last executing test programs: 16m43.640247964s ago: executing program 32 (id=697): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xffffffffffffff29, &(0x7f0000000140)=""/186, 0x100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) 16m43.347980647s ago: executing program 33 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 10m59.767927075s ago: executing program 34 (id=1781): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000004a00010200000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24040800) 10m59.695791606s ago: executing program 6 (id=1785): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x80001e57, 0x0, 0xffff7000, 0x8, 0x2, "e9d3000d000000000008000000000000000004", 0x7, 0x201}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r1, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b3939", 0xfe8e}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) 10m59.261791157s ago: executing program 6 (id=1788): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 10m59.044938896s ago: executing program 6 (id=1790): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffffa}]}}]}, 0x38}}, 0x4000010) 10m58.718271296s ago: executing program 6 (id=1794): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 10m58.491298046s ago: executing program 6 (id=1798): capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x141, 0x0, &(0x7f0000000680)="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", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000008}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 10m57.557752009s ago: executing program 6 (id=1805): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 10m56.964976365s ago: executing program 35 (id=1805): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 10m25.975732294s ago: executing program 7 (id=2103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 10m25.742552367s ago: executing program 7 (id=2108): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000001180)="b9ff030768441a8cb89e14f00800e075702b1c1d23f4347dfde4a10fa01ebd40370b", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m25.299246759s ago: executing program 7 (id=2113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 10m25.020499498s ago: executing program 7 (id=2118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2a05004, 0x0) chroot(0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 10m24.966330427s ago: executing program 7 (id=2121): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0) 10m23.948224584s ago: executing program 7 (id=2134): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x5f, 0x5f, 0x5f, 0x2e, 0x2e, 0x30, 0x6f, 0x2e]}}, 0x0, 0x22, 0x0, 0x1, 0x7}, 0x28) 10m23.198432891s ago: executing program 36 (id=2134): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x5f, 0x5f, 0x5f, 0x2e, 0x2e, 0x30, 0x6f, 0x2e]}}, 0x0, 0x22, 0x0, 0x1, 0x7}, 0x28) 10m4.967586296s ago: executing program 0 (id=2320): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000005000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004845) r4 = io_uring_setup(0x4fce, &(0x7f0000000040)={0x0, 0xc89f, 0xd000, 0x1, 0x6b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xb}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x2c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m4.482990405s ago: executing program 0 (id=2324): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="19072dbd7000fddbdf", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 10m4.139857901s ago: executing program 0 (id=2327): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000808"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) keyctl$invalidate(0x15, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 10m3.690326792s ago: executing program 0 (id=2331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) writev(r0, &(0x7f0000000800)=[{&(0x7f00000005c0)="c800b66cf7e6a58cd8e0e80c86470ec8c3c0d6b06acd299df554ff6d4c46a5e948e458d6291d3aab88af945442040056972d9d82b584db7aed7075fcb4850257c7cf202122802afec235970a469a73ea4193e861993d0d14c39e25a81de895927d3a86ba369ed1c66b615488829a7502aaed5d20c90800753013f6a44d614d1d240b7420bed35583429fca6fd587a882589bea59703c5619a8697ee9661140a295a65ede871662b0a5713e89f3bfff54a01fbb1a641056b8f7d98a65a17dedcf11ffbb8c93ed0275431beebd524767543f3a0083992c9406001306a201fa", 0xde}, {&(0x7f00000029c0)="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", 0x2d2}], 0x2) 10m3.422466226s ago: executing program 0 (id=2334): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x7400}, 0x400c0d0) 10m3.051702415s ago: executing program 0 (id=2337): socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 9m47.811476804s ago: executing program 37 (id=2337): socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 9m12.596442522s ago: executing program 8 (id=2741): shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0xee01, 0x14, 0x5}, 0x168, 0x4, 0x0, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000300)=ANY=[@ANYBLOB="79ee7ca42eeabbbbbbbbbbbb86dd6a00000000641100fe8000000000000000000000000000aaff0200000000000000000000000000014e214e20006490"], 0x0) 9m12.336537002s ago: executing program 8 (id=2742): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 9m7.923658428s ago: executing program 3 (id=2772): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000800)=[{&(0x7f00000005c0)="c800b66cf7e6a58cd8e0e80c86470ec8c3c0d6b06acd299df554ff6d4c46a5e948e458d6291d3aab88af945442040056972d9d82b584db7aed7075fcb4850257c7cf202122802afec235970a469a73ea4193e861993d0d14c39e25a81de895927d3a86ba369ed1c66b615488829a7502aaed5d20c90800753013f6a44d614d1d240b7420bed35583429fca6fd587a882589bea59703c5619a8697ee9661140a295a65ede871662b0a5713e89f3bfff54a01fbb1a641056b8f7d98a65a17dedcf11ffbb8c93ed0275431beebd524767543f3a0083992c9406001306a201fa", 0xde}, {&(0x7f00000029c0)="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", 0x2d2}], 0x2) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) 9m7.084888785s ago: executing program 3 (id=2773): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @remote, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', 0x0}) 9m6.473559111s ago: executing program 8 (id=2774): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @loopback, 0x2}, r3}}, 0x30) close(0x4) 9m6.41014933s ago: executing program 8 (id=2775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xba3}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 9m6.311938902s ago: executing program 8 (id=2776): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x2, &(0x7f0000001500)=0x0) r2 = eventfd(0x4) io_submit(r1, 0x1, &(0x7f0000001640)=[&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0xffff, r0, &(0x7f0000001540)="83bf39088f5040842a86d5c5355dd0ccb63e0a3f8426197ddade44e8d91f237b", 0x20, 0x9, 0x0, 0x1, r2}]) 9m6.132098975s ago: executing program 8 (id=2779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x803e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x0) 9m5.821015262s ago: executing program 3 (id=2781): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000180)={0x0, 0xb3b9, 0x100, 0x2, 0x337}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r2}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x5, 0xfffd}, 0x8) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfff, 0xfffffffc}}]}}]}, 0x14c}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704c9b72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd2c67100cc9d523a00fd53d03000000000000004a62fb73c33424b437bb192c9d06ea6ed0491ba35c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1964f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe8def4b73905ca14d90d1f600"}) 9m4.361161031s ago: executing program 3 (id=2787): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/config\x00') r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='wchan\x00') pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) syz_open_procfs(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xc, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000ffffffff"], &(0x7f00000002c0)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r6, 0x0, 0x19, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x8000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000740)=@o_path={&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x18) 9m3.975298838s ago: executing program 3 (id=2789): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 9m3.865190243s ago: executing program 3 (id=2791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 8m50.932071252s ago: executing program 38 (id=2779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x803e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x0) 8m48.448657623s ago: executing program 39 (id=2791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 13.121355353s ago: executing program 1 (id=5199): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90873a"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'vlan0\x00', &(0x7f0000000280)=@ethtool_eeprom={0x43, 0x3ff, 0xa}}) sendfile(r1, r2, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) 12.483844471s ago: executing program 9 (id=5204): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2d, 0xc3, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sg(0x0, 0x2fe, 0x280800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x3, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0xa, 0x922000000003, 0x11) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x149a82, 0x0) 11.815164693s ago: executing program 5 (id=5206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.931600017s ago: executing program 1 (id=5209): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x14, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 10.286187117s ago: executing program 9 (id=5210): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x68}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x2}]) io_destroy(r5) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(0x3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 10.187325585s ago: executing program 4 (id=5211): pipe(0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937e, 0x0) 9.593609396s ago: executing program 4 (id=5212): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000", 0x47}, {&(0x7f00000002c0)="1c393502dda1a6", 0x7}, {&(0x7f0000000300)="29c8025353034810816fc8b1a08a742168a2cacbcd464fac19a474dd381bf5514c872ac6ed0dd4ff6815f71940f261c207c5c97e35917b59c77911e49e358a49c9fe7d3846bfd9894aecd1a4d0dd03e6f697c563e512fd05f859ea10c2032bf483bdb77cc23669d25e55753ac75a7605f383e2eeebc032891737b2b9a862f4da5db8daea2168d7ea323002d37681ee94e1ed08cf97765abf0b99fe2dfcd477fe3addb4a627f084aea3b8d8cddf78bb0370da9acf05f0252d0fa9992c75b05a1afb400401181268197626e60138249d426f9121f35b4e6187e4a503eaba561eebc213de0f3a68098bd1c22adec3052e5c11fca9b7c7b20256330c695788a045d752a7d479ba4246adc2fd8f72c62f577dda76d7760651866aa3d556b8242cb6fcd91aef521bdb772cb11c956b30a83dec060a00d918d221d0af57c3327c64a8470388fcb86c4ead7517d52abec4332740f5d228db31d841d822ec14ba9e5ce4ea73430211cada68bd56e283a6840d2084faf814d1a7898a70cbb79e57dceb5b7f411d0954cd731e96f4334c930725e1ae9acc064d44e21eb55c20f1b7a631061725a40f493e5c39e1138dcf08aea91faa30666c2bb0a2dcf7ec87d849761ae9e326447c9d1120163fe48c0ec64b7f186f1bdf421232e49b0b8318bad814ffd6eaae1bcc52fd81e8d63633aa3b64bbd9af18f69f52fee536f4c27c4bae1f37e409638542810576587322964b27a32e9e0b598db1c9d365909eab2bd804f648c30bcb7db79628fa6518ecb72ec9b817620f649564007191ac6d36db59150f92cf30b95477e4d255050e1cdd42afb6c7e8f2e77b215c8306364d16d33409f2c9435108f7257cdf7ae8c248eb9db544137d4d8c3d0fd0571a868261cabfbbc27a5f6d0c25be01de7c89f385c3d1de493ead63450a9c3ee548cce6100518ebc9926fabac17044c0c1d6c68a12ec4c295aa18fcafea08f55b3c61313afe9e910cd99ea367e7e22f621a753a4c62c29fa4ed1fdd660832675d43aa2d769745b728405a7627f5ca647a0acece3b86ec315a0294b7d8b6eb63c85841f4703561a610dcba138ccc9dc7428394d9ac9a4a2a27da3a54e4fd5547722aa4681dbcc2c1d8fe48994b5e8ec9dc3b7e06c5922d1028948a339dec7012e589814abeefa1e920d602252342a59e687b1c7e2f61ba1d1b3eefe02c630c3e97d4ac391a8534cb4ffb9f3a99bcf5db9ec9b4f84aa546fa394a471dc7e06d2cce65e48c989fa3c2e2fb0f56677b902babce47389ef736f063ff6765780cffd7d4004c394a49f64d43f185b1eb42c3088c92bee4bc3ac4dd1ff0d2647dd5f336254ef68f54b6e9631e7a948b3fb1fcd2cfc4f9b714bea4239f2d5e999b7cb98ab9ec8a40f2ebb99e8a006d61fb705d00db7cda9e61c32a4ddc0aeff4422e430e4698bf2bee2d3e9263601aba5ce70029c0013a54813f3e0f503086ea79f9f74e6a1e7a816184e4c14510bd6199609a6767886988f42c820e41f16d64788e71c1ad7847021f7f6b4110ff7f394e693e6e94cd60b87e682b06a5f9861b1cc294a3849f70dffb7b0fda54ff4853666ee411b5f048cecf66add8f9ed06f8c74a85c9402f685f2423a93c42fd55139a7f769526347ed043c7685bd9440b73ebcc7c01bc583c7d14f80c4682323021baeff1d12dda0f69168df8ac152be46c2c0c9f470ec3e0d4b7f044b7a66241da5ca352d2b00d103e7af26c2d779cc720c94f8254ed56465a82d47a669eff9a6abe5a7d980642e01004c4c903dc3763b36c97ae4249a863eaa479aff3df4cb59c0c477b502cb200615ab3f0d33c7b5cc9a564dc5b662133755320d14ae8eed3edd25c285968df59c7e4242489ae65ed2469cbc8f8aa11b6e01f3ae3aa4f9b67955943f2ebcb7c4682890bb0c543a4b657ef39cc07c7d5c1d0eedf0f3be2600c13e7ba8ad62619791d7a45a536b48f542c50bbb6563c5958658a922885d64287525756146204bf352df25134d1d0cd31f2ff0b925b1fa87e3cbfe5b18832dc6a2fb6906ae57dd9d66bdece15278472135d84c62d89a6d91329ef4b5948a8b4667d2822e83e10c2bc2b79feeb7e01ee8009bacacf20389499a9dd1eb44e2987f22e9c597a2e23348fe552b9c4dd6605641277be325298527c2b5afa120cf562e84ff630a03bd5078c1f256856cfe3b1b13371ff7ea09e2241551743170e4dd0069c7aa137ac205fd94733f744707746876f698ce6e146f21f4bb29dc2ae8a1cc6e894c6cca37585b017a44987c0b53e90aac39d5138838aa835b0c79d14255e5f123fef638c09012a430f2cef5f6c684b860cdf08f4f5a19adba25f06ea4772f0ed8ceb231ddfa6e24d920da0697644a6ffe0c917c1da4bc254ad5d9244d04f067f5c3e7a27287f61fca4eaeb5682b8f787f24a34ef84eeb8d2e7eea86a26ccc679cc68d7e27aeea8e3909c245335afad2ec8aeeb296d7922e04e223a2d7c57011b883160f654b664dd7146798e9335fbdefb195b36865fb2a3de5eff471097261e01698f5f2ca7bb92b952a72737d9ce155b9577aefeb6db44106a20fd32248c0ed7c3d12eaeaf60bb4883718eab14f1d0ebfcf6240367ba5c1cad5ee26f12b146cae724ec24270224107ba19fe5edd032804309154cd9705491533d660d6ada9cf13eed7dea84eb02e9a09ad98f812704761b4bc9ae3c767d64e076d74d3f561de2353970d34f687effc6e9b55035975ab955e4ce2f9586018775b8f005ddd90042d2b4e23e21ce4b5f5e22d6e987a7f6b9294642fcea4f4fdcb326ceb68fcbdf417c215b08fd0b33178c255df97bf8163582bf143cd2543275b822fa95bc010584dc11f0e8a2a7143182f40bfbad4a01261b8c7f9fd3f324c322ceac6afe64b16f66fed9105dca9172f38683ba23f4aae52ff3363840d1abde129b4fdc9e57f73843d38871bae15542fbe922ebb22e47d8a6e409c348583edafdd29a159e438d29652a1959924d0c15e08bc5e7d4242904fc3abc3ea1525c1e22889601ce3dc762207edf1cd8f895bde8232118be9e4c9b6fdf8ca02cda034600afe7aa961da1a6aec86c298884aa75a851ee1ed4afc0aac8177f63f39a1b1cc27473d2161d2c2185f95953dfac2b4b0e366d2e95889d9d940b386de7577f12fd724834489ae6e61db64f43272e5f7ccb1392360215d8be497017fca3d9ad921e776cd0e968850258a09eba1e20e73f1621983e3cbce1ce9c9eec3caaf75572c4c7c55a012da63fa142b5ff00d0980eaf795064628556fba35583c7c82fb17f1a5dad4f809dc013bd126d25e02361470266d1fe8acc1fa6236d4101949a2f777d296579eccdb778389d39c02825ca84538c65cf107c3ea7859cb1780c352b6b14279c5d0ef32692945b6664fa340cafc54ac070d0e3995cdacf7c95f81d0900dde55545a4cc75106d9e8d3b01e82387b78e5afc9b66099e9cd2cbd3e3e5a058d48ac000cf1b7aa7ceb53ca76617aa96be615a61a2499e6f2a9b4532c3343d7e887543d8093279dc8b12f6bd59e9401facd601ca5b4d110231e7648cbaa49240f3a360d28d20f80ef7ba44666522d8737bd3c7a1684421dae626d033401fa75df7072776183dffb4837fdc0d0bf656b3959bb04c02f7e7cf86e33f9f4f50ac4c347d30df3041c7d31dff5e81d2fc473ea57857284796d243d2d14e407913991969fdfb8eff8f51fcb71455e3a9a8ccb26b882413c3edf4d204b73c0cb34ce9ec5300f76334c1eca4a65eac0e439da71ff198e1c051b9d85585ca94a636a5121e4b15265ec8c71cdd30624137764d5f04e9ffd10774eba41cf47762d5943fc2215952a3f83f29906fc9b52c5d20effa80e49a729425f91f76e28bf4ddf9c336cd1e5563299e6aacbeee09b71e2b59f126a1a98d017655cee9bb17b222985d2f40cf948198e8fdf3bfca9d10ed11651a3a91e1c235814dcac125771d3700803f9ae8efa6debf9465a7d44079afdf6b6bb6936535bcfeb5da93bfbbecc3658a085326ddd0f9e6e8dd0485d62767cdaecd785fc7b432f50900104434fc015a7f8e65b611494191cd992ae3718b6c606053b03b023c384ae15eed9aa35000dafe1a917930e326416a2d9515b9b63ddc4b5b9865a46559e98bbd90fa2925753ef51dc27d9fe7615d12cd9568f2ef74c997ed15841c13b12ae76e3f4a7164d5d2a6c4dc2d4f79bed52b63ddb92d388afb5ec316adbf22b4757ed1150b7a2d38934b5b0fa880f781874b8bb3d248f0ef110672fc17dec5330d37c6868e6b9fb03b3459cf0bf7ef31ceeb653c884952b30abce4e7cf2a901cfef19c90929671f3d2b1bdeec551e19250fbf59876621e834eab17fdfc435049275d0490421a723de41deaf42cd63d3fef789266a6b57946ada5aab52a28a72c47f8ea0fecea62e10b60eec01cc0994252ee17f8cb889a622433f30a397eb2b185b3a87f50b3a4cc8c08bd4bb7627954754a96e16c77b15bf731b2af2c2a7de51e2839b3785459068e89978f169584969bb05eda8f58aaf8718533c23bd4c82ff830559f66b633698763b1571280aa13407be425539f550e7e9f58306452623cabc9fd6794f53aebd6e44a1716a423567561237773b88970d63a6a4da88a41493a60a1117e66ef26952424be113d3d8dfb2914f7e9cfa215fe9a3942cfddfe641d73085ab3ea1fe6f2cddd3e397323d0468e606546bef391e3cd32a28838e6078b7072d7236a3f184685783653606cefb3d31cf29afa389e96d5438c9eb9d8b394bd624d7d58d811a3dde67a49abc0902a3bb7b5adfcd77347269b80a1def51b8f1caf3d70e9bf9be264cedcf9df5c7246ea5a7cbfca638438f7be51b0ec1f780a50de569d583b16e6ff85d88dfd2464cdfc2dbf89a0bc27b45b02f757cac77a9f9bc1a20f8b5a057800ebead4841559fc915a3811f22293cada13ed594fb9f5f59f697ec9a4a0300c9830d2614778a4a7d95f13214b331737317db0bb7bfe0ce133f11da0992dc766f3fde8ec90eb9f5b08f509046ddab9be8239a9da25ee687569685e694ea475bcc3776691489bd38f8050c188eb741b45b6e38bfd5b27994e17a36cdf74f687dd3edcdb237fb96e5216244420135a511eb9819015199379267a5aaa5d39ab74d3f0a54f838eeba79ffaf9ea97cf0be2ce88c4b6a4dac8bf81c6cb494b1ef0a925041461d18370461785b526a08f6d0e47fa62ca1f4a2884cf4a7a9d97320847a223ebea28ed2c0ff09db6840b169fe9bc91b5af0135296b5cb80b1aa9ec81c787a31b1eb7f00c1a68b7948c2aaaed7f386b0a246887359b0ca511abecb5beae9b8825ca50d2a42f408b81d5f67b009761be485dfcde2d96cde08dd8687b52c1a1cfc193463f1199bc400e81764b919f4d99b638bcb5bfe4cfb1a75cbf37d7621c70d94c2a85392fe4598fbcfebf5c221415f3dcb9f485479d8de8e5b7c3d74bff90cefa2f20b19dfa718e172468e5ccc1488c856564c8f4", 0xf2d}], 0x3}, 0x9cdc2384016f48f8) 9.453399438s ago: executing program 9 (id=5213): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000002900"], 0x18}}], 0x1, 0x4000000) 9.430615355s ago: executing program 1 (id=5214): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0xf7812277a0e0a717, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f00000000c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x10) recvmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0x38, 0x0}, 0x10000) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x420080) sendmsg$kcm(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12f5ad70ae4b9bd40cf539010000000007000000000000000000000109022400010000e80b0904000001030002000921fd7f000122e3"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0xc, 