.925305][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.934572][ T5728] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 508.946534][ T5794] usb 5-1: config 0 descriptor?? [ 508.947086][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.964220][ T5794] usb 5-1: unknown number of interfaces: 2 [ 508.993563][ T5728] usb 1-1: config 0 descriptor?? [ 509.218373][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 509.226699][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 509.235209][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 509.243507][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 509.258911][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 509.272868][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 509.288173][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 509.303434][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 509.315583][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 509.441243][T12320] input: syz1 as /devices/virtual/input/input128 [ 509.630197][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 509.650408][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 509.669310][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 509.694512][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 509.704631][ T5728] usbhid 1-1:0.0: can't add hid device: -32 [ 509.722961][ T5728] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 509.735172][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 509.755596][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 509.770000][ T5728] usb 1-1: USB disconnect, device number 71 [ 509.789297][ T10] pwc: Registered as video103. [ 509.828856][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input129 [ 509.896814][ T10] usb 3-1: USB disconnect, device number 75 [ 510.274867][ T5794] usb 5-1: USB disconnect, device number 74 [ 510.421414][T12340] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1819'. [ 510.552525][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 510.712951][ T5794] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 510.715079][T12348] tipc: Enabling of bearer rejected, already enabled [ 510.745361][T12348] 9pnet_fd: Insufficient options for proto=fd [ 510.753276][T12348] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 510.822512][ T10] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 510.892395][ T5794] usb 1-1: Using ep0 maxpacket: 32 [ 510.903695][ T5794] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 510.915121][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.923210][ T5794] usb 1-1: Product: syz [ 510.928252][ T5794] usb 1-1: Manufacturer: syz [ 510.932897][ T5794] usb 1-1: SerialNumber: syz [ 510.939077][ T5794] usb 1-1: config 0 descriptor?? [ 510.946724][ T5794] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 510.954379][ T5794] dvb-usb: bulk message failed: -22 (4/0) [ 510.960278][ T5794] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 510.972535][ T5794] dvb-usb: bulk message failed: -22 (5/0) [ 510.978386][ T5794] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 510.993427][ T5794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 511.003802][ T5794] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 511.011870][ T5794] usb 1-1: media controller created [ 511.045673][ T5794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 511.072090][ T5794] usb 1-1: selecting invalid altsetting 3 [ 511.078385][ T5794] ttusb2: set interface to alts=3 failed [ 511.157519][T12340] dvb-usb: bulk message failed: -22 (7/0) [ 511.163806][T12340] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0) [ 511.188358][T12340] ttusb2: i2c transfer failed. [ 511.353067][ T5794] DVB: Unable to find symbol tda10086_attach() [ 511.359388][ T5794] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 511.363818][ T808] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 511.368948][ T5794] dvb-usb: bulk message failed: -22 (4/0) [ 511.380513][ T5794] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 511.391096][ T5794] dvb-usb: bulk message failed: -22 (5/0) [ 511.398002][ T5794] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 511.409331][ T5794] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 511.411318][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 511.421176][ T5794] usb 1-1: USB disconnect, device number 72 [ 511.445808][ T10] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 511.458991][ T5794] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 511.475732][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 511.495399][ T10] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 511.507920][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 511.519801][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 511.531799][ T5798] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 511.531988][ T10] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 511.555518][ T10] usb 2-1: config 168 interface 0 has no altsetting 0 [ 511.563364][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 511.592548][ T10] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 511.604767][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 511.617023][ T10] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 511.629388][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 511.641245][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 511.653662][ T10] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 511.667650][ T10] usb 2-1: config 168 interface 0 has no altsetting 0 [ 511.675713][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 511.683573][ T10] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 511.692461][ T5798] usb 3-1: Using ep0 maxpacket: 32 [ 511.695859][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 511.701497][ T5798] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 511.712009][ T10] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 511.719898][ T5798] usb 3-1: config 0 has no interface number 0 [ 511.732785][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 511.750193][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 511.759690][ T5798] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 511.762286][ T10] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 511.791095][ T10] usb 2-1: config 168 interface 0 has no altsetting 0 [ 511.817430][ T10] usb 2-1: string descriptor 0 read error: -22 [ 511.824546][ T5798] usb 3-1: config 0 interface 85 has no altsetting 0 [ 511.827094][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 511.835159][ T5798] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 511.841994][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.852960][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.868288][ T5798] usb 3-1: Product: syz [ 511.869466][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 511.873052][ T5798] usb 3-1: Manufacturer: syz [ 511.884968][ T5798] usb 3-1: SerialNumber: syz [ 511.890828][ T5798] usb 3-1: config 0 descriptor?? [ 512.334524][ T10] usb 2-1: USB disconnect, device number 68 [ 512.452398][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 512.492052][T12346] adutux: No device or device unplugged -19 [ 512.602306][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 512.609312][ T9] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 512.618363][ T9] usb 4-1: config 0 has no interface number 0 [ 512.624768][ T9] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 512.636115][ T9] usb 4-1: config 0 interface 85 has no altsetting 0 [ 512.644729][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 512.654379][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.662987][ T9] usb 4-1: Product: syz [ 512.667872][ T9] usb 4-1: Manufacturer: syz [ 512.672854][ T9] usb 4-1: SerialNumber: syz [ 512.680881][ T9] usb 4-1: config 0 descriptor?? [ 512.940600][ T9] appletouch 4-1:0.85: Failed to read mode from device. [ 512.948413][ T9] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 512.974515][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 513.000081][ T5798] appletouch 3-1:0.85: Failed to request geyser raw mode [ 513.010929][ T5798] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 513.028149][ T5798] usb 3-1: USB disconnect, device number 76 [ 513.455914][ T9] usb 4-1: USB disconnect, device number 85 [ 513.738542][T12350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.422605][ T5794] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 514.636148][ T5794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.670866][ T5794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.695500][ T5794] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 514.706696][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.729102][ T5794] usb 1-1: config 0 descriptor?? [ 515.177743][ T29] audit: type=1400 audit(1781817232.295:981): avc: denied { read } for pid=12405 comm="syz.1.1835" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 515.189812][T12383] input: syz1 as /devices/virtual/input/input132 [ 515.210602][ T808] IPVS: starting estimator thread 0... [ 515.258593][ T29] audit: type=1400 audit(1781817232.295:982): avc: denied { ioctl } for pid=12405 comm="syz.1.1835" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 515.352569][T12411] IPVS: using max 77 ests per chain, 184800 per kthread [ 515.513881][ T5794] usbhid 1-1:0.0: can't add hid device: -32 [ 515.542574][ T1223] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 515.672770][ T5795] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 515.681120][ T5794] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 515.755293][ T5794] usb 1-1: USB disconnect, device number 73 [ 515.842277][ T1223] usb 2-1: device descriptor read/64, error -71 [ 515.862137][ T5795] usb 5-1: Using ep0 maxpacket: 32 [ 515.869404][ T5795] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 515.889003][ T5795] usb 5-1: config 0 has no interface number 0 [ 515.899714][ T5795] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.913275][ T5795] usb 5-1: config 0 interface 85 has no altsetting 0 [ 515.925714][ T5795] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 515.936979][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.946169][ T5795] usb 5-1: Product: syz [ 515.950913][ T5795] usb 5-1: Manufacturer: syz [ 515.956991][ T5795] usb 5-1: SerialNumber: syz [ 515.959107][T12421] loop2: detected capacity change from 0 to 7 [ 515.962900][ T5795] usb 5-1: config 0 descriptor?? [ 515.979586][T12421] Dev loop2: unable to read RDB block 7 [ 515.985269][T12421] loop2: AHDI p1 p2 p3 [ 515.989455][T12421] loop2: partition table partially beyond EOD, truncated [ 515.997395][T12421] loop2: p1 start 1601398130 is beyond EOD, truncated [ 516.005534][T12421] loop2: p2 start 1702059890 is beyond EOD, truncated [ 516.102483][ T1223] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 516.232345][ T1223] usb 2-1: device descriptor read/64, error -71 [ 516.384182][ T1223] usb usb2-port1: attempt power cycle [ 516.795860][ T1223] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 516.813528][ T5795] appletouch 5-1:0.85: Failed to read mode from device. [ 516.821002][ T5795] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 516.830138][ T1223] usb 2-1: device descriptor read/8, error -71 [ 516.842833][ T5795] usb 5-1: USB disconnect, device number 75 [ 516.862203][ T42] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 517.594086][ T1223] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 517.622588][ T1223] usb 2-1: device descriptor read/8, error -71 [ 517.634651][ T42] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.644510][ T42] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 517.654933][ T42] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.676380][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 517.689843][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 517.698335][ T42] usb 1-1: Product: syz [ 517.702913][ T42] usb 1-1: Manufacturer: syz [ 517.707602][ T42] usb 1-1: SerialNumber: syz [ 517.752192][ T1223] usb usb2-port1: unable to enumerate USB device [ 517.902044][ T5799] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 517.925474][T12449] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 517.932033][T12449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.941709][ T42] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 517.942103][T12449] vhci_hcd vhci_hcd.0: Device attached [ 518.052039][ T5799] usb 4-1: Using ep0 maxpacket: 16 [ 518.061928][ T5799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.075965][ T5799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.087350][ T5799] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 518.105198][ T5799] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 518.116360][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.135257][ T5799] usb 4-1: config 0 descriptor?? [ 518.157327][ T1223] usb 1-1: USB disconnect, device number 74 [ 518.164370][ T5614] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 518.177591][ T1223] usblp0: removed [ 518.180939][T12453] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1849'. [ 518.212696][ T5795] usb 35-1: new low-speed USB device number 13 using vhci_hcd [ 518.427907][T12450] vhci_hcd: connection reset by peer [ 518.434516][ T35] vhci_hcd vhci_hcd.1: stop threads [ 518.440060][ T35] vhci_hcd vhci_hcd.1: