last executing test programs: 19m6.244519678s ago: executing program 2 (id=335): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xbb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 19m6.191130234s ago: executing program 2 (id=336): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0x18, 0xfb, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xfffffffffffffffd, 0x7}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_sa2={0x2, 0x13, 0x9}]}, 0xc0}}, 0x0) 19m6.109262371s ago: executing program 2 (id=337): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000100006191440132bb112240fcbcc3fa9d0431575f8614db538ce09c50eecf6ac579e8e83b944b666113f3afed71231e6653a1e899f17b33515bb07c9a1ed652a2159b"], 0x80}}, 0x4004044) r0 = socket$inet6(0xa, 0x2, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x948, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4184}, 0x1, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x2d) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) write$binfmt_aout(r5, 0x0, 0xc8) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x20031, 0xffffffffffffffff, 0xb9dde000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34cff300", @ANYRES16=r10, @ANYBLOB, @ANYRES32=r8, @ANYRESHEX=r4], 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x20040000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0xaf, 0x0, 0x0, 0x0, 0x400, 0x7700}, &(0x7f0000000180)=0x20) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001440)={@xdp={0x2c, 0x4, r8, 0x31}, {&(0x7f0000000400)=""/4096, 0x1000}, &(0x7f0000001400), 0x7a}, 0xa0) 19m5.235034118s ago: executing program 2 (id=339): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x2, 0x4, 0x4, 0x7fff0000}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r9 = shmget$private(0x0, 0x4000, 0x2, &(0x7f00004a4000/0x4000)=nil) r10 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) shmctl$IPC_SET(r9, 0x1, &(0x7f00000003c0)={{0x0, r10, 0xffffffffffffffff, r11, 0xffffffffffffffff, 0x20, 0x100}, 0x6, 0x5, 0x3, 0xfffffffffffffff8, r2, r2, 0x1}) mmap(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x10000) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfYno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 19m2.539815055s ago: executing program 2 (id=345): r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='attr/prev\x00') ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000000)={0x200, 0x2, 0x4, 0x3ff}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000200)=0x4) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000008c0)="fc0000001c000704ab5b2509b86803000aab02000000000000000e93210001c0f003058405006b49153312f2ba60100000000081039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d440000405608ec30033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e2c8d594dcc4ebc21077a9ca38ca070914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c8", 0xfc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x31f}, &(0x7f0000000040), &(0x7f0000000480), &(0x7f0000000000)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r3, 0x5148, 0xe93c, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3, r2}) read$FUSE(r0, 0x0, 0x0) 19m2.056462441s ago: executing program 2 (id=347): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="4b0a05000000a0e763a834864f6d64ceac7d9d9e86ed4dbaedf669f22cf41b0ff85e5e2feefc9978d5c317b673dfa1b36613285160f6a6fc08c2698b9d9f63b71cb5d907ad02ba72c48fdadcef97d793a10c72a9745be3ae07c8e6a80801b1d954cb29e956de127c53107e711f2c9be4a0925508c7bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000880)=ANY=[@ANYBLOB="600e04000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) 18m46.852131439s ago: executing program 32 (id=347): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="4b0a05000000a0e763a834864f6d64ceac7d9d9e86ed4dbaedf669f22cf41b0ff85e5e2feefc9978d5c317b673dfa1b36613285160f6a6fc08c2698b9d9f63b71cb5d907ad02ba72c48fdadcef97d793a10c72a9745be3ae07c8e6a80801b1d954cb29e956de127c53107e711f2c9be4a0925508c7bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000880)=ANY=[@ANYBLOB="600e04000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) 13.943107179s ago: executing program 0 (id=4319): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x50, {0x0}, {0xee01}, 0xe48, 0x8}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x6, 0xfffffff8, {r0}, {r1}, 0x4, 0xfc7}) prlimit64(r2, 0x0, &(0x7f0000000140)={0x8000008, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getgroups(0x0, &(0x7f0000001080)) (async) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00'}) 13.036428195s ago: executing program 5 (id=4326): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="e90c610faca20180c20000000800452000240000e0000211907800000035000000000000"], 0x0) r0 = socket(0xd642c3ba49bd1371, 0x80000, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$watch_queue(r2, &(0x7f0000000100)=""/97, 0x61) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000007c00)=ANY=[@ANYBLOB="06"], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0xffffffff, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) sched_setscheduler(0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x4008242, 0x0, 0x0, 0x2, 0xf8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) 12.125351446s ago: executing program 1 (id=4327): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x80}}, 0x4004044) r0 = socket$inet6(0xa, 0x2, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x948, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4184}, 0x1, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x2d) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) write$binfmt_aout(r5, 0x0, 0xc8) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x20031, 0xffffffffffffffff, 0xb9dde000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f0000000180)=0x3ff, 0xc, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0xaf, 0x0, 0x0, 0x0, 0x400, 0x7700}, 0x0) 12.086931721s ago: executing program 0 (id=4329): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x4, 0x0, [{0xb65, 0x0, 0x4}, {0xb55, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)=0x800d000) ioctl$KVM_RUN(r2, 0xae80, 0x200080000000000) 11.202524267s ago: executing program 1 (id=4330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtaction={0x78, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x64, 0x1, [@m_mirred={0x34, 0x4, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "17f0"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x78}, 0x1, 0x2b1e}, 0x0) (async) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902440001000000000904000000ef040100052406000105240000000de83e1ace4c8810be0000000006241a050000152412"], 0x0) 11.04099791s ago: executing program 0 (id=4331): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100"], 0x28}, 0xfc40) socket$kcm(0x21, 0x2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/166, 0xfe) r5 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$sock(r5, 0x0, 0x400c0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0x10e0}}, 0x0) 11.033320723s ago: executing program 3 (id=4332): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100"], 0x28}, 0xfc40) socket$kcm(0x21, 0x2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/166, 0xfe) r5 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$sock(r5, 0x0, 0x400c0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0x10e0}}, 0x0) 10.828853063s ago: executing program 1 (id=4333): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0xfffe, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x1}}, 0x10) recvmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/20, 0x14}], 0x1, &(0x7f00000006c0)=""/87, 0x57}, 0x1ff}], 0x1, 0x22, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x141080, 0x0) mq_timedsend(r3, &(0x7f00000001c0)="98964798a73908fe678e446b7fcbc1e9d0745dd8881d7e99292a80c933651c8afef27d858d59c5367521f8faa39dd2f16f8f68623aff44a62186b233b102434e59c37dcdbaa57d2158aa065726f88fa37b08da2b0b915ca8745e0a9e1d141472be62838a4dc6591b51bf5b6234d6a3b7fa64f6fe40b9bbf00904407ce9f407b98eef5d79c51fbb31189b007b930f1a00199199accf1ed366dcab44780d7e1284123498d11b1262141d294712d5490a7f1821b823141ee1b1d161", 0xba, 0x4, &(0x7f0000000280)={0x0, 0x989680}) 9.8050106s ago: executing program 3 (id=4334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x4}]}, 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0xfffff000}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 9.804202173s ago: executing program 0 (id=4335): socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) membarrier(0x2, 0x0) 9.605309847s ago: executing program 1 (id=4337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000180), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x4, 0xfffffffffffffe30, &(0x7f0000000340)=ANY=[], 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[], 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000280)=""/144, 0x90) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000340)=0x4) 9.604034444s ago: executing program 3 (id=4338): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x1001, @none, 0x0, 0x2}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x0, 0x2000000022, &(0x7f00000000c0)={0x77359400}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x3818, 0x8) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000523000/0x400000)=nil) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-arm64\x00'}, 0x58) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0xa, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x1, 0x0, 0x7, 0x40400003, 0x8c, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) ftruncate(r4, 0x1000006) fcntl$addseals(r4, 0x409, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000006c0)=""/4094, 0xffe}, {&(0x7f00000016c0)=""/10, 0xa}, {&(0x7f0000001700)=""/46, 0x2e}], 0x3, &(0x7f0000001780)=""/192, 0xc0}, 0x9}, {{&(0x7f0000001840)=@isdn, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001900)=""/51, 0x57}, 0x45ea1f41}, {{&(0x7f0000001940)=@alg, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002c80)=""/4111, 0x100f}, {&(0x7f00000029c0)=""/223, 0xdf}], 0x2, &(0x7f0000002b00)=""/129, 0x81}, 0x6}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9.058347528s ago: executing program 5 (id=4339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010028bd70000000000700000000", @ANYRES32=0x0, @ANYBLOB="7429000056800400140003006e657464657673696d300000000000001800168014000180100006"], 0x50}, 0x1, 0x0, 0x0, 0x890}, 0x200088c4) 8.934487168s ago: executing program 5 (id=4340): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) getsockopt$sock_int(r4, 0x1, 0x2b, 0x0, &(0x7f0000000180)) (async, rerun: 64) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (rerun: 64) syz_io_uring_setup(0x3af2, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x9, 0x95b, 0x1, 0x1a2a121fa384270f, r1, 0x0, '\x00', 0x0, r1, 0x4, 0x2, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x21, &(0x7f0000000340)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xcf}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000480)='GPL\x00', 0x5, 0x60, &(0x7f00000004c0)=""/96, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000940)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r1, r1, r5, r1, r1, r1], &(0x7f0000000a40)=[{0x0, 0x3, 0x2, 0xc}, {0x0, 0x4, 0x4}, {0x1, 0x2, 0xf, 0x2}], 0x10, 0x7}, 0x94) (async) socket(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r7, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)={r7, r8, 0x1, 0x0, 0x1000000000000}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4400}}, 0x20}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) (async) sendfile(r1, r0, 0x0, 0x80009) 8.809855724s ago: executing program 0 (id=4341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) (async) sched_setaffinity(r3, 0xfffffffffffffe10, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000080)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="402d830098fb6f45b2c5000000cfe196eaf921d5d7ffcaab1ab8107d4563c47ae22d01ad91c14ee7b31134e1f183a741792c53e1c889090a86b72400"/70, @ANYRESDEC=r6, @ANYRESOCT=r1, @ANYRES32=r6, @ANYRESHEX=0x0], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x14040090) (async) recvmmsg(r5, 0x0, 0x0, 0x10000, 0xffffffffffffffff) (async) eventfd2(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r7, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r9, &(0x7f0000000040), 0x0}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0xac5) (async) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000000000)=0x7) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) 8.389077708s ago: executing program 5 (id=4342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x700) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x20008000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc}) landlock_restrict_self(0xffffffffffffffff, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000002"], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x0) 5.302662146s ago: executing program 0 (id=4344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000180), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x4, 0xfffffffffffffe30, &(0x7f0000000340)=ANY=[], 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[], 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000280)=""/144, 0x90) 4.252815172s ago: executing program 1 (id=4345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000180), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x4, 0xfffffffffffffe30, &(0x7f0000000340)=ANY=[], 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[], 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000280)=""/144, 0x90) 3.127203705s ago: executing program 4 (id=4346): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 2.928719391s ago: executing program 3 (id=4347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "29cf79fdd9332597", "3df1edc060f164c7d8714f872ecfb9a8", "9f6b03a8", "95acf7e145039a74"}, 0x28) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000040)=0x1, 0x4) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000080)) socket(0x1f, 0x4, 0x3) r3 = fanotify_init(0x0, 0x2) r4 = syz_clone(0x62400, &(0x7f0000000240)="2898ed94715a7e9e053df39b7d3d7b2707f512e63eeb93925d6e7e157998a932c855223491075265e3ee424e325658fa447702667f27f667edd1c9c7356df978c85e2f283e4d07f9b5efbd3f52ef956d3ae43044ea64b97c14eb997ecef34aef41d3757e382a884fec27eb6a0c963ea3fe263dca1552e9aa24c5b71b9f7f5f6812e56599b65b0f9e897f2ecf53f491fac20d445173fd29ab350596509c06617d5548f00ce7ef35", 0xa7, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="5b5c29cbc8ee62b30ffd79e5d62cb2295c79023c84cc426b42bab86b5c04aac65d603cb6517c0af0e36090bc7e4763e4cf69429b02e05b5ecc3a4b137ded9b4cf1de13a80582eb46d35f2ee977383d50340ae702a68206732359abdf2523587024957a2d1bf3f84690093a4ac3c5d4c87848bd6ebd6c945e7b4f5d87569c3fc574782bf77a650ed99d045586634b24050d17adeb28ca4af33da3d023b543b69bb07d40aa4c2b6808bbabed17e249eb0227456c6551ea861d04bf337083af9ccd365a514507ddd7dea093") r5 = syz_open_procfs(r4, &(0x7f0000000480)='net/nfsfs\x00') r6 = openat$panthor(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000500)={0xbe1f, 0x7ff, {}, {r7}, 0x5, 0x6}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r8, &(0x7f0000000540)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) syz_open_dev$dri(&(0x7f0000000580), 0xc00, 0x9a500) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000640)={0x1, 0x0, 0x45, &(0x7f00000005c0)=""/69}) syz_open_dev$video(&(0x7f0000000680), 0xfffffffffffffff8, 0x101280) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, r3, 0x42242000) mprotect(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x200000e) connect(r8, &(0x7f00000006c0)=@sco, 0x80) syz_open_dev$video4linux(&(0x7f0000000740), 0x5d52, 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000780)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000007c0)=0x2c) recvfrom(r8, &(0x7f0000000800)=""/90, 0x5a, 0x40000000, &(0x7f0000000880)=@in6={0xa, 0x4e20, 0x55b0, @loopback, 0x3}, 0x80) mmap$snddsp_status(&(0x7f0000fea000/0x14000)=nil, 0x1000, 0x2000008, 0x30, r5, 0x82000000) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000940)={0x4c, 0x18, 0x9, 0x82, 0x1, 0x2, 0x3, 0xff, 0x2, 0x9, 0x6, 0x2, 0xd, 0x4}, 0xe) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000980)={0xd, 0x1, 0x17, 0x401, 0x17, "62c84f8cf764bb872824e7df3419014044a104"}) 2.799144126s ago: executing program 4 (id=4348): userfaultfd(0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) io_uring_setup(0x868, &(0x7f0000000080)={0x0, 0xcaf4, 0x1001, 0x2, 0x8004}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001012ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) 2.19960896s ago: executing program 4 (id=4349): madvise(&(0x7f000017c000/0x2000)=nil, 0x2000, 0x64) bpf$PROG_LOAD(0x5, 0x0, 0xfda6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = landlock_create_ruleset(0x0, 0x24, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100}, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r1, &(0x7f00000000c0), 0x4) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x3) syz_open_procfs(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000008c0)={0x2, 0x7}, 0x2) 2.1172832s ago: executing program 5 (id=4350): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = dup2(r0, r0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r3, &(0x7f0000000000)="a315ae94498b512190c0ac61a030b4d1027ffc77fde5b005", &(0x7f0000000040)=""/42}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200033010203010902120001000000000904"], 0x0) mmap(&(0x7f000066d000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x50, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000028c0)=[{{&(0x7f0000000300)=@abs={0x3929f77e0e46ce72, 0x0, 0x4e23}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000380)="986332c700b29da8251145bece9fbad91bd53e0c22c70b0cd506c11de5380b5a044fa628c7fa3ef1973aebad1c58a49ea5b2cb18608ff87d04138ee0f7683e6c38e5ec1060edb39ef0a36c34a43d31df93ac33799b385d568485db12421a7d16a727871f9801c3d466887310855f6e57fc7839762223a1ca9a6ca1b190e3fe6f50d1033f73b9b899767cb5a204a137a018908db26a82ce2de72a3b4a4afd7caeeb4bd2521e214e90a61f11d9e4714a1f645cf605c7f28005dd677ad9fb48274869039a8de7f02e2e47d705d53c36024746979d39fca1386643e9f1d838bc92f50cec901192", 0xe5}, {&(0x7f0000001340)="04ac46ccd6bb71022a725c4ec5e8549e592c663a13bc83de4b9afcc46c2b345bb9ad38d9e83d03f5c658cc86a529fba25da46196f749723c5492234ddd645d742e4ca6afb4cf4601873c1c213b46f63b121e3d6a7369c5a4aaa9a8c67ba4368673a17f7751d0b79a62f6ce598e87388bd4510181cc8ab457c95542059647cc3d53b263200900b7a8daeaa746cd53e77f38e67c45a440e58da533907e20513efb454ac5837a742fee9acc823237ba08317b744f7893e3f14efbc2b851c1a690862750b16de862ca140e381be30816e84a8c27a406617f1e36c7a75c08ba7d012f0a4f7692acb6fbbd0a2329f868d0974f4b26d297c880ca8d2cdfd0b4c8140aa22062f8f1c69d768d7db49d5ec53ff1887c4555b161b981021cb48eb6753d978580eb8c7a8f53e568dfc1c88844edd79a42b7463d748acf8ae9870fb30888ab87f2adaba9f2c51d2b1e5d0f1678052c753a343cb1edc6d280eee7d8b847c8ccc46f0de74bc3c9cfd57b8f27afb7e34cebe2696a431955b650fe94bece0c2c305d9d1a10cf218763d02d086165cda254a14314d04959155abcf781136e400c447eba2393989d48df8a3f714cf10e19ce420fd42bbdecb8e167d386dde21feb59f8d4e8a8f4b5c5c284fb2f3b538a1efd140c0263f3886679713c9557b3e5cbea4fd2ff382a65cfd71aae011d7f2c5b479c9bab000675ab264c8e0d629db221690ecc01c9d6380021e21dba913b379742f1cc5cac43ee424b62d95007bc8014d097a88e1e3a23abd8e65f13b955a9f64275ecfbc588c3b79c4f6c7a4faf78731c1f72488d827377d1152287c00b5541eeef70e386e46684ba2a18ae6ea2a3635d31228000126c5fc9fdf24a359da09b6725f0d548fa0746a81a6f785394dbeb3f05981a4353811c4a7ca8ca1b63f808ce8d02feb0071893c3b76250563ec92a1682ede9c484199f16e1f813a24eb43647579cf78e070163ec8933e838c795449f41e38f4b7c8ea353445ea1e06b6958772d4ad569757e6a1d8cd93d34d29b565c51c670236df33f0e545be3db2506cc4b23354e44dc6a4a5d7d4e3f803ed06a578de7612e7a7ba599c018113f9a58ba52e4821b7a5dba2a4e1ca5d60c53e2c71d69427dc995a5b9575a9af4340fd3695e5cbf4c9580ba41e2a08ebb1c73d3ab254cc4628d713ebf74a6729673b77f10c2674645df55033e04fef5f23c88205fe30f5169d54c82dc1238deb60c34e295ebda76783261cced61e6b18001abda3820e8107c50d74dedaf87dc37019882b28682bddf57b7dd50a63404b87e24eca48fc03baea8a3cd36bfe2147266ce44f6a051b62a9ab24bec2005c9d1cce91680fbb765834252d0d03868185b97efabe23082ab4ed264d144f451d81c70ec979ab614475ba58afde13a4a953aa30174eff79f6696b97d824efc06d56f511b314b4b0546c8e7e22549d59cee9a308e579fad6761121e1a335c0d6d47f6f35f86b1b327cd2b1030227dae4a4ce12a9672dfdc2a6ca67151fb1f2b93eff1a819dbbeb8305cf876fa50925b90a2ab3a48cf1a47c1f8c569031d650b03b3d53325d8e91e8e680f1b1856242122b8872e73206350af6bfeacc48fcd3eeb89e5738c49b22d946995b3550da5d3c1f96ad6aba21dad0de3d605138fea3c1c022be7790c9ed1f9ca4b61cb2eaf66c8bbc5c4d365db9300a4c2930e278860d79183140a32a127c2d1b73d071114e91250ff6e6d857ea6eb8cad7e4a9979eba8e16cf073daebe8c99cefa154811cc19d1cf48068f46627b913f863be1ec1999d9aeb796d2c8b72e5882b1bd31c9930f41977bd065279a3e8fcd5cfe84512d309852761c6d3f7e190f6ad8fadbe86a06c0f28615db7fedefdfd36a08e9a3f09878780b3c5ecce31a29a901365910a738777cb16afe626e1ed7fa0d4e145ad10a9d022ea0bb326a82e232640e4a9b7262414f36f8bdf2bcda1aae26dd542a441c6f8c4da113a3dcd932d3594527de627d8e0bdf546f5a70fede0fe156d96ef45617d16dea956c86a7270714744d20390aeb275e3678ace06173ea9a1640933ad5bbbf74ee43348eae5697a0e15ea39c13e8e9eb8f6a01e7c9e3b031909f473fa9a9351ab49a5a666b768dd85cc384900c7e0e2057325616da5a9f4a67fa42750c6559b186d0d84266367bc9b30f4dda3ad1001babd63ccdc280f23dd66bf3c9ef9c5e661d4864e30086c3e28a0b97e7aec641c160da8047a8ddfc91260f1b2d879887f15f8f76d122658a2c19e70d5899ec22b8228b5e46d9739540d96b38d1048f6c8e747fa322b28b66683fa2b1a4aff4301b142aa608d0a4042417341b6246d1a0852f63c92529bccbb128f52f0ee8da8225b4cf116683a399f879071a87a17c988d7d004aed86be556f96500f180e70db75eadc49d8a6237d97565a9dd074483e59bbc50a85d6f275ac1f7892a5566e2ea6b6e4884f856e3163e9ee328254a24012b01a9cdb2e533ee5926aec835f4056afc4d6753b34a8d6df014b6746503f3c85c1111f75a38f10abfd52e0bf00c8b196f7d48a084cb25fbcac3b854b53531240bec5f8b8faee04c2aef7aa84feef83453e6522d39bdb6eb89c119a4275c58558ff0f991cd167c811d937db34ff46d09e8095e1f26261fbb60e05f0973238a3b98aeb427caf6c25427292fe3822ac0b3cf3ac09e1b27fd864fc90cfe23cf26a5c8843a8cf183b7cfef00fae12234967b660af41b904fd26d49adce5c77760e5ce7481b22b903ca4d04189ae530f1e3e037bef6e69c570cba383e12109b500af8c312d46dccad8977be1e1dcf021c37f3717be71e4a0851942f049ccbf14d2bbdfba6ac1517268b7769bc840b0005081a4721a9b9ba92e3495cf015f42ab20ae4145315d1c524bcd5b1c21847231778d730e7e0170f99e1926fc808dc66ab03d9fea2c63285ee463410b5fd799343d3ea1bac0adc29cab2f9561f637543e340a37ef98db9e4a29a3bb7c10a1a6c073f5ec8b5526636770a2200c2bbce79a5908576f58e85838ee2baec54be02b7832544f9fc7b904fda199fbae766cddd481021875588f1a688662627084787eb88ec3cb37188b419d04dca30e1b3d35babb3ab745e780742e9f1930bb98358fb3aa290849d2d88b9f257d7e3b8a6aa2d26baca2732f1210e52bd8fb463595d0fde52bb3a6e7261770defcaebffd5413d1c248ae9ae0e39ba16c3642382f48b59996f860aecbc144f51c51207db65fe23ca8edfea4ccf81259fe9dcae5ce295dc38696992d8f09f33fdfe313b5ba01f8ba6fd1393818f3e8737f3a389f9f25d4349966e484627be88690584d3f3dd22c4b845feecc579bdc15db80b1f05e79869484d3df1e54d410372108a506d35701d60d09c6fdaadad9e2781c9f72fcdabda05beff03be961351a989ad7da5a97337e9a8313058870a3e3026438f358fb6bcd67d6408da83c2ae5d73efe740ad6fe344de7c2dac0256cb95516b5dae9403c7c8b59cb5d37d9e2d61a552746ac3f67b86753a3f38c4f77f7b477f01129c29d5edd98905e8d00c490cd80c58c0627d2c36831a3f74fa63e52fdcdecae6e1f876d3988a94dec99e888c840d12f2df6c0168f557ce250e7617199eca2ba2c095f006aac59ee1326bd9315a211bc16d7de6e6302d7b6646bd4dbc74bc50582ba23bc39a6e8f7aa0da46d9cb23a725c5e3aa6e069114f45c3ee414e06f4157ffde28ccd28d1f967e3350a5a615fb34f9114a742d619006b61365bf47c24d68b45988963700834ff2bc4680baf192000c3457dedebca1c9f11b0297de9a627a1f3cb70bd3c3dd3b35b1d5f0297d63f3aad299fc79fb5e9594676448992ab1f25b1a7723a2a6317f1338cdd6b7522d187c0ea8584e2b924359012d101b92a6326d7a79a1ca6f37bac914d1981b016667e07a71e50f61df8dd97795af32ff15a0474d061872368bc829133433f90dbf7db93ca4297f0ce80ce50c887a1f8fc7954adba6a4f97af4fbaec7696ff18183d24deebbaad1d2f88f0341be96c10e85751e7d5b38a16a9bedc7bdca3c8760bb259a69bf604e841c9db45af00a3defa69cb11e7d1af5107ed108ac8fa926e84ba75622a9b7acbdd9ef17a3d339825571ddc9d54ab4ddbf3a81a6ea1063f1821dee8840ff85aaca81138d79f3392443ea855d4f7eed4d2603c8877a84071cb18e409de3f4fc09c08856f9f60f8efc48834a8b131be7396ae0abd697da75d3e998e763797a47bf1281de2db2604fa0af81fbc45713675751ea2856aaaab7be99374fa5a56321d2fac8bfc50844f8dcaa36f61e9c50ee4a173c624f87d4089f1a40c2102b91e494a0e38e1ff4a8859e56bc5481810459c634e066ab136d2dcc94fa8a8bc6611cde38b2b8f32d42b0eef2931ffb22dc9533d6bac89c4c4d96a31acfe7f34bb3df53e0df9551adeca71b52469d1e103d57eae362e63b3de6741850e28508b3867272c4358c481fc52e74518a0c3d4628537d4a9e0c5bf0d42e5b9e16de5bafbc7ae25825803ef4a7852041db4991c3049af4394522edd452bf5dcb69af6808be857f621b5f076c8e65775e088d1fc6afc7892956078a499cb5a3f87d7d5cd6874948ca7197bf3c57213721514d40eb0fb1484261739b73321a4132af8e301c35f223f91bdc43584288512114568c5db037e5af36fd709bf96d763f9ee0c9b899c9eaa9add0cab4d06d33500c9cdc874e338bc61ff6c6edca5fd8cc6f396229d9538558773967d92389c073c6680505672b8b15f37ccdc4c65eb2555a74996d08ebf71263944032fc7f96b8bb1734fa632616dea909a885e0e6b4dbd0ffd9c23abc64d3f047f2c4b80604dfe52c61af577fec66bfe454b18eb7aff723d7faf9f0f92575daa14e1987963ce114355cb7e85de57d46ed3d08302ee5dc6775b35024521e11d6f97cdddf90af03681acee623b495fd34230b9716b44ec2055fafc87d5c8463196eaa5e831f0a15d64752a68b6408824b1881cfa049a45510d98d4070b97bca55efed8fad565e2bb70dddae0a831927c1a356c8605e39e062b23a8159baf76e062ff37f29f5b6f98a29f4e59fd334ca558468a429a456cc376f1557cf0d450da54ca8273c6a0f59c83490769030a46f80cee41290e222f7c36c0d6827392653d5b98411bca309e84c7810ea5c52033374b31c143a9b9ad67bcb42c6def8c6fa6cc8fe500b7e3c712f5180de1c00f0443a9b5a60f1859aff6a71f3c3cb36b89f1fb21197627da943171ff9d78f24cfe03e76ee9baf2ab00bc807800f963b3ec512979b2aaf4b802c798585f0a80e3680f712376252f7e0918970cd55589578cb8a7c43d1c58a06d8ce43a5d71cfaa62270745f7f8cdfbd21f431f60e216dbd2e038a0c2855c08a7f9ea19d92da64f3c1ec42c43f4f0a22c8db20159c3489e53486c90fe52ed7bc426d8178ea48e3e44d7590799035cded3376e7007c2ee79da66114c0c0c660c5a819785b25081750a78040c0db427d9dbee7f850c668b429bf4cc426269be203374e50c9bea00ce95d5145547d7e32e3a7c91530aab346fcb1043e67ec826eeca673585290fa6abee6f033b5c9b0e34aacaa927a5a31a159687ea2757ee9b1f861676f775bef574cab1cec77d8f514d303b7b08d02c3863633747ea8ea1b46e36b22fd02e435ad1ae7cebb1d7b106427512c5248bfad0ce226c8ead6ef6857d7c6beea1f24d545fc38afde2ed28874812ab0c93c96d1427080c4be8de615c9c0d25750e8df6c06ea031c41933d573b9cf2f551f2c1e5f876c9ba6820a3d0fe", 