0x622a00) ioctl$FE_GET_EVENT(r7, 0x80286f4e, &(0x7f0000000240)={0x0, {0x0, 0x0, @vsb}}) splice(r1, 0x0, r5, 0x0, 0x80, 0xe) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000280)={0x9, 0x0, '\x00', {0x0, @reserved}}) write$cgroup_devices(r5, 0x0, 0x9) write(r1, 0x0, 0x0) 9.296381441s ago: executing program 9 (id=5216): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x14, 0x89}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) landlock_create_ruleset(&(0x7f0000000140)={0x818, 0x3, 0x3}, 0x18, 0x0) unshare(0x22020600) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r3, 0x8916, &(0x7f0000000000)) bind$xdp(r1, &(0x7f00000006c0)={0x2c, 0x2, r2, 0x29, r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000c80)={@local, @local, @val={@val={0x88a8, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x4, 0x6, 0x0, @multicast2, @private}, {0x0, 0x0, 0x14, 0x0, @opaque="d9c73f349861d073a0e7db08"}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000101e04050040000102030109026e00e100655002080b"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r6 = signalfd(r5, &(0x7f00000001c0)={[0xf420]}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$packet(0x11, 0x2, 0x300) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_RELEASE_PORT(r8, 0x80045519, &(0x7f0000000040)=0x1) setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 9.276989671s ago: executing program 4 (id=5217): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x75a4, 0x8440) ioctl$DVB_DVR_DMX_REQBUFS(r0, 0xc0086f3c, &(0x7f0000000080)={0x200, 0x2}) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082402010102"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000100004e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c788d3899c4fbe47d6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x844) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) 9.051618439s ago: executing program 5 (id=5218): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'vlan0\x00', {0x80000001}, 0xfff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x0) write(r3, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) close(r3) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000b40)=0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0) read$ptp(r6, &(0x7f00000001c0)=""/184, 0xb8) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[]) 8.254227974s ago: executing program 2 (id=5219): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x408}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000018c0)=""/4100, 0x1004}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000000240)=""/53, 0x35}], 0x3}, 0x27}], 0x3, 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r1, 0x0) 8.163270537s ago: executing program 2 (id=5220): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2d, 0xc3, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sg(0x0, 0x2fe, 0x280800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x3, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0xa, 0x922000000003, 0x11) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x149a82, 0x0) 7.30317952s ago: executing program 5 (id=5221): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0xf, 0x5, 0x7, 0x4800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x6}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)="993631da91c735f9cf0f7c9cb027e26b5cde53e1d257509be05588ad1206e54d4d8494713e6e9c7e0ba1b4ca90d352e0f9dba69069e92d0c707d697f1e67d262674b1370ea098f7c314e02cfcdccaf6a6a18ba04bbf3f816c30b1b6abac56538728681355399f785103004ae1fc6a7ddffeb866afdfaad277423877a011f02215b31ffc905f706bbbe3cfe20b1b2f831c6c13de4e3021a0d7369e1114a98c5ffe5f67454d7bb90b4ce2239952cacfda972b77dbe23f6d9ee2268eb48330ee54fc45611a98458f2625c8fffcbe0a1bbdd0b87a5393197aa61bc", 0xd9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 2.903091585s ago: executing program 4 (id=5222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000ac0)='syscall\x00') pread64(r0, &(0x7f0000000500)=""/15, 0xf, 0x40000000007) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1) 2.723893586s ago: executing program 5 (id=5223): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x68}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x2}]) io_destroy(r5) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(0x3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 2.059163654s ago: executing program 2 (id=5224): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$packet(0x11, 0x2, 0x300) syz_clone3(&(0x7f0000000400)={0x241060400, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x3d}, &(0x7f0000000240)=""/49, 0x31, &(0x7f0000000280)=""/229, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) sched_setscheduler(r1, 0x6, &(0x7f00000004c0)=0xfffffffc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000000)={'sit0\x00', r4, 0x7800, 0x10, 0x5, 0x3, {{0xc, 0x4, 0x0, 0xa, 0x30, 0x68, 0x0, 0xe5, 0x2f, 0x0, @remote, @local, {[@timestamp={0x44, 0x1c, 0x6b, 0x0, 0x6, [0x5, 0xeca, 0x5, 0x3, 0x1183, 0x809]}]}}}}}) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x0, 0x0, 0x8, {r6, @empty, @dev={0xac, 0x14, 0x14, 0x29}}}}], 0xb}, 0x4940) 1.579105522s ago: executing program 1 (id=5225): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) close(r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) 1.572444037s ago: executing program 9 (id=5226): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000029000000"], 0x18}}], 0x1, 0x4000000) 1.383712002s ago: executing program 5 (id=5227): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x2, r2, 0x4}) (fail_nth: 4) 1.333999422s ago: executing program 9 (id=5228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0x7, 0x0, &(0x7f0000000600)="c9f7b986000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.262634643s ago: executing program 4 (id=5229): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/112, 0x70}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) recvmmsg$unix(r1, &(0x7f0000005d40)=[{{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000740)=""/81, 0x51}, {&(0x7f00000007c0)=""/229, 0xe5}, {&(0x7f00000008c0)=""/114, 0x72}, {&(0x7f0000000940)=""/130, 0x82}, {&(0x7f0000000a00)=""/6, 0x6}, {&(0x7f0000000a40)=""/219, 0xdb}], 0x6, &(0x7f0000000bc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000c40), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000cc0)=""/65, 0x41}, {&(0x7f0000000d40)=""/48, 0x30}, {&(0x7f0000000d80)=""/175, 0xaf}, {&(0x7f0000000e40)=""/100, 0x64}, {&(0x7f0000000ec0)=""/207, 0xcf}], 0x5, &(0x7f0000001040)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000001180)=@abs, 0x6e, &(0x7f0000002880)=[{&(0x7f0000001240)=""/237, 0xed}, {&(0x7f0000001340)=""/17, 0x11}, {&(0x7f0000001380)=""/1, 0x1}, {&(0x7f0000001480)=""/248, 0xf8}, {&(0x7f0000001580)=""/244, 0xf4}, {0x0}, {&(0x7f0000002840)=""/22, 0x16}], 0x7, &(0x7f0000002940)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000002a40), 0x6e, &(0x7f0000003f00), 0x0, &(0x7f0000003f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000005c80)=[{0x0}], 0x1, &(0x7f0000005cc0)}}], 0x5, 0x2, &(0x7f0000005e80)={0x77359400}) sendmsg$FOU_CMD_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x8891) connect$unix(r1, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e) 1.17855545s ago: executing program 2 (id=5230): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x401, 0x220040) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) 1.131823303s ago: executing program 1 (id=5231): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000004980)={0x1, 0xfb, 0x5, &(0x7f0000000080)={0xb, "2e133846ced2f482b2e0a037fdff6ac109d9c36c33284f2342bd182000"}}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x108) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r4, 0x40106183, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 1.012265882s ago: executing program 2 (id=5232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) 835.463335ms ago: executing program 5 (id=5233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32315852, 0x8, 0x0, 0xfffffff0, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r1, 0x2, 0x1, 0x3043, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x10}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) shutdown(r4, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d"]) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x1}}, 0x2e) getsockopt(r7, 0x111, 0xfffffffd, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000500), 0x2002, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r8, 0x40096100, 0x0) 833.658409ms ago: executing program 2 (id=5234): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2d, 0xc3, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sg(0x0, 0x2fe, 0x280800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x3, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0xa, 0x922000000003, 0x11) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x149a82, 0x0) 84.811221ms ago: executing program 1 (id=5235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r1, 0x60}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) recvfrom$inet(r7, 0x0, 0x0, 0x100, 0x0, 0x0) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) 0s ago: executing program 4 (id=5236): getpriority(0x1, 0xe6) kernel console output (not intermixed with test programs): using dummy_hcd [ 1143.887577][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 1143.910865][ T48] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1143.910903][ T48] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1143.910930][ T48] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1143.910957][ T48] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.911004][ T48] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1143.911028][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.153826][ T48] usb 6-1: GET_CAPABILITIES returned 0 [ 1144.154000][ T48] usbtmc 6-1:16.0: can't read capabilities [ 1144.711692][T21011] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1144.896678][T20977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.924403][T20977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.924691][T20977] bridge_slave_0: entered allmulticast mode [ 1144.927663][T20977] bridge_slave_0: entered promiscuous mode [ 1144.964528][T20977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.964773][T20977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.965043][T20977] bridge_slave_1: entered allmulticast mode [ 1144.968162][T20977] bridge_slave_1: entered promiscuous mode [ 1145.067644][T20977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.072304][T20977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.147237][T20977] team0: Port device team_slave_0 added [ 1145.151230][T20977] team0: Port device team_slave_1 added [ 1145.340176][T20977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.340196][T20977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.340223][T20977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.398035][ T5815] Bluetooth: hci1: command tx timeout [ 1145.539917][T20977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.539938][T20977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.539969][T20977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.224981][T21027] ALSA: mixer_oss: invalid OSS volume '' [ 1146.794090][T12444] usb 6-1: USB disconnect, device number 57 [ 1147.093242][T13586] syz_tun (unregistering): left allmulticast mode [ 1148.514614][T20977] hsr_slave_0: entered promiscuous mode [ 1148.516339][T20977] hsr_slave_1: entered promiscuous mode [ 1148.517371][T20977] debugfs: 'hsr0' already exists in 'hsr' [ 1148.517400][T20977] Cannot create hsr debugfs directory [ 1148.568386][ T5815] Bluetooth: hci1: command tx timeout [ 1149.475387][T21063] ALSA: mixer_oss: invalid OSS volume '' [ 1150.345071][T21054] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4737'. [ 1150.584300][ T5815] Bluetooth: hci1: command tx timeout [ 1151.129201][T21068] 9pnet: p9_errstr2errno: server reported unknown error [ 1151.634625][T12444] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1151.685659][T14791] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.811291][T12444] usb 5-1: Using ep0 maxpacket: 32 [ 1151.813280][T12444] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1151.831724][T12444] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1151.831758][T12444] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1151.831781][T12444] usb 5-1: Product: syz [ 1151.831798][T12444] usb 5-1: Manufacturer: syz [ 1151.831814][T12444] usb 5-1: SerialNumber: syz [ 1151.843681][T12444] usb 5-1: config 0 descriptor?? [ 1151.852607][T21074] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1154.968497][T21096] ALSA: mixer_oss: invalid OSS volume '' [ 1155.423581][T14791] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.574331][ T48] usb 5-1: USB disconnect, device number 43 [ 1155.849004][T21099] netlink: 'syz.5.4750': attribute type 10 has an invalid length. [ 1156.277154][T21107] 9pnet: p9_errstr2errno: server reported unknown error [ 1156.298951][T14791] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.415632][T21112] QAT: failed to copy from user cfg_data. [ 1157.801488][T21124] No control pipe specified [ 1159.841816][T21132] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1159.841864][T21132] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1159.841896][T21132] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1159.964651][T21129] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1159.964887][T21129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1159.965116][T21129] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1159.965351][T21129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1159.965554][T21129] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1159.965757][T21129] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1159.965844][T21129] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1160.086026][T21129] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1160.162850][T21140] 9pnet_fd: Insufficient options for proto=fd [ 1160.536432][T21150] No control pipe specified [ 1161.010739][T21156] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1161.858744][T14791] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.910224][T21169] 9pnet_fd: Insufficient options for proto=fd [ 1162.024110][T14360] Bluetooth: hci1: command 0x0c1a tx timeout [ 1162.024440][T14360] Bluetooth: hci5: command 0x0c1a tx timeout [ 1162.024475][T14360] Bluetooth: hci3: command 0x0c1a tx timeout [ 1162.024506][T14360] Bluetooth: hci7: command 0x0c1a tx timeout [ 1162.024538][T14360] Bluetooth: hci0: command 0x0c1a tx timeout [ 1162.024570][T14360] Bluetooth: hci4: command 0x0406 tx timeout [ 1163.822189][T21182] syz_tun: entered allmulticast mode [ 1164.104755][ T5815] Bluetooth: hci1: command 0x0c1a tx timeout [ 1164.257305][T21193] syz_tun: entered allmulticast mode [ 1164.976134][T21210] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4789'. [ 1165.353195][T21212] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1165.736087][T21228] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.4793'. [ 1166.196709][ T5815] Bluetooth: hci1: command 0x0c1a tx timeout [ 1166.344719][T14791] geneve1 (unregistering): left allmulticast mode [ 1166.511695][T14791] bond0 (unregistering): Released all slaves [ 1167.012722][T21248] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4798'. [ 1167.090060][T14791] tipc: Disabling bearer [ 1167.100398][T14791] tipc: Left network mode [ 1167.113262][T21237] syz_tun: entered allmulticast mode [ 1167.324248][ T5912] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1167.594717][ T48] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1167.617510][ T5912] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1167.617542][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.623254][ T5912] usb 5-1: config 0 descriptor?? [ 1167.887671][T21260] QAT: failed to copy from user cfg_data. [ 1168.574000][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 1168.576851][ T48] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1168.580558][ T48] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1168.580588][ T48] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1168.580610][ T48] usb 2-1: Product: syz [ 1168.580626][ T48] usb 2-1: Manufacturer: syz [ 1168.580642][ T48] usb 2-1: SerialNumber: syz [ 1168.590701][ T48] usb 2-1: config 0 descriptor?? [ 1168.595365][T21256] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1168.862964][ T5912] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1169.152643][ T5912] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1169.152675][ T5912] [drm] Initialized udl on minor 2 [ 1169.154065][T19160] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1169.164018][ T48] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1169.300461][ T5912] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1169.301458][ T5912] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1169.318126][ T48] usb 6-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.318172][ T48] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1169.318215][ T48] usb 6-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1169.321340][ T48] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1169.321368][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1169.321390][ T48] usb 6-1: SerialNumber: syz [ 1169.336972][T19160] usb 3-1: Using ep0 maxpacket: 32 [ 1169.430526][T19160] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1169.438116][T19160] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1169.438210][T19160] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1169.438233][T19160] usb 3-1: Product: syz [ 1169.438248][T19160] usb 3-1: Manufacturer: syz [ 1169.438264][T19160] usb 3-1: SerialNumber: syz [ 1169.541781][T19160] usb 3-1: config 0 descriptor?? [ 1169.543084][T21264] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1169.670499][T19160] chaoskey 3-1:0.0: Unable to register with hwrng [ 1170.033610][ T48] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -22 [ 1170.044633][ T48] usb 6-1: USB disconnect, device number 58 [ 1170.195887][ T5944] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1170.197024][ T5944] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1170.197192][ T5944] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1170.201027][ T5944] usb 5-1: USB disconnect, device number 44 [ 1170.443226][ T48] usb 2-1: USB disconnect, device number 120 [ 1170.535497][T19160] usb 3-1: USB disconnect, device number 97 [ 1171.014654][T21291] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4808'. [ 1172.662964][T21320] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1172.934061][T14791] hsr_slave_0: left promiscuous mode [ 