release socket [ 518.495891][ T35] vhci_hcd vhci_hcd.1: disconnect device [ 518.551656][ T5799] hid_parser_main: 34 callbacks suppressed [ 518.551678][ T5799] kone 0003:1E7D:2CED.0029: unknown main item tag 0x0 [ 518.565958][ T5799] kone 0003:1E7D:2CED.0029: unknown main item tag 0x0 [ 518.573414][ T5799] kone 0003:1E7D:2CED.0029: unknown main item tag 0x0 [ 518.580660][ T5799] kone 0003:1E7D:2CED.0029: unknown main item tag 0x0 [ 518.588749][ T5799] kone 0003:1E7D:2CED.0029: unknown main item tag 0x0 [ 518.595708][ T5799] kone 0003:1E7D:2CED.0029: unknown main item tag 0x0 [ 518.602537][ T5799] kone 0003:1E7D:2CED.0029: unknown main item tag 0x0 [ 518.610355][ T5799] kone 0003:1E7D:2CED.0029: unknown main item tag 0x0 [ 518.617409][ T5799] kone 0003:1E7D:2CED.0029: unknown main item tag 0x0 [ 518.624221][ T5799] kone 0003:1E7D:2CED.0029: unknown main item tag 0x0 [ 518.632382][ T5799] kone 0003:1E7D:2CED.0029: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 518.821967][ T42] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 518.971954][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 518.990253][ T42] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 519.004983][ T42] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.026700][ T42] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.040679][T12464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1852'. [ 519.058573][ T42] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.077853][ T42] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.086817][ T808] usb 4-1: USB disconnect, device number 86 [ 519.109813][ T42] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 519.148209][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.286402][T12482] netlink: 436 bytes leftover after parsing attributes in process `syz.0.1857'. [ 519.296072][T12482] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1857'. [ 519.380391][ T42] usb 3-1: GET_CAPABILITIES returned 0 [ 519.386961][ T42] usbtmc 3-1:16.0: can't read capabilities [ 519.511990][ T5799] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 519.662109][ T5799] usb 2-1: Using ep0 maxpacket: 32 [ 519.681586][ T5799] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 519.690268][ T5799] usb 2-1: config 0 has no interface number 0 [ 519.697799][ T5799] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 519.709049][ T5799] usb 2-1: config 0 interface 85 has no altsetting 0 [ 519.719317][ T5799] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 519.728769][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.738191][ T5799] usb 2-1: Product: syz [ 519.742933][ T5799] usb 2-1: Manufacturer: syz [ 519.747717][ T5799] usb 2-1: SerialNumber: syz [ 519.754806][ T5799] usb 2-1: config 0 descriptor?? [ 519.956999][T12488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12488 comm=syz.3.1858 [ 521.051903][ T9] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 521.061300][ T5799] appletouch 2-1:0.85: Failed to read mode from device. [ 521.083066][ T5799] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 521.120350][ T5799] usb 2-1: USB disconnect, device number 73 [ 521.533654][ T5799] usb 3-1: USB disconnect, device number 77 [ 521.673275][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 521.684728][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.698881][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 521.737158][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.761957][ T5614] Bluetooth: hci1: unexpected event for opcode 0x201c [ 521.902471][ T9] usb 5-1: config 0 descriptor?? [ 521.929417][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 521.938675][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 521.948588][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 522.092035][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'. [ 522.146514][T12493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.172138][T12493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.293347][T12514] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1865'. [ 522.305271][ T9] usb 5-1: USB disconnect, device number 76 [ 523.101767][ T42] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 523.271710][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 523.284842][ T42] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 523.301894][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.318415][ T42] usb 3-1: Product: syz [ 523.325768][ T42] usb 3-1: Manufacturer: syz [ 523.334908][ T42] usb 3-1: SerialNumber: syz [ 523.344613][ T42] usb 3-1: config 0 descriptor?? [ 523.352516][ T5795] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 523.359939][ T42] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 523.370658][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 523.376625][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 523.388045][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 523.394024][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 523.410231][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 523.422070][ T42] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 523.431298][ T42] usb 3-1: media controller created [ 523.447800][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.481899][ T42] usb 3-1: selecting invalid altsetting 3 [ 523.487759][ T42] ttusb2: set interface to alts=3 failed [ 523.509689][ T42] DVB: Unable to find symbol tda10086_attach() [ 523.555177][ T42] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 523.579468][T12530] dvb-usb: bulk message failed: -22 (7/0) [ 523.595126][T12530] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0) [ 523.596609][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 523.614466][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 523.627589][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 523.634504][T12538] FAULT_INJECTION: forcing a failure. [ 523.634504][T12538] name failslab, interval 1, probability 0, space 0, times 0 [ 523.639186][T12530] ttusb2: i2c transfer failed. [ 523.647581][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 523.647625][ T42] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 523.650093][T12538] CPU: 1 UID: 0 PID: 12538 Comm: syz.0.1873 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.650122][T12538] Tainted: [L]=SOFTLOCKUP [ 523.650128][T12538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.650136][T12538] Call Trace: [ 523.650142][T12538] [ 523.650148][T12538] dump_stack_lvl+0x100/0x190 [ 523.650171][T12538] should_fail_ex.cold+0x5/0xa [ 523.650190][T12538] ? __kmalloc_noprof+0xba/0x840 [ 523.650207][T12538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 523.650235][T12538] should_failslab+0xc2/0x120 [ 523.650257][T12538] __kmalloc_noprof+0xe0/0x840 [ 523.650274][T12538] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 523.650297][T12538] genl_family_rcv_msg_doit+0xc7/0x300 [ 523.650318][T12538] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 523.650338][T12538] ? genl_get_cmd+0x3e7/0x760 [ 523.650359][T12538] ? __alloc_skb+0x185/0x710 [ 523.650379][T12538] ? netlink_alloc_large_skb+0x69/0x150 [ 523.650397][T12538] ? __radix_tree_lookup+0x217/0x2b0 [ 523.650416][T12538] genl_rcv_msg+0x560/0x800 [ 523.650437][T12538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.650457][T12538] ? __pfx_nbd_genl_status+0x10/0x10 [ 523.650475][T12538] netlink_rcv_skb+0x159/0x420 [ 523.650492][T12538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.650512][T12538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.650533][T12538] ? netlink_deliver_tap+0x1ae/0xcc0 [ 523.650551][T12538] genl_rcv+0x28/0x40 [ 523.650569][T12538] netlink_unicast+0x585/0x850 [ 523.650588][T12538] ? __pfx_netlink_unicast+0x10/0x10 [ 523.650608][T12538] netlink_sendmsg+0x8b0/0xda0 [ 523.650627][T12538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.650648][T12538] ____sys_sendmsg+0x9e1/0xb70 [ 523.650664][T12538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.650683][T12538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.650701][T12538] ? kstrtouint_from_user+0x13c/0x1d0 [ 523.650723][T12538] ___sys_sendmsg+0x190/0x1e0 [ 523.650741][T12538] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.650758][T12538] ? get_pid_task+0x106/0x250 [ 523.650781][T12538] ? rcu_is_watching+0x12/0xc0 [ 523.650806][T12538] __sys_sendmsg+0x160/0x210 [ 523.650827][T12538] ? __pfx___sys_sendmsg+0x10/0x10 [ 523.650851][T12538] ? rcu_is_watching+0x12/0xc0 [ 523.650870][T12538] do_syscall_64+0x115/0x870 [ 523.650887][T12538] ? clear_bhb_loop+0x40/0x90 [ 523.650904][T12538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.650920][T12538] RIP: 0033:0x7fedf759ce59 [ 523.650932][T12538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.650947][T12538] RSP: 002b:00007fedf57f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.650963][T12538] RAX: ffffffffffffffda RBX: 00007fedf7815fa0 RCX: 00007fedf759ce59 [ 523.650973][T12538] RDX: 0000000000002080 RSI: 0000200000000fc0 RDI: 0000000000000004 [ 523.650983][T12538] RBP: 00007fedf57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 523.650992][T12538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.651001][T12538] R13: 00007fedf7816038 R14: 00007fedf7815fa0 R15: 00007ffe20091ed8 [ 523.651016][T12538] [ 524.015873][ T42] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 524.223245][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.240838][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.298914][ T5795] usb 3-1: USB disconnect, device number 78 [ 524.309733][ T42] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 524.417333][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.448391][ T5795] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 524.471795][ T1223] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 524.495141][ T42] usb 1-1: config 0 descriptor?? [ 524.674097][ T1223] usb 5-1: unable to get BOS descriptor or descriptor too short [ 524.703632][ T1223] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 524.742662][ T1223] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 524.769590][ T1223] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 524.786812][ T1223] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 524.805792][ T1223] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 524.821631][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.834497][ T1223] usb 5-1: Product: syz [ 524.843972][ T1223] usb 5-1: Manufacturer: syz [ 524.858773][ T1223] usb 5-1: SerialNumber: syz [ 524.953708][T12541] input: syz1 as /devices/virtual/input/input135 [ 525.203707][T12563] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 525.212008][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1878'. [ 525.260412][ T42] usbhid 1-1:0.0: can't add hid device: -32 [ 525.462867][ T42] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 525.490452][ T42] usb 1-1: USB disconnect, device number 75 [ 526.892106][ T1223] usb 5-1: USB disconnect, device number 77 [ 526.977070][ T5598] udevd[5598]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.758875][T12598] FAULT_INJECTION: forcing a failure. [ 527.758875][T12598] name failslab, interval 1, probability 0, space 0, times 0 [ 527.790320][T12598] CPU: 1 UID: 0 PID: 12598 Comm: syz.4.1889 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.790349][T12598] Tainted: [L]=SOFTLOCKUP [ 527.790356][T12598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.790366][T12598] Call Trace: [ 527.790371][T12598] [ 527.790378][T12598] dump_stack_lvl+0x100/0x190 [ 527.790402][T12598] should_fail_ex.cold+0x5/0xa [ 527.790421][T12598] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 527.790444][T12598] should_failslab+0xc2/0x120 [ 527.790467][T12598] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 527.790488][T12598] ? __alloc_skb+0x140/0x710 [ 527.790510][T12598] ? __alloc_skb+0x5b7/0x710 [ 527.790532][T12598] __alloc_skb+0x140/0x710 [ 527.790556][T12598] ? __alloc_skb+0x5b7/0x710 [ 527.790576][T12598] ? __pfx___alloc_skb+0x10/0x10 [ 527.790597][T12598] ? netlink_autobind.isra.0+0x160/0x370 [ 527.790618][T12598] netlink_alloc_large_skb+0x69/0x150 [ 527.790639][T12598] netlink_sendmsg+0x680/0xda0 [ 527.790660][T12598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.790683][T12598] ____sys_sendmsg+0x9e1/0xb70 [ 527.790700][T12598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.790719][T12598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.790738][T12598] ? kstrtouint_from_user+0x13c/0x1d0 [ 527.790762][T12598] ___sys_sendmsg+0x190/0x1e0 [ 527.790781][T12598] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.790800][T12598] ? get_pid_task+0x106/0x250 [ 527.790824][T12598] ? rcu_is_watching+0x12/0xc0 [ 527.790851][T12598] __sys_sendmsg+0x160/0x210 [ 527.790874][T12598] ? __pfx___sys_sendmsg+0x10/0x10 [ 527.790900][T12598] ? rcu_is_watching+0x12/0xc0 [ 527.790921][T12598] do_syscall_64+0x115/0x870 [ 527.790941][T12598] ? clear_bhb_loop+0x40/0x90 [ 527.790959][T12598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.790975][T12598] RIP: 0033:0x7f7c82d9ce59 [ 527.790989][T12598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.791004][T12598] RSP: 002b:00007f7c83c46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.791022][T12598] RAX: ffffffffffffffda RBX: 00007f7c83015fa0 RCX: 00007f7c82d9ce59 [ 527.791033][T12598] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 