0x1000}, {&(0x7f0000002340)="aa063850c9871958926126997c9ac2a21c4af646cc46fdbb20effcaf40e2c37ac98e8ce1376ae9bfe3e460096bb5d582a7b8cbdf84e2a5976ed06e32a0a954cbc5a75a4981dbeb63a28c8785d4c365e988d12378977bef8d45c57d73352c6ed0befacf7de81151356ce39091d93b241688af229e40776333985bf234c03d12e03a080b8ad611d93662b406600ca9bccd74d89e9516ab2165a1fe347bfefd1f7cc89ae955c6baabe69193e385b51d5f3665c4e0dcfba787b0cc0c29fa4dd556a2ad3164c09d511cc2224bc77403564138b2aeeb5b8de51bebc176915031b89849aaa0", 0xe2}, {&(0x7f0000002440)="22aef7b2593d11c6d489dad85f7f1aaacbfd9bb76b4289d86716777a429ad01b796ddbf1cb729bb09097fbb0005fcec99512969b6326b0a055690548f466f1eceeb6721aa07bdb6d61d6f571d8aff99e666e74cb0c392094eb54771f3a9330d245cee85bad1f7954688574e162dbe42eb662b57287bb5f411730e7627219065de5f18006d5fb4a6168a255d13a29b71b8f7365f52da9f15682549c71adb83aeee7", 0xa1}], 0x4, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r6, r3, r0, r4]}}, @rights={{0x1c, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x20, 0x1, 0x1, [r5, r6, r5, r3]}}, @rights={{0x38, 0x1, 0x1, [r3, r2, r4, r3, r2, 0xffffffffffffffff, r6, r4, r5, r2]}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, r3, r5, r5, r0, r2]}}], 0x130, 0x24000000}}], 0x1, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001300), 0x802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000045c0)={0x8, 0x79c, 0x708, 0x4, 0x81, 0x5, 0xa83, 0x7}, &(0x7f0000004600)={0x0, 0x3938700}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x108, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xf4, 0x1, [@m_skbedit={0xf0, 0x6, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xbae9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x5, 0x3, 0x5, 0x3ff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xa}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0x83, 0x6, "beaebae6bb637ff4d193ba851e4e371844aa2e1a5a7bb059e2c8e44bef2a7cb12ef8474e78e2fdd3c3f0df4f165aaa28c40e3b0db7f96986329e17cd98604ccf11b5f7c7fbfb8184f5879baceca842ff12b4b60eae04710e17d2bab395c1b9265edae8a7201ddefa91f244938ae59838168e186869ba1e0fffed65b9fb88a7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x44004041}, 0x0) r7 = syz_io_uring_setup(0x5278, &(0x7f0000000180)={0x0, 0x5766, 0x800, 0x88000000, 0x385}, &(0x7f0000000000), &(0x7f0000000480), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, 0xffffffffffffffff, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x1}) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f07, 0x1f, 0x10000, 0x9, 0x5, 0xccc, 0x8, 0x7, 0xa, 0x100, 0x20002, 0xffffffff, 0x1, 0x9, 0x3, 0x2, 0x0, 0x7, 0x3, 0x40000003, 0xefd, 0x4, 0x4, 0x20001e58, 0xb, 0x1, 0x7c, 0x208, 0x6, 0x0, 0xb]}) 1.981559313s ago: executing program 4 (id=4351): socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) membarrier(0x2, 0x0) 1.947311244s ago: executing program 3 (id=4352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000200)) r4 = socket(0x2c, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r7) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) setgroups(0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, r5, r7, r8, r9, 0x0]) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r11, 0x40088a01, &(0x7f0000000000)=0x10) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r10, &(0x7f0000000400)={0x10000012}) 793.925348ms ago: executing program 3 (id=4353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000180), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x4, 0xfffffffffffffe30, &(0x7f0000000340)=ANY=[], 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[], 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000280)=""/144, 0x90) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000340)=0x4) 726.950051ms ago: executing program 1 (id=4354): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000200)={0x40, 0xf}, 0x0, 0x0}) 536.937385ms ago: executing program 4 (id=4355): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x7fff, 0x10000, 0x2, 0x10000421, 0x5, 0x80ccf, 0x7ffffffe, 0xa, 0x6, 0x3ff, 0xfffffffd, 0x2fe, 0x1, 0x1, 0x9, 0x7fc, 0x40400, 0x8, 0x6, 0x1fe, 0x80000089, 0x40000d, 0x1400000, 0x20001e54, 0xffffeadb, 0x7f, 0x3d, 0x8, 0x4, 0x7fffffe]}) (fail_nth: 6) 510.871838ms ago: executing program 4 (id=4356): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\b') 0s ago: executing program 5 (id=4357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000001900)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r5, 0x2285, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x5d6, @loopback, 0xf}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x1c, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x6}, @ib={0x1b, 0x40, 0x7, {"4e31211a40e51c75adce5a1c234e4f87"}, 0x8, 0x2, 0x4}}}, 0x118) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r9, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) kernel console output (not intermixed with test programs): '. [ 1088.895486][T20515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3633'. [ 1089.184943][ T1348] team0 (unregistering): Port device team_slave_1 removed [ 1089.214007][ T1348] team0 (unregistering): Port device team_slave_0 removed [ 1089.733344][T20340] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1090.562157][T10804] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1090.614730][ T8790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1090.623791][T10804] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1091.008967][ T8790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1091.052515][T20340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.145799][T20340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.158326][ T791] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1091.179713][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.186886][T10804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.359838][T10793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.366945][T10793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.688336][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1091.715291][ T1348] IPVS: stop unused estimator thread 0... [ 1092.293880][T20340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.769513][T20582] kvm: pic: non byte write [ 1092.916204][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 1092.956898][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1092.990873][T20575] kvm: pic: non byte write [ 1093.071681][ T29] usb 1-1: USB disconnect, device number 3 [ 1093.134069][T20340] veth0_vlan: entered promiscuous mode [ 1093.146511][T20340] veth1_vlan: entered promiscuous mode [ 1093.566891][T20340] veth0_macvtap: entered promiscuous mode [ 1093.591027][T20340] veth1_macvtap: entered promiscuous mode [ 1093.623203][T20340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1093.675882][T20340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1093.778477][ T29] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 1093.799122][T10795] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.861639][T10795] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.923885][T10795] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.940088][ T29] usb 1-1: config 0 has no interfaces? [ 1093.956392][ T29] usb 1-1: config 0 has no interfaces? [ 1093.957369][T10795] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.983023][ T29] usb 1-1: config 0 has no interfaces? [ 1093.984996][T10795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.002461][T10795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.099519][T10795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.108217][T10795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.233906][ T30] audit: type=1400 audit(2000001129.445:1661): avc: denied { append } for pid=20600 comm="syz.5.3605" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1094.558342][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1095.989069][ T8790] IPVS: starting estimator thread 0... [ 1096.078445][T20623] IPVS: using max 45 ests per chain, 108000 per kthread [ 1096.100463][ T29] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1096.119732][T20629] netlink: 'syz.3.3649': attribute type 10 has an invalid length. [ 1096.127645][T20629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1096.137068][T20629] bridge0: port 3(dummy0) entered blocking state [ 1096.154190][T20629] bridge0: port 3(dummy0) entered disabled state [ 1096.188273][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.231093][ T29] usb 1-1: config 0 descriptor?? [ 1096.239735][ T29] usb 1-1: can't set config #0, error -71 [ 1096.257457][ T29] usb 1-1: USB disconnect, device number 4 [ 1096.260969][T20629] dummy0: entered allmulticast mode [ 1096.272653][T20629] dummy0: entered promiscuous mode [ 1096.308867][ T30] audit: type=1400 audit(2000001131.505:1662): avc: denied { getattr } for pid=20631 comm="syz.0.3652" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1096.478820][T20629] netlink: 'syz.3.3649': attribute type 23 has an invalid length. [ 1096.598460][ T8790] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1096.801376][ T8790] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1096.810711][ T8790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.819310][ T8790] usb 2-1: Product: syz [ 1096.823475][ T8790] usb 2-1: Manufacturer: syz [ 1096.959135][T20652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3657'. [ 1096.959731][ T8790] usb 2-1: SerialNumber: syz [ 1096.990196][T20652] ipvlan2: entered allmulticast mode [ 1097.005712][T20652] batadv0: entered allmulticast mode [ 1097.033159][T20652] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1097.268631][T16160] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1097.498388][ T30] audit: type=1400 audit(2000001132.715:1663): avc: denied { append } for pid=20653 comm="syz.0.3658" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1097.498567][T20654] random: crng reseeded on system resumption [ 1097.559256][T16160] usb 6-1: Using ep0 maxpacket: 32 [ 1097.578816][T16160] usb 6-1: config 0 interface 0 altsetting 37 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.619858][T16160] usb 6-1: config 0 interface 0 altsetting 37 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1097.652303][T16160] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1097.655593][ T8790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1097.676831][ T8790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1097.677517][T16160] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1097.698493][ T8790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1097.712951][ T8790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1097.742716][T16160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.750915][ T8790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1097.774254][T16160] usb 6-1: config 0 descriptor?? [ 1097.794039][ T8790] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1097.852663][ T8790] usb 2-1: USB disconnect, device number 10 [ 1098.027565][T16160] usbhid 6-1:0.0: can't add hid device: -71 [ 1098.038263][T16160] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1098.077936][T16160] usb 6-1: USB disconnect, device number 122 [ 1098.180427][T20665] kvm: pic: non byte write [ 1098.900248][T16160] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1098.949921][ T8790] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1098.952027][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1098.983538][T20686] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1098.994128][T20686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1099.068507][T16160] usb 1-1: Using ep0 maxpacket: 