1172.985885][T14791] hsr_slave_1: left promiscuous mode [ 1173.032140][T14791] veth1_macvtap: left promiscuous mode [ 1173.032263][T14791] veth0_macvtap: left promiscuous mode [ 1173.032551][T14791] veth1_vlan: left promiscuous mode [ 1173.032779][T14791] veth0_vlan: left promiscuous mode [ 1174.816126][T21342] QAT: failed to copy from user cfg_data. [ 1176.724483][T21356] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1176.834332][T19160] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1177.054215][T19160] usb 5-1: Using ep0 maxpacket: 32 [ 1177.058975][T19160] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.058994][T19160] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1177.059018][T19160] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1177.059032][T19160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.094109][ T5944] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1177.294771][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 1177.298516][ T5944] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1177.324000][ T5944] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1177.324033][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1177.324053][ T5944] usb 6-1: Product: syz [ 1177.324068][ T5944] usb 6-1: Manufacturer: syz [ 1177.324082][ T5944] usb 6-1: SerialNumber: syz [ 1177.461255][T21353] bridge_slave_0: left allmulticast mode [ 1177.461278][T21353] bridge_slave_0: left promiscuous mode [ 1177.461425][T21353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.470960][ T5944] usb 6-1: config 0 descriptor?? [ 1177.476066][T21358] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1177.588046][T21353] bridge_slave_1: left allmulticast mode [ 1177.588069][T21353] bridge_slave_1: left promiscuous mode [ 1177.588227][T21353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.631303][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.777351][T21353] bond0: (slave bond_slave_0): Releasing backup interface [ 1177.877824][T21353] bond0: (slave bond_slave_1): Releasing backup interface [ 1177.968277][ T1230] usb 6-1: USB disconnect, device number 59 [ 1178.038466][T21353] team0: Port device team_slave_0 removed [ 1178.117607][T21353] team0: Port device team_slave_1 removed [ 1178.127620][T21353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.127652][T21353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.166866][T21353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.166899][T21353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.216603][T21353] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1178.292749][T12841] usb 5-1: USB disconnect, device number 45 [ 1178.409519][T20977] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1178.462034][T20977] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1178.587670][T20977] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1178.722531][T21385] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1178.723445][ T808] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1178.799865][T20977] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1178.896751][ T808] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1178.896786][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.902954][ T808] usb 2-1: config 0 descriptor?? [ 1179.327235][T19160] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1179.516133][T19160] usb 3-1: Using ep0 maxpacket: 32 [ 1179.518864][T19160] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1179.522349][T19160] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1179.522384][T19160] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1179.522406][T19160] usb 3-1: Product: syz [ 1179.522422][T19160] usb 3-1: Manufacturer: syz [ 1179.522438][T19160] usb 3-1: SerialNumber: syz [ 1179.524040][ T808] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1180.560280][T19160] usb 3-1: config 0 descriptor?? [ 1180.699945][T21390] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1180.921036][ T808] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1180.921064][ T808] [drm] Initialized udl on minor 2 [ 1180.934126][ T808] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1180.934613][ T808] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1181.269367][ T5868] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1181.270249][ T5944] usb 2-1: USB disconnect, device number 121 [ 1181.270407][ T5868] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1181.270717][ T5868] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1181.858957][ T5868] usb 3-1: USB disconnect, device number 98 [ 1182.249611][T20977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.350295][T20977] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.368841][T14791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.369149][T14791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.453658][T14791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.453776][T14791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.500521][T21437] No control pipe specified [ 1182.507022][ T5868] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1182.657150][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 1182.660213][ T5868] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1182.662869][ T5868] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1182.662900][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1182.662922][ T5868] usb 6-1: Product: syz [ 1182.662938][ T5868] usb 6-1: Manufacturer: syz [ 1182.662952][ T5868] usb 6-1: SerialNumber: syz [ 1182.723118][ T5868] usb 6-1: config 0 descriptor?? [ 1182.724230][T21431] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1184.668522][ T808] usb 6-1: USB disconnect, device number 60 [ 1186.231993][T21476] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1186.406430][T20977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.788510][T21499] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4857'. [ 1187.480806][T21511] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4860'. [ 1187.705005][T21515] ALSA: mixer_oss: invalid OSS volume '' [ 1188.786030][T20977] veth0_vlan: entered promiscuous mode [ 1188.871488][T20977] veth1_vlan: entered promiscuous mode [ 1188.975605][T20977] veth0_macvtap: entered promiscuous mode [ 1188.993485][T20977] veth1_macvtap: entered promiscuous mode [ 1189.064650][ T5944] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1189.112127][T20977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.160148][T20977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.254057][ T5944] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1189.254092][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.296019][ T5944] usb 2-1: config 0 descriptor?? [ 1190.272751][T14791] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.285496][ T1417] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.286277][ T1417] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.286823][ T1417] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.710378][ T5944] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1190.991731][ T5944] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1190.991760][ T5944] [drm] Initialized udl on minor 2 [ 1191.307294][ T5944] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1191.307850][ T5944] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1192.351813][ T1230] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1192.372545][ T808] usb 2-1: USB disconnect, device number 122 [ 1192.404485][ T1230] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1192.880557][ T6698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.880581][ T6698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.614584][T21547] QAT: failed to copy from user cfg_data. [ 1193.883655][ T6705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.883678][ T6705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.236200][T21554] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4869'. [ 1194.650843][ T31] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1195.758350][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.758385][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.758405][ T31] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1195.758453][ T31] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1195.758479][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.944118][ T31] usb 10-1: config 0 descriptor?? [ 1196.071742][ T5948] lo speed is unknown, defaulting to 1000 [ 1196.237273][ T5944] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1196.372322][ T31] hid_parser_main: 5 callbacks suppressed [ 1196.372347][ T31] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1196.372378][ T31] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1196.372406][ T31] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1196.372433][ T31] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1196.372459][ T31] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1196.372486][ T31] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1196.372514][ T31] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1196.372540][ T31] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1196.372567][ T31] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1196.372594][ T31] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1196.505114][ T5944] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1196.505145][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.527285][ T5944] usb 5-1: config 0 descriptor?? [ 1196.571725][ T31] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1196.605731][ T31] usb 10-1: USB disconnect, device number 19 [ 1196.884519][ T5944] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1196.987787][T21580] fido_id[21580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1197.162080][ T5944] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1197.162112][ T5944] [drm] Initialized udl on minor 2 [ 1197.373484][ T5944] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1197.381531][ T5944] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1198.407973][ T5944] usb 5-1: USB disconnect, device number 46 [ 1199.473222][ T1230] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1199.482212][ T1230] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1201.829077][T21603] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4886'. [ 1202.555493][T21615] ALSA: mixer_oss: invalid OSS volume '' [ 1203.363101][T19160] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1203.798700][T21621] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4889'. [ 1203.810337][T19160] usb 2-1: Using ep0 maxpacket: 8 [ 1203.824991][T21622] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4888'. [ 1203.888039][T19160] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.888109][T19160] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1203.888141][T19160] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1203.888165][T19160] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1203.888212][T19160] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1203.888237][T19160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.082663][T19160] usbtmc 2-1:16.0: bulk endpoints not found [ 1204.484628][ T808] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1204.530242][T21634] 9pnet_virtio: no channels available for device syz [ 1206.092478][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.092604][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1206.092655][ T808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1206.093035][ T808] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1206.093174][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.426923][ T808] usb 3-1: config 0 descriptor?? [ 1207.492658][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4895'. [ 1207.492688][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4895'. [ 1207.847485][ T808] hid_parser_main: 5 callbacks suppressed [ 1207.849214][ T808] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1207.849262][ T808] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1207.849997][ T808] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1207.852995][ T808] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1207.950314][ T808] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1207.950485][ T808] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1207.950617][ T808] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1207.950748][ T808] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1207.950878][ T808] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1207.950958][ T808] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1208.353972][T19160] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1208.512708][ T1230] usb 2-1: USB disconnect, device number 123 [ 1208.639558][ T808] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1208.662577][ T808] usb 3-1: USB disconnect, device number 99 [ 1209.453901][T21641] fido_id[21641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1209.501897][T21646] tmpfs: Bad value for 'mpol' [ 1209.600783][T21654] 9pnet_virtio: no channels available for device syz [ 1211.866632][T21656] ALSA: mixer_oss: invalid OSS volume '' [ 1212.469063][ T1230] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1214.304622][T19160] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1214.464257][ T1230] usb 5-1: device descriptor read/64, error -71 [ 1214.467641][T19160] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1214.467674][T19160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.473549][T19160] usb 6-1: config 0 descriptor?? [ 1214.704036][ T1230] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1214.957992][T19160] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1215.007609][ T1230] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1215.007702][ T1230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.101605][T21674] 9pnet_virtio: no channels available for device syz [ 1215.903355][ T1230] usb 5-1: config 0 descriptor?? [ 1218.943978][ T5944] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1219.040428][T19160] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1219.040460][T19160] [drm] Initialized udl on minor 2 [ 1219.089205][ T1230] usb 5-1: can't set config #0, error -71 [ 1219.141260][ T1230] usb 5-1: USB disconnect, device number 48 [ 1219.284042][T19160] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1219.284680][T19160] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1219.297214][T19158] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1219.328874][T19158] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1219.329144][T19158] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1219.364042][T19160] usb 6-1: USB disconnect, device number 62 [ 1219.533975][ T5912] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1219.574702][T21679] siw: device registration error -23 [ 1219.733664][ T5912] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1219.733700][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.800441][ T5912] usb 2-1: config 0 descriptor?? [ 1220.153057][ T5912] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1220.217456][T19158] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1220.272901][T21692] ALSA: mixer_oss: invalid OSS volume '' [ 1221.169282][ T5912] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1221.169310][ T5912] [drm] Initialized udl on minor 2 [ 1221.184005][ T5944] usb 3-1: device descriptor read/64, error -71 [ 1221.335285][ T5912] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1221.336874][ T5912] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1221.355710][T19158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.355807][T19158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.355834][T19158] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1221.355881][T19158] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1221.355963][T19158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.429612][T19158] usb 5-1: config 0 descriptor?? [ 1221.444097][ T5944] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1221.584113][ T1230] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1221.584756][ T5948] usb 2-1: USB disconnect, device number 124 [ 1221.585099][ T1230] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1221.585496][ T1230] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1221.594067][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 1221.629862][ T5944] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1221.632754][ T5944] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1221.632849][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1221.632874][ T5944] usb 3-1: Product: syz [ 1221.632890][ T5944] usb 3-1: Manufacturer: syz [ 1221.632906][ T5944] usb 3-1: SerialNumber: syz [ 1221.659535][T21699] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4914'. [ 1221.697585][ T5944] usb 3-1: config 0 descriptor?? [ 1221.698947][T21688] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1221.899161][T19158] hid_parser_main: 5 callbacks suppressed [ 1221.899188][T19158] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1221.899219][T19158] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1221.899246][T19158] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1221.899273][T19158] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1221.899300][T19158] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1221.899336][T19158] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1221.899363][T19158] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1221.899390][T19158] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1221.899417][T19158] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1221.899442][T19158] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1222.074588][T19158] plantronics 0003:047F:FFFF.0039: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1222.119007][ T5948] usb 5-1: USB disconnect, device number 49 [ 1222.235044][ T808] usb 3-1: USB disconnect, device number 101 [ 1222.688059][T21705] fido_id[21705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1222.833997][T19158] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1222.985224][T19158] usb 2-1: Using ep0 maxpacket: 32 [ 1222.993629][T19158] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1223.009043][T21714] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1223.344384][T19158] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1223.344429][T19158] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1223.344452][T19158] usb 2-1: Product: syz [ 1223.344468][T19158] usb 2-1: Manufacturer: syz [ 1223.344485][T19158] usb 2-1: SerialNumber: syz [ 1224.336363][T19158] usb 2-1: config 0 