527.791043][T12598] RBP: 00007f7c83c46090 R08: 0000000000000000 R09: 0000000000000000 [ 527.791053][T12598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.791062][T12598] R13: 00007f7c83016038 R14: 00007f7c83015fa0 R15: 00007ffea91fbfe8 [ 527.791077][T12598] [ 528.286734][ T5794] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 528.840136][ T5794] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 528.883132][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.934474][ T5794] usb 4-1: Product: syz [ 528.957107][ T5794] usb 4-1: Manufacturer: syz [ 528.978959][ T5794] usb 4-1: SerialNumber: syz [ 528.999999][ T5794] usb 4-1: config 0 descriptor?? [ 529.030409][ T5794] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 087 [ 529.617384][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.636776][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.652961][ T5794] (null): failure reading functionality [ 529.662584][ T5794] i2c i2c-1: connected i2c-tiny-usb device [ 530.019297][ T29] audit: type=1400 audit(1781817247.136:983): avc: denied { create } for pid=12623 comm="syz.2.1897" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 530.129026][ T29] audit: type=1400 audit(1781817247.246:984): avc: denied { write } for pid=12623 comm="syz.2.1897" name="file0" dev="tmpfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 530.171228][ T9] usb 4-1: USB disconnect, device number 87 [ 530.179940][ T29] audit: type=1400 audit(1781817247.246:985): avc: denied { open } for pid=12623 comm="syz.2.1897" path="/396/file0" dev="tmpfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 530.210779][ T29] audit: type=1400 audit(1781817247.276:986): avc: denied { ioctl } for pid=12623 comm="syz.2.1897" path="/396/file0" dev="tmpfs" ino=2128 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 530.291814][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 530.466887][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.486749][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.520876][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 530.548668][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.591742][ T10] usb 1-1: config 0 descriptor?? [ 530.622515][ T5794] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 530.788500][ T5794] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 530.804817][ T5794] usb 2-1: config 0 has no interface number 0 [ 530.834755][ T5794] usb 2-1: config 0 interface 41 has no altsetting 0 [ 530.853052][ T1223] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 530.878573][ T5794] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 530.902529][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.913356][ T5794] usb 2-1: Product: syz [ 530.918599][ T5794] usb 2-1: Manufacturer: syz [ 530.927298][ T5794] usb 2-1: SerialNumber: syz [ 531.004628][ T5794] usb 2-1: config 0 descriptor?? [ 531.046812][ T1223] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 531.059838][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.072012][ T1223] usb 5-1: Product: syz [ 531.076488][ T1223] usb 5-1: Manufacturer: syz [ 531.081605][ T1223] usb 5-1: SerialNumber: syz [ 531.100260][ T1223] usb 5-1: config 0 descriptor?? [ 531.117983][ T1223] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 078 [ 531.171942][T12643] input: syz1 as /devices/virtual/input/input136 [ 531.420449][ T29] audit: type=1400 audit(1781817248.536:987): avc: denied { unlink } for pid=5611 comm="syz-executor" name="file0" dev="tmpfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 531.608600][T12638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.631116][ T10] usbhid 1-1:0.0: can't add hid device: -32 [ 531.691820][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 531.712376][T12638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.884588][ T10] usb 1-1: USB disconnect, device number 76 [ 531.931997][ T5794] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 531.937279][T12633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.237283][T12633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.258073][ T1223] (null): failure reading functionality [ 532.349375][ T1223] i2c i2c-1: connected i2c-tiny-usb device [ 532.550398][ T1223] usb 5-1: USB disconnect, device number 78 [ 533.041395][ T5794] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 533.062102][ T5794] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 533.072205][ T5794] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 533.090577][ T5794] usb 2-1: USB disconnect, device number 74 [ 533.648877][ T808] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 533.959737][T12691] tipc: Resetting bearer [ 534.007773][T12691] 8021q: adding VLAN 0 to HW filter on device eth0 [ 534.151156][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 534.172160][T12691] 8021q: adding VLAN 0 to HW filter on device eth1 [ 534.200999][T12691] 8021q: adding VLAN 0 to HW filter on device eth2 [ 534.301892][ T808] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 534.313299][ T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.325868][ T808] usb 5-1: config 0 has no interface number 0 [ 534.326300][T12696] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 534.334815][ T808] usb 5-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.371295][T12691] 8021q: adding VLAN 0 to HW filter on device eth3 [ 534.371732][T12696] UDF-fs: Scanning with blocksize 512 failed [ 534.422770][ T808] usb 5-1: New USB device found, idVendor=0499, idProduct=6bbf, bcdDevice=68.2f [ 534.444470][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.453724][T12696] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 534.466575][T12696] UDF-fs: Scanning with blocksize 1024 failed [ 534.476436][ T808] usb 5-1: Product: syz [ 534.481589][ T808] usb 5-1: Manufacturer: syz [ 534.488637][ T808] usb 5-1: SerialNumber: syz [ 534.496258][T12696] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 534.506057][ T808] usb 5-1: config 0 descriptor?? [ 534.513876][T12700] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 534.520410][T12700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 534.541419][T12700] vhci_hcd vhci_hcd.0: Device attached [ 534.558063][T12696] UDF-fs: Scanning with blocksize 2048 failed [ 534.572447][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.572620][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.595658][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.611699][T12696] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 534.631725][T12696] UDF-fs: Scanning with blocksize 4096 failed [ 534.758493][ T5614] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 534.760691][T12699] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1914'. [ 534.791494][ T9] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 535.009662][T12711] ipt_rpfilter: unknown options [ 535.544677][T12701] vhci_hcd: connection reset by peer [ 535.553369][ T405] vhci_hcd vhci_hcd.0: stop threads [ 535.563365][ T405] vhci_hcd vhci_hcd.0: release socket [ 535.573998][ T405] vhci_hcd vhci_hcd.0: disconnect device [ 535.621019][ T1223] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 535.791082][ T1223] usb 2-1: Using ep0 maxpacket: 8 [ 535.798109][ T1223] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 535.807646][ T1223] usb 2-1: config 179 has no interface number 0 [ 535.816177][ T1223] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 535.827718][ T1223] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 535.839111][ T1223] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 535.850534][ T1223] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 535.862068][ T1223] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 535.875979][ T1223] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 535.886294][ T1223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.896222][T12713] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 536.112281][ T1223] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input137 [ 536.314926][T12676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.385844][ T10] usb 2-1: USB disconnect, device number 75 [ 536.385849][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 536.385982][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 536.900983][ T1223] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 537.071164][ T1223] usb 1-1: Using ep0 maxpacket: 8 [ 537.185213][T12724] FAULT_INJECTION: forcing a failure. [ 537.185213][T12724] name failslab, interval 1, probability 0, space 0, times 0 [ 537.198494][T12724] CPU: 0 UID: 0 PID: 12724 Comm: syz.2.1920 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.198519][T12724] Tainted: [L]=SOFTLOCKUP [ 537.198523][T12724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 537.198530][T12724] Call Trace: [ 537.198536][T12724] [ 537.198541][T12724] dump_stack_lvl+0x100/0x190 [ 537.198562][T12724] should_fail_ex.cold+0x5/0xa [ 537.198575][T12724] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 537.198590][T12724] should_failslab+0xc2/0x120 [ 537.198605][T12724] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 537.198619][T12724] ? posix_lock_inode+0x5b2/0x23f0 [ 537.198632][T12724] ? lockdep_init_map_type+0x5c/0x250 [ 537.198645][T12724] posix_lock_inode+0x5b2/0x23f0 [ 537.198658][T12724] ? inode_has_perm+0x16d/0x1d0 [ 537.198670][T12724] ? __file_has_perm+0x336/0x460 [ 537.198683][T12724] ? __pfx_posix_lock_inode+0x10/0x10 [ 537.198697][T12724] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 537.198715][T12724] vfs_lock_file+0xfb/0x150 [ 537.198728][T12724] fcntl_setlk+0x757/0xe20 [ 537.198743][T12724] ? __pfx_fcntl_setlk+0x10/0x10 [ 537.198758][T12724] ? __might_fault+0xc5/0x140 [ 537.198770][T12724] ? rcu_is_watching+0x12/0xc0 [ 537.198784][T12724] ? __might_fault+0xc5/0x140 [ 537.198795][T12724] ? lock_release+0x24d/0x310 [ 537.198807][T12724] do_fcntl+0xf39/0x1670 [ 537.198821][T12724] ? __pfx_do_fcntl+0x10/0x10 [ 537.198834][T12724] ? lock_release+0x24d/0x310 [ 537.198844][T12724] ? selinux_file_fcntl+0xea/0x170 [ 537.198858][T12724] __x64_sys_fcntl+0x163/0x200 [ 537.198871][T12724] do_syscall_64+0x115/0x870 [ 537.198885][T12724] ? clear_bhb_loop+0x40/0x90 [ 537.198896][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.198908][T12724] RIP: 0033:0x7f341fd9ce59 [ 537.198918][T12724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.198929][T12724] RSP: 002b:00007f3420c3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 537.198940][T12724] RAX: ffffffffffffffda RBX: 00007f3420016090 RCX: 00007f341fd9ce59 [ 537.198946][T12724] RDX: 00002000000000c0 RSI: 0000000000000025 RDI: 0000000000000009 [ 537.198953][T12724] RBP: 00007f3420c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 537.198959][T12724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.198965][T12724] R13: 00007f3420016128 R14: 00007f3420016090 R15: 00007ffd3da9fe48 [ 537.198975][T12724] [ 537.201160][ T29] audit: type=1400 audit(1781817254.287:988): avc: denied { write } for pid=12722 comm="syz.2.1920" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 537.634215][ T5794] usb 5-1: USB disconnect, device number 79 [ 537.684982][ T1223] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.731005][ T1223] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 537.748917][ T1223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 537.759328][ T1223] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 537.840292][ T1223] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 537.851114][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.868270][ T1223] usb 1-1: Product: syz [ 537.881059][ T1223] usb 1-1: Manufacturer: syz [ 537.887831][ T29] audit: type=1400 audit(1781817255.007:989): avc: denied { mount } for pid=12727 comm="syz.2.1923" name="/" dev="rpc_pipefs" ino=42038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 537.888150][ T1223] usb 1-1: SerialNumber: syz [ 537.955898][ T1223] usb 1-1: config 0 descriptor?? [ 537.983235][ T1223] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 538.250932][ T5794] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 538.285749][ T1223] usb 1-1: USB disconnect, device number 77 [ 538.300952][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 538.412056][ T5794] usb 5-1: device descriptor read/64, error -71 [ 538.644884][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 538.657198][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 538.669435][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 538.670839][ T5794] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 538.686391][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 538.700487][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 538.712181][ T10] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 538.722243][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.731912][ T10] usb 3-1: Product: syz [ 538.736435][ T10] usb 3-1: Manufacturer: syz [ 538.741380][ T10] usb 3-1: SerialNumber: syz [ 538.857414][ T10] usb 3-1: config 0 descriptor?? [ 538.931593][ T10] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 539.001820][ T5794] usb 5-1: device descriptor read/64, error -71 [ 539.111560][ T5794] usb usb5-port1: attempt power cycle [ 539.219195][T12754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.450840][ T5794] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 539.471212][ T5794] usb 5-1: device descriptor read/8, error -71 [ 539.670842][ T808] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 539.710910][ T5794] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 539.731165][ T5794] usb 5-1: device descriptor read/8, error -71 [ 539.841285][ T5794] usb usb5-port1: unable to enumerate USB device [ 539.880295][ T808] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 539.986373][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 540.620743][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.629219][ T808] usb 4-1: Product: syz [ 540.634432][ T808] usb 4-1: Manufacturer: syz [ 540.639328][ T808] usb 4-1: SerialNumber: syz [ 540.655157][ T808] usb 4-1: config 0 descriptor?? [ 540.672831][ T808] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 088 [ 540.720487][T12773] capability: warning: `syz.0.1935' uses 32-bit capabilities (legacy support in use) [ 540.764279][ T5794] usb 3-1: USB disconnect, device number 79 [ 540.890389][T12779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1937'. [ 541.100678][T12784] IPv6: NLM_F_CREATE should be specified when creating new route [ 541.108821][T12784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.116928][T12784] IPv6: NLM_F_CREATE should be set when creating new route [ 541.127747][T12784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.135003][T12784] IPv6: NLM_F_CREATE should be set when creating new route [ 541.234186][T12762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.318530][T12762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.463305][ T808] (null): failure reading functionality [ 541.472059][ T808] i2c i2c-1: connected i2c-tiny-usb device [ 541.512394][T12743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.694165][ T5794] usb 4-1: USB disconnect, device number 88 [ 541.706036][T12789] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 541.712569][T12789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 541.787820][T12789] vhci_hcd vhci_hcd.0: Device attached [ 541.808125][ T29] audit: type=1400 audit(1781817258.927:990): avc: denied { bind } for pid=12793 comm="syz.4.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 541.873991][ T5614] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 541.883534][T12789] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1939'. [ 541.910721][ T808] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 541.922431][T12790] vhci_hcd: connection closed [ 541.922672][ T12] vhci_hcd vhci_hcd.1: stop threads [ 541.950802][ T12] vhci_hcd vhci_hcd.1: release socket [ 541.965932][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 542.090744][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 542.112339][ T808] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 542.130970][T10836] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 542.139147][ T808] usb 1-1: config 0 has no interface number 0 [ 542.153517][ T808] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.170790][ T29] audit: type=1400 audit(1781817259.277:991): avc: denied { getopt } for pid=12800 comm="syz.2.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 542.170986][ T808] usb 1-1: config 0 interface 85 has no altsetting 0 [ 542.204105][ T808] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 542.225666][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.317713][ T808] usb 1-1: Product: syz [ 542.327426][ T808] usb 1-1: Manufacturer: syz [ 542.333472][ T808] usb 1-1: SerialNumber: syz [ 542.340300][T10836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.351463][T10836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 542.362186][ T808] usb 1-1: config 0 descriptor?? [ 542.368046][T10836] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 542.411890][T10836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.627523][T10836] usb 5-1: config 0 descriptor?? [ 542.666658][ T808] appletouch 1-1:0.85: Failed to read mode from device. [ 542.675737][ T808] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 542.754968][ T808] usb 1-1: USB disconnect, device number 78 [ 542.920825][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 543.190603][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 543.207794][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.226811][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.240730][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 543.254753][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 543.266647][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.300481][ T9] usb 4-1: config 0 descriptor?? [ 543.424655][T12824] FAULT_INJECTION: forcing a failure. [ 543.424655][T12824] name failslab, interval 1, probability 0, space 0, times 0 [ 543.437800][T12824] CPU: 0 UID: 0 PID: 12824 Comm: syz.2.1949 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.437830][T12824] Tainted: [L]=SOFTLOCKUP [ 543.437835][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 543.437845][T12824] Call Trace: [ 543.437853][T12824] [ 543.437861][T12824] dump_stack_lvl+0x100/0x190 [ 543.437895][T12824] should_fail_ex.cold+0x5/0xa [ 543.437915][T12824] ? __kvmalloc_node_noprof+0xd4/0xa60 [ 543.437940][T12824] should_failslab+0xc2/0x120 [ 543.437961][T12824] __kvmalloc_node_noprof+0xfa/0xa60 [ 543.437981][T12824] ? proc_sys_call_handler+0x2c7/0x5a0 [ 543.438002][T12824] proc_sys_call_handler+0x2c7/0x5a0 [ 543.438023][T12824] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 543.438043][T12824] ? lock_acquire+0x301/0x370 [ 543.438060][T12824] ? __pfx___might_resched+0x10/0x10 [ 543.438080][T12824] vfs_write+0x6ac/0x1050 [ 543.438105][T12824] ? __pfx_proc_sys_write+0x10/0x10 [ 543.438126][T12824] ? __pfx_vfs_write+0x10/0x10 [ 543.438156][T12824] ksys_write+0x12a/0x250 [ 543.438180][T12824] ? __pfx_ksys_write+0x10/0x10 [ 543.438204][T12824] ? lock_release+0x24d/0x310 [ 543.438223][T12824] ? rcu_is_watching+0x12/0xc0 [ 543.438246][T12824] do_syscall_64+0x115/0x870 [ 543.438267][T12824] ? clear_bhb_loop+0x40/0x90 [ 543.438287][T12824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.438305][T12824] RIP: 0033:0x7f341fd9ce59 [ 543.438320][T12824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.438337][T12824] RSP: 002b:00007f3420c5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.438355][T12824] RAX: ffffffffffffffda RBX: 00007f3420015fa0 RCX: 00007f341fd9ce59 [ 543.438367][T12824] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000007 [ 543.438377][T12824] RBP: 00007f3420c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 543.438387][T12824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.438397][T12824] R13: 00007f3420016038 R14: 00007f3420015fa0 R15: 00007ffd3da9fe48 [ 543.438413][T12824] [ 543.959952][ T9] hid_parser_main: 34 callbacks suppressed [ 543.959984][ T9] kone 0003:1E7D:2CED.002A: unknown main item tag 0x0 [ 543.983796][ T9] kone 0003:1E7D:2CED.002A: unknown main item tag 0x0 [ 544.030650][ T1223] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 544.044320][ T9] kone 0003:1E7D:2CED.002A: unknown main item tag 0x0 [ 544.100262][ T9] kone 0003:1E7D:2CED.002A: unknown main item tag 0x0 [ 544.138783][ T9] kone 0003:1E7D:2CED.002A: unknown main item tag 0x0 [ 544.188177][ T9] kone 0003:1E7D:2CED.002A: unknown main item tag 0x0 [ 544.201796][ T1223] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 544.228344][ T1223] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 544.264357][ T9] kone 0003:1E7D:2CED.002A: unknown main item tag 0x0 [ 544.268907][ T1223] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 544.302560][ T1223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 544.305047][ T9] kone 0003:1E7D:2CED.002A: unknown main item tag 0x0 [ 544.352719][ T1223] usb 1-1: SerialNumber: syz [ 544.381701][ T1223] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 544.393554][ T9] kone 0003:1E7D:2CED.002A: unknown main item tag 0x0 [ 544.414591][ T1223] usb-storage 1-1:1.0: USB Mass Storage device detected [ 544.445423][ T1223] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 544.459256][ T9] kone 0003:1E7D:2CED.002A: unknown main item tag 0x0 [ 544.478869][ T1223] scsi host1: usb-storage 1-1:1.0 [ 544.522789][ T9] kone 0003:1E7D:2CED.002A: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 544.550156][T12843] syzkaller0: entered promiscuous mode [ 544.570679][T12843] syzkaller0: entered allmulticast mode [ 544.716921][ T7410] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 544.777908][ T9] usb 1-1: USB disconnect, device number 79 [ 544.862826][ T1223] usb 4-1: USB disconnect, device number 89 [ 545.139338][T10836] Bluetooth: Can't get state to change to load configuration err [ 545.160177][T10836] Bluetooth: Loading sysconfig file failed [ 545.175573][T10836] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 545.235365][T10836] usb 5-1: USB disconnect, device number 84 [ 545.423978][T12858] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 545.430509][T12858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 545.443336][T12858] vhci_hcd vhci_hcd.0: Device attached [ 545.971097][ T5614] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 545.979058][T12858] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1957'. [ 546.015448][T12859] vhci_hcd: connection closed [ 546.016152][ T142] vhci_hcd vhci_hcd.0: stop threads [ 546.027545][ T142] vhci_hcd vhci_hcd.0: release socket [ 546.033441][ T142] vhci_hcd vhci_hcd.0: disconnect device [ 546.076615][ T1223] usb 33-1: new low-speed USB device number 7 using vhci_hcd [ 546.142501][ T1223] usb 33-1: enqueue for inactive port 0 [ 546.223654][ T1223] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 546.690456][ T5794] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 546.900532][ T5794] usb 4-1: Using ep0 maxpacket: 32 [ 546.912838][ T5794] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 546.923477][ T5794] usb 4-1: config 0 has no interface number 0 [ 546.945371][ T5794] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 546.965858][ T5794] usb 4-1: config 0 interface 85 has no altsetting 0 [ 546.986526][ T5794] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 547.002488][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.024598][ T5794] usb 4-1: Product: syz [ 547.039520][ T5794] usb 4-1: Manufacturer: syz [ 547.054108][ T5794] usb 4-1: SerialNumber: syz [ 547.073047][ T5794] usb 4-1: config 0 descriptor?? [ 547.209280][T12881] loop2: detected capacity change from 0 to 7 [ 547.228193][T12881] Dev loop2: unable to read RDB block 7 [ 547.243052][T12881] loop2: AHDI p1 p2 p3 [ 547.256389][T12881] loop2: partition table partially beyond EOD, truncated [ 547.270000][T12881] loop2: p1 start 1601398130 is beyond EOD, truncated [ 547.287641][T12881] loop2: p2 start 1702059890 is beyond EOD, truncated [ 547.408512][ T5794] appletouch 4-1:0.85: Failed to read mode from device. [ 547.434424][ T5794] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 547.865518][ T5794] usb 4-1: USB disconnect, device number 90 [ 548.124623][T12896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1967'. [ 548.150775][T12896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1967'. [ 548.331418][ T1223] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 548.515470][ T1223] usb 3-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 548.528693][ T5728] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 548.569807][ T1223] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 548.630456][ T1223] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.656860][ T1223] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.676534][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.696799][ T1223] usb 3-1: Product: syz [ 548.701297][ T1223] usb 3-1: Manufacturer: syz [ 548.707116][ T1223] usb 3-1: SerialNumber: syz [ 548.731995][ T1223] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 548.749968][ T1223] cdc_ncm 3-1:1.0: bind() failure [ 548.780280][ T5795] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 548.780393][ T5728] usb 5-1: Using ep0 maxpacket: 16 [ 548.814519][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.837785][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.863655][ T5728] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 548.896716][ T5728] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 548.910278][T10836] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 548.923192][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.942662][ T5795] usb 1-1: Using ep0 maxpacket: 32 [ 548.954341][ T5728] usb 5-1: config 0 descriptor?? [ 548.963112][ T5795] usb 1-1: config 5 has an invalid interface number: 88 but max is 0 [ 548.991370][ T5795] usb 1-1: config 5 has no interface number 0 [ 549.004732][ T5795] usb 1-1: config 5 interface 88 has no altsetting 0 [ 549.015489][ T5795] usb 1-1: New USB device found, idVendor=19d2, idProduct=0136, bcdDevice=1a.c1 [ 549.026175][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.035526][ T5795] usb 1-1: Product: syz [ 549.039803][ T5795] usb 1-1: Manufacturer: syz [ 549.045131][ T5795] usb 1-1: SerialNumber: syz [ 549.080499][T10836] usb 4-1: Using ep0 maxpacket: 16 [ 549.091607][T10836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.103576][T10836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.116354][T10836] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 