16 [ 1099.085287][T16160] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.128029][T16160] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1099.141475][ T8790] usb 6-1: config 0 has an invalid interface number: 22 but max is 0 [ 1099.147053][T16160] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.164340][T16160] usb 1-1: Product: syz [ 1099.174571][ T8790] usb 6-1: config 0 has no interface number 0 [ 1099.181262][ T8790] usb 6-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.192607][T16160] usb 1-1: Manufacturer: syz [ 1099.197294][T16160] usb 1-1: SerialNumber: syz [ 1099.227104][ T8790] usb 6-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.238243][T16160] usb 1-1: config 0 descriptor?? [ 1099.249213][T16160] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 1099.256558][ T8790] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1099.256643][T16160] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1099.305126][ T8790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.341294][ T8790] usb 6-1: config 0 descriptor?? [ 1099.988580][T16160] usb 1-1: USB disconnect, device number 5 [ 1100.054690][T20698] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3669'. [ 1100.102354][ T8790] usbhid 6-1:0.22: can't add hid device: -71 [ 1100.109058][ T8790] usbhid 6-1:0.22: probe with driver usbhid failed with error -71 [ 1100.201495][ T8790] usb 6-1: USB disconnect, device number 123 [ 1101.909818][T20710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=20710 comm=syz.5.3674 [ 1101.922304][T20706] Scaler: ================= START STATUS ================= [ 1101.930008][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1101.978370][T20706] Scaler: ================== END STATUS ================== [ 1103.272675][ T30] audit: type=1400 audit(2000001394.492:1664): avc: denied { unmount } for pid=18402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1104.014867][T20735] netlink: 'syz.0.3678': attribute type 10 has an invalid length. [ 1104.050347][T20735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3678'. [ 1104.076249][T20735] bridge0: port 4(dummy0) entered blocking state [ 1104.219894][T20735] bridge0: port 4(dummy0) entered disabled state [ 1104.239052][T20735] dummy0: entered allmulticast mode [ 1104.246245][T20735] dummy0: entered promiscuous mode [ 1104.252115][T20735] bridge0: port 4(dummy0) entered blocking state [ 1104.258558][T20735] bridge0: port 4(dummy0) entered forwarding state [ 1104.577533][T20741] fuse: Bad value for 'fd' [ 1104.824737][T20746] wg1 speed is unknown, defaulting to 1000 [ 1104.830966][T20746] wg1 speed is unknown, defaulting to 1000 [ 1104.890430][T20746] wg1 speed is unknown, defaulting to 1000 [ 1105.080823][T20746] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1105.152867][T20757] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1105.162697][T20757] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1105.232965][T20756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3684'. [ 1105.789991][T20746] wg1 speed is unknown, defaulting to 1000 [ 1105.898577][T20746] wg1 speed is unknown, defaulting to 1000 [ 1105.905139][T20746] wg1 speed is unknown, defaulting to 1000 [ 1105.988576][T20746] wg1 speed is unknown, defaulting to 1000 [ 1106.038890][T20746] wg1 speed is unknown, defaulting to 1000 [ 1106.079644][T20757] siw: device registration error -23 [ 1106.179202][T17263] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1106.338569][T17263] usb 1-1: Using ep0 maxpacket: 16 [ 1106.760781][T17263] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.772403][T17263] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.895133][T17263] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1106.915140][T17263] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1106.922090][T17263] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1106.931592][T17263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.952125][T17263] usb 1-1: config 0 descriptor?? [ 1108.308468][T17263] usbhid 1-1:0.0: can't add hid device: -71 [ 1108.325394][T17263] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1108.409061][T20799] QAT: Stopping all acceleration devices. [ 1108.745076][T17263] usb 1-1: USB disconnect, device number 6 [ 1109.598324][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1109.751773][T20820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.794246][T20820] kernel read not supported for file /cpuacct.usage_percpu (pid: 20820 comm: syz.1.3705) [ 1109.807925][ T30] audit: type=1800 audit(2000001401.022:1665): pid=20820 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3705" name="cpuacct.usage_percpu" dev="mqueue" ino=77460 res=0 errno=0 [ 1109.813145][T20824] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.3704' sets config #2 [ 1110.240114][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.560521][T20836] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1111.813903][T20859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3713'. [ 1111.823207][T20859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3713'. [ 1111.836076][T20859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3713'. [ 1111.845549][T20859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3713'. [ 1111.930579][ T30] audit: type=1326 audit(2000001403.132:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1112.239786][T20856] tipc: Enabling of bearer rejected, failed to enable media [ 1112.286111][ T30] audit: type=1326 audit(2000001403.132:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1112.468114][T20873] trusted_key: encrypted_key: insufficient parameters specified [ 1112.598433][ T30] audit: type=1326 audit(2000001403.142:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1112.689768][ T30] audit: type=1326 audit(2000001403.412:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1112.741824][ T30] audit: type=1326 audit(2000001403.412:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1113.595022][T20886] kvm: pic: non byte write [ 1113.738232][T17263] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1113.963777][T17263] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1113.973165][T17263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.990378][T17263] usb 5-1: Product: syz [ 1113.995517][T17263] usb 5-1: Manufacturer: syz [ 1114.018091][T17263] usb 5-1: SerialNumber: syz [ 1114.264492][T17263] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1114.281017][T17263] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1114.293639][T17263] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1114.315988][T17263] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1114.354088][T17263] usb 5-1: USB disconnect, device number 9 [ 1114.484344][T20905] affs: No valid root block on device nullb0 [ 1114.861480][T20913] netlink: 'syz.0.3727': attribute type 39 has an invalid length. [ 1115.283075][T20918] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1116.058430][ T5889] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1116.410104][ T5889] usb 2-1: config index 0 descriptor too short (expected 8739, got 35) [ 1116.433443][ T5889] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1116.457605][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.487971][ T5889] usb 2-1: config 0 has no interface number 0 [ 1116.519647][ T5889] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1116.564390][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.577198][T20935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3734'. [ 1116.584339][ T5889] usb 2-1: Product: syz [ 1116.608249][ T5889] usb 2-1: Manufacturer: syz [ 1116.612955][ T5889] usb 2-1: SerialNumber: syz [ 1116.638346][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1116.646267][ T5889] usb 2-1: config 0 descriptor?? [ 1116.843167][T20940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3737'. [ 1116.869166][ T5889] cx231xx 2-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 1116.907605][ T5889] cx231xx 2-1:0.1: Not found matching IAD interface [ 1116.935178][ T5889] usb 2-1: USB disconnect, device number 11 [ 1117.388286][T20947] tipc: Started in network mode [ 1117.394945][T20947] tipc: Node identity 0000000000000000000000000000001, cluster identity 4711 [ 1117.406671][T20947] tipc: Enabling of bearer rejected, failed to enable media [ 1118.128235][ T8790] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1118.268236][ T8790] usb 1-1: device descriptor read/64, error -71 [ 1118.369965][T20954] siw: device registration error -23 [ 1118.518270][ T8790] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1118.678520][ T8790] usb 1-1: device descriptor read/64, error -71 [ 1118.808875][ T8790] usb usb1-port1: attempt power cycle [ 1119.188606][ T8790] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1119.325646][ T8790] usb 1-1: device descriptor read/8, error -71 [ 1119.380166][T20957] afs: Bad value for 'source' [ 1119.668630][ T8790] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1119.717415][ T8790] usb 1-1: device descriptor read/8, error -71 [ 1119.837649][T20944] kvm: pic: non byte write [ 1119.845351][ T8790] usb usb1-port1: unable to enumerate USB device [ 1120.018800][ T30] audit: type=1400 audit(2000001411.232:1671): avc: denied { unmount } for pid=18608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1121.252867][T20986] netlink: 'syz.0.3752': attribute type 2 has an invalid length. [ 1122.912985][T21009] netlink: 'syz.4.3758': attribute type 2 has an invalid length. [ 1122.921036][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3758'. [ 1123.536357][T21016] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3759'. [ 1124.345778][T21023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3762'. [ 1124.913981][T21027] bridge1: entered allmulticast mode [ 1124.935624][T21027] team0: Port device bridge1 added [ 1124.945964][T21029] bpf: Bad value for 'uid' [ 1126.666821][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3766'. [ 1126.698584][T21049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3766'. [ 1128.467297][T21072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3775'. [ 1128.468448][T21072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3775'. [ 1128.618779][T17263] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 1128.728113][ T30] audit: type=1400 audit(2000001419.942:1672): avc: denied { bind } for pid=21061 comm="syz.0.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1128.796586][ T30] audit: type=1400 audit(2000001420.002:1673): avc: denied { getopt } for pid=21061 comm="syz.0.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1128.796630][ T30] audit: type=1400 audit(2000001420.012:1674): avc: denied { write } for pid=21061 comm="syz.0.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1128.869632][T17263] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1128.869663][T17263] usb 6-1: config 0 has no interface number 0 [ 1128.869703][T17263] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1128.869726][T17263] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1128.869752][T17263] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1128.871018][T17263] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1128.871043][T17263] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1128.871061][T17263] usb 6-1: Product: syz [ 1128.871077][T17263] usb 6-1: SerialNumber: syz [ 1128.873339][T17263] usb 6-1: config 0 descriptor?? [ 1128.878847][T17263] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1128.879744][T17263] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input61 [ 1129.510213][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1129.724320][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1129.731626][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1129.738771][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1129.745867][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1129.752967][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1129.760597][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1129.767762][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1129.774915][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1129.781987][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1129.789287][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1129.810496][ T8790] usb 6-1: USB disconnect, device number 124 [ 1129.816591][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1129.920262][ T8790] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1130.618302][ T8790] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1132.160391][ T8790] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1132.170186][ T8790] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1132.181983][ T8790] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1132.194488][ T8790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.202622][ T8790] usb 2-1: Product: syz [ 1132.206832][ T8790] usb 2-1: Manufacturer: syz [ 1132.218391][ T8790] usb 2-1: SerialNumber: syz [ 1132.767491][ T8790] usb 2-1: config 0 descriptor?? [ 1133.438576][T21103] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1134.104019][ T8790] mos7840 2-1:0.0: required endpoints missing [ 1134.138710][ T8790] usb 2-1: USB disconnect, device number 12 [ 1134.423371][T21116] netlink: 'syz.0.3787': attribute type 10 has an invalid length. [ 1134.641825][T21116] veth0_vlan: left promiscuous mode [ 1134.725999][T21116] veth0_vlan: entered promiscuous mode [ 1134.787364][T21116] team0: Device veth0_vlan failed to register rx_handler [ 1135.894307][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3788'. [ 1135.926671][T21122] : entered promiscuous mode [ 1136.063650][ T30] audit: type=1400 audit(2000001427.282:1675): avc: denied { write } for pid=21135 comm="syz.0.3793" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1136.198227][ T5887] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1136.240773][T21138] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3794'. [ 1136.368491][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 1136.380342][ T5887] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1136.405237][ T5887] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 1136.414828][ T5887] usb 6-1: config 0 has no interface number 0 [ 1136.436936][ T5887] usb 6-1: New USB device found, idVendor=07c4, idProduct=a003, bcdDevice= 0.3c [ 1136.446366][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.454482][ T5887] usb 6-1: Product: syz [ 1136.458954][ T5887] usb 6-1: Manufacturer: syz [ 1136.468204][ T5887] usb 6-1: SerialNumber: syz [ 1136.677452][ T5887] usb 6-1: config 0 descriptor?? [ 1136.818475][T17263] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1137.108504][T17263] usb 2-1: Using ep0 maxpacket: 8 [ 1137.131479][T17263] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1137.272485][T17263] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 1137.281290][T21157] netlink: 'syz.0.3798': attribute type 4 has an invalid length. [ 1137.305557][T17263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.328486][T17263] usb 2-1: Product: syz [ 1137.332775][T17263] usb 2-1: Manufacturer: syz [ 1137.350521][T17263] usb 2-1: SerialNumber: syz [ 1137.654190][T21160] siw: device registration error -23 [ 1138.204748][T17263] kalmia 2-1:1.0: probe with driver kalmia failed with error -22 [ 1138.278740][T17263] usb 2-1: USB disconnect, device number 13 [ 1138.858003][ T5887] ums-datafab 6-1:0.93: USB Mass Storage device detected [ 1138.990824][ T5887] usb 6-1: USB disconnect, device number 125 [ 1139.216674][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3804'. [ 1139.287560][T21187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.568348][ T5887] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1139.598737][T21187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.606977][T21194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3808'. [ 1139.616827][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1139.748301][ T5887] usb 6-1: device descriptor read/64, error -32 [ 1139.868536][T17263] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1140.088661][ T5887] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1140.108226][T17263] usb 1-1: Using ep0 maxpacket: 8 [ 1140.208313][ T30] audit: type=1326 audit(2000001431.392:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1140.455087][T17263] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1140.468302][ T5887] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1140.481376][ T5887] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1140.488097][T17263] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 1140.488564][ T30] audit: type=1326 audit(2000001431.402:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1140.523064][ T30] audit: type=1326 audit(2000001431.402:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1140.549599][T17263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.564134][ T5887] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1140.583121][T17263] usb 1-1: Product: syz [ 1140.596878][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1140.607362][T17263] usb 1-1: Manufacturer: syz [ 1140.608279][ T30] audit: type=1326 audit(2000001431.402:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1140.651782][T17263] usb 1-1: SerialNumber: syz [ 1140.651787][ T30] audit: type=1326 audit(2000001431.402:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1140.651909][ T30] audit: type=1326 audit(2000001431.412:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1140.658232][ T5887] usb 6-1: Product: syz [ 1140.704198][ T30] audit: type=1326 audit(2000001431.782:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1140.735390][ T30] audit: type=1326 audit(2000001431.782:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32f39c819 code=0x7ffc0000 [ 1140.906807][ T5887] usb 6-1: Manufacturer: syz [ 1140.916901][ T5887] usb 6-1: SerialNumber: syz [ 1140.927659][ T5887] usb 6-1: config 0 descriptor?? [ 1140.941217][T21190] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1140.954527][ T5887] usb 6-1: selecting invalid altsetting 0 [ 1141.153371][ T30] audit: type=1400 audit(2000001432.372:1684): avc: denied { bind } for pid=21184 comm="syz.5.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1141.157863][ T5889] usb 6-1: USB disconnect, device number 127 [ 1141.603130][T21221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3812'. [ 1141.618399][T21221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3812'. [ 1141.927810][T17263] kalmia 1-1:1.0: probe with driver kalmia failed with error -22 [ 1141.940347][T17263] usb 1-1: USB disconnect, device number 11 [ 1142.639499][T21232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3815'. [ 1142.668357][T21232] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3815'. [ 1143.034450][ T1325] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1143.298341][ T5887] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1143.518320][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1144.028428][T17263] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1144.028435][ T1325] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1144.358222][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 1144.388837][ T5887] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1144.428247][ T5887] usb 1-1: config 0 has no interface number 0 [ 1144.434424][ T30] audit: type=1400 audit(2000001435.642:1685): avc: denied { append } for pid=21241 comm="syz.1.3819" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1144.467173][ T5887] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1144.583025][ T8790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1144.769739][ T5887] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1144.788449][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.796615][ T5887] usb 1-1: Product: syz [ 1144.808193][ T5887] usb 1-1: Manufacturer: syz [ 1144.812953][ T5887] usb 1-1: SerialNumber: syz [ 1144.859032][ T5887] usb 1-1: config 0 descriptor?? [ 1144.958549][T16160] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1145.309663][T21253] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 1145.309663][T21253] ÄUúeâ[¦ÓÎ%#s' [ 1145.348185][ T8790] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1145.407629][T21253] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3823'. [ 1145.440266][ T30] audit: type=1400 audit(2000001436.662:1686): avc: denied { accept } for pid=21252 comm="syz.3.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1145.636695][ T8790] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1145.649119][ T8790] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1145.681784][T21257] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3820'. [ 1145.686255][ T8790] usb 2-1: can't read configurations, error -71 [ 1145.708216][ T5887] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1145.721527][ T5887] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1145.730080][ T5887] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1145.737790][ T5887] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1145.754402][ T5887] usb 1-1: USB disconnect, device number 12 [ 1145.946502][ T30] audit: type=1400 audit(2000001437.132:1687): avc: denied { read } for pid=21246 comm="syz.4.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1146.078336][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1146.623468][ T8790] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1146.825018][ T8790] usb 2-1: config index 0 descriptor too short (expected 8739, got 35) [ 1147.404721][ T8790] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1147.446569][ T8790] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.450032][T21251] gfs2: not a GFS2 filesystem [ 1147.483799][ T8790] usb 2-1: config 0 has no interface number 0 [ 1147.491865][ T8790] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1147.508473][ T8790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.519529][ T8790] usb 2-1: Product: syz [ 1147.531405][ T8790] usb 2-1: Manufacturer: syz [ 1147.551100][ T8790] usb 2-1: SerialNumber: syz [ 1147.556636][T21278] kAFS: No cell specified [ 1147.570571][ T8790] usb 2-1: config 0 descriptor?? [ 1147.758319][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1147.823902][ T8790] cx231xx 2-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 1147.835096][ T8790] cx231xx 2-1:0.1: Not found matching IAD interface [ 1147.986376][ T8790] usb 2-1: USB disconnect, device number 15 [ 1148.917553][T17711] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1149.976060][T21300] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3834'. [ 1153.118868][T21322] 9p: Bad value for 'wfdno' [ 1153.506461][T21313] SELinux: failed to load policy [ 1153.926145][T21335] fuse: Bad value for 'fd' [ 1154.129447][T21329] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3841'. [ 1155.518641][ T30] audit: type=1400 audit(2000001446.742:1688): avc: denied { write } for pid=21340 comm="syz.1.3845" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1155.630592][ T5889] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1155.678293][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1155.832434][ T5889] usb 6-1: config index 0 descriptor too short (expected 8739, got 35) [ 1155.855192][ T5889] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1155.955080][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.997447][ T5889] usb 6-1: config 0 has no interface number 0 [ 1156.011788][ T5889] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1156.042448][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.065064][ T5889] usb 6-1: Product: syz [ 1156.079871][ T5889] usb 6-1: Manufacturer: syz [ 1156.096973][ T5889] usb 6-1: SerialNumber: syz [ 1156.110502][ T5889] usb 6-1: config 0 descriptor?? [ 1156.258224][T16160] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1156.484682][ T5889] cx231xx 6-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 1156.514569][ T5889] cx231xx 6-1:0.1: Not found matching IAD interface [ 1156.542729][ T5889] usb 6-1: USB disconnect, device number 2 [ 1156.571776][T16160] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.597475][T16160] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.634117][T16160] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1156.659875][T16160] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.778370][T16160] usb 1-1: Product: syz [ 1156.782567][T16160] usb 1-1: Manufacturer: syz [ 1156.793978][T16160] usb 1-1: SerialNumber: syz [ 1156.802022][T16160] usb 1-1: config 0 descriptor?? [ 1156.819839][T16160] uvcvideo 1-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 1156.826993][T16160] uvcvideo 1-1:0.0: No valid video chain found. [ 1157.122150][T16160] usb 1-1: USB disconnect, device number 13 [ 1157.667843][T21386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3855'. [ 1157.857211][T21386] tipc: Disabling bearer [ 1157.968181][T16160] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1158.289900][T16160] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.308174][T16160] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.317967][T16160] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1158.340707][T21398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3859'. [ 