descriptor?? [ 1224.644739][T21707] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1224.746491][T21721] siw: device registration error -23 [ 1224.953971][ T808] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1225.353964][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 1225.356617][ T808] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1225.360248][ T808] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1225.360389][ T808] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1225.360409][ T808] usb 5-1: Product: syz [ 1225.360422][ T808] usb 5-1: Manufacturer: syz [ 1225.360435][ T808] usb 5-1: SerialNumber: syz [ 1225.446452][T21729] 9pnet_virtio: no channels available for device syz [ 1226.338999][ T808] usb 5-1: config 0 descriptor?? [ 1226.383405][T21719] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1226.467826][ T808] chaoskey 5-1:0.0: Unable to register with hwrng [ 1227.506175][T21734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1227.621990][T19158] usb 5-1: USB disconnect, device number 50 [ 1227.684939][ T808] usb 2-1: USB disconnect, device number 125 [ 1227.749852][T21738] FAULT_INJECTION: forcing a failure. [ 1227.749852][T21738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.749891][T21738] CPU: 0 UID: 0 PID: 21738 Comm: syz.2.4928 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1227.749921][T21738] Tainted: [L]=SOFTLOCKUP [ 1227.749930][T21738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1227.749943][T21738] Call Trace: [ 1227.749953][T21738] [ 1227.749963][T21738] dump_stack_lvl+0xe8/0x150 [ 1227.750002][T21738] should_fail_ex+0x46b/0x600 [ 1227.750041][T21738] _copy_from_user+0x2d/0xb0 [ 1227.750064][T21738] memdup_user+0x5e/0xd0 [ 1227.750095][T21738] strndup_user+0x68/0xd0 [ 1227.750126][T21738] __se_sys_add_key+0x1ca/0x420 [ 1227.750152][T21738] ? __pfx___se_sys_add_key+0x10/0x10 [ 1227.750186][T21738] ? __x64_sys_add_key+0x20/0xc0 [ 1227.750211][T21738] do_syscall_64+0x14d/0xf80 [ 1227.750246][T21738] ? trace_irq_disable+0x3b/0x150 [ 1227.750274][T21738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.750297][T21738] ? clear_bhb_loop+0x40/0x90 [ 1227.750325][T21738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.750348][T21738] RIP: 0033:0x7f7c4acdc819 [ 1227.750369][T21738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.750389][T21738] RSP: 002b:00007f7c48f2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1227.750413][T21738] RAX: ffffffffffffffda RBX: 00007f7c4af55fa0 RCX: 00007f7c4acdc819 [ 1227.750430][T21738] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 00002000000001c0 [ 1227.750446][T21738] RBP: 00007f7c48f2e090 R08: fffffffffffffffd R09: 0000000000000000 [ 1227.750462][T21738] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1227.750476][T21738] R13: 00007f7c4af56038 R14: 00007f7c4af55fa0 R15: 00007ffe7a732f68 [ 1227.750512][T21738] [ 1227.857796][T21743] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4929'. [ 1229.744079][ T808] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1229.896373][ T808] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1229.896409][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.930526][ T808] usb 3-1: config 0 descriptor?? [ 1230.862170][ T808] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1230.919250][ T808] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1230.919278][ T808] [drm] Initialized udl on minor 2 [ 1231.072227][ T808] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1231.073758][ T808] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1231.285968][ T808] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1231.294447][ T5944] usb 3-1: USB disconnect, device number 102 [ 1231.311663][ T808] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1231.312057][ T808] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1231.513991][ T5948] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1231.677731][T21774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1231.678248][ T5948] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1231.678280][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.878410][T21776] FAULT_INJECTION: forcing a failure. [ 1231.878410][T21776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1231.878451][T21776] CPU: 0 UID: 0 PID: 21776 Comm: syz.4.4939 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1231.878482][T21776] Tainted: [L]=SOFTLOCKUP [ 1231.878491][T21776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1231.878505][T21776] Call Trace: [ 1231.878514][T21776] [ 1231.878524][T21776] dump_stack_lvl+0xe8/0x150 [ 1231.878565][T21776] should_fail_ex+0x46b/0x600 [ 1231.878602][T21776] _copy_from_user+0x2d/0xb0 [ 1231.878625][T21776] kvm_vm_ioctl+0x2c5/0xd50 [ 1231.878663][T21776] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1231.878719][T21776] ? kasan_quarantine_put+0xbb/0x1f0 [ 1231.878762][T21776] ? tomoyo_path_number_perm+0x219/0x630 [ 1231.878789][T21776] ? tomoyo_path_number_perm+0x219/0x630 [ 1231.878816][T21776] ? do_vfs_ioctl+0x117b/0x1540 [ 1231.878850][T21776] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1231.878877][T21776] ? vfs_write+0x9ce/0xba0 [ 1231.878924][T21776] ? __asan_memset+0x22/0x50 [ 1231.878953][T21776] ? smack_file_ioctl+0x331/0x360 [ 1231.878990][T21776] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1231.879035][T21776] ? ksys_write+0x202/0x270 [ 1231.879076][T21776] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1231.879100][T21776] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1231.879133][T21776] __se_sys_ioctl+0xff/0x170 [ 1231.879159][T21776] do_syscall_64+0x14d/0xf80 [ 1231.879193][T21776] ? trace_irq_disable+0x3b/0x150 [ 1231.879220][T21776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.879242][T21776] ? clear_bhb_loop+0x40/0x90 [ 1231.879271][T21776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.879294][T21776] RIP: 0033:0x7fb915edc819 [ 1231.879316][T21776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.879335][T21776] RSP: 002b:00007fb914136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1231.879359][T21776] RAX: ffffffffffffffda RBX: 00007fb916155fa0 RCX: 00007fb915edc819 [ 1231.879376][T21776] RDX: 0000000000000000 RSI: 000000004020ae76 RDI: 0000000000000004 [ 1231.879391][T21776] RBP: 00007fb914136090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.879405][T21776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1231.879418][T21776] R13: 00007fb916156038 R14: 00007fb916155fa0 R15: 00007ffc5d202508 [ 1231.879454][T21776] [ 1233.246222][ T5948] usb 2-1: config 0 descriptor?? [ 1236.016052][T21780] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1236.156301][ T5948] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1237.139037][ T5948] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1237.139065][ T5948] [drm] Initialized udl on minor 2 [ 1237.218082][ T5948] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1237.218648][ T5948] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1237.219942][ T48] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1237.220795][ T48] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1237.221057][ T48] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1237.531418][ T5948] usb 2-1: USB disconnect, device number 126 [ 1238.024027][ T48] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1238.685483][T21811] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1239.307409][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.338921][ T48] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1239.338963][ T48] usb 3-1: can't read configurations, error -61 [ 1239.672233][ T48] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1239.730289][T21814] 9pnet_virtio: no channels available for device syz [ 1239.816510][ T48] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1239.816551][ T48] usb 3-1: can't read configurations, error -61 [ 1239.820955][ T48] usb usb3-port1: attempt power cycle [ 1239.966469][T21818] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1240.135768][T21823] tmpfs: Bad value for 'mpol' [ 1240.174059][ T48] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1240.201349][ T48] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1240.201392][ T48] usb 3-1: can't read configurations, error -61 [ 1240.324009][ T48] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1240.356776][ T48] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1240.356821][ T48] usb 3-1: can't read configurations, error -61 [ 1240.357276][ T48] usb usb3-port1: unable to enumerate USB device [ 1240.842604][T21829] ALSA: mixer_oss: invalid OSS volume '' [ 1241.800850][T19158] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1243.299492][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4956'. [ 1243.299522][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4956'. [ 1243.580369][T19158] usb 10-1: device descriptor read/all, error -71 [ 1245.634552][T21857] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1246.046553][T21861] ALSA: mixer_oss: invalid OSS volume '' [ 1247.044712][ T36] kauditd_printk_skb: 358 callbacks suppressed [ 1247.044733][ T36] audit: type=1326 audit(1775531682.023:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21863 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1247.074004][ T36] audit: type=1326 audit(1775531682.023:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21863 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1247.203945][ T36] audit: type=1326 audit(1775531682.173:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21863 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1247.208422][ T36] audit: type=1326 audit(1775531682.173:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21863 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1247.208481][ T36] audit: type=1326 audit(1775531682.183:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21863 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1247.208531][ T36] audit: type=1326 audit(1775531682.183:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21863 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1247.208580][ T36] audit: type=1326 audit(1775531682.183:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21863 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1247.208626][ T36] audit: type=1326 audit(1775531682.183:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21863 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1247.208670][ T36] audit: type=1326 audit(1775531682.183:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21863 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1247.208715][ T36] audit: type=1326 audit(1775531682.183:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21863 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1247.280992][T21866] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4968'. [ 1247.347452][ T5868] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1247.524314][ T48] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1247.547393][ T5868] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1247.547437][ T5868] usb 10-1: can't read configurations, error -61 [ 1247.787457][ T5868] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1247.825289][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.825327][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.825372][ T48] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1247.825398][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.836981][ T48] usb 6-1: config 0 descriptor?? [ 1248.841311][ T5868] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1248.841356][ T5868] usb 10-1: can't read configurations, error -61 [ 1248.842066][ T5868] usb usb10-port1: attempt power cycle [ 1249.184081][ T5868] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 1250.115213][ T5868] usb 10-1: device descriptor read/8, error -71 [ 1250.134679][ T48] razer 0003:1532:010E.003A: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 1250.173708][T19158] usb 6-1: USB disconnect, device number 63 [ 1250.411685][T21882] kAFS: unparsable volume name [ 1250.443340][T21882] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4973'. [ 1250.443372][T21882] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4973'. [ 1250.443391][T21882] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4973'. [ 1250.606834][T21881] fido_id[21881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1250.702723][T21890] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1250.814364][T21887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1250.904101][ T5868] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1250.925056][ T5868] usb 10-1: Using ep0 maxpacket: 16 [ 1250.928028][ T5868] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1250.928056][ T5868] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.928077][ T5868] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1250.931933][ T5868] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1250.931967][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.931990][ T5868] usb 10-1: Product: syz [ 1250.932006][ T5868] usb 10-1: Manufacturer: syz [ 1250.932021][ T5868] usb 10-1: SerialNumber: syz [ 1251.569251][ T5868] usb 10-1: 0:2 : does not exist [ 1251.679746][T21900] ALSA: mixer_oss: invalid OSS volume '' [ 1252.938396][T21905] FAULT_INJECTION: forcing a failure. [ 1252.938396][T21905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1252.938438][T21905] CPU: 0 UID: 0 PID: 21905 Comm: syz.2.4979 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1252.938470][T21905] Tainted: [L]=SOFTLOCKUP [ 1252.938478][T21905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1252.938491][T21905] Call Trace: [ 1252.938501][T21905] [ 1252.938511][T21905] dump_stack_lvl+0xe8/0x150 [ 1252.938551][T21905] should_fail_ex+0x46b/0x600 [ 1252.938587][T21905] _copy_from_iter+0x1d3/0x1670 [ 1252.938630][T21905] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1252.938662][T21905] ? __alloc_skb+0x27d/0x7d0 [ 1252.938684][T21905] ? __pfx__copy_from_iter+0x10/0x10 [ 1252.938713][T21905] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1252.938746][T21905] ? __alloc_skb+0x27d/0x7d0 [ 1252.938783][T21905] ? netlink_sendmsg+0x650/0xb40 [ 1252.938816][T21905] ? skb_put+0x11b/0x210 [ 1252.938842][T21905] netlink_sendmsg+0x6c0/0xb40 [ 1252.938885][T21905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.938921][T21905] ? unwind_get_return_address+0x4d/0x90 [ 1252.938950][T21905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1252.938987][T21905] ____sys_sendmsg+0x94c/0x9c0 [ 1252.939020][T21905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1252.939057][T21905] ? import_iovec+0x73/0xa0 [ 1252.939082][T21905] ___sys_sendmsg+0x2a5/0x360 [ 1252.939116][T21905] ? __pfx____sys_sendmsg+0x10/0x10 [ 1252.939181][T21905] ? __fget_files+0x2a/0x420 [ 1252.939210][T21905] ? __fget_files+0x3a6/0x420 [ 1252.939251][T21905] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1252.939280][T21905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1252.939316][T21905] ? __pfx_ksys_write+0x10/0x10 [ 1252.939363][T21905] do_syscall_64+0x14d/0xf80 [ 1252.939389][T21905] ? trace_irq_disable+0x3b/0x150 [ 1252.939415][T21905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.939438][T21905] ? clear_bhb_loop+0x40/0x90 [ 1252.939466][T21905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.939489][T21905] RIP: 0033:0x7f7c4acdc819 [ 1252.939509][T21905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.939528][T21905] RSP: 002b:00007f7c48f2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1252.939553][T21905] RAX: ffffffffffffffda RBX: 00007f7c4af55fa0 RCX: 00007f7c4acdc819 [ 1252.939570][T21905] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1252.939585][T21905] RBP: 00007f7c48f2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.939600][T21905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.939615][T21905] R13: 00007f7c4af56038 R14: 00007f7c4af55fa0 R15: 00007ffe7a732f68 [ 1252.939650][T21905] [ 1253.484555][ T5868] usb 10-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1253.675946][T21918] tmpfs: Bad value for 'mpol' [ 1253.687620][ T5868] usb 10-1: USB disconnect, device number 25 [ 1253.717864][ T36] kauditd_printk_skb: 574 callbacks suppressed [ 1253.717885][ T36] audit: type=1326 audit(1775531688.693:8226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb915edc819 code=0x7ffc0000 [ 1253.717950][ T36] audit: type=1326 audit(1775531688.693:8227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb915edc819 code=0x7ffc0000 [ 1253.717999][ T36] audit: type=1326 audit(1775531688.693:8228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb915edc819 code=0x7ffc0000 [ 1253.737961][ T36] audit: type=1326 audit(1775531688.713:8229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb915edc819 code=0x7ffc0000 [ 1253.738024][ T36] audit: type=1326 audit(1775531688.713:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb915edc819 code=0x7ffc0000 [ 1253.738067][ T36] audit: type=1326 audit(1775531688.713:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb915edc819 code=0x7ffc0000 [ 1253.738123][ T36] audit: type=1326 audit(1775531688.713:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb915edc819 code=0x7ffc0000 [ 1253.738165][ T36] audit: type=1326 audit(1775531688.713:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb915edc819 code=0x7ffc0000 [ 1253.756181][ T36] audit: type=1326 audit(1775531688.713:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb915edc819 code=0x7ffc0000 [ 1253.756236][ T36] audit: type=1326 audit(1775531688.723:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb915edc819 code=0x7ffc0000 [ 1253.878771][T21769] udevd[21769]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1253.994104][ T5948] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1254.179373][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.179412][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.179453][ T5948] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1254.179478][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.198635][ T5948] usb 5-1: config 0 descriptor?? [ 1254.310455][T21926] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1254.574054][T21928] netlink: 666 bytes leftover after parsing attributes in process `syz.9.4989'. [ 1255.058016][ T5948] razer 0003:1532:010E.003B: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 1255.902679][T21939] ALSA: mixer_oss: invalid OSS volume '' [ 1256.728872][T21951] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1256.776838][T21954] FAULT_INJECTION: forcing a failure. [ 1256.776838][T21954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.776880][T21954] CPU: 1 UID: 0 PID: 21954 Comm: syz.5.4996 