549.131414][T10836] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 549.141513][T10836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.153464][T10836] usb 4-1: config 0 descriptor?? [ 549.382607][T12909] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 549.487567][ T5795] usb 1-1: No union descriptors [ 549.516129][ T5795] usb 1-1: USB disconnect, device number 80 [ 549.584036][T10836] hid_parser_main: 34 callbacks suppressed [ 549.584057][T10836] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0 [ 549.604542][T10836] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0 [ 549.613402][T10836] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0 [ 549.626396][T10836] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0 [ 549.641190][T10836] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0 [ 549.650906][T10836] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0 [ 549.658482][T10836] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0 [ 549.665815][T10836] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0 [ 549.674201][T10836] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0 [ 549.681490][T10836] kone 0003:1E7D:2CED.002B: unknown main item tag 0x0 [ 549.699041][T10836] kone 0003:1E7D:2CED.002B: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 549.868966][ T5728] usbhid 5-1:0.0: can't add hid device: -71 [ 549.886938][ T5728] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 549.911827][ T5728] usb 5-1: USB disconnect, device number 85 [ 550.543403][T12933] loop2: detected capacity change from 0 to 7 [ 550.564329][T12933] Dev loop2: unable to read RDB block 7 [ 550.612458][T12933] loop2: AHDI p1 p2 p3 [ 550.632424][T12933] loop2: partition table partially beyond EOD, truncated [ 550.673220][T12933] loop2: p1 start 1601398130 is beyond EOD, truncated [ 550.716064][T12933] loop2: p2 start 1702059890 is beyond EOD, truncated [ 551.005569][T10836] usb 4-1: USB disconnect, device number 91 [ 551.180151][ T5794] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 551.284512][T12951] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12951 comm=syz.1.1981 [ 551.350149][ T5794] usb 5-1: Using ep0 maxpacket: 32 [ 551.361579][ T5794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.382806][ T5794] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 551.409258][ T5794] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 551.427168][ T5794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.445724][ T5794] usb 5-1: Product: syz [ 551.454182][ T5794] usb 5-1: Manufacturer: syz [ 551.462408][ T5794] usb 5-1: SerialNumber: syz [ 551.474011][ T5794] usb 5-1: config 0 descriptor?? [ 551.622019][T10836] usb 3-1: USB disconnect, device number 80 [ 552.180631][T12947] netlink: 'syz.4.1980': attribute type 64 has an invalid length. [ 552.206879][T10836] usb 5-1: USB disconnect, device number 86 [ 552.279586][T12956] syzkaller0: entered promiscuous mode [ 552.318401][T12956] syzkaller0: entered allmulticast mode [ 552.725322][ T5795] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 552.729543][T12972] binder: 12970:12972 ioctl c0306201 200000000540 returned -22 [ 553.081239][ T5795] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 553.101152][ T5795] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 553.123702][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 553.144981][ T5795] usb 2-1: Product: syz [ 553.150076][ T9] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 553.154500][ T5795] usb 2-1: Manufacturer: syz [ 553.176545][ T5795] usb 2-1: SerialNumber: syz [ 553.191914][ T5795] usb 2-1: config 0 descriptor?? [ 553.304312][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 553.314737][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 553.330135][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 553.339825][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 553.348494][ T9] usb 5-1: Product: syz [ 553.353333][ T9] usb 5-1: Manufacturer: syz [ 553.358317][ T9] usb 5-1: SerialNumber: syz [ 553.368828][ T9] usb 5-1: config 0 descriptor?? [ 553.394858][ T9] usb 5-1: selecting invalid altsetting 0 [ 553.414829][ T5795] usb 2-1: USB disconnect, device number 76 [ 553.530360][T12976] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1989'. [ 553.583713][ T9] usb 5-1: USB disconnect, device number 87 [ 553.724232][T12979] Bluetooth: MGMT ver 1.23 [ 553.780130][ T5795] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 553.990531][ T5795] usb 3-1: Using ep0 maxpacket: 32 [ 553.998545][ T5795] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 554.010596][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.018681][ T5795] usb 3-1: Product: syz [ 554.027674][ T5795] usb 3-1: Manufacturer: syz [ 554.038518][ T5795] usb 3-1: SerialNumber: syz [ 554.047825][ T5795] usb 3-1: config 0 descriptor?? [ 554.067049][ T5795] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 554.083625][ T5795] dvb-usb: bulk message failed: -22 (4/0) [ 554.093788][ T5795] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 554.107285][ T5795] dvb-usb: bulk message failed: -22 (5/0) [ 554.116010][ T5795] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 554.135704][ T5795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 554.147646][ T5795] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 554.156670][ T5795] usb 3-1: media controller created [ 554.158429][T12981] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 554.167362][ T5795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.299456][ T5795] usb 3-1: selecting invalid altsetting 3 [ 554.321230][T12976] dvb-usb: bulk message failed: -22 (7/0) [ 554.327722][ T5795] ttusb2: set interface to alts=3 failed [ 554.372498][T12976] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0) [ 554.486220][T12976] ttusb2: i2c transfer failed. [ 554.535629][ T5795] DVB: Unable to find symbol tda10086_attach() [ 554.556698][ T5795] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 554.582482][ T5795] dvb-usb: bulk message failed: -22 (4/0) [ 554.595647][ T5795] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 554.616098][ T5795] dvb-usb: bulk message failed: -22 (5/0) [ 554.636083][ T5795] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 554.651508][ T5795] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 554.676181][ T5795] usb 3-1: USB disconnect, device number 81 [ 554.710354][ T5795] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 554.810391][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 555.176690][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 555.197841][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 555.215881][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.233230][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 555.275013][ T9] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 555.293241][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.339127][ T9] usb 5-1: Product: syz [ 555.356691][ T9] usb 5-1: Manufacturer: syz [ 555.367967][ T9] usb 5-1: SerialNumber: syz [ 555.708402][T12992] netlink: 'syz.4.1994': attribute type 10 has an invalid length. [ 555.763636][T12992] netlink: 'syz.4.1994': attribute type 10 has an invalid length. [ 555.816446][T12992] team0: Port device netdevsim1 removed [ 555.828114][T10836] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 555.846828][T12992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 555.893640][T12992] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 556.813521][T10836] usb 4-1: Using ep0 maxpacket: 32 [ 556.964710][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 556.973774][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 556.986223][T13031] team0: Device gtp2 is up. Set it down before adding it as a team port [ 556.987727][T10836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.011202][T10836] usb 4-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 557.024919][T10836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.044679][ T9] usb 5-1: USB disconnect, device number 88 [ 557.065794][ T5595] udevd[5595]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.096599][T10836] usb 4-1: config 0 descriptor?? [ 557.139976][ T1223] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 557.262993][T13036] netlink: 'syz.1.2005': attribute type 1 has an invalid length. [ 557.302136][T13036] bond2: entered promiscuous mode [ 557.307611][T13036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.317174][T13040] FAULT_INJECTION: forcing a failure. [ 557.317174][T13040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.319633][T10836] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -22 [ 557.330606][ T1223] usb 1-1: unable to get BOS descriptor or descriptor too short [ 557.331008][ T1223] usb 1-1: not running at top speed; connect to a high speed hub [ 557.331718][ T1223] usb 1-1: config 61 has an invalid interface number: 37 but max is 0 [ 557.343249][T13040] CPU: 0 UID: 0 PID: 13040 Comm: syz.1.2005 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.343276][T13040] Tainted: [L]=SOFTLOCKUP [ 557.343282][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 557.343291][T13040] Call Trace: [ 557.343296][T13040] [ 557.343302][T13040] dump_stack_lvl+0x100/0x190 [ 557.343325][T13040] should_fail_ex.cold+0x5/0xa [ 557.343344][T13040] _copy_from_user+0x2e/0xd0 [ 557.343360][T13040] copy_msghdr_from_user+0x9f/0x4c0 [ 557.343379][T13040] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 557.343404][T13040] ? kstrtouint_from_user+0x13c/0x1d0 [ 557.343425][T13040] ___sys_sendmsg+0x106/0x1e0 [ 557.343442][T13040] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.343459][T13040] ? get_pid_task+0x106/0x250 [ 557.343482][T13040] ? rcu_is_watching+0x12/0xc0 [ 557.343507][T13040] __sys_sendmsg+0x160/0x210 [ 557.343528][T13040] ? __pfx___sys_sendmsg+0x10/0x10 [ 557.343553][T13040] ? rcu_is_watching+0x12/0xc0 [ 557.343572][T13040] do_syscall_64+0x115/0x870 [ 557.343591][T13040] ? clear_bhb_loop+0x40/0x90 [ 557.343607][T13040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.343620][T13040] RIP: 0033:0x7fd0d279ce59 [ 557.343629][T13040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.343640][T13040] RSP: 002b:00007fd0d3704028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.343656][T13040] RAX: ffffffffffffffda RBX: 00007fd0d2a16090 RCX: 00007fd0d279ce59 [ 557.343666][T13040] RDX: 000000000000c0b0 RSI: 0000200000000280 RDI: 0000000000000004 [ 557.343676][T13040] RBP: 00007fd0d3704090 R08: 0000000000000000 R09: 0000000000000000 [ 557.343685][T13040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.343694][T13040] R13: 00007fd0d2a16128 R14: 00007fd0d2a16090 R15: 00007ffdbbe38158 [ 557.343709][T13040] [ 557.444477][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.444541][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.581704][ T1223] usb 1-1: config 61 has no interface number 0 [ 557.589417][ T1223] usb 1-1: config 61 interface 37 has no altsetting 0 [ 557.641628][ T1223] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 557.792095][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.812652][ T1223] usb 1-1: Product: syz [ 557.821381][ T1223] usb 1-1: Manufacturer: syz [ 557.831326][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1999'. [ 557.870124][T13013] netlink: 90 bytes leftover after parsing attributes in process `syz.3.1999'. [ 557.890386][ T1223] usb 1-1: SerialNumber: syz [ 557.953086][T13013] netlink: 90 bytes leftover after parsing attributes in process `syz.3.1999'. [ 557.983044][T13013] syz.3.1999 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 558.346252][ T1223] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 558.746182][T13015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.802905][ T1223] gp8psk: usb out operation failed. [ 558.808576][ T1223] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 558.820058][ T1223] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 558.834226][ T1223] usb 1-1: USB disconnect, device number 81 [ 559.383931][ T9] usb 4-1: USB disconnect, device number 92 [ 559.425408][T13049] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2008'. [ 559.769800][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 559.929742][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 559.945817][ T9] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 559.951261][T13055] syzkaller0: entered promiscuous mode [ 559.955888][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.960684][T13055] syzkaller0: entered allmulticast mode [ 559.969311][ T9] usb 4-1: Product: syz [ 559.980270][ T9] usb 4-1: Manufacturer: syz [ 559.985315][ T9] usb 4-1: SerialNumber: syz [ 559.993941][ T9] usb 4-1: config 0 descriptor?? [ 560.001199][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 560.008999][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 560.015157][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 560.026043][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 560.032171][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 560.043905][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 560.053992][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 560.062399][ T9] usb 4-1: media controller created [ 560.071789][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.085198][ T9] usb 4-1: selecting invalid altsetting 3 [ 560.091504][ T9] ttusb2: set interface to alts=3 failed [ 560.131326][ T9] DVB: Unable to find symbol tda10086_attach() [ 560.138629][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 560.153414][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 560.161037][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 560.174389][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 560.183417][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 560.195382][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 560.209367][T13049] dvb-usb: bulk message failed: -22 (7/0) [ 560.219751][T13049] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0) [ 560.244832][T13049] ttusb2: i2c transfer failed. [ 560.275370][ T9] usb 4-1: USB disconnect, device number 93 [ 560.324290][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 560.450866][T13065] FAULT_INJECTION: forcing a failure. [ 560.450866][T13065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.477324][T13065] CPU: 1 UID: 0 PID: 13065 Comm: syz.2.