1158.388191][T16160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.407615][T16160] usb 5-1: config 0 descriptor?? [ 1158.438249][T21400] input: syz0 as /devices/virtual/input/input62 [ 1158.663631][T21411] fuse: Bad value for 'fd' [ 1158.877344][T16160] hid_parser_main: 371 callbacks suppressed [ 1158.877359][T16160] razer 0003:1532:010E.0045: unknown main item tag 0x0 [ 1158.910763][T16160] razer 0003:1532:010E.0045: item fetching failed at offset 1/5 [ 1159.082522][T21418] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1159.348067][T16160] razer 0003:1532:010E.0045: probe with driver razer failed with error -22 [ 1159.369383][T21416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=21416 comm=syz.5.3864 [ 1159.393259][T16160] usb 5-1: USB disconnect, device number 10 [ 1159.808273][T16160] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1159.973455][T16160] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1160.023151][T16160] usb 6-1: config 0 has no interface number 0 [ 1160.066516][T16160] usb 6-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1160.554049][T16160] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1160.593611][T16160] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1160.624050][T16160] usb 6-1: Product: syz [ 1160.639662][T16160] usb 6-1: SerialNumber: syz [ 1160.668753][T16160] usb 6-1: config 0 descriptor?? [ 1160.694660][T16160] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 1160.913255][T21423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.938545][T21423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.203523][T21446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.215178][T21446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.610501][T17263] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1162.803273][ T5887] usb 6-1: USB disconnect, device number 3 [ 1162.902155][T17263] usb 1-1: config index 0 descriptor too short (expected 8739, got 35) [ 1162.935146][T17263] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1162.965496][T17263] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.990718][T21467] binder: 21465:21467 ioctl 4048587b 200000000800 returned -22 [ 1163.005924][T17263] usb 1-1: config 0 has no interface number 0 [ 1163.017926][T17263] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1163.028586][T21467] binder: 21465:21467 ioctl 4018620d 0 returned -22 [ 1163.046338][T17263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.190241][T17263] usb 1-1: Product: syz [ 1163.200466][T17263] usb 1-1: Manufacturer: syz [ 1163.205070][T17263] usb 1-1: SerialNumber: syz [ 1163.217407][T17263] usb 1-1: config 0 descriptor?? [ 1163.434576][T17263] cx231xx 1-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 1163.455496][T17263] cx231xx 1-1:0.1: Not found matching IAD interface [ 1163.479368][T17263] usb 1-1: USB disconnect, device number 14 [ 1163.586277][T18127] Bluetooth: hci0: command 0x0406 tx timeout [ 1164.900028][ T8790] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1164.981756][ T5887] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1165.088249][ T8790] usb 5-1: Using ep0 maxpacket: 16 [ 1165.113163][ T8790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.133174][ T8790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.143381][ T8790] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1165.156395][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 1165.167944][ T8790] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1165.177947][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.188959][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.199093][ T8790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.224461][ T8790] usb 5-1: config 0 descriptor?? [ 1165.229757][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1165.243049][ T5887] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1165.252195][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.308185][T16160] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1165.495208][ T5887] usb 6-1: config 0 descriptor?? [ 1165.623193][T16160] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1165.638796][T16160] usb 2-1: not running at top speed; connect to a high speed hub [ 1165.654290][T16160] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.672692][T16160] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1165.699964][ T8790] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 1165.705089][T16160] usb 2-1: string descriptor 0 read error: -22 [ 1165.707405][ T8790] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 1165.723704][T16160] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1165.729578][ T8790] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 1165.738159][T16160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.756653][ T8790] microsoft 0003:045E:07DA.0046: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1165.760755][T16160] usb 2-1: 0:2 : does not exist [ 1165.813370][ T8790] microsoft 0003:045E:07DA.0046: no inputs found [ 1165.833134][ T8790] microsoft 0003:045E:07DA.0046: could not initialize ff, continuing anyway [ 1165.950658][ T8790] usb 5-1: USB disconnect, device number 11 [ 1166.254828][T16160] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1166.292579][T16160] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1166.338464][T16160] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1166.854063][T16160] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1167.013896][T16160] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1167.104382][T16160] usb 2-1: USB disconnect, device number 16 [ 1168.328280][T21525] netlink: 'syz.1.3892': attribute type 11 has an invalid length. [ 1169.345419][ T5887] usbhid 6-1:0.0: can't add hid device: -71 [ 1169.351544][ T5887] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1169.362057][ T5887] usb 6-1: USB disconnect, device number 4 [ 1169.658501][ T29] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1170.809807][ T29] usb 5-1: config index 0 descriptor too short (expected 8739, got 35) [ 1170.828542][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1170.836622][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.878373][ T29] usb 5-1: config 0 has no interface number 0 [ 1170.897359][ T29] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1170.917516][T17263] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1170.939890][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.048324][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1171.147750][T17263] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1171.719000][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.798716][T17263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.815205][ T29] usb 5-1: Product: syz [ 1171.819588][ T29] usb 5-1: Manufacturer: syz [ 1171.824221][ T29] usb 5-1: SerialNumber: syz [ 1171.832758][T17263] usb 6-1: config 0 descriptor?? [ 1171.872476][ T29] usb 5-1: config 0 descriptor?? [ 1171.986445][T21565] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3905'. [ 1172.050604][T21566] siw: device registration error -23 [ 1172.090175][ T29] cx231xx 5-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 1172.117017][ T29] cx231xx 5-1:0.1: Not found matching IAD interface [ 1172.161956][ T29] usb 5-1: USB disconnect, device number 12 [ 1172.266777][T17263] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1172.520604][ T30] audit: type=1400 audit(2000001463.742:1689): avc: denied { setopt } for pid=21547 comm="syz.5.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1173.710003][T17263] [drm:udl_init] *ERROR* Selecting channel failed [ 1173.860596][T17263] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1173.914619][T17263] [drm] Initialized udl on minor 2 [ 1173.951667][T17263] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1173.987660][T17263] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1173.994001][T21586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=21586 comm=syz.5.3909 [ 1174.054538][ T29] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1174.066837][T17263] usb 6-1: USB disconnect, device number 5 [ 1174.082969][ T29] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1174.299109][T16160] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1174.470774][T16160] usb 4-1: Using ep0 maxpacket: 8 [ 1174.478893][T16160] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.490763][T16160] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1174.535538][T16160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1174.565557][T16160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1174.594405][T16160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1174.619746][T16160] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1174.663045][T16160] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1174.682241][T16160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.704018][T16160] usb 4-1: Product: syz [ 1174.863784][T16160] usb 4-1: Manufacturer: syz [ 1174.914144][T16160] usb 4-1: SerialNumber: syz [ 1174.934270][T16160] usb 4-1: config 0 descriptor?? [ 1176.095460][T21587] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1176.127488][T16160] ati_remote 4-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 1176.565633][ T29] usb 4-1: USB disconnect, device number 98 [ 1176.808343][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1177.141401][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3916'. [ 1177.155235][T21607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3916'. [ 1177.760542][T21623] tipc: Enabling of bearer rejected, failed to enable media [ 1178.448343][T21628] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1178.460233][T18127] Bluetooth: hci5: Dropping invalid advertising data [ 1178.470491][T18127] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1178.580007][T21611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'. [ 1178.596405][T21611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3917'. [ 1178.993921][T21638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3922'. [ 1179.135009][T21643] wg1 speed is unknown, defaulting to 1000 [ 1179.329610][T21647] wg1 speed is unknown, defaulting to 1000 [ 1179.434579][ T30] audit: type=1400 audit(2000001470.642:1690): avc: denied { write } for pid=21649 comm="syz.1.3929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1180.234395][T21665] trusted_key: encrypted_key: insufficient parameters specified [ 1180.911776][T16160] kernel write not supported for file /uhid (pid: 16160 comm: kworker/0:3) [ 1181.252137][T21676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3933'. [ 1181.944748][T21673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.952368][T21673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.849705][T17263] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1183.043589][T17263] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1183.065173][T17263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.126447][T17263] usb 4-1: Product: syz [ 1183.156832][T17263] usb 4-1: Manufacturer: syz [ 1183.172109][T17263] usb 4-1: SerialNumber: syz [ 1183.207110][T21673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.238842][T21673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.375108][T21703] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3941'. [ 1183.388198][T17263] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1183.408289][ T5867] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1183.432175][T17263] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1183.450168][T17263] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1183.480707][T17263] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1183.525330][T17263] usb 4-1: USB disconnect, device number 99 [ 1183.559509][ T5867] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 1183.568540][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.589238][ T5867] usb 5-1: config 0 has no interface number 1 [ 1183.598592][ T5867] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1183.623910][ T5867] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1183.634590][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.654947][ T5867] usb 5-1: Product: syz [ 1183.659700][T21673] bridge1: left allmulticast mode [ 1183.669272][ T5867] usb 5-1: Manufacturer: syz [ 1183.673873][ T5867] usb 5-1: SerialNumber: syz [ 1183.705109][T10795] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.716181][T10795] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.735973][ T5867] usb 5-1: config 0 descriptor?? [ 