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1256.776909][T21954] Tainted: [L]=SOFTLOCKUP [ 1256.776916][T21954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1256.776930][T21954] Call Trace: [ 1256.776939][T21954] [ 1256.776948][T21954] dump_stack_lvl+0xe8/0x150 [ 1256.776987][T21954] should_fail_ex+0x46b/0x600 [ 1256.777024][T21954] _copy_from_iter+0x1d3/0x1670 [ 1256.777066][T21954] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1256.777100][T21954] ? __alloc_skb+0x27d/0x7d0 [ 1256.777122][T21954] ? __pfx__copy_from_iter+0x10/0x10 [ 1256.777153][T21954] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1256.777187][T21954] ? __alloc_skb+0x27d/0x7d0 [ 1256.777216][T21954] ? netlink_sendmsg+0x650/0xb40 [ 1256.777248][T21954] ? skb_put+0x11b/0x210 [ 1256.777275][T21954] netlink_sendmsg+0x6c0/0xb40 [ 1256.777319][T21954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1256.777357][T21954] ? unwind_get_return_address+0x4d/0x90 [ 1256.777385][T21954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1256.777424][T21954] ____sys_sendmsg+0x94c/0x9c0 [ 1256.777458][T21954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1256.777494][T21954] ? import_iovec+0x73/0xa0 [ 1256.777519][T21954] ___sys_sendmsg+0x2a5/0x360 [ 1256.777551][T21954] ? __pfx____sys_sendmsg+0x10/0x10 [ 1256.777617][T21954] ? __fget_files+0x2a/0x420 [ 1256.777659][T21954] ? __fget_files+0x3a6/0x420 [ 1256.777700][T21954] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1256.777730][T21954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1256.777767][T21954] ? __pfx_ksys_write+0x10/0x10 [ 1256.777814][T21954] do_syscall_64+0x14d/0xf80 [ 1256.777839][T21954] ? trace_irq_disable+0x3b/0x150 [ 1256.777865][T21954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.777887][T21954] ? clear_bhb_loop+0x40/0x90 [ 1256.777914][T21954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.777937][T21954] RIP: 0033:0x7fd24441c819 [ 1256.777958][T21954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.777977][T21954] RSP: 002b:00007fd24266e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.778002][T21954] RAX: ffffffffffffffda RBX: 00007fd244695fa0 RCX: 00007fd24441c819 [ 1256.778019][T21954] RDX: 0000000040000010 RSI: 0000200000002900 RDI: 0000000000000003 [ 1256.778034][T21954] RBP: 00007fd24266e090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.778048][T21954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.778062][T21954] R13: 00007fd244696038 R14: 00007fd244695fa0 R15: 00007ffdc75016b8 [ 1256.778098][T21954] [ 1256.977156][T21957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4998'. [ 1256.992713][T21957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4998'. [ 1257.246278][ T5912] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1257.368277][T21966] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1257.413951][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 1257.416927][ T5912] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 1257.416960][ T5912] usb 3-1: config 252 has no interface number 0 [ 1257.417011][ T5912] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1257.419583][ T5912] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1257.419622][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.419644][ T5912] usb 3-1: Product: syz [ 1257.419661][ T5912] usb 3-1: Manufacturer: syz [ 1257.419677][ T5912] usb 3-1: SerialNumber: syz [ 1257.565733][ T5912] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1257.636841][T14802] usb 3-1: Failed to submit usb control message: -71 [ 1257.636884][T14802] usb 3-1: unable to send the bmi data to the device: -71 [ 1257.636903][T14802] usb 3-1: unable to get target info from device [ 1257.636920][T14802] usb 3-1: could not get target info (-71) [ 1257.636940][T14802] usb 3-1: could not probe fw (-71) [ 1257.641982][ T5912] usb 3-1: USB disconnect, device number 107 [ 1258.001264][ T5948] usb 5-1: USB disconnect, device number 51 [ 1258.976694][T21976] tmpfs: Bad value for 'mpol' [ 1259.174275][T21988] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1259.464017][ T48] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1259.482544][ T5912] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1259.633120][ T48] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.633153][ T48] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1259.633196][ T48] usb 10-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1259.633223][ T48] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.663549][ T48] usb 10-1: config 0 descriptor?? [ 1259.733589][ T5912] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1259.733626][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.733647][ T5912] usb 3-1: Product: syz [ 1259.733673][ T5912] usb 3-1: Manufacturer: syz [ 1259.733689][ T5912] usb 3-1: SerialNumber: syz [ 1259.776345][ T5912] usb 3-1: config 0 descriptor?? [ 1259.994605][ T5912] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1260.301612][ T5944] usb 10-1: USB disconnect, device number 26 [ 1261.028391][ T5912] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1261.057212][ T5912] usb 3-1: USB disconnect, device number 108 [ 1261.098608][T21539] udevd[21539]: setting mode of /dev/bus/usb/003/108 to 020664 failed: No such file or directory [ 1261.098811][T21539] udevd[21539]: setting owner of /dev/bus/usb/003/108 to uid=0, gid=0 failed: No such file or directory [ 1262.043951][ T5912] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1262.194327][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 1262.202075][ T5912] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1262.202113][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1262.202140][ T5912] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1262.202162][ T5912] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1262.202208][ T5912] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1262.202232][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.316691][ T5912] usbtmc 3-1:16.0: bulk endpoints not found [ 1262.458681][T22009] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1264.778103][T22025] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1264.847916][ T48] usb 3-1: USB disconnect, device number 109 [ 1264.885120][T22027] kAFS: unparsable volume name [ 1264.915817][T22027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5020'. [ 1264.915849][T22027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5020'. [ 1264.915869][T22027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5020'. [ 1264.984450][T22033] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5022'. [ 1265.164033][ T5948] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1265.233031][ T36] kauditd_printk_skb: 393 callbacks suppressed [ 1265.233057][ T36] audit: type=1326 audit(1775531700.193:8629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22038 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad8a7c819 code=0x7ffc0000 [ 1265.234054][ T36] audit: type=1326 audit(1775531700.203:8630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22038 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f5ad8a7c819 code=0x7ffc0000 [ 1265.234109][ T36] audit: type=1326 audit(1775531700.203:8631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22038 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad8a7c819 code=0x7ffc0000 [ 1265.246810][ T36] audit: type=1326 audit(1775531700.223:8632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22038 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ad8a7c819 code=0x7ffc0000 [ 1265.246864][ T36] audit: type=1326 audit(1775531700.223:8633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22038 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad8a7c819 code=0x7ffc0000 [ 1265.249519][ T36] audit: type=1326 audit(1775531700.223:8634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22038 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ad8a7c819 code=0x7ffc0000 [ 1265.249569][ T36] audit: type=1326 audit(1775531700.223:8635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22038 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad8a7c819 code=0x7ffc0000 [ 1265.254964][ T36] audit: type=1326 audit(1775531700.223:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22038 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ad8a7c819 code=0x7ffc0000 [ 1265.255013][ T36] audit: type=1326 audit(1775531700.223:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22038 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad8a7c819 code=0x7ffc0000 [ 1265.255055][ T36] audit: type=1326 audit(1775531700.233:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22038 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5ad8a7c819 code=0x7ffc0000 [ 1265.271057][T22039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5023'. [ 1265.290638][T22039] bridge0: entered promiscuous mode [ 1265.291139][T22039] macvtap1: entered promiscuous mode [ 1265.291497][T22039] macvtap1: entered allmulticast mode [ 1265.291512][T22039] bridge0: entered allmulticast mode [ 1265.313679][T22039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5023'. [ 1265.333462][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 1265.346849][ T5948] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1265.346876][ T5948] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.346895][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1265.349727][ T5948] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1265.349753][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.349773][ T5948] usb 5-1: Product: syz [ 1265.349786][ T5948] usb 5-1: Manufacturer: syz [ 1265.349799][ T5948] usb 5-1: SerialNumber: syz [ 1265.788359][ T5948] usb 5-1: 0:2 : does not exist [ 1266.188611][T22045] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1266.368536][T22047] QAT: failed to copy from user cfg_data. [ 1266.619481][T22049] siw: device registration error -23 [ 1266.908067][T22056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.909982][T22056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.981848][ T5948] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1267.173723][ T5948] usb 5-1: USB disconnect, device number 52 [ 1267.260353][T21769] udevd[21769]: setting mode of /dev/bus/usb/005/052 to 020664 failed: No such file or directory [ 1267.261332][T21769] udevd[21769]: setting owner of /dev/bus/usb/005/052 to uid=0, gid=0 failed: No such file or directory [ 1267.275319][ T5868] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1267.318639][T21769] udevd[21769]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1267.390659][ T48] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1267.433928][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 1267.437486][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1267.441153][ T5868] usb 3-1: config 158 has an invalid interface number: 34 but max is 0 [ 1267.441184][ T5868] usb 3-1: config 158 has no interface number 0 [ 1267.441249][ T5868] usb 3-1: config 158 interface 34 altsetting 251 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1267.441281][ T5868] usb 3-1: config 158 interface 34 altsetting 251 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1267.441312][ T5868] usb 3-1: config 158 interface 34 has no altsetting 0 [ 1267.448876][ T5868] usb 3-1: New USB device found, idVendor=04e6, idProduct=0001, bcdDevice= 2.00 [ 1267.448907][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.448927][ T5868] usb 3-1: Product: syz [ 1267.448940][ T5868] usb 3-1: Manufacturer: syz [ 1267.448954][ T5868] usb 3-1: SerialNumber: syz [ 1267.461585][T22054] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1267.554721][ T48] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1267.555344][ T48] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1267.580134][ T48] usb 2-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.40 [ 1267.580382][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.580403][ T48] usb 2-1: Product: ﳙ㦆仹ꃀ晹㲦륁뼘쇼囥ꔂ鈱㼷썫껅뤖ЇꙦ數꒓ꠀ좘ῠꗨ郞饝값셀瞂閧✒洞霆쭛阶濫ⵗ曳臏흴铝曅ᗯⓉ꧰좮龪酅裤㤹஻ҎŁ푙蟫໷機觑鯤쭴䱱⼅ꍚທ릆흸쉵 [ 1267.580429][ T48] usb 2-1: Manufacturer: ࠔ [ 1267.580443][ T48] usb 2-1: SerialNumber: syz [ 1268.186248][ T48] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1268.186281][ T48] usb 2-1: no configuration chosen from 1 choice [ 1268.186385][ T5868] usb-storage 3-1:158.34: USB Mass Storage device detected [ 1268.291017][T22066] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1268.487447][ T5868] usbhid 3-1:158.34: couldn't find an input interrupt endpoint [ 1268.501212][ T5868] usb 3-1: USB disconnect, device number 110 [ 1271.196661][ T5948] usb 2-1: USB disconnect, device number 127 [ 1271.355274][T22087] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1271.490001][T22092] FAULT_INJECTION: forcing a failure. [ 1271.490001][T22092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1271.490042][T22092] CPU: 0 UID: 0 PID: 22092 Comm: syz.2.5040 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1271.490072][T22092] Tainted: [L]=SOFTLOCKUP [ 1271.490080][T22092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1271.490092][T22092] Call Trace: [ 1271.490101][T22092] [ 1271.490110][T22092] dump_stack_lvl+0xe8/0x150 [ 1271.490149][T22092] should_fail_ex+0x46b/0x600 [ 1271.490184][T22092] _copy_to_iter+0x1e4/0x17d0 [ 1271.490214][T22092] ? __lock_acquire+0x6b5/0x2cf0 [ 1271.490249][T22092] ? __pfx__copy_to_iter+0x10/0x10 [ 1271.490276][T22092] ? do_raw_spin_lock+0x12b/0x2f0 [ 1271.490324][T22092] __skb_datagram_iter+0x41a/0x980 [ 1271.490354][T22092] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1271.490390][T22092] skb_copy_datagram_iter+0xb5/0x270 [ 1271.490422][T22092] unix_stream_read_actor+0x6c/0xb0 [ 1271.490456][T22092] unix_stream_read_generic+0xa67/0x23a0 [ 1271.490520][T22092] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1271.490549][T22092] ? unwind_next_frame+0xa5/0x23c0 [ 1271.490595][T22092] unix_stream_recvmsg+0x16e/0x1d0 [ 1271.490627][T22092] ? __lock_acquire+0x6b5/0x2cf0 [ 1271.490649][T22092] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1271.490680][T22092] ? is_bpf_text_address+0x26/0x2b0 [ 1271.490718][T22092] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1271.490765][T22092] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1271.490796][T22092] ? security_socket_recvmsg+0x7e/0x2c0 [ 1271.490830][T22092] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1271.490865][T22092] sock_recvmsg+0x172/0x1b0 [ 1271.490904][T22092] ____sys_recvmsg+0x1f2/0x4b0 [ 1271.490943][T22092] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1271.490990][T22092] ? import_iovec+0x73/0xa0 [ 1271.491017][T22092] ___sys_recvmsg+0x215/0x590 [ 1271.491052][T22092] ? __pfx____sys_recvmsg+0x10/0x10 [ 1271.491110][T22092] ? __fget_files+0x3a6/0x420 [ 1271.491178][T22092] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1271.491209][T22092] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1271.491249][T22092] ? __pfx_ksys_write+0x10/0x10 [ 1271.491307][T22092] do_syscall_64+0x14d/0xf80 [ 1271.491332][T22092] ? trace_irq_disable+0x3b/0x150 [ 1271.491359][T22092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.491382][T22092] ? clear_bhb_loop+0x40/0x90 [ 1271.491410][T22092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.491433][T22092] RIP: 0033:0x7f7c4acdc819 [ 1271.491453][T22092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.491470][T22092] RSP: 002b:00007f7c48f0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1271.491491][T22092] RAX: ffffffffffffffda RBX: 00007f7c4af56090 RCX: 00007f7c4acdc819 [ 1271.491505][T22092] RDX: 0000000040000300 RSI: 0000200000001140 RDI: 0000000000000008 [ 1271.491519][T22092] RBP: 00007f7c48f0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.491532][T22092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.491546][T22092] R13: 00007f7c4af56128 R14: 00007f7c4af56090 R15: 00007ffe7a732f68 [ 1271.491584][T22092] [ 1271.717158][T22098] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1272.339557][T22109] QAT: failed to copy from user cfg_data. [ 1273.118294][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5049'. [ 1273.319996][T22119] FAULT_INJECTION: forcing a failure. [ 1273.319996][T22119] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.320064][T22119] CPU: 0 UID: 0 PID: 22119 Comm: syz.1.5050 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1273.320096][T22119] Tainted: [L]=SOFTLOCKUP [ 1273.320104][T22119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1273.320117][T22119] Call Trace: [ 1273.320126][T22119] [ 1273.320132][T22119] dump_stack_lvl+0xe8/0x150 [ 1273.320156][T22119] should_fail_ex+0x46b/0x600 [ 1273.320177][T22119] should_failslab+0xa8/0x100 [ 1273.320192][T22119] __kmalloc_noprof+0xdf/0x7b0 [ 1273.320204][T22119] ? snd_ctl_new+0x6e/0x290 [ 1273.320222][T22119] snd_ctl_new+0x6e/0x290 [ 1273.320239][T22119] snd_ctl_elem_add+0x3fd/0xa90 [ 1273.320265][T22119] snd_ctl_ioctl+0xe4e/0x1dc0 [ 1273.320285][T22119] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1273.320301][T22119] ? vsnprintf+0xee0/0xee0 [ 1273.320323][T22119] ? __lock_acquire+0x6b5/0x2cf0 [ 1273.320345][T22119] ? kvm_sched_clock_read+0x11/0x20 [ 1273.320358][T22119] ? sched_clock+0x3f/0x60 [ 1273.320373][T22119] ? sched_clock_cpu+0x74/0x440 [ 1273.320386][T22119] ? update_se+0x91/0x620 [ 1273.320440][T22119] ? irqentry_exit+0x59e/0x620 [ 1273.320452][T22119] ? rcu_is_watching+0x15/0xb0 [ 1273.320467][T22119] ? __pfx___schedule+0x10/0x10 [ 1273.320489][T22119] ? irqentry_exit+0x59e/0x620 [ 1273.320502][T22119] ? lockdep_hardirqs_on+0x7a/0x110 [ 1273.320515][T22119] ? irqentry_exit+0x59e/0x620 [ 1273.320528][T22119] ? trace_irq_disable+0x3b/0x150 [ 1273.320555][T22119] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1273.320571][T22119] __se_sys_ioctl+0xff/0x170 [ 1273.320586][T22119] do_syscall_64+0x14d/0xf80 [ 1273.320600][T22119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.320612][T22119] ? clear_bhb_loop+0x40/0x90 [ 1273.320627][T22119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.320640][T22119] RIP: 0033:0x7f0268d9c819 [ 1273.320653][T22119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.320664][T22119] RSP: 002b:00007f0266fac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1273.320681][T22119] RAX: ffffffffffffffda RBX: 00007f0269016180 RCX: 00007f0268d9c819 [ 1273.320691][T22119] RDX: 0000200000000080 RSI: 00000000c1105517 RDI: 0000000000000007 [ 1273.320699][T22119] RBP: 00007f0266fac090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.320707][T22119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.320715][T22119] R13: 00007f0269016218 R14: 00007f0269016180 R15: 00007ffc9f6063f8 [ 1273.320734][T22119] [ 