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.477354][T13065] Tainted: [L]=SOFTLOCKUP [ 560.477360][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 560.477370][T13065] Call Trace: [ 560.477376][T13065] [ 560.477383][T13065] dump_stack_lvl+0x100/0x190 [ 560.477406][T13065] should_fail_ex.cold+0x5/0xa [ 560.477428][T13065] _copy_from_user+0x2e/0xd0 [ 560.477445][T13065] do_ip_getsockopt+0x42a/0x2510 [ 560.477475][T13065] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 560.477497][T13065] ? bpf_ksym_find+0x128/0x1c0 [ 560.477517][T13065] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 560.477540][T13065] ? is_bpf_text_address+0x94/0x1a0 [ 560.477556][T13065] ? kernel_text_address+0x8d/0x100 [ 560.477581][T13065] ? unwind_get_return_address+0x59/0xa0 [ 560.477604][T13065] ? arch_stack_walk+0xa6/0xf0 [ 560.477633][T13065] ? rcu_is_watching+0x12/0xc0 [ 560.477654][T13065] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 560.477670][T13065] ? rcu_is_watching+0x12/0xc0 [ 560.477690][T13065] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 560.477704][T13065] ? lock_release+0x24d/0x310 [ 560.477721][T13065] ? avc_has_perm_noaudit+0x145/0x3b0 [ 560.477738][T13065] ? avc_has_perm+0x135/0x1e0 [ 560.477754][T13065] ip_getsockopt+0xa1/0x1e0 [ 560.477779][T13065] ? __pfx_ip_getsockopt+0x10/0x10 [ 560.477803][T13065] ? __might_fault+0xc5/0x140 [ 560.477821][T13065] ? rcu_is_watching+0x12/0xc0 [ 560.477839][T13065] ? __might_fault+0xc5/0x140 [ 560.477858][T13065] ipv6_getsockopt+0x243/0x2a0 [ 560.477882][T13065] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 560.477904][T13065] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 560.477924][T13065] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 560.477946][T13065] udpv6_getsockopt+0x48/0x90 [ 560.477961][T13065] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 560.477979][T13065] do_sock_getsockopt+0x50a/0x6e0 [ 560.477996][T13065] ? ksys_write+0x12a/0x250 [ 560.478023][T13065] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 560.478041][T13065] ? rcu_is_watching+0x12/0xc0 [ 560.478061][T13065] ? rcu_is_watching+0x12/0xc0 [ 560.478081][T13065] ? __fget_files+0x215/0x3d0 [ 560.478098][T13065] ? __fget_files+0x21f/0x3d0 [ 560.478114][T13065] __sys_getsockopt+0x148/0x260 [ 560.478140][T13065] ? __x64_sys_getsockopt+0xbd/0x160 [ 560.478164][T13065] __x64_sys_getsockopt+0xbd/0x160 [ 560.478186][T13065] ? trace_irq_enable.constprop.0+0x122/0x160 [ 560.478206][T13065] do_syscall_64+0x115/0x870 [ 560.478227][T13065] ? clear_bhb_loop+0x40/0x90 [ 560.478246][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.478262][T13065] RIP: 0033:0x7f341fd9ce59 [ 560.478277][T13065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.478293][T13065] RSP: 002b:00007f3420c5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 560.478310][T13065] RAX: ffffffffffffffda RBX: 00007f3420015fa0 RCX: 00007f341fd9ce59 [ 560.478319][T13065] RDX: 0000000000000486 RSI: 0000000000000000 RDI: 0000000000000003 [ 560.478330][T13065] RBP: 00007f3420c5f090 R08: 0000200000000100 R09: 0000000000000000 [ 560.478341][T13065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.478351][T13065] R13: 00007f3420016038 R14: 00007f3420015fa0 R15: 00007ffd3da9fe48 [ 560.478366][T13065] [ 561.168769][T13076] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2017'. [ 561.206862][ T29] audit: type=1400 audit(1781817278.328:992): avc: denied { create } for pid=13075 comm="syz.1.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 561.297968][T13083] input: syz0 as /devices/virtual/input/input141 [ 561.338761][T13085] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 561.358493][T13083] IPVS: stopping backup sync thread 13085 ... [ 561.413208][T13087] loop2: detected capacity change from 0 to 7 [ 561.420610][T13087] Dev loop2: unable to read RDB block 7 [ 561.426638][T13087] loop2: unable to read partition table [ 561.433037][T13087] loop2: partition table beyond EOD, truncated [ 561.441535][T13087] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 562.658524][T13117] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2028'. [ 562.795712][T13122] loop2: detected capacity change from 0 to 7 [ 562.853371][T13122] Dev loop2: unable to read RDB block 7 [ 562.860981][T13122] loop2: unable to read partition table [ 562.867039][T13122] loop2: partition table beyond EOD, truncated [ 562.891572][T13122] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 563.103724][ T4975] Dev loop2: unable to read RDB block 7 [ 563.109583][ T4975] loop2: unable to read partition table [ 563.115420][ T4975] loop2: partition table beyond EOD, truncated [ 563.220496][ T42] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 563.256243][T13134] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 563.262832][T13134] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 563.273630][T13134] vhci_hcd vhci_hcd.0: Device attached [ 563.379679][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 563.400184][ T42] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 563.400211][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.400229][ T42] usb 2-1: Product: syz [ 563.400284][ T42] usb 2-1: Manufacturer: syz [ 563.400297][ T42] usb 2-1: SerialNumber: syz [ 563.401436][ T42] usb 2-1: config 0 descriptor?? [ 563.405229][ T42] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 563.405271][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 563.405284][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 563.405330][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 563.405342][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 563.406590][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 563.406904][ T42] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 563.569440][ T1223] usb 37-1: new low-speed USB device number 13 using vhci_hcd [ 563.581934][ T42] usb 2-1: media controller created [ 563.605843][T13117] dvb-usb: bulk message failed: -22 (7/0) [ 563.613213][T13117] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0) [ 563.626559][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 563.639607][T13117] ttusb2: i2c transfer failed. [ 563.668503][ T42] usb 2-1: selecting invalid altsetting 3 [ 563.668524][ T42] ttusb2: set interface to alts=3 failed [ 563.716850][ T42] DVB: Unable to find symbol tda10086_attach() [ 563.716867][ T42] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 563.717802][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 563.717819][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 563.717870][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 563.717882][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 563.717911][ T42] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 563.727767][ T42] usb 2-1: USB disconnect, device number 77 [ 563.773719][ T42] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 563.799900][ T5614] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 563.804154][T13142] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2036'. [ 564.241585][T13135] vhci_hcd: connection reset by peer [ 564.254053][ T48] vhci_hcd vhci_hcd.2: stop threads [ 564.259793][ T48] vhci_hcd vhci_hcd.2: release socket [ 564.275647][ T48] vhci_hcd vhci_hcd.2: disconnect device [ 564.306676][T13144] syzkaller0: entered promiscuous mode [ 564.338327][T13144] syzkaller0: entered allmulticast mode [ 565.993914][T13183] loop5: detected capacity change from 0 to 7 [ 566.003465][T13183] Dev loop5: unable to read RDB block 7 [ 566.010784][T13183] loop5: AHDI p2 [ 566.019703][T13183] loop5: partition table partially beyond EOD, truncated [ 566.114205][T13185] [U] [ 566.132013][T13185] [U] ÿÿÿÿ [ 566.144124][T13185] [U] D­Dp¬% [ 566.147922][T13185] [U]  [ 566.178963][T13185] [U]  [ 566.181883][T13185] [U] [ 566.184663][T13185] [U] [ 566.247823][T13185] [U] [ 566.250562][T13185] [U] [ 566.253265][T13185] [U] [ 566.256208][T13185] [U] [ 566.325362][T13185] [U] [ 566.328093][T13185] [U] [ 566.330792][T13185] [U] [ 566.333489][T13185] [U] [ 566.370900][T13185] [U] [ 566.373667][T13185] [U] [ 566.376368][T13185] [U] [ 566.379050][T13185] [U] [ 566.417672][T13181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2046'. [ 566.427824][T13185] [U] [ 566.430542][T13185] [U] [ 566.433228][T13185] [U] [ 566.435922][T13185] [U] [ 566.439882][T13181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2046'. [ 566.448996][T13185] [U] [ 566.451723][T13185] [U] [ 566.454403][T13185] [U] [ 566.457085][T13185] [U] [ 566.461430][T13181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2046'. [ 566.470867][T13181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2046'. [ 566.480431][T13185] [U] [ 566.483748][T13185] [U] [ 566.486454][T13185] [U] [ 566.489152][T13185] [U] [ 566.492207][T13185] [U] [ 566.494903][T13185] [U] [ 566.497599][T13185] [U] [ 566.500282][T13185] [U] [ 566.504523][T13185] [U] [ 566.507270][T13185] [U] [ 566.509963][T13185] [U] [ 566.512735][T13185] [U] [ 566.516889][T13185] [U] [ 566.519610][T13185] [U] [ 566.522302][T13185] [U] [ 566.525016][T13185] [U] [ 566.529187][T13185] [U] [ 566.531898][T13185] [U] [ 566.534586][T13185] [U] [ 566.537267][T13185] [U] [ 566.540445][T13185] [U] [ 566.543239][T13185] [U] [ 566.545935][T13185] [U] [ 566.548654][T13185] [U] [ 566.551926][T13185] [U] [ 566.554633][T13185] [U] [ 566.557317][T13185] [U] [ 566.560003][T13185] [U] [ 566.563322][T13185] [U] [ 566.566041][T13185] [U] [ 566.568734][T13185] [U] [ 566.571435][T13185] [U] [ 566.576390][T13185] [U] [ 566.579096][T13185] [U] [ 566.581785][T13185] [U] [ 566.584492][T13185] [U] [ 566.588145][T13185] [U] [ 566.590854][T13185] [U] [ 566.593554][T13185] [U] [ 566.596350][T13185] [U] [ 566.599050][T13185] [U] [ 566.602366][T13185] [U] [ 566.605068][T13185] [U] [ 566.607757][T13185] [U] [ 566.610439][T13185] [U] [ 566.613717][T13185] [U] [ 566.616418][T13185] [U] [ 566.619100][T13185] [U] [ 566.621775][T13185] [U] [ 566.624917][T13185] [U] [ 566.627615][T13185] [U] [ 566.630294][T13185] [U] [ 566.632971][T13185] [U] [ 566.639898][T13185] [U] [ 566.642602][T13185] [U] [ 566.645279][T13185] [U] [ 566.647954][T13185] [U] [ 566.651608][T13185] [U] [ 566.654303][T13185] [U] [ 566.656986][T13185] [U] [ 566.659674][T13185] [U] [ 566.662610][T13185] [U] [ 566.665297][T13185] [U] [ 566.667975][T13185] [U] [ 566.670649][T13185] [U] [ 566.673553][T13185] [U] [ 566.676245][T13185] [U] [ 566.678924][T13185] [U] [ 566.681599][T13185] [U] [ 566.684944][T13185] [U] [ 566.687631][T13185] [U] [ 566.690321][T13185] [U] [ 566.693005][T13185] [U] [ 566.695996][T13185] [U] [ 566.698680][T13185] [U] [ 566.701364][T13185] [U] [ 566.704045][T13185] [U] [ 566.749524][T13185] [U] [ 566.752253][T13185] [U] [ 566.754933][T13185] [U] [ 566.757599][T13185] [U] [ 566.782314][T13185] [U] [ 566.785079][T13185] [U] [ 566.787772][T13185] [U] [ 566.790642][T13185] [U] [ 566.803310][T13185] [U] [ 566.899300][T10836] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 567.782788][T13195] syzkaller0: entered promiscuous mode [ 567.788458][T13195] syzkaller0: entered allmulticast mode [ 567.830806][T10836] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 567.840495][T13158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 567.840721][T10836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.862048][T10836] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 567.872039][T10836] usb 1-1: config 0 has no interface number 0 [ 567.878552][T10836] usb 1-1: config 0 has no interface number 1 [ 567.885763][T10836] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 567.937434][T10836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.986816][T10836] usb 1-1: config 0 descriptor?? [ 567.992468][T13200] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 568.001219][T13200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 568.022365][T13200] vhci_hcd vhci_hcd.0: Device attached [ 568.031724][T13205] fuse: Bad value for 'rootmode' [ 568.038616][T13205] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2053'. [ 568.058917][T10836] usb 1-1: unknown number of interfaces: 2 [ 568.181649][T13206] netlink: 'syz.3.2051': attribute type 4 has an invalid length. [ 568.296355][ T5798] usb 35-1: new low-speed USB device number 15 using vhci_hcd [ 568.359511][ T42] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 568.641508][ T5614] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 568.720184][ T1223] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 568.741105][T13214] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2052'. [ 568.762281][ T42] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 568.782048][ T42] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 568.805385][ T42] usb 3-1: Product: syz [ 568.816436][ T42] usb 3-1: Manufacturer: syz [ 568.828524][ T42] usb 3-1: SerialNumber: syz [ 568.846662][ T42] usb 3-1: config 0 descriptor?? [ 569.063090][T13201] vhci_hcd: connection reset by peer [ 569.081363][T11663] vhci_hcd vhci_hcd.1: stop threads [ 569.097995][T11663] vhci_hcd vhci_hcd.1: release socket [ 569.289878][T11663] vhci_hcd vhci_hcd.1: disconnect device [ 569.820660][ T42] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 569.842771][ T42] peak_usb 3-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 569.930522][ T42] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 569.961788][ T42] usb 3-1: USB disconnect, device number 82 [ 569.994922][ T29] audit: type=1400 audit(1781817287.119:993): avc: denied { read } for pid=5270 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 570.093564][T13231] FAULT_INJECTION: forcing a failure. [ 570.093564][T13231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.127489][T13231] CPU: 0 UID: 0 PID: 13231 Comm: syz.1.2059 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.127519][T13231] Tainted: [L]=SOFTLOCKUP [ 570.127526][T13231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.127535][T13231] Call Trace: [ 570.127542][T13231] [ 570.127549][T13231] dump_stack_lvl+0x100/0x190 [ 570.127575][T13231] should_fail_ex.cold+0x5/0xa [ 570.127596][T13231] _copy_from_iter+0x1f4/0x1690 [ 570.127617][T13231] ? __pfx__copy_from_iter+0x10/0x10 [ 570.127633][T13231] ? putname+0xb1/0x110 [ 570.127714][T13231] ? _parse_integer_limit+0x17f/0x1d0 [ 570.127739][T13231] ? _kstrtoull+0x13c/0x1f0 [ 570.127759][T13231] ? __pfx__kstrtoull+0x10/0x10 [ 570.127781][T13231] tun_get_user+0x265/0x3c20 [ 570.127804][T13231] ? kstrtouint+0xdf/0x130 [ 570.127828][T13231] ? __pfx_tun_get_user+0x10/0x10 [ 570.127847][T13231] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 570.127870][T13231] ? tun_get+0x191/0x370 [ 570.127888][T13231] ? rcu_is_watching+0x12/0xc0 [ 570.127910][T13231] ? tun_get+0x191/0x370 [ 570.127927][T13231] ? lock_release+0x24d/0x310 [ 570.127946][T13231] tun_chr_write_iter+0xdc/0x200 [ 570.127968][T13231] vfs_write+0x6ac/0x1050 [ 570.128000][T13231] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 570.128023][T13231] ? __pfx_vfs_write+0x10/0x10 [ 570.128046][T13231] ? lock_release+0x24d/0x310 [ 570.128066][T13231] ksys_write+0x12a/0x250 [ 570.128091][T13231] ? __pfx_ksys_write+0x10/0x10 [ 570.128118][T13231] ? rcu_is_watching+0x12/0xc0 [ 570.128141][T13231] do_syscall_64+0x115/0x870 [ 570.128164][T13231] ? clear_bhb_loop+0x40/0x90 [ 570.128184][T13231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.128202][T13231] RIP: 0033:0x7fd0d279ce59 [ 570.128217][T13231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.128234][T13231] RSP: 002b:00007fd0d3725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 570.128254][T13231] RAX: ffffffffffffffda RBX: 00007fd0d2a15fa0 RCX: 00007fd0d279ce59 [ 570.128267][T13231] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000004 [ 570.128278][T13231] RBP: 00007fd0d3725090 R08: 0000000000000000 R09: 0000000000000000 [ 570.128287][T13231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.128296][T13231] R13: 00007fd0d2a16038 R14: 00007fd0d2a15fa0 R15: 00007ffdbbe38158 [ 570.128311][T13231] [ 570.663839][ T5794] usb 1-1: USB disconnect, device number 82 [ 571.929012][T10836] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 572.080553][T10836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.082237][T13259] syz.0.2065: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 572.096585][T10836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.106875][T13259] CPU: 1 UID: 0 PID: 13259 Comm: syz.0.2065 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.106906][T13259] Tainted: [L]=SOFTLOCKUP [ 572.106913][T13259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 572.106924][T13259] Call Trace: [ 572.106930][T13259] [ 572.106937][T13259] dump_stack_lvl+0x100/0x190 [ 572.106968][T13259] warn_alloc.cold+0x95/0x1c1 [ 572.106986][T13259] ? __pfx_warn_alloc+0x10/0x10 [ 572.107009][T13259] ? stack_depot_save_flags+0x27/0x9d0 [ 572.107027][T13259] ? rcu_is_watching+0x12/0xc0 [ 572.107047][T13259] ? futex_unqueue+0x133/0x2c0 [ 572.107064][T13259] ? lock_release+0x24d/0x310 [ 572.107081][T13259] ? xskq_create+0xfb/0x1d0 [ 572.107100][T13259] __vmalloc_node_range_noprof+0x136c/0x1630 [ 572.107120][T13259] ? xskq_create+0xfb/0x1d0 [ 572.107138][T13259] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 572.107157][T13259] ? xskq_create+0xfb/0x1d0 [ 572.107173][T13259] vmalloc_user_noprof+0x9e/0xe0 [ 572.107189][T13259] ? xskq_create+0xfb/0x1d0 [ 572.107209][T13259] xskq_create+0xfb/0x1d0 [ 572.107225][T13259] xsk_setsockopt+0x743/0xab0 [ 572.107241][T13259] ? __pfx_xsk_setsockopt+0x10/0x10 [ 572.107258][T13259] ? rcu_is_watching+0x12/0xc0 [ 572.107278][T13259] ? selinux_socket_setsockopt+0x6a/0x80 [ 572.107299][T13259] ? __pfx_xsk_setsockopt+0x10/0x10 [ 572.107315][T13259] do_sock_setsockopt+0xf3/0x1d0 [ 572.107333][T13259] __sys_setsockopt+0x195/0x220 [ 572.107357][T13259] __x64_sys_setsockopt+0xbd/0x160 [ 572.107378][T13259] ? trace_irq_enable.constprop.0+0x122/0x160 [ 572.107397][T13259] do_syscall_64+0x115/0x870 [ 572.107416][T13259] ? clear_bhb_loop+0x40/0x90 [ 572.107434][T13259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.107450][T13259] RIP: 0033:0x7fedf759ce59 [ 572.107464][T13259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.107480][T13259] RSP: 002b:00007fedf57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 572.107497][T13259] RAX: ffffffffffffffda RBX: 00007fedf7815fa0 RCX: 00007fedf759ce59 [ 572.107508][T13259] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 572.107518][T13259] RBP: 00007fedf7632e6f R08: 0000000000000029 R09: 0000000000000000 [ 572.107527][T13259] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.107537][T13259] R13: 00007fedf7816038 R14: 00007fedf7815fa0 R15: 00007ffe20091ed8 [ 572.107552][T13259] [ 572.107558][T13259] Mem-Info: [ 572.132264][T10836] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 572.146947][T13259] active_anon:15942 inactive_anon:0 isolated_anon:0 [ 572.146947][T13259] active_file:17749 inactive_file:40916 isolated_file:0 [ 572.146947][T13259] unevictable:768 dirty:463 writeback:0 [ 572.146947][T13259] slab_reclaimable:7454 slab_unreclaimable:105398 [ 572.146947][T13259] mapped:35098 shmem:4179 pagetables:1477 [ 572.146947][T13259] sec_pagetables:0 bounce:0 [ 572.146947][T13259] kernel_misc_reclaimable:0 [ 572.146947][T13259] free:1285193 free_pcp:12503 free_cma:0 [ 572.159586][T10836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.166986][T13259] Node 0 active_anon:63768kB inactive_anon:0kB active_file:70964kB inactive_file:163464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140360kB dirty:1852kB writeback:0kB shmem:15180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12760kB pagetables:5744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 572.180269][T10836] usb 5-1: config 0 descriptor?? [ 572.184170][T13259] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 572.184222][T13259] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.184274][T13259] lowmem_reserve[]: 0 2476 2477 2477 2477 [ 572.539647][T13259] Node 0 DMA32 free:1192612kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63740kB inactive_anon:0kB active_file:70964kB inactive_file:163464kB unevictable:1536kB writepending:1864kB zspages:0kB present:3129332kB managed:2536252kB mlocked:0kB bounce:0kB free_pcp:41724kB local_pcp:18832kB free_cma:0kB [ 572.575721][T13259] lowmem_reserve[]: 0 0 1 1 1 [ 572.580751][T13259] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.611601][T13259] lowmem_reserve[]: 0 0 0 0 0 [ 572.618710][T13259] Node 1 Normal free:3934128kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6468kB local_pcp:0kB free_cma:0kB [ 572.671091][T13259] lowmem_reserve[]: 0 0 0 0 0 [ 572.700797][T13259] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 572.716334][T13259] Node 0 DMA32: 2190*4kB (UME) 3141*8kB (UME) 1845*16kB (UME) 696*32kB (UME) 308*64kB (UME) 109*128kB (UME) 85*256kB (UME) 71*512kB (UME) 7*1024kB (UME) 6*2048kB (UM) 242*4096kB (M) = 1188144kB [ 572.741036][T13259] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 572.753168][T13259] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 9*16kB (U) 6*32kB (UM) 5*64kB (UM) 4*128kB (U) 1*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 959*4096kB (UM) = 3934128kB [ 572.757149][T13265] syzkaller0: entered promiscuous mode [ 572.770899][T13259] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.776370][T13265] syzkaller0: entered allmulticast mode [ 572.790687][T13259] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 572.803657][T13259] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.813790][T13259] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 572.823742][T13259] 62818 total pagecache pages [ 572.828765][T13259] 0 pages in swap cache [ 572.833263][T13259] Free swap = 124996kB [ 572.837510][T13259] Total swap = 124996kB [ 572.855846][T13266] input: syz1 as /devices/virtual/input/input142 [ 572.868501][T13259] 2097051 pages RAM [ 572.873136][T13259] 0 pages HighMem/MovableOnly [ 572.879219][T13259] 431108 pages reserved [ 572.883630][T13259] 0 pages cma reserved [ 573.111935][T13233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.155933][T13275] forcing mempool usage for bio_alloc_bioset+0x8e7/0x1070 [ 573.593907][T10836] usbhid 5-1:0.0: can't add hid device: -32 [ 573.600136][T10836] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 573.624896][ T5794] usb 5-1: USB disconnect, device number 89 [ 573.658927][ T5798] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 573.935385][ T29] audit: type=1400 audit(1781817291.059:994): avc: denied { transfer } for pid=13282 comm="syz.0.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 575.577277][T13305] netlink: 'syz.4.2080': attribute type 13 has an invalid length. [ 575.602226][T13305] netlink: 'syz.4.2080': attribute type 17 has an invalid length. [ 575.702337][T13305] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.709704][T13305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.789223][ T5794] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 575.846344][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.853730][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.951667][ T5794] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 575.961288][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.986271][ T5794] usb 4-1: Product: syz [ 575.993040][ T5794] usb 4-1: Manufacturer: syz [ 576.000818][ T5794] usb 4-1: SerialNumber: syz [ 576.023840][ T5794] usb 4-1: config 0 descriptor?? [ 576.034908][ T5794] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 094 [ 576.128968][ T5798] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 576.254669][ T151] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 576.290089][ T5798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.301666][ T5798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.313555][ T5798] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 576.333656][ T5798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.355012][ T5798] usb 2-1: config 0 descriptor?? [ 576.418826][T10836] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 576.439514][T13303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.448482][T13303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.458837][ T5794] (null): failure reading functionality [ 576.467879][ T5794] i2c i2c-1: connected i2c-tiny-usb device [ 576.571982][T10836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.584229][T10836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.594589][T10836] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 576.604394][T10836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.614599][T10836] usb 5-1: config 0 descriptor?? [ 576.673700][ T9] usb 4-1: USB disconnect, device number 94 [ 576.977670][ T5798] usb 2-1: language id specifier not provided by device, defaulting to English [ 577.110026][T13320] input: syz1 as /devices/virtual/input/input143 [ 577.329780][T10836] usbhid 5-1:0.0: can't add hid device: -71 [ 577.337156][T10836] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 577.349642][T10836] usb 5-1: USB disconnect, device number 90 [ 577.393221][T13312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.404683][T13312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.418226][T13312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.428820][T13312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.548843][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 577.701331][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.714015][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.724748][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 577.734333][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.744159][ T9] usb 3-1: config 0 descriptor?? [ 578.819744][T13339] input: syz1 as /devices/virtual/input/input144 [ 579.809666][ T5798] uclogic 