1273.978865][T22123] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1274.191687][T22133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1274.283992][ T5944] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1274.299738][T22136] FAULT_INJECTION: forcing a failure. [ 1274.299738][T22136] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.299781][T22136] CPU: 0 UID: 0 PID: 22136 Comm: syz.5.5058 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1274.299813][T22136] Tainted: [L]=SOFTLOCKUP [ 1274.299821][T22136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1274.299834][T22136] Call Trace: [ 1274.299843][T22136] [ 1274.299853][T22136] dump_stack_lvl+0xe8/0x150 [ 1274.299894][T22136] should_fail_ex+0x46b/0x600 [ 1274.299933][T22136] should_failslab+0xa8/0x100 [ 1274.299959][T22136] __kmalloc_noprof+0xdf/0x7b0 [ 1274.299985][T22136] ? kfree+0x4d/0x6c0 [ 1274.300016][T22136] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1274.300053][T22136] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1274.300095][T22136] ? tomoyo_path_number_perm+0x219/0x630 [ 1274.300119][T22136] tomoyo_path_number_perm+0x246/0x630 [ 1274.300147][T22136] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1274.300175][T22136] ? __lock_acquire+0x6b5/0x2cf0 [ 1274.300238][T22136] ? __fget_files+0x2a/0x420 [ 1274.300271][T22136] ? __fget_files+0x2a/0x420 [ 1274.300298][T22136] ? __fget_files+0x3a6/0x420 [ 1274.300326][T22136] ? __fget_files+0x2a/0x420 [ 1274.300360][T22136] security_file_ioctl+0xc3/0x2a0 [ 1274.300388][T22136] __se_sys_ioctl+0x47/0x170 [ 1274.300415][T22136] do_syscall_64+0x14d/0xf80 [ 1274.300448][T22136] ? trace_irq_disable+0x3b/0x150 [ 1274.300475][T22136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.300499][T22136] ? clear_bhb_loop+0x40/0x90 [ 1274.300528][T22136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.300551][T22136] RIP: 0033:0x7fd24441c819 [ 1274.300574][T22136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.300595][T22136] RSP: 002b:00007fd24266e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1274.300621][T22136] RAX: ffffffffffffffda RBX: 00007fd244695fa0 RCX: 00007fd24441c819 [ 1274.300638][T22136] RDX: 0000200000000ac0 RSI: 00000000c0487c04 RDI: 0000000000000003 [ 1274.300653][T22136] RBP: 00007fd24266e090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.300668][T22136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.300681][T22136] R13: 00007fd244696038 R14: 00007fd244695fa0 R15: 00007ffdc75016b8 [ 1274.300717][T22136] [ 1274.300885][T22136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1274.454273][ T5944] usb 10-1: Using ep0 maxpacket: 8 [ 1274.749004][ T5944] usb 10-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 1274.749039][ T5944] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.749061][ T5944] usb 10-1: Product: syz [ 1274.749078][ T5944] usb 10-1: Manufacturer: syz [ 1274.749093][ T5944] usb 10-1: SerialNumber: syz [ 1275.034371][ T5944] kalmia 10-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 1275.128507][T22148] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5062'. [ 1275.236468][ T5944] kalmia 10-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 1275.236834][ T5944] kalmia 10-1:1.0: probe with driver kalmia failed with error -71 [ 1275.272891][ T5944] usb 10-1: USB disconnect, device number 27 [ 1275.373614][T22155] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1275.595106][T22164] netlink: 'syz.2.5070': attribute type 18 has an invalid length. [ 1275.654024][ T5912] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1275.832100][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.832164][ T5912] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1275.832191][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.863282][ T5912] usb 6-1: config 0 descriptor?? [ 1275.891185][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 1275.980097][T22177] FAULT_INJECTION: forcing a failure. [ 1275.980097][T22177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1275.980138][T22177] CPU: 0 UID: 0 PID: 22177 Comm: syz.4.5072 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1275.980175][T22177] Tainted: [L]=SOFTLOCKUP [ 1275.980182][T22177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1275.980196][T22177] Call Trace: [ 1275.980204][T22177] [ 1275.980214][T22177] dump_stack_lvl+0xe8/0x150 [ 1275.980253][T22177] should_fail_ex+0x46b/0x600 [ 1275.980290][T22177] _copy_from_iter+0x1d3/0x1670 [ 1275.980330][T22177] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1275.980361][T22177] ? __alloc_skb+0x27d/0x7d0 [ 1275.980381][T22177] ? __pfx__copy_from_iter+0x10/0x10 [ 1275.980411][T22177] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1275.980453][T22177] ? __alloc_skb+0x27d/0x7d0 [ 1275.980481][T22177] ? netlink_sendmsg+0x650/0xb40 [ 1275.980511][T22177] ? skb_put+0x11b/0x210 [ 1275.980536][T22177] netlink_sendmsg+0x6c0/0xb40 [ 1275.980578][T22177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.980611][T22177] ? unwind_get_return_address+0x4d/0x90 [ 1275.980636][T22177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1275.980670][T22177] ____sys_sendmsg+0x94c/0x9c0 [ 1275.980700][T22177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1275.980735][T22177] ? import_iovec+0x73/0xa0 [ 1275.980754][T22177] ___sys_sendmsg+0x2a5/0x360 [ 1275.980775][T22177] ? __pfx____sys_sendmsg+0x10/0x10 [ 1275.980835][T22177] ? __fget_files+0x2a/0x420 [ 1275.980863][T22177] ? __fget_files+0x3a6/0x420 [ 1275.980900][T22177] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1275.980927][T22177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1275.980950][T22177] ? __pfx_ksys_write+0x10/0x10 [ 1275.980976][T22177] do_syscall_64+0x14d/0xf80 [ 1275.980998][T22177] ? trace_irq_disable+0x3b/0x150 [ 1275.981024][T22177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.981046][T22177] ? clear_bhb_loop+0x40/0x90 [ 1275.981073][T22177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.981092][T22177] RIP: 0033:0x7fb915edc819 [ 1275.981113][T22177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.981126][T22177] RSP: 002b:00007fb914136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1275.981141][T22177] RAX: ffffffffffffffda RBX: 00007fb916155fa0 RCX: 00007fb915edc819 [ 1275.981151][T22177] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1275.981159][T22177] RBP: 00007fb914136090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.981167][T22177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.981175][T22177] R13: 00007fb916156038 R14: 00007fb916155fa0 R15: 00007ffc5d202508 [ 1275.981194][T22177] [ 1276.346272][T22178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.353181][T22178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.772949][T22178] input: syz0 as /devices/virtual/input/input23 [ 1277.286185][T22191] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5075'. [ 1277.630335][T22197] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1277.837745][T22201] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5079'. [ 1278.003245][T22205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.228843][ T5912] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1278.229398][ T5912] pwc: recv_control_msg error -71 req 04 val 1000 [ 1278.233204][ T5912] pwc: recv_control_msg error -71 req 04 val 1300 [ 1278.235731][ T5912] pwc: recv_control_msg error -71 req 04 val 1400 [ 1278.236486][ T5912] pwc: recv_control_msg error -71 req 02 val 2000 [ 1278.236947][ T5912] pwc: recv_control_msg error -71 req 02 val 2100 [ 1278.238669][ T5912] pwc: recv_control_msg error -71 req 04 val 1500 [ 1278.239160][ T5912] pwc: recv_control_msg error -71 req 02 val 2500 [ 1278.240630][ T5912] pwc: recv_control_msg error -71 req 02 val 2400 [ 1278.241143][ T5912] pwc: recv_control_msg error -71 req 02 val 2600 [ 1278.245427][ T5912] pwc: recv_control_msg error -71 req 02 val 2900 [ 1278.247020][ T5912] pwc: recv_control_msg error -71 req 02 val 2800 [ 1278.250135][ T5912] pwc: recv_control_msg error -71 req 04 val 1100 [ 1278.254342][ T5912] pwc: recv_control_msg error -71 req 04 val 1200 [ 1278.271597][ T5912] pwc: Registered as video103. [ 1278.281390][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 1278.360932][ T5912] usb 6-1: USB disconnect, device number 64 [ 1279.411847][T22220] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5087'. [ 1279.658573][T22222] team_slave_0: entered promiscuous mode [ 1279.658647][T22222] team_slave_1: entered promiscuous mode [ 1279.660331][T22222] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1279.721108][T22222] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1279.961112][T22231] macvlan0: entered promiscuous mode [ 1279.962222][T22231] netlink: 'syz.2.5093': attribute type 2 has an invalid length. [ 1279.962243][T22231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5093'. [ 1283.557878][T22265] FAULT_INJECTION: forcing a failure. [ 1283.557878][T22265] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1283.557920][T22265] CPU: 0 UID: 0 PID: 22265 Comm: syz.1.5100 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1283.557951][T22265] Tainted: [L]=SOFTLOCKUP [ 1283.557960][T22265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1283.557973][T22265] Call Trace: [ 1283.557982][T22265] [ 1283.557992][T22265] dump_stack_lvl+0xe8/0x150 [ 1283.558032][T22265] should_fail_ex+0x46b/0x600 [ 1283.558070][T22265] get_futex_key+0x1022/0x1690 [ 1283.558116][T22265] ? __pfx_get_futex_key+0x10/0x10 [ 1283.558149][T22265] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 1283.558177][T22265] ? __asan_memset+0x22/0x50 [ 1283.558212][T22265] futex_requeue+0x23d/0x1bb0 [ 1283.558237][T22265] ? kstrtoull+0x12f/0x1d0 [ 1283.558269][T22265] ? kstrtouint+0x6e/0xe0 [ 1283.558304][T22265] ? get_pid_task+0x20/0x1f0 [ 1283.558329][T22265] ? __pfx_futex_requeue+0x10/0x10 [ 1283.558358][T22265] ? __lock_acquire+0x6b5/0x2cf0 [ 1283.558414][T22265] ? do_raw_spin_lock+0x12b/0x2f0 [ 1283.558454][T22265] do_futex+0x362/0x420 [ 1283.558478][T22265] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1283.558510][T22265] ? __pfx_do_futex+0x10/0x10 [ 1283.558528][T22265] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1283.558561][T22265] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1283.558604][T22265] __se_sys_futex+0x3a8/0x450 [ 1283.558631][T22265] ? ksys_write+0x248/0x270 [ 1283.558662][T22265] ? __pfx___se_sys_futex+0x10/0x10 [ 1283.558684][T22265] ? __pfx_ksys_write+0x10/0x10 [ 1283.558722][T22265] ? __x64_sys_futex+0x21/0xf0 [ 1283.558748][T22265] do_syscall_64+0x14d/0xf80 [ 1283.558772][T22265] ? trace_irq_disable+0x3b/0x150 [ 1283.558797][T22265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.558819][T22265] ? clear_bhb_loop+0x40/0x90 [ 1283.558846][T22265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.558870][T22265] RIP: 0033:0x7f0268d9c819 [ 1283.558891][T22265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.558912][T22265] RSP: 002b:00007f0266fcd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1283.558936][T22265] RAX: ffffffffffffffda RBX: 00007f0269016090 RCX: 00007f0268d9c819 [ 1283.558953][T22265] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 1283.558968][T22265] RBP: 00007f0266fcd090 R08: 0000200000048000 R09: 0000000000000000 [ 1283.558984][T22265] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1283.558998][T22265] R13: 00007f0269016128 R14: 00007f0269016090 R15: 00007ffc9f6063f8 [ 1283.559033][T22265] [ 1285.069209][T22278] loop4: detected capacity change from 0 to 1 [ 1286.124078][T22278] Dev loop4: unable to read RDB block 1 [ 1286.124117][T22278] loop4: unable to read partition table [ 1286.124264][T22278] loop4: partition table beyond EOD, truncated [ 1286.124289][T22278] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 1286.176789][T22281] libceph: resolve '400' (ret=-3): failed [ 1287.084024][ T5944] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1287.503913][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 1287.517696][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.517730][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.517751][ T5944] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1287.517791][ T5944] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1287.517813][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.529357][ T5944] usb 3-1: config 0 descriptor?? [ 1287.812143][T22302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.819387][T22302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.041117][ T5944] hid_parser_main: 5 callbacks suppressed [ 1288.041144][ T5944] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1288.041175][ T5944] microsoft 0003:045E:07DA.003C: ignoring exceeding usage max [ 1288.146631][ T5944] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.003C/input/input25 [ 1288.916006][ T5944] microsoft 0003:045E:07DA.003C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1288.957485][ T5944] usb 3-1: USB disconnect, device number 111 [ 1289.339621][T22324] fido_id[22324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1289.634313][T22328] QAT: failed to copy from user cfg_data. [ 1289.982149][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 1289.982176][ T36] audit: type=1800 audit(1775531724.933:8663): pid=22333 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.2.5116" name="/newroot/447/file0" dev="tmpfs" ino=2313 res=0 errno=0 [ 1290.956454][ T5868] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1291.205648][ T5868] usb 5-1: device descriptor read/64, error -71 [ 1291.464532][ T5868] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1291.593988][ T5868] usb 5-1: device descriptor read/64, error -71 [ 1291.704370][ T5868] usb usb5-port1: attempt power cycle [ 1293.589010][T22368] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1300.511200][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.028408][T22412] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1301.234728][ T36] audit: type=1804 audit(1775531736.213:8664): pid=22420 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.5143" name="bus" dev="ramfs" ino=78082 res=1 errno=0 [ 1301.236888][T22416] FAULT_INJECTION: forcing a failure. [ 1301.236888][T22416] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.236928][T22416] CPU: 1 UID: 0 PID: 22416 Comm: syz.4.5143 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1301.236960][T22416] Tainted: [L]=SOFTLOCKUP [ 1301.236969][T22416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1301.236983][T22416] Call Trace: [ 1301.236993][T22416] [ 1301.237002][T22416] dump_stack_lvl+0xe8/0x150 [ 1301.237041][T22416] should_fail_ex+0x46b/0x600 [ 1301.237077][T22416] should_failslab+0xa8/0x100 [ 1301.237110][T22416] __kmalloc_noprof+0xdf/0x7b0 [ 1301.237133][T22416] ? iter_file_splice_write+0x1dd/0x10f0 [ 1301.237169][T22416] iter_file_splice_write+0x1dd/0x10f0 [ 1301.237226][T22416] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1301.237279][T22416] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1301.237310][T22416] direct_splice_actor+0x104/0x160 [ 1301.237346][T22416] splice_direct_to_actor+0x545/0xc80 [ 1301.237388][T22416] ? __pfx_direct_splice_actor+0x10/0x10 [ 1301.237428][T22416] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1301.237472][T22416] do_splice_direct+0x19b/0x2a0 [ 1301.237505][T22416] ? __pfx_do_splice_direct+0x10/0x10 [ 1301.237537][T22416] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1301.237577][T22416] ? rw_verify_area+0x25b/0x4e0 [ 1301.237615][T22416] do_sendfile+0x547/0x7e0 [ 1301.237643][T22416] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1301.237677][T22416] ? __pfx_do_sendfile+0x10/0x10 [ 1301.237720][T22416] __se_sys_sendfile64+0x144/0x1a0 [ 1301.237750][T22416] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1301.237791][T22416] do_syscall_64+0x14d/0xf80 [ 1301.237817][T22416] ? trace_irq_disable+0x3b/0x150 [ 1301.237844][T22416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.237866][T22416] ? clear_bhb_loop+0x40/0x90 [ 1301.237895][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.237918][T22416] RIP: 0033:0x7fb915edc819 [ 1301.237940][T22416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.237959][T22416] RSP: 002b:00007fb914136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1301.237983][T22416] RAX: ffffffffffffffda RBX: 00007fb916155fa0 RCX: 00007fb915edc819 [ 1301.238000][T22416] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 1301.238019][T22416] RBP: 00007fb914136090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.238033][T22416] R10: 000000007fffffff R11: 0000000000000246 R12: 0000000000000001 [ 1301.238047][T22416] R13: 00007fb916156038 R14: 00007fb916155fa0 R15: 00007ffc5d202508 [ 1301.238085][T22416] [ 1301.544167][ T5944] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1301.866469][ T5944] usb 10-1: Using ep0 maxpacket: 32 [ 1302.164832][ T5944] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1302.204601][ T5944] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1302.204622][ T5944] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1302.204635][ T5944] usb 10-1: Product: syz [ 1302.204644][ T5944] usb 10-1: Manufacturer: syz [ 1302.204653][ T5944] usb 10-1: SerialNumber: syz [ 1302.211890][ T5944] usb 10-1: config 0 descriptor?? [ 1302.212613][T22422] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1303.349896][T22442] FAULT_INJECTION: forcing a failure. [ 1303.349896][T22442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1303.349922][T22442] CPU: 0 UID: 0 PID: 22442 Comm: syz.4.5149 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1303.349941][T22442] Tainted: [L]=SOFTLOCKUP [ 1303.349946][T22442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1303.349954][T22442] Call Trace: [ 1303.349959][T22442] [ 1303.349965][T22442] dump_stack_lvl+0xe8/0x150 [ 1303.349989][T22442] should_fail_ex+0x46b/0x600 [ 1303.350010][T22442] _copy_from_iter+0x1d3/0x1670 [ 1303.350037][T22442] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1303.350057][T22442] ? __alloc_skb+0x27d/0x7d0 [ 1303.350069][T22442] ? __pfx__copy_from_iter+0x10/0x10 [ 1303.350086][T22442] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1303.350105][T22442] ? __alloc_skb+0x27d/0x7d0 [ 1303.350120][T22442] ? netlink_sendmsg+0x650/0xb40 [ 1303.350138][T22442] ? skb_put+0x11b/0x210 [ 1303.350153][T22442] netlink_sendmsg+0x6c0/0xb40 [ 1303.350177][T22442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1303.350196][T22442] ? unwind_get_return_address+0x4d/0x90 [ 1303.350212][T22442] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1303.350232][T22442] ____sys_sendmsg+0x94c/0x9c0 [ 1303.350251][T22442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1303.350270][T22442] ? import_iovec+0x73/0xa0 [ 1303.350284][T22442] ___sys_sendmsg+0x2a5/0x360 [ 1303.350302][T22442] ? __pfx____sys_sendmsg+0x10/0x10 [ 1303.350337][T22442] ? __fget_files+0x2a/0x420 [ 1303.350360][T22442] ? __fget_files+0x3a6/0x420 [ 1303.350382][T22442] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1303.350399][T22442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1303.350419][T22442] ? __pfx_ksys_write+0x10/0x10 [ 1303.350444][T22442] do_syscall_64+0x14d/0xf80 [ 1303.350458][T22442] ? trace_irq_disable+0x3b/0x150 [ 1303.350473][T22442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.350485][T22442] ? clear_bhb_loop+0x40/0x90 [ 1303.350501][T22442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.350513][T22442] RIP: 0033:0x7fb915edc819 [ 1303.350527][T22442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1303.350538][T22442] RSP: 002b:00007fb914136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1303.350553][T22442] RAX: ffffffffffffffda RBX: 00007fb916155fa0 RCX: 00007fb915edc819 [ 1303.350563][T22442] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1303.350571][T22442] RBP: 00007fb914136090 R08: 0000000000000000 R09: 0000000000000000 [ 1303.350579][T22442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1303.350586][T22442] R13: 00007fb916156038 R14: 00007fb916155fa0 R15: 00007ffc5d202508 [ 1303.350605][T22442] [ 1303.926969][T22446] FAULT_INJECTION: forcing a failure. [ 1303.926969][T22446] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.927537][T22446] CPU: 0 UID: 0 PID: 22446 Comm: syz.4.5151 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1303.927570][T22446] Tainted: [L]=SOFTLOCKUP [ 1303.927579][T22446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1303.927592][T22446] Call Trace: [ 1303.927600][T22446] [ 1303.927609][T22446] dump_stack_lvl+0xe8/0x150 [ 1303.927650][T22446] should_fail_ex+0x46b/0x600 [ 1303.927685][T22446] should_failslab+0xa8/0x100 [ 1303.927709][T22446] __kmalloc_noprof+0xdf/0x7b0 [ 1303.927728][T22446] ? kfree+0x4d/0x6c0 [ 1303.927755][T22446] ? finish_task_switch+0x240/0x920 [ 1303.927779][T22446] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1303.927808][T22446] ? lockdep_hardirqs_on+0x7a/0x110 [ 1303.927838][T22446] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1303.927885][T22446] tomoyo_path_perm+0x283/0x560 [ 1303.927908][T22446] ? tomoyo_path_perm+0x251/0x560 [ 1303.927933][T22446] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1303.927967][T22446] ? filemap_check_errors+0xd2/0x120 [ 1303.928021][T22446] ? do_raw_spin_lock+0x12b/0x2f0 [ 1303.928065][T22446] security_inode_getattr+0x12b/0x310 [ 1303.928096][T22446] vfs_getattr+0x23/0x70 [ 1303.928122][T22446] loop_assign_backing_file+0x286/0x4c0 [ 1303.928162][T22446] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 1303.928223][T22446] ? __asan_memcpy+0x40/0x70 [ 1303.928255][T22446] ? loop_set_status_from_info+0x185/0x250 [ 1303.928303][T22446] loop_configure+0x84a/0xdf0 [ 1303.928352][T22446] ? __pfx_loop_configure+0x10/0x10 [ 1303.928425][T22446] lo_ioctl+0xaaf/0x1fc0 [ 1303.928468][T22446] ? __lock_acquire+0x6b5/0x2cf0 [ 1303.928491][T22446] ? __pfx_lo_ioctl+0x10/0x10 [ 1303.928523][T22446] ? __lock_acquire+0x6b5/0x2cf0 [ 1303.928569][T22446] ? __lock_acquire+0x6b5/0x2cf0 [ 1303.928596][T22446] ? __lock_acquire+0x6b5/0x2cf0 [ 1303.928627][T22446] ? __lock_acquire+0x6b5/0x2cf0 [ 1303.928653][T22446] ? __lock_acquire+0x6b5/0x2cf0 [ 1303.928684][T22446] ? __lock_acquire+0x6b5/0x2cf0 [ 1303.928710][T22446] ? __lock_acquire+0x6b5/0x2cf0 [ 1303.928746][T22446] ? unwind_next_frame+0xa5/0x23c0 [ 1303.928795][T22446] ? is_bpf_text_address+0x26/0x2b0 [ 1303.928833][T22446] ? is_bpf_text_address+0x292/0x2b0 [ 1303.928862][T22446] ? is_bpf_text_address+0x26/0x2b0 [ 1303.928898][T22446] ? kernel_text_address+0xa5/0xe0 [ 1303.928925][T22446] ? __kernel_text_address+0xd/0x30 [ 1303.928951][T22446] ? unwind_get_return_address+0x4d/0x90 [ 1303.928971][T22446] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1303.929002][T22446] ? arch_stack_walk+0xfb/0x150 [ 1303.929039][T22446] ? stack_trace_save+0xa9/0x100 [ 1303.929067][T22446] ? __pfx_stack_trace_save+0x10/0x10 [ 1303.929095][T22446] ? kasan_save_free_info+0x46/0x50 [ 1303.929126][T22446] ? stack_depot_save_flags+0x33/0x810 [ 1303.929158][T22446] ? vsnprintf+0xee0/0xee0 [ 1303.929192][T22446] ? kasan_save_track+0x4f/0x80 [ 1303.929222][T22446] ? kasan_save_track+0x3e/0x80 [ 1303.929252][T22446] ? kasan_save_free_info+0x46/0x50 [ 1303.929276][T22446] ? __kasan_slab_free+0x5c/0x80 [ 1303.929315][T22446] ? kfree+0x1c1/0x6c0 [ 1303.929344][T22446] ? tomoyo_path_number_perm+0x501/0x630 [ 1303.929365][T22446] ? security_file_ioctl+0xc3/0x2a0 [ 1303.929388][T22446] ? __se_sys_ioctl+0x47/0x170 [ 1303.929408][T22446] ? do_syscall_64+0x14d/0xf80 [ 1303.929433][T22446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.929463][T22446] ? __asan_memset+0x22/0x50 [ 1303.929494][T22446] ? blk_get_meta_cap+0x16d/0x7a0 [ 1303.929531][T22446] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1303.929573][T22446] ? blkdev_common_ioctl+0x14b7/0x3250 [ 1303.929614][T22446] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1303.929648][T22446] ? kasan_quarantine_put+0xbb/0x1f0 [ 1303.929691][T22446] ? tomoyo_path_number_perm+0x219/0x630 [ 1303.929718][T22446] ? tomoyo_path_number_perm+0x219/0x630 [ 1303.929746][T22446] ? do_vfs_ioctl+0x117b/0x1540 [ 1303.929819][T22446] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1303.929858][T22446] ? __pfx_lo_ioctl+0x10/0x10 [ 1303.929893][T22446] blkdev_ioctl+0x5e6/0x750 [ 1303.929926][T22446] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1303.929950][T22446] ? __fget_files+0x2a/0x420 [ 1303.929980][T22446] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1303.930003][T22446] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1303.930031][T22446] __se_sys_ioctl+0xff/0x170 [ 1303.930053][T22446] do_syscall_64+0x14d/0xf80 [ 1303.930075][T22446] ? trace_irq_disable+0x3b/0x150 [ 1303.930099][T22446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.930122][T22446] ? clear_bhb_loop+0x40/0x90 [ 1303.930151][T22446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.930174][T22446] RIP: 0033:0x7fb915edc819 [ 1303.930196][T22446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1303.930215][T22446] RSP: 002b:00007fb914136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1303.930240][T22446] RAX: ffffffffffffffda RBX: 00007fb916155fa0 RCX: 00007fb915edc819 [ 1303.930257][T22446] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 1303.930272][T22446] RBP: 00007fb914136090 R08: 0000000000000000 R09: 0000000000000000 [ 1303.930287][T22446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1303.930310][T22446] R13: 00007fb916156038 R14: 00007fb916155fa0 R15: 00007ffc5d202508 [ 1303.930348][T22446] [ 1303.954073][T22446] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1303.954531][T22446] loop5: detected capacity change from 0 to 7 [ 1304.423206][T22446] Dev loop5: unable to read RDB block 7 [ 1304.423313][T22446] loop5: unable to read partition table [ 1304.423547][T22446] loop5: partition table beyond EOD, truncated [ 1304.423578][T22446] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1304.501227][ T5868] usb 10-1: USB disconnect, device number 28 [ 1304.913039][T22457] FAULT_INJECTION: forcing a failure. [ 1304.913039][T22457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.913080][T22457] CPU: 0 UID: 0 PID: 22457 Comm: syz.4.5155 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1304.913120][T22457] Tainted: [L]=SOFTLOCKUP [ 1304.913128][T22457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1304.913140][T22457] Call Trace: [ 1304.913148][T22457] [ 1304.913159][T22457] dump_stack_lvl+0xe8/0x150 [ 1304.913196][T22457] should_fail_ex+0x46b/0x600 [ 1304.913231][T22457] _copy_from_user+0x2d/0xb0 [ 1304.913254][T22457] video_usercopy+0x36f/0x14b0 [ 1304.913291][T22457] ? smk_tskacc+0x311/0x3a0 [ 1304.913322][T22457] ? __pfx___video_do_ioctl+0x10/0x10 [ 1304.913355][T22457] ? __pfx_video_usercopy+0x10/0x10 [ 1304.913384][T22457] ? smack_file_ioctl+0x2c2/0x360 [ 1304.913430][T22457] ? __fget_files+0x2a/0x420 [ 1304.913456][T22457] ? __fget_files+0x3a6/0x420 [ 1304.913488][T22457] v4l2_ioctl+0x190/0x1e0 [ 1304.913517][T22457] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1304.913546][T22457] __se_sys_ioctl+0xff/0x170 [ 1304.913572][T22457] do_syscall_64+0x14d/0xf80 [ 1304.913595][T22457] ? trace_irq_disable+0x3b/0x150 [ 1304.913622][T22457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.913645][T22457] ? clear_bhb_loop+0x40/0x90 [ 1304.913672][T22457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.913692][T22457] RIP: 0033:0x7fb915edc819 [ 1304.913712][T22457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.913730][T22457] RSP: 002b:00007fb914136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1304.913755][T22457] RAX: ffffffffffffffda RBX: 00007fb916155fa0 RCX: 00007fb915edc819 [ 1304.913771][T22457] RDX: 0000200000000240 RSI: 00000000c0945662 RDI: 0000000000000003 [ 1304.913786][T22457] RBP: 00007fb914136090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.913805][T22457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.913818][T22457] R13: 00007fb916156038 R14: 00007fb916155fa0 R15: 00007ffc5d202508 [ 1304.913852][T22457] [ 1305.310950][ T36] audit: type=1326 audit(1775531740.283:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1305.311265][ T36] audit: type=1326 audit(1775531740.283:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1305.311578][ T36] audit: type=1326 audit(1775531740.283:8667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1305.312444][ T36] audit: type=1326 audit(1775531740.283:8668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1305.312762][ T36] audit: type=1326 audit(1775531740.283:8669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1305.313069][ T36] audit: type=1326 audit(1775531740.283:8670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1305.313358][ T36] audit: type=1326 audit(1775531740.283:8671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1305.313700][ T36] audit: type=1326 audit(1775531740.283:8672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1305.402239][ T36] audit: type=1326 audit(1775531740.313:8673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1305.560059][T14360] Bluetooth: hci1: ISO packet for unknown connection handle 1024 [ 1306.281709][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 1306.281732][ T36] audit: type=1326 audit(1775531741.233:8755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd2443d9511 code=0x7ffc0000 [ 1306.355781][ T36] audit: type=1326 audit(1775531741.333:8757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd24441d609 code=0x7ffc0000 [ 1306.358379][ T36] audit: type=1326 audit(1775531741.333:8758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd2443d957b code=0x7ffc0000 [ 1306.358439][ T36] audit: type=1326 audit(1775531741.253:8756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd24441c617 code=0x7ffc0000 [ 1306.358487][ T36] audit: type=1326 audit(1775531741.333:8759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1306.358535][ T36] audit: type=1326 audit(1775531741.333:8760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1306.358583][ T36] audit: type=1326 audit(1775531741.333:8761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd2443d8c6c code=0x7ffc0000 [ 1306.358631][ T36] audit: type=1326 audit(1775531741.333:8762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd2443d8cce code=0x7ffc0000 [ 1306.358682][ T36] audit: type=1326 audit(1775531741.333:8763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24441c4ab code=0x7ffc0000 [ 1306.358728][ T36] audit: type=1326 audit(1775531741.333:8764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22463 comm="syz.5.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24441c819 code=0x7ffc0000 [ 1307.125002][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5161'. [ 1307.125044][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5161'. [ 1307.363996][ T5868] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1307.517666][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1307.518427][ T5868] usb 3-1: not running at top speed; connect to a high speed hub [ 1307.523455][ T5868] usb 3-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 1307.523485][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.523506][ T5868] usb 3-1: Product: syz [ 1307.523609][ T5868] usb 3-1: Manufacturer: 栗輴⅑뫴齿弢㧣⟣㵘謾됮Ƨ哊૴蛞깨槥짶ᄔ뛛胐臜བྷ쩞翁䕳馜⊌ᖋ䩄Қ볈ಛ띶璎럒鿥㏱桪圓擄鵺ፉ筊椤鉈짔ࢂ⾯䍂痍剅⿱侑綹괮冡ꦓ憕ꄨ쌹緾뉚駫峃혈찞섾 [ 1307.523640][ T5868] usb 3-1: SerialNumber: syz [ 1307.875144][T22477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.875743][T22477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.877695][T22477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.878301][T22477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.260926][ T5868] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1308.389994][ T5868] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1308.424470][ T5868] usb 3-1: USB disconnect, device number 112 [ 1308.489364][T22424] udevd[22424]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1309.221510][T22507] binder: 22506:22507 ioctl 4018620d 0 returned -22 [ 1310.110363][ T5868] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1310.274030][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 1310.282332][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1310.308358][ T5868] usb 3-1: config 2 has an invalid interface number: 147 but max is 0 [ 1310.308390][ T5868] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.308411][ T5868] usb 3-1: config 2 has no interface number 0 [ 1310.308446][ T5868] usb 3-1: config 2 interface 147 has no altsetting 0 [ 1310.311018][ T5868] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=c8.8e [ 1310.311048][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.311064][ T5868] usb 3-1: Product: syz [ 1310.311072][ T5868] usb 3-1: Manufacturer: syz [ 1310.311081][ T5868] usb 3-1: SerialNumber: syz [ 1310.358523][ T5944] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1311.569636][ T5944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.569706][ T5944] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1311.569731][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.635945][ T5944] usb 2-1: config 0 descriptor?? [ 1311.673440][ T5868] ims_pcu 3-1:2.147: Missing CDC union descriptor [ 1311.673513][ T5868] ims_pcu 3-1:2.147: probe with driver ims_pcu failed with error -22 [ 1311.711453][ T5868] usb 3-1: USB disconnect, device number 113 [ 1311.728153][ T5944] pwc: Askey VC010 type 2 USB webcam detected. [ 1312.198649][T22532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.202831][T22532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.677257][T22532] input: syz0 as /devices/virtual/input/input27 [ 1314.074692][T22555] 9pnet_virtio: no channels available for device syz [ 1318.352449][ T5944] pwc: recv_control_msg error -110 req 02 val 2b00 [ 1318.354664][ T5944] pwc: recv_control_msg error -32 req 02 val 2700 [ 1318.364422][ T5944] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1318.364985][ T5944] pwc: recv_control_msg error -32 req 04 val 1000 [ 1318.365586][ T5944] pwc: recv_control_msg error -32 req 04 val 1300 [ 1318.366107][ T5944] pwc: recv_control_msg error -32 req 04 val 1400 [ 1318.366700][ T5944] pwc: recv_control_msg error -32 req 02 val 2000 [ 1318.367221][ T5944] pwc: recv_control_msg error -32 req 02 val 2100 [ 1318.367827][ T5944] pwc: recv_control_msg error -32 req 04 val 1500 [ 1318.368364][ T5944] pwc: recv_control_msg error -32 req 02 val 2500 [ 1318.368937][ T5944] pwc: recv_control_msg error -32 req 02 val 2400 [ 1318.369451][ T5944] pwc: recv_control_msg error -32 req 02 val 2600 [ 1318.372377][ T5944] pwc: recv_control_msg error -32 req 02 val 2900 [ 1318.372925][ T5944] pwc: recv_control_msg error -32 req 02 val 2800 [ 1318.379714][ T5944] pwc: recv_control_msg error -32 req 04 val 1100 [ 1318.554001][ T5944] pwc: recv_control_msg error -32 req 04 val 1200 [ 1318.572150][ T5944] pwc: Registered as video103. [ 1318.583700][ T5944] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 1318.671608][T22560] binder: 22559:22560 ioctl 4018620d 0 returned -22 [ 1318.989678][ T5868] usb 2-1: USB disconnect, device number 2 [ 1322.437038][T22582] FAULT_INJECTION: forcing a failure. [ 1322.437038][T22582] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.437103][T22582] CPU: 0 UID: 0 PID: 22582 Comm: syz.4.5184 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1322.437133][T22582] Tainted: [L]=SOFTLOCKUP [ 1322.437141][T22582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1322.437154][T22582] Call Trace: [ 1322.437162][T22582] [ 1322.437171][T22582] dump_stack_lvl+0xe8/0x150 [ 1322.437199][T22582] should_fail_ex+0x46b/0x600 [ 1322.437220][T22582] should_failslab+0xa8/0x100 [ 1322.437234][T22582] kmem_cache_alloc_noprof+0x87/0x680 [ 1322.437254][T22582] ? posix_lock_inode+0x35d/0x3db0 [ 1322.437273][T22582] posix_lock_inode+0x35d/0x3db0 [ 1322.437288][T22582] ? smk_tskacc+0x311/0x3a0 [ 1322.437308][T22582] ? smack_file_lock+0x1e4/0x280 [ 1322.437327][T22582] ? __pfx_smack_file_lock+0x10/0x10 [ 1322.437351][T22582] ? __pfx_posix_lock_inode+0x10/0x10 [ 1322.437373][T22582] fcntl_setlk+0x9de/0x10c0 [ 1322.437390][T22582] ? trace_sched_exit_tp+0x3a/0x150 [ 1322.437414][T22582] ? __pfx_fcntl_setlk+0x10/0x10 [ 1322.437440][T22582] do_fcntl+0x981/0x19e0 [ 1322.437461][T22582] ? smack_file_fcntl+0x150/0x320 [ 1322.437480][T22582] ? __pfx_do_fcntl+0x10/0x10 [ 1322.437498][T22582] ? __pfx_smack_file_fcntl+0x10/0x10 [ 1322.437523][T22582] ? __fget_files+0x2a/0x420 [ 1322.437542][T22582] ? bpf_lsm_file_fcntl+0x9/0x20 [ 1322.437558][T22582] __se_sys_fcntl+0xcb/0x160 [ 1322.437578][T22582] do_syscall_64+0x14d/0xf80 [ 1322.437592][T22582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.437605][T22582] ? clear_bhb_loop+0x40/0x90 [ 1322.437620][T22582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.437632][T22582] RIP: 0033:0x7fb915edc819 [ 1322.437645][T22582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.437659][T22582] RSP: 002b:00007fb914115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1322.437674][T22582] RAX: ffffffffffffffda RBX: 00007fb916156090 RCX: 00007fb915edc819 [ 1322.437684][T22582] RDX: 00002000000000c0 RSI: 0000000000000025 RDI: 0000000000000005 [ 1322.437692][T22582] RBP: 00007fb914115090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.437700][T22582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.437707][T22582] R13: 00007fb916156128 R14: 00007fb916156090 R15: 00007ffc5d202508 [ 1322.437726][T22582] [ 1324.124913][ T5868] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1324.184401][ T5948] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1324.287774][ T5868] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.287807][ T5868] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1324.287830][ T5868] usb 5-1: config 1 has no interface number 0 [ 1324.287875][ T5868] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1324.287892][ T5868] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1324.287907][ T5868] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1324.291326][ T5868] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1324.291359][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.291380][ T5868] usb 5-1: Product: syz [ 1324.291395][ T5868] usb 5-1: Manufacturer: syz [ 1324.291409][ T5868] usb 5-1: SerialNumber: syz [ 1324.408607][T22596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1324.408749][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1324.408872][ T5948] usb 2-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.00 [ 1324.408900][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.413484][T22604] binder: 22603:22604 ioctl 4018620d 0 returned -22 [ 1324.474030][ T5948] usb 2-1: config 0 descriptor?? [ 1324.484897][T22593] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1324.869319][T22596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1325.018318][ T5948] wacom 0003:056A:0041.003D: unknown main item tag 0x0 [ 1325.018365][ T5948] wacom 0003:056A:0041.003D: unknown main item tag 0x0 [ 1325.018781][ T5948] wacom 0003:056A:0041.003D: unknown main item tag 0x0 [ 1325.018811][ T5948] wacom 0003:056A:0041.003D: unknown main item tag 0x0 [ 1325.018838][ T5948] wacom 0003:056A:0041.003D: unknown main item tag 0x0 [ 1325.018865][ T5948] wacom 0003:056A:0041.003D: unknown main item tag 0x0 [ 1325.019474][ T5948] wacom 0003:056A:0041.003D: unknown main item tag 0x0 [ 1325.019502][ T5948] wacom 0003:056A:0041.003D: unknown main item tag 0x0 [ 1325.019527][ T5948] wacom 0003:056A:0041.003D: unknown main item tag 0x0 [ 1325.019552][ T5948] wacom 0003:056A:0041.003D: unknown main item tag 0x0 [ 1325.114363][ T5948] wacom 0003:056A:0041.003D: reserved main item tag 0xd [ 1325.118326][ T5948] wacom 0003:056A:0041.003D: Unknown device_type for 'HID 056a:0041'. Assuming pen. [ 1325.171221][ T5948] wacom 0003:056A:0041.003D: hidraw0: USB HID v7f.fd Device [HID 056a:0041] on usb-dummy_hcd.1-1/input0 [ 1325.240853][ T5948] input: Wacom Intuos2 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0041.003D/input/input29 [ 1325.303103][ T5868] cdc_ncm 5-1:1.1: bind() failure [ 1325.506446][ T5912] usb 5-1: USB disconnect, device number 56 [ 1325.636411][ T5948] usb 2-1: USB disconnect, device number 3 [ 1325.713596][T22613] fido_id[22613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1327.767036][ T5912] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1327.831082][ T5948] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1328.044795][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 1328.075144][ T5868] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1328.255463][ T5948] usb 2-1: device descriptor read/64, error -71 [ 1328.299413][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.299472][ T5912] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1328.304362][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.419796][ T5912] usb 5-1: config 0 descriptor?? [ 1328.439278][ T5912] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 1328.467677][ T5868] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1328.468576][ T5868] usb 10-1: not running at top speed; connect to a high speed hub [ 1328.470162][ T5868] usb 10-1: config 0 has too many interfaces: 225, using maximum allowed: 32 [ 1328.470190][ T5868] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.470210][ T5868] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 225 [ 1328.473458][ T5868] usb 10-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 1328.473490][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.473512][ T5868] usb 10-1: Product: syz [ 1328.473527][ T5868] usb 10-1: Manufacturer: syz [ 1328.473543][ T5868] usb 10-1: SerialNumber: syz [ 1328.555445][ T5948] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1328.561389][ T5868] usb 10-1: config 0 descriptor?? [ 1328.632294][T22643] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5217'. [ 1328.632954][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5217'. [ 1328.646913][T22652] binder: BINDER_SET_CONTEXT_MGR already set [ 1328.646930][T22652] binder: 22651:22652 ioctl 4018620d 2000000002c0 returned -16 [ 1328.819563][ T5948] usb 2-1: device descriptor read/64, error -71 [ 1328.835987][T22643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.836568][T22643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.331512][ T5948] usb usb2-port1: attempt power cycle [ 1329.414035][ T5912] usb 5-1: USB disconnect, device number 57 [ 1329.818963][ T5948] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1330.858792][ T5948] usb 2-1: device descriptor read/8, error -71 [ 1332.263099][ T5948] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1332.708487][ T5948] usb 2-1: device descriptor read/8, error -71 [ 1333.953779][ T5948] usb usb2-port1: unable to enumerate USB device [ 1334.032727][ T808] usb 10-1: USB disconnect, device number 29 [ 1335.449702][T22675] FAULT_INJECTION: forcing a failure. [ 1335.449702][T22675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1335.449744][T22675] CPU: 0 UID: 0 PID: 22675 Comm: syz.5.5227 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1335.449775][T22675] Tainted: [L]=SOFTLOCKUP [ 1335.449784][T22675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1335.449797][T22675] Call Trace: [ 1335.449806][T22675] [ 1335.449816][T22675] dump_stack_lvl+0xe8/0x150 [ 1335.449854][T22675] should_fail_ex+0x46b/0x600 [ 1335.449890][T22675] _copy_to_user+0x31/0xb0 [ 1335.449916][T22675] simple_read_from_buffer+0xe1/0x170 [ 1335.449960][T22675] proc_fail_nth_read+0x1be/0x230 [ 1335.449991][T22675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1335.450022][T22675] ? rw_verify_area+0x2ac/0x4e0 [ 1335.450052][T22675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1335.450081][T22675] vfs_read+0x212/0xa80 [ 1335.450124][T22675] ? __pfx_vfs_read+0x10/0x10 [ 1335.450159][T22675] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1335.450186][T22675] ? lockdep_hardirqs_on+0x7a/0x110 [ 1335.450211][T22675] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1335.450236][T22675] ? mutex_lock_nested+0x152/0x1d0 [ 1335.450265][T22675] ? fdget_pos+0x252/0x320 [ 1335.450303][T22675] ksys_read+0x156/0x270 [ 1335.450338][T22675] ? __pfx_ksys_read+0x10/0x10 [ 1335.450369][T22675] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1335.450411][T22675] do_syscall_64+0x14d/0xf80 [ 1335.450435][T22675] ? trace_irq_disable+0x3b/0x150 [ 1335.450462][T22675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.450484][T22675] ? clear_bhb_loop+0x40/0x90 [ 1335.450512][T22675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.450533][T22675] RIP: 0033:0x7fd2443dd04e [ 1335.450554][T22675] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1335.450572][T22675] RSP: 002b:00007fd24266dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1335.450596][T22675] RAX: ffffffffffffffda RBX: 00007fd24266e6c0 RCX: 00007fd2443dd04e [ 1335.450612][T22675] RDX: 000000000000000f RSI: 00007fd24266e0a0 RDI: 0000000000000006 [ 1335.450626][T22675] RBP: 00007fd24266e090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.450640][T22675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.450654][T22675] R13: 00007fd244696038 R14: 00007fd244695fa0 R15: 00007ffdc75016b8 [ 1335.450689][T22675] [ 1335.838563][T22690] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1335.908708][T22685] lo speed is unknown, defaulting to 1000 [ 1336.199611][T22695] QAT: failed to copy from user cfg_data. [ 1336.232264][T22697] binder: BINDER_SET_CONTEXT_MGR already set [ 1336.232276][T22697] binder: 22696:22697 ioctl 4018620d 2000000002c0 returned -16 [ 1338.121004][ T5815] ================================================================== [ 1338.121025][ T5815] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x902/0x1560 [ 1338.121068][ T5815] Read of size 8 at addr ffff88801d68d500 by task kworker/u9:5/5815 [ 1338.121068][ T5815] Read of size 8 at addr ffff88801d68d500 by task kworker/u9:5/5815 [ 1338.121089][ T5815] [ 1338.121105][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1338.121136][ T5815] Tainted: [L]=SOFTLOCKUP [ 1338.121144][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1338.121160][ T5815] Workqueue: hci3 hci_rx_work [ 1338.121185][ T5815] Call Trace: [ 1338.121194][ T5815] [ 1338.121204][ T5815] dump_stack_lvl+0xe8/0x150 [ 1338.121235][ T5815] print_report+0xba/0x230 [ 1338.121261][ T5815] ? l2cap_connect_cfm+0x902/0x1560 [ 1338.121289][ T5815] kasan_report+0x117/0x150 [ 1338.121311][ T5815] ? l2cap_connect_cfm+0x902/0x1560 [ 1338.121344][ T5815] l2cap_connect_cfm+0x902/0x1560 [ 1338.121378][ T5815] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1338.121406][ T5815] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1338.121432][ T5815] ? lockdep_hardirqs_on+0x7a/0x110 [ 1338.121455][ T5815] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1338.121479][ T5815] ? mutex_lock_nested+0x152/0x1d0 [ 1338.121511][ T5815] ? hci_connect_cfm+0x2c/0x140 [ 1338.121533][ T5815] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1338.121563][ T5815] hci_connect_cfm+0x95/0x140 [ 1338.121588][ T5815] le_conn_complete_evt+0x1134/0x16b0 [ 1338.121618][ T5815] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1338.121648][ T5815] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1338.121673][ T5815] ? lockdep_hardirqs_on+0x7a/0x110 [ 1338.121696][ T5815] ? skb_pull_data+0xfb/0x200 [ 1338.121725][ T5815] hci_le_conn_complete_evt+0x187/0x470 [ 1338.121754][ T5815] hci_event_packet+0x659/0xef0 [ 1338.121779][ T5815] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1338.121809][ T5815] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1338.121832][ T5815] ? __pfx_hci_event_packet+0x10/0x10 [ 1338.121866][ T5815] ? rt_spin_unlock+0x14f/0x200 [ 1338.121902][ T5815] ? hci_send_to_monitor+0xe2/0x590 [ 1338.121934][ T5815] hci_rx_work+0x3ee/0x1030 [ 1338.121961][ T5815] ? process_scheduled_works+0xa8d/0x18c0 [ 1338.121993][ T5815] process_scheduled_works+0xb6e/0x18c0 [ 1338.122036][ T5815] ? __pfx_process_scheduled_works+0x10/0x10 [ 1338.122070][ T5815] ? assign_work+0x3d5/0x5e0 [ 1338.122100][ T5815] worker_thread+0xa53/0xfc0 [ 1338.122145][ T5815] kthread+0x388/0x470 [ 1338.122168][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 1338.122194][ T5815] ? __pfx_kthread+0x10/0x10 [ 1338.122216][ T5815] ret_from_fork+0x51e/0xb90 [ 1338.122247][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 1338.122276][ T5815] ? __switch_to+0xc7d/0x1450 [ 1338.122302][ T5815] ? __pfx_kthread+0x10/0x10 [ 1338.122325][ T5815] ret_from_fork_asm+0x1a/0x30 [ 1338.122353][ T5815] [ 1338.122362][ T5815] [ 1338.122368][ T5815] Allocated by task 5815: [ 1338.122379][ T5815] kasan_save_track+0x3e/0x80 [ 1338.122409][ T5815] __kasan_kmalloc+0x93/0xb0 [ 1338.122441][ T5815] __kmalloc_cache_noprof+0x3a6/0x690 [ 1338.122460][ T5815] l2cap_chan_create+0x51/0x7a0 [ 1338.122492][ T5815] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 1338.122525][ T5815] l2cap_connect_cfm+0x368/0x1560 [ 1338.122552][ T5815] hci_connect_cfm+0x95/0x140 [ 1338.122576][ T5815] le_conn_complete_evt+0x1134/0x16b0 [ 1338.122600][ T5815] hci_le_conn_complete_evt+0x187/0x470 [ 1338.122624][ T5815] hci_event_packet+0x659/0xef0 [ 1338.122643][ T5815] hci_rx_work+0x3ee/0x1030 [ 1338.122662][ T5815] process_scheduled_works+0xb6e/0x18c0 [ 1338.122690][ T5815] worker_thread+0xa53/0xfc0 [ 1338.122718][ T5815] kthread+0x388/0x470 [ 1338.122738][ T5815] ret_from_fork+0x51e/0xb90 [ 1338.122765][ T5815] ret_from_fork_asm+0x1a/0x30 [ 1338.122785][ T5815] [ 1338.122791][ T5815] Freed by task 22700: [ 1338.122800][ T5815] kasan_save_track+0x3e/0x80 [ 1338.122830][ T5815] kasan_save_free_info+0x46/0x50 [ 1338.122865][ T5815] __kasan_slab_free+0x5c/0x80 [ 1338.122896][ T5815] kfree+0x1c1/0x6c0 [ 1338.122924][ T5815] l2cap_sock_cleanup_listen+0xf0/0x440 [ 1338.122955][ T5815] l2cap_sock_release+0x6e/0x270 [ 1338.122984][ T5815] sock_close+0xc3/0x240 [ 1338.123011][ T5815] __fput+0x461/0xa90 [ 1338.123034][ T5815] task_work_run+0x1d9/0x270 [ 1338.123057][ T5815] exit_to_user_mode_loop+0xed/0x480 [ 1338.123088][ T5815] do_syscall_64+0x32d/0xf80 [ 1338.123110][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.123132][ T5815] [ 1338.123137][ T5815] The buggy address belongs to the object at ffff88801d68d000 [ 1338.123137][ T5815] which belongs to the cache kmalloc-2k of size 2048 [ 1338.123157][ T5815] The buggy address is located 1280 bytes inside of [ 1338.123157][ T5815] freed 2048-byte region [ffff88801d68d000, ffff88801d68d800) [ 1338.123180][ T5815] [ 1338.123187][ T5815] The buggy address belongs to the physical page: [ 1338.123199][ T5815] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d688 [ 1338.123220][ T5815] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1338.123238][ T5815] flags: 0x80000000000040(head|node=0|zone=1) [ 1338.123257][ T5815] page_type: f5(slab) [ 1338.123276][ T5815] raw: 0080000000000040 ffff88813fe1b000 dead000000000100 dead000000000122 [ 1338.123296][ T5815] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1338.123316][ T5815] head: 0080000000000040 ffff88813fe1b000 dead000000000100 dead000000000122 [ 1338.123335][ T5815] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1338.123354][ T5815] head: 0080000000000003 ffffea000075a201 00000000ffffffff 00000000ffffffff [ 1338.123372][ T5815] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1338.123385][ T5815] page dumped because: kasan: bad access detected [ 1338.123396][ T5815] page_owner tracks the page as allocated [ 1338.123404][ T5815] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2987813941, free_ts 0 [ 1338.123441][ T5815] post_alloc_hook+0x231/0x280 [ 1338.123473][ T5815] get_page_from_freelist+0x28bb/0x2950 [ 1338.123496][ T5815] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1338.123518][ T5815] allocate_slab+0x77/0x660 [ 1338.123542][ T5815] refill_objects+0x334/0x3c0 [ 1338.123565][ T5815] __pcs_replace_empty_main+0x35c/0x710 [ 1338.123592][ T5815] __kmalloc_cache_noprof+0x44e/0x690 [ 1338.123610][ T5815] bus_register+0x58/0x490 [ 1338.123630][ T5815] vdpa_init+0x17/0x70 [ 1338.123658][ T5815] do_one_initcall+0x250/0x8d0 [ 1338.123688][ T5815] do_initcall_level+0x104/0x190 [ 1338.123856][ T5815] do_initcalls+0x59/0xa0 [ 1338.123877][ T5815] kernel_init_freeable+0x2a6/0x3e0 [ 1338.123897][ T5815] kernel_init+0x1d/0x1d0 [ 1338.123922][ T5815] ret_from_fork+0x51e/0xb90 [ 1338.123950][ T5815] ret_from_fork_asm+0x1a/0x30 [ 1338.123968][ T5815] page_owner free stack trace missing [ 1338.123977][ T5815] [ 1338.123982][ T5815] Memory state around the buggy address: [ 1338.123995][ T5815] ffff88801d68d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1338.124010][ T5815] ffff88801d68d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1338.124024][ T5815] >ffff88801d68d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1338.124036][ T5815] ^ [ 1338.124047][ T5815] ffff88801d68d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1338.124062][ T5815] ffff88801d68d600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1338.124073][ T5815] ================================================================== [ 1338.230142][ T5815] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1338.230172][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1338.230205][ T5815] Tainted: [L]=SOFTLOCKUP [ 1338.230214][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1338.230230][ T5815] Workqueue: hci3 hci_rx_work [ 1338.230257][ T5815] Call Trace: [ 1338.230266][ T5815] [ 1338.230277][ T5815] vpanic+0x56c/0xa60 [ 1338.230314][ T5815] ? __pfx_vpanic+0x10/0x10 [ 1338.230353][ T5815] panic+0xc5/0xd0 [ 1338.230384][ T5815] ? __pfx_panic+0x10/0x10 [ 1338.230415][ T5815] ? preempt_schedule_thunk+0x16/0x30 [ 1338.230443][ T5815] ? l2cap_connect_cfm+0x902/0x1560 [ 1338.230473][ T5815] ? preempt_schedule_thunk+0x16/0x30 [ 1338.230500][ T5815] ? l2cap_connect_cfm+0x902/0x1560 [ 1338.230530][ T5815] check_panic_on_warn+0x89/0xb0 [ 1338.230556][ T5815] ? l2cap_connect_cfm+0x902/0x1560 [ 1338.230585][ T5815] end_report+0x73/0x180 [ 1338.230607][ T5815] ? l2cap_connect_cfm+0x902/0x1560 [ 1338.230637][ T5815] kasan_report+0x128/0x150 [ 1338.230661][ T5815] ? l2cap_connect_cfm+0x902/0x1560 [ 1338.230691][ T5815] l2cap_connect_cfm+0x902/0x1560 [ 1338.230730][ T5815] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1338.230759][ T5815] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1338.230783][ T5815] ? lockdep_hardirqs_on+0x7a/0x110 [ 1338.230804][ T5815] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1338.230828][ T5815] ? mutex_lock_nested+0x152/0x1d0 [ 1338.230857][ T5815] ? hci_connect_cfm+0x2c/0x140 [ 1338.230881][ T5815] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1338.230912][ T5815] hci_connect_cfm+0x95/0x140 [ 1338.230947][ T5815] le_conn_complete_evt+0x1134/0x16b0 [ 1338.230982][ T5815] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1338.231012][ T5815] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1338.231037][ T5815] ? lockdep_hardirqs_on+0x7a/0x110 [ 1338.231063][ T5815] ? skb_pull_data+0xfb/0x200 [ 1338.231095][ T5815] hci_le_conn_complete_evt+0x187/0x470 [ 1338.231125][ T5815] hci_event_packet+0x659/0xef0 [ 1338.231151][ T5815] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1338.231182][ T5815] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1338.231207][ T5815] ? __pfx_hci_event_packet+0x10/0x10 [ 1338.231229][ T5815] ? rt_spin_unlock+0x14f/0x200 [ 1338.231265][ T5815] ? hci_send_to_monitor+0xe2/0x590 [ 1338.231295][ T5815] hci_rx_work+0x3ee/0x1030 [ 1338.231322][ T5815] ? process_scheduled_works+0xa8d/0x18c0 [ 1338.231354][ T5815] process_scheduled_works+0xb6e/0x18c0 [ 1338.231399][ T5815] ? __pfx_process_scheduled_works+0x10/0x10 [ 1338.231433][ T5815] ? assign_work+0x3d5/0x5e0 [ 1338.231465][ T5815] worker_thread+0xa53/0xfc0 [ 1338.231509][ T5815] kthread+0x388/0x470 [ 1338.231534][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 1338.231564][ T5815] ? __pfx_kthread+0x10/0x10 [ 1338.231588][ T5815] ret_from_fork+0x51e/0xb90 [ 1338.231620][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 1338.231651][ T5815] ? __switch_to+0xc7d/0x1450 [ 1338.231678][ T5815] ? __pfx_kthread+0x10/0x10 [ 1338.231702][ T5815] ret_from_fork_asm+0x1a/0x30 [ 1338.231731][ T5815] [ 1338.232125][ T5815] Kernel Offset: disabled