0003:256C:006D.002C: failed retrieving string descriptor #200: -71 [ 579.818810][ T5798] uclogic 0003:256C:006D.002C: failed retrieving pen parameters: -71 [ 579.848811][ T5798] uclogic 0003:256C:006D.002C: failed probing pen v2 parameters: -71 [ 579.857148][ T5798] uclogic 0003:256C:006D.002C: failed probing parameters: -71 [ 579.874910][ T5798] uclogic 0003:256C:006D.002C: probe with driver uclogic failed with error -71 [ 580.147521][ T5798] usb 2-1: USB disconnect, device number 78 [ 580.226434][T13357] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 580.232976][T13357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 580.289380][T13357] vhci_hcd vhci_hcd.0: Device attached [ 580.326261][ T5614] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 580.336476][T13357] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2092'. [ 580.367601][T13359] vhci_hcd: connection closed [ 580.367832][T11663] vhci_hcd vhci_hcd.1: stop threads [ 580.413730][T11663] vhci_hcd vhci_hcd.1: release socket [ 580.457539][T11663] vhci_hcd vhci_hcd.1: disconnect device [ 580.468558][ T5794] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 580.477996][ T9] uclogic 0003:256C:006D.002D: failed retrieving string descriptor #100: -71 [ 580.487492][ T9] uclogic 0003:256C:006D.002D: failed retrieving pen parameters: -71 [ 580.498506][ T9] uclogic 0003:256C:006D.002D: failed probing pen v1 parameters: -71 [ 580.507937][ T9] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 580.540695][ T9] uclogic 0003:256C:006D.002D: probe with driver uclogic failed with error -71 [ 580.606639][ T9] usb 3-1: USB disconnect, device number 83 [ 580.678595][ T5794] usb 5-1: Using ep0 maxpacket: 16 [ 580.685997][ T5794] usb 5-1: unable to get BOS descriptor or descriptor too short [ 580.694876][ T5794] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.711077][ T5794] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.737446][ T5794] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 580.747207][ T5794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.783365][ T5794] usb 5-1: Product: syz [ 580.801356][ T5794] usb 5-1: Manufacturer: syz [ 580.807335][ T5794] usb 5-1: SerialNumber: syz [ 580.926400][T13367] input: syz0 as /devices/virtual/input/input145 [ 580.990249][T13370] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 580.990663][T13367] IPVS: stopping backup sync thread 13370 ... [ 581.285048][ T5794] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 581.526896][ T29] audit: type=1400 audit(1781817298.569:995): avc: denied { create } for pid=13374 comm="syz.2.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 581.555281][ T5794] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 581.661606][T13380] efs: cannot read volume header [ 581.667233][ T5794] usb 5-1: USB disconnect, device number 91 [ 581.708129][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.127907][T13388] syzkaller0: entered promiscuous mode [ 582.147809][T13388] syzkaller0: entered allmulticast mode [ 582.438395][ T5794] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 582.689465][T13397] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13397 comm=syz.1.2103 [ 582.768382][ T5794] usb 5-1: Using ep0 maxpacket: 16 [ 582.784292][ T5794] usb 5-1: unable to get BOS descriptor or descriptor too short [ 582.813109][ T5794] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.830231][ T5794] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.854070][ T5794] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 582.863900][ T5794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.872326][ T5794] usb 5-1: Product: syz [ 582.876719][ T5794] usb 5-1: Manufacturer: syz [ 582.925329][ T5794] usb 5-1: SerialNumber: syz [ 582.993365][ T29] audit: type=1400 audit(1781817300.119:996): avc: denied { setattr } for pid=13401 comm="syz.2.2105" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 583.448369][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 583.502249][ T5794] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 583.530639][ T5794] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 583.598429][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 583.608963][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 583.651172][ T5794] usb 5-1: USB disconnect, device number 92 [ 583.682048][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 583.713414][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.740882][ T10] usb 3-1: Product: syz [ 583.754772][ T10] usb 3-1: Manufacturer: syz [ 583.765210][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.792801][ T10] usb 3-1: SerialNumber: syz [ 583.829045][ T10] usb 3-1: config 0 descriptor?? [ 583.870501][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 583.882632][ T10] em28xx 3-1:0.0: DVB interface 0 found: isoc [ 584.177885][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 584.679845][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 584.689911][ T10] em28xx 3-1:0.0: board has no eeprom [ 584.737987][T13425] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 584.744518][T13425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 584.758295][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 584.769612][ T10] em28xx 3-1:0.0: dvb set to isoc mode. [ 584.779490][T13425] vhci_hcd vhci_hcd.0: Device attached [ 584.797421][T10836] em28xx 3-1:0.0: Binding DVB extension [ 584.905495][ T10] usb 3-1: USB disconnect, device number 84 [ 584.982024][T10836] em28xx 3-1:0.0: Registering input extension [ 584.994113][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 585.038445][ T5794] usb 41-1: new low-speed USB device number 14 using vhci_hcd [ 585.279035][ T10] em28xx 3-1:0.0: Closing input extension [ 585.297812][ T10] em28xx 3-1:0.0: Freeing device [ 585.402048][T13435] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2111'. [ 690.592230][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 690.599202][ C1] rcu: (detected by 1, t=10502 jiffies, g=81177, q=234 ncpus=2) [ 690.606906][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295006212-4294995710), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 690.620253][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g81177 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 690.631693][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 690.641652][ C1] rcu: RCU grace-period kthread stack dump: [ 690.647524][ C1] task:rcu_preempt state:R running task stack:28656 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 690.662151][ C1] Call Trace: [ 690.665421][ C1] [ 690.668359][ C1] __schedule+0x125c/0x6730 [ 690.673309][ C1] ? rcu_is_watching+0x12/0xc0 [ 690.678169][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 690.684256][ C1] ? __pfx___schedule+0x10/0x10 [ 690.689635][ C1] ? rcu_is_watching+0x12/0xc0 [ 690.694578][ C1] ? schedule+0x2bf/0x390 [ 690.699434][ C1] ? lock_release+0x24d/0x310 [ 690.704128][ C1] schedule+0xdd/0x390 [ 690.708302][ C1] schedule_timeout+0x127/0x280 [ 690.713351][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 690.718827][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 690.724740][ C1] ? __pfx_process_timeout+0x10/0x10 [ 690.730044][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 690.735905][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 690.741397][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 690.746183][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 690.751591][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 690.756641][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 690.762012][ C1] ? rcu_is_watching+0x12/0xc0 [ 690.766885][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 690.773081][ C1] rcu_gp_kthread+0x179/0x230 [ 690.777784][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 690.783518][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 690.789697][ C1] ? __kthread_parkme+0x18c/0x230 [ 690.796981][ C1] ? kthread+0x13a/0x450 [ 690.802041][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 690.808080][ C1] kthread+0x370/0x450 [ 690.812386][ C1] ? __pfx_kthread+0x10/0x10 [ 690.817531][ C1] ret_from_fork+0x72b/0xd50 [ 690.822152][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 690.828620][ C1] ? __switch_to+0x800/0x10f0 [ 690.833489][ C1] ? __pfx_kthread+0x10/0x10 [ 690.838983][ C1] ret_from_fork_asm+0x1a/0x30 [ 690.844303][ C1] [ 690.847668][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 690.854258][ C1] Sending NMI from CPU 1 to CPUs 0: [ 690.859738][ C0] NMI backtrace for cpu 0 [ 690.859757][ C0] CPU: 0 UID: 0 PID: 13438 Comm: syz.3.2114 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.859778][ C0] Tainted: [L]=SOFTLOCKUP [ 690.859783][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.859792][ C0] RIP: 0010:advance_sched+0x106/0xd20 [ 690.859817][ C0] Code: 89 44 24 40 e8 ab 65 f4 01 e8 76 75 f1 01 31 ff 89 c5 89 c6 e8 6b 3e 67 f8 85 ed 0f 85 b2 07 00 00 e8 ae 43 67 f8 48 8b 04 24 <48> 83 e8 18 48 89 c2 48 89 44 24 38 48 b8 00 00 00 00 00 fc ff df [ 690.859831][ C0] RSP: 0018:ffffc90000007de8 EFLAGS: 00000046 [ 690.859843][ C0] RAX: ffff888077265300 RBX: ffff888077265300 RCX: ffffffff89a22ca5 [ 690.859853][ C0] RDX: ffff8880344e0000 RSI: ffffffff89a22cb2 RDI: ffff8880344e0000 [ 690.859863][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 690.859872][ C0] R10: 0000000000000000 R11: ffffc90000007ff8 R12: ffff888077265300 [ 690.859882][ C0] R13: ffffffff89a22bb0 R14: ffff8880b8428640 R15: ffff8880b8428690 [ 690.859892][ C0] FS: 00007ff7ee7ed6c0(0000) GS:ffff888124332000(0000) knlGS:0000000000000000 [ 690.859906][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.859916][ C0] CR2: 00007ff7eda4f270 CR3: 00000000276a7000 CR4: 00000000003526f0 [ 690.859926][ C0] Call Trace: [ 690.859933][ C0] [ 690.859941][ C0] ? __hrtimer_run_queues+0x37b/0x9c0 [ 690.859963][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 690.859981][ C0] ? __pfx_advance_sched+0x10/0x10 [ 690.859999][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 690.860019][ C0] hrtimer_interrupt+0x3e5/0x940 [ 690.860041][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 690.860065][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 690.860086][ C0] [ 690.860090][ C0] [ 690.860096][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 690.860112][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 690.860129][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 71 4e f6 48 89 df e8 ce c0 4e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 15 cf 3d f6 65 8b 05 1e 49 78 08 85 c0 74 16 5b [ 690.860142][ C0] RSP: 0018:ffffc90005d57ad8 EFLAGS: 00000246 [ 690.860159][ C0] RAX: 0000000000000046 RBX: ffff888052c30a78 RCX: ffffffff8211b23f [ 690.860168][ C0] RDX: 0000000000000000 RSI: ffffffff8c1cef00 RDI: ffffffff8b969722 [ 690.860177][ C0] RBP: 0000000000000206 R08: 0000000000000000 R09: fffffbfff21b3292 [ 690.860186][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880b853b340 [ 690.860195][ C0] R13: ffff8880b853c220 R14: ffff888052c30a78 R15: ffff888052c30000 [ 690.860207][ C0] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 690.860224][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 690.860241][ C0] try_to_wake_up+0xd8d/0x1c90 [ 690.860258][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 690.860273][ C0] ? futex_hash+0x311/0x400 [ 690.860287][ C0] ? lock_release+0x24d/0x310 [ 690.860300][ C0] ? plist_check_list+0x1b8/0x280 [ 690.860314][ C0] ? plist_check_list+0x1b8/0x280 [ 690.860326][ C0] ? plist_del+0x308/0x510 [ 690.860338][ C0] ? do_raw_spin_lock+0x128/0x260 [ 690.860353][ C0] ? futex_wake+0x4ea/0x5e0 [ 690.860371][ C0] ? rcu_is_watching+0x12/0xc0 [ 690.860389][ C0] wake_up_q+0xa1/0x130 [ 690.860405][ C0] futex_wake+0x4f4/0x5e0 [ 690.860424][ C0] ? __pfx_futex_wake+0x10/0x10 [ 690.860443][ C0] ? add_device_randomness+0xc9/0x110 [ 690.860459][ C0] ? __pfx_add_device_randomness+0x10/0x10 [ 690.860475][ C0] do_futex+0x2b2/0x440 [ 690.860492][ C0] ? __pfx_do_futex+0x10/0x10 [ 690.860508][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 690.860521][ C0] ? security_capable+0x80/0x260 [ 690.860536][ C0] ? qat_dh_compute_value+0xf19/0x1dc0 [ 690.860555][ C0] __x64_sys_futex+0x34f/0x4d0 [ 690.860573][ C0] ? do_sys_settimeofday64+0x1e4/0x260 [ 690.860587][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 690.860603][ C0] ? __x64_sys_clock_settime+0x1c9/0x2a0 [ 690.860623][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 690.860641][ C0] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 690.860662][ C0] ? syscall_user_dispatch+0x76/0x130 [ 690.860679][ C0] ? rcu_is_watching+0x12/0xc0 [ 690.860696][ C0] do_syscall_64+0x115/0x870 [ 690.860713][ C0] ? clear_bhb_loop+0x40/0x90 [ 690.860728][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.860743][ C0] RIP: 0033:0x7ff7ed99ce59 [ 690.860755][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.860768][ C0] RSP: 002b:00007ff7ee7ed0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 690.860781][ C0] RAX: ffffffffffffffda RBX: 00007ff7edc15fa8 RCX: 00007ff7ed99ce59 [ 690.860790][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff7edc15fac [ 690.860799][ C0] RBP: 00007ff7edc15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 690.860808][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.860817][ C0] R13: 00007ff7edc16038 R14: 00007ffc6a0ec8b0 R15: 00007ffc6a0ec998 [ 690.860831][ C0]