1183.742687][T10795] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.782893][ T5867] usb-storage 5-1:0.127: USB Mass Storage device detected [ 1183.805848][T10795] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.851084][ T5867] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1183.946250][ T5867] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1183.994780][T21712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3944'. [ 1183.999098][ T5867] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1184.209716][ T5867] usb 5-1: USB disconnect, device number 13 [ 1184.754061][T21734] xt_hashlimit: max too large, truncated to 1048576 [ 1184.764801][T21735] FAULT_INJECTION: forcing a failure. [ 1184.764801][T21735] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.790614][T18047] udevd[18047]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1184.838983][T21735] CPU: 0 UID: 0 PID: 21735 Comm: syz.4.3947 Tainted: G L syzkaller #0 PREEMPT(full) [ 1184.839013][T21735] Tainted: [L]=SOFTLOCKUP [ 1184.839019][T21735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1184.839028][T21735] Call Trace: [ 1184.839034][T21735] [ 1184.839042][T21735] dump_stack_lvl+0x100/0x190 [ 1184.839073][T21735] should_fail_ex.cold+0x5/0xa [ 1184.839095][T21735] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1184.839121][T21735] should_failslab+0xc2/0x120 [ 1184.839138][T21735] __kmalloc_noprof+0xe0/0x850 [ 1184.839167][T21735] tomoyo_realpath_from_path+0xb6/0x690 [ 1184.839197][T21735] tomoyo_path_number_perm+0x23c/0x580 [ 1184.839216][T21735] ? tomoyo_path_number_perm+0x22e/0x580 [ 1184.839239][T21735] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1184.839285][T21735] ? find_held_lock+0x2b/0x80 [ 1184.839306][T21735] ? __fget_files+0x215/0x3d0 [ 1184.839323][T21735] ? hook_file_ioctl_common+0x146/0x410 [ 1184.839346][T21735] ? __fget_files+0x21f/0x3d0 [ 1184.839368][T21735] security_file_ioctl+0xd3/0x230 [ 1184.839394][T21735] __x64_sys_ioctl+0xb7/0x210 [ 1184.839425][T21735] do_syscall_64+0x106/0xf80 [ 1184.839450][T21735] ? clear_bhb_loop+0x40/0x90 [ 1184.839470][T21735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.839487][T21735] RIP: 0033:0x7f310e99c819 [ 1184.839501][T21735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.839516][T21735] RSP: 002b:00007f310f7fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.839534][T21735] RAX: ffffffffffffffda RBX: 00007f310ec15fa0 RCX: 00007f310e99c819 [ 1184.839545][T21735] RDX: 00002000000000c0 RSI: 00000000c0585605 RDI: 0000000000000003 [ 1184.839555][T21735] RBP: 00007f310f7fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.839564][T21735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.839574][T21735] R13: 00007f310ec16038 R14: 00007f310ec15fa0 R15: 00007ffd00dffdb8 [ 1184.839599][T21735] [ 1184.839605][T21735] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1184.978203][T17263] kernel write not supported for file /uhid (pid: 17263 comm: kworker/1:8) [ 1185.089521][T21740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3950'. [ 1186.397328][T21764] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 1186.420198][T21764] pim6reg1: persist enabled [ 1186.606750][T21764] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 1186.612513][T21764] pim6reg1: persist disabled [ 1186.683790][T21762] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3956'. [ 1186.898475][T21762] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3956'. [ 1188.666677][T21810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1188.711130][T21810] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3966'. [ 1188.721564][ T30] audit: type=1400 audit(2000001479.942:1691): avc: denied { ioctl } for pid=21809 comm="syz.5.3966" path="socket:[81729]" dev="sockfs" ino=81729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1188.758207][T17263] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1188.803585][T21816] FAULT_INJECTION: forcing a failure. [ 1188.803585][T21816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.888348][T21816] CPU: 0 UID: 0 PID: 21816 Comm: syz.1.3968 Tainted: G L syzkaller #0 PREEMPT(full) [ 1188.888378][T21816] Tainted: [L]=SOFTLOCKUP [ 1188.888385][T21816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1188.888412][T21816] Call Trace: [ 1188.888418][T21816] [ 1188.888426][T21816] dump_stack_lvl+0x100/0x190 [ 1188.888461][T21816] should_fail_ex.cold+0x5/0xa [ 1188.888485][T21816] _copy_from_user+0x2e/0xd0 [ 1188.888507][T21816] memdup_user+0x6b/0xe0 [ 1188.888525][T21816] strndup_user+0x78/0xe0 [ 1188.888543][T21816] __do_sys_fsconfig+0x7ec/0xcb0 [ 1188.888571][T21816] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1188.888593][T21816] ? fput+0x79/0x100 [ 1188.888625][T21816] do_syscall_64+0x106/0xf80 [ 1188.888650][T21816] ? clear_bhb_loop+0x40/0x90 [ 1188.888672][T21816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.888691][T21816] RIP: 0033:0x7ff32f39c819 [ 1188.888706][T21816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.888723][T21816] RSP: 002b:00007ff3302fb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1188.888740][T21816] RAX: ffffffffffffffda RBX: 00007ff32f615fa0 RCX: 00007ff32f39c819 [ 1188.888750][T21816] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 1188.888761][T21816] RBP: 00007ff3302fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.888771][T21816] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1188.888781][T21816] R13: 00007ff32f616038 R14: 00007ff32f615fa0 R15: 00007ffe4541dbf8 [ 1188.888806][T21816] [ 1190.159504][T21839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3972'. [ 1190.275232][T21844] netlink: 'syz.3.3972': attribute type 2 has an invalid length. [ 1190.285838][T21844] netlink: 'syz.3.3972': attribute type 1 has an invalid length. [ 1190.293678][T21844] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3972'. [ 1190.739131][T21852] netlink: 'syz.0.3974': attribute type 5 has an invalid length. [ 1190.750484][T21854] kAFS: No cell specified [ 1193.278181][ T5889] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1193.448306][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 1193.455395][ T5889] usb 4-1: config 2 has an invalid interface number: 118 but max is 0 [ 1193.480290][ T5889] usb 4-1: config 2 has no interface number 0 [ 1193.507078][ T5889] usb 4-1: config 2 interface 118 has no altsetting 0 [ 1193.536829][ T5889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=3000, bcdDevice=bb.cd [ 1193.555274][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.623054][ T5889] usb 4-1: Product: syz [ 1193.636450][ T5889] usb 4-1: Manufacturer: syz [ 1193.670161][ T5889] usb 4-1: SerialNumber: syz [ 1194.308171][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1194.398759][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1194.470315][ T10] usb 5-1: config 0 has an invalid interface number: 22 but max is 0 [ 1194.479515][ T10] usb 5-1: config 0 has no interface number 0 [ 1194.485654][ T10] usb 5-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.496963][ T10] usb 5-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.506913][ T10] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1194.516187][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.527048][ T10] usb 5-1: config 0 descriptor?? [ 1194.570486][ T29] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1194.584608][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1194.603732][ T29] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1194.620674][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.634843][ T29] usb 6-1: Product: syz [ 1194.642913][ T29] usb 6-1: Manufacturer: syz [ 1194.652009][ T29] usb 6-1: SerialNumber: syz [ 1194.664436][ T29] usb 6-1: config 0 descriptor?? [ 1195.030749][ T10] elo 0003:04E7:0030.0047: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input22 [ 1196.249773][ T29] mos7840 6-1:0.0: required endpoints missing [ 1196.305598][ T29] usb 6-1: USB disconnect, device number 7 [ 1196.377207][ T5889] usb 4-1: USB disconnect, device number 100 [ 1196.451023][ T30] audit: type=1400 audit(2000001487.672:1692): avc: denied { connect } for pid=21910 comm="syz.3.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1196.718942][T21919] comedi comedi3: comedi_config --init_data is deprecated [ 1197.261380][T21934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.292219][T21934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.539076][ T29] usb 5-1: USB disconnect, device number 14 [ 1198.346971][ T8790] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1198.588647][ T8790] usb 6-1: Using ep0 maxpacket: 8 [ 1199.743696][ T8790] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1199.773403][ T8790] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 1199.783160][ T8790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.793263][ T8790] usb 6-1: Product: syz [ 1199.797523][ T8790] usb 6-1: Manufacturer: syz [ 1199.809284][ T8790] usb 6-1: SerialNumber: syz [ 1200.049413][T21959] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1200.588326][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1200.721035][ T10] usb 5-1: device descriptor read/64, error -71 [ 1200.760819][T21976] siw: device registration error -23 [ 1200.816730][ T30] audit: type=1400 audit(2000001492.032:1693): avc: denied { write } for pid=21977 comm="syz.0.4012" path="socket:[82326]" dev="sockfs" ino=82326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1200.847739][ T8790] kalmia 6-1:1.0: probe with driver kalmia failed with error -22 [ 1200.891194][ T8790] usb 6-1: USB disconnect, device number 8 [ 1200.968195][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1201.120426][ T10] usb 5-1: device descriptor read/64, error -71 [ 1201.658605][ T10] usb usb5-port1: attempt power cycle [ 1202.348038][T21993] SELinux: ebitmap: map size 1701995264 does not match my size 64 (high bit was 191198305) [ 1202.369672][T21993] SELinux: failed to load policy [ 1202.666318][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1202.709020][ T10] usb 5-1: device descriptor read/8, error -71 [ 1203.683638][T22004] fuse: Unknown parameter 'use00000000000000000000' [ 1203.848170][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1204.051036][ T10] usb 5-1: device descriptor read/8, error -71 [ 1204.188379][ T10] usb usb5-port1: unable to enumerate USB device [ 1204.645933][T22028] kvm: pic: non byte write [ 1204.832928][T22033] wg1 speed is unknown, defaulting to 1000 [ 1205.090854][ T30] audit: type=1400 audit(2000001496.172:1694): avc: denied { connect } for pid=22025 comm="syz.5.4025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1205.173204][T22038] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1205.538396][T22027] kvm: pic: non byte write [ 1205.758914][T22039] kthread_run failed with err -4 [ 1206.094946][T22048] loop5: detected capacity change from 0 to 7 [ 1206.128191][ T8790] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1206.298185][T22048] Dev loop5: unable to read RDB block 7 [ 1206.306257][T22048] loop5: unable to read partition table [ 1206.321717][ T8790] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1206.324460][T22048] loop5: partition table beyond EOD, [ 1206.333049][ T8790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.344535][T22048] truncated [ 1206.366642][ T8790] usb 5-1: Product: syz [ 1206.379049][T22048] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1206.386864][ T8790] usb 5-1: Manufacturer: syz [ 1206.393463][ T8790] usb 5-1: SerialNumber: syz [ 1206.405714][ T8790] usb 5-1: config 0 descriptor?? [ 1206.616660][ T8790] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1206.645822][T22056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4028'. [ 1207.058207][ T29] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1207.073480][T22060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.082095][T22060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.688990][T22068] sp0: Synchronizing with TNC [ 1207.704767][ T29] usb 4-1: device descriptor read/all, error -61 [ 1207.770258][T22072] wg1 speed is unknown, defaulting to 1000 [ 1207.838200][ T29] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1207.998542][ T29] usb 4-1: device descriptor read/64, error -71 [ 1208.110251][ T29] usb usb4-port1: attempt power cycle [ 1208.134821][T22082] bond1: option xmit_hash_policy: invalid value (9) [ 1208.157855][T22082] bond1 (unregistering): Released all slaves [ 1208.451907][T22087] kvm: pic: non byte write [ 1208.738191][ T29] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1208.771740][ T29] usb 4-1: device descriptor read/8, error -71 [ 1209.021073][ T29] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1209.021332][T22096] kvm: pic: non byte write [ 1209.259217][ T8790] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1209.262058][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1209.286386][T15792] usb 5-1: USB disconnect, device number 19 [ 1209.298776][ T29] usb 4-1: device descriptor read/8, error -71 [ 1209.370975][T22099] FAULT_INJECTION: forcing a failure. [ 1209.370975][T22099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1209.384283][T22099] CPU: 1 UID: 0 PID: 22099 Comm: syz.4.4041 Tainted: G L syzkaller #0 PREEMPT(full) [ 1209.384300][T22099] Tainted: [L]=SOFTLOCKUP [ 1209.384304][T22099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1209.384311][T22099] Call Trace: [ 1209.384315][T22099] [ 1209.384319][T22099] dump_stack_lvl+0x100/0x190 [ 1209.384342][T22099] should_fail_ex.cold+0x5/0xa [ 1209.384357][T22099] _copy_from_user+0x2e/0xd0 [ 1209.384370][T22099] copy_msghdr_from_user+0x9f/0x4f0 [ 1209.384384][T22099] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1209.384403][T22099] ___sys_sendmsg+0x106/0x1e0 [ 1209.384416][T22099] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.384443][T22099] __sys_sendmsg+0x170/0x220 [ 1209.384459][T22099] ? __pfx___sys_sendmsg+0x10/0x10 [ 1209.384483][T22099] do_syscall_64+0x106/0xf80 [ 1209.384500][T22099] ? clear_bhb_loop+0x40/0x90 [ 1209.384513][T22099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.384524][T22099] RIP: 0033:0x7f310e99c819 [ 1209.384534][T22099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.384544][T22099] RSP: 002b:00007f310f7fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1209.384555][T22099] RAX: ffffffffffffffda RBX: 00007f310ec15fa0 RCX: 00007f310e99c819 [ 1209.384562][T22099] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1209.384568][T22099] RBP: 00007f310f7fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.384579][T22099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.384585][T22099] R13: 00007f310ec16038 R14: 00007f310ec15fa0 R15: 00007ffd00dffdb8 [ 1209.384599][T22099] [ 1209.555351][ T29] usb usb4-port1: unable to enumerate USB device [ 1209.568238][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1209.583337][ T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1209.591930][ T10] usb 1-1: config 0 has no interface number 0 [ 1209.598013][ T10] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1209.615075][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1209.626070][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.634131][ T10] usb 1-1: Product: syz [ 1209.638420][ T10] usb 1-1: Manufacturer: syz [ 1209.643027][ T10] usb 1-1: SerialNumber: syz [ 1209.672699][ T10] usb 1-1: config 0 descriptor?? [ 1209.678918][T22093] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1209.726948][T22107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4044'. [ 1209.848490][ T29] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1209.899442][T22093] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1210.000913][T18127] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1210.010216][T18127] Bluetooth: hci4: Injecting HCI hardware error event [ 1210.019660][T18127] Bluetooth: hci4: hardware error 0x00 [ 1210.042942][ T29] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1210.048161][ T5889] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1210.126144][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.136842][ T29] usb 5-1: Product: syz [ 1210.142671][ T29] usb 5-1: Manufacturer: syz [ 1210.147734][ T29] usb 5-1: SerialNumber: syz [ 1210.159680][ T29] usb 5-1: config 0 descriptor?? [ 1210.288923][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 1210.295843][ T5889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1210.296699][T22121] wg1 speed is unknown, defaulting to 1000 [ 1210.304660][ T5889] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 1210.322304][ T5889] usb 6-1: config 0 has no interface number 0 [ 1210.328837][ T5889] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1210.345361][ T5889] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1210.362823][ T5889] usb 6-1: config 0 interface 88 has no altsetting 0 [ 1210.381776][ T5889] usb 6-1: string descriptor 0 read error: -22 [ 1210.388200][ T5889] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1210.401372][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1210.423139][ T5889] usb 6-1: config 0 descriptor?? [ 1210.458961][ T5889] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input64 [ 1210.680313][T18275] udevd[18275]: Error opening device "/dev/input/event4": Input/output error [ 1210.692401][T18275] udevd[18275]: Unable to EVIOCGABS device "/dev/input/event4" [ 1210.714489][ T8790] usb 6-1: USB disconnect, device number 9 [ 1210.818496][T18275] udevd[18275]: Unable to EVIOCGABS device "/dev/input/event4" [ 1211.188260][ T8790] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1211.339203][ T8790] usb 2-1: Using ep0 maxpacket: 8 [ 1211.346711][ T8790] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1211.360020][ T8790] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 1211.369351][ T8790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.377467][ T8790] usb 2-1: Product: syz [ 1211.382245][ T8790] usb 2-1: Manufacturer: syz [ 1211.386954][ T8790] usb 2-1: SerialNumber: syz [ 1211.396765][ T29] usb 5-1: f81604_read: reg: 100e failed: -EPROTO [ 1211.425525][ T29] usb 5-1: f81604_read: reg: 200f failed: -EPROTO [ 1211.445512][ T29] usb 5-1: USB disconnect, device number 20 [ 1211.483396][ T29] usb 5-1: f81604_read: reg: 100f failed: -ENODEV [ 1211.534401][ T5476] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 1211.699077][ T8790] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1211.747879][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1211.890457][ T8790] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 1211.939438][ T29] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 1212.010066][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1212.011985][ T8790] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1212.028084][ T10] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1212.077886][ T10] usb 1-1: USB disconnect, device number 15 [ 1212.083459][ T8790] usb 2-1: USB disconnect, device number 17 [ 1212.086352][T18127] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1212.891740][T22160] wg1 speed is unknown, defaulting to 1000 [ 1214.117486][T22146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4051'. [ 1214.278216][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1214.438231][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1214.512903][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4056'. [ 1214.567357][T22179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4056'. [ 1214.779952][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1214.821765][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1214.885108][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1214.905698][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1214.988169][ T5889] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1215.057749][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1215.176264][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1215.228253][ T5889] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 1215.261118][ T5889] usb 2-1: config 0 has no interface number 0 [ 1215.290115][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1215.310512][ T5889] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 1215.878141][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.902975][ T5889] usb 2-1: string descriptor 0 read error: -71 [ 1215.921128][ T10] usb 1-1: config 0 descriptor?? [ 1215.935217][ T5889] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1216.001066][ T5889] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1216.067243][ T5889] usb 2-1: config 0 descriptor?? [ 1216.072548][T15792] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1216.084842][T22187] wg1 speed is unknown, defaulting to 1000 [ 1216.100632][ T5889] usb 2-1: can't set config #0, error -71 [ 1216.122177][ T5889] usb 2-1: USB disconnect, device number 18 [ 1216.253097][ T10] usb 1-1: can't set config #0, error -71 [ 1216.266371][ T10] usb 1-1: USB disconnect, device number 16 [ 1216.686658][T15792] usb 4-1: Using ep0 maxpacket: 16 [ 1216.693667][T15792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 138, changing to 11 [ 1216.720741][T15792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41510, setting to 1024 [ 1216.769911][T15792] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1216.793872][T15792] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1216.821583][T15792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.863507][T15792] usb 4-1: config 0 descriptor?? [ 1217.073041][T22216] overlayfs: missing 'lowerdir' [ 1217.308516][T15792] microsoft 0003:045E:07DA.0048: ignoring exceeding usage max [ 1217.373640][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1217.385295][T15792] microsoft 0003:045E:07DA.0048: ignoring exceeding usage max [ 1217.485742][T15792] microsoft 0003:045E:07DA.0048: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1217.571255][ T10] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1217.593214][T15792] microsoft 0003:045E:07DA.0048: no inputs found [ 1217.605257][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1217.619670][T15792] microsoft 0003:045E:07DA.0048: could not initialize ff, continuing anyway [ 1217.651182][ T10] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1217.684455][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.756717][ T10] usb 1-1: Product: syz [ 1217.784583][ T10] usb 1-1: Manufacturer: syz [ 1217.809932][ T10] usb 1-1: SerialNumber: syz [ 1217.843759][ T10] usb 1-1: config 0 descriptor?? [ 1217.869359][T22216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.895361][T22216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.994981][T22229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1218.011210][T22216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1218.484253][ T10] mos7840 1-1:0.0: required endpoints missing [ 1218.504334][ T10] usb 1-1: USB disconnect, device number 17 [ 1218.599381][ T8790] usb 4-1: USB disconnect, device number 105 [ 1219.951863][T22253] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1221.154120][T22262] macsec1: entered allmulticast mode [ 1221.304552][T22262] dummy0: entered allmulticast mode [ 1221.332156][T22262] dummy0: left allmulticast mode [ 1221.408380][ T8790] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1221.755431][ T8790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.825562][ T8790] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1221.999641][ T30] audit: type=1400 audit(2000001513.222:1695): avc: denied { lock } for pid=22272 comm="syz.1.4076" path="socket:[83899]" dev="sockfs" ino=83899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1222.392914][ T8790] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1222.461165][ T8790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.498967][ T8790] usb 4-1: config 0 descriptor?? [ 1222.588186][ T30] audit: type=1400 audit(2000001513.292:1696): avc: denied { remount } for pid=22272 comm="syz.1.4076" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1222.637666][ T8790] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1223.276412][T22290] siw: device registration error -23 [ 1223.618750][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1223.788042][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1223.795670][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1223.818206][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1223.841377][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1223.852777][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.873818][ T10] usb 1-1: Product: syz [ 1223.878446][ T10] usb 1-1: Manufacturer: syz [ 1223.878795][ T8790] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1223.900312][ T10] usb 1-1: SerialNumber: syz [ 1223.913567][ T10] usb 1-1: config 0 descriptor?? [ 1224.302283][T22308] fuse: Unknown parameter 'user_id00000000000000000000' [ 1224.601521][ T10] usb 1-1: USB disconnect, device number 18 [ 1224.661415][ T8790] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1224.675807][T17263] usb 4-1: USB disconnect, device number 106 [ 1224.814678][ T8790] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1224.965137][ T8790] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1224.975035][ T8790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.983423][ T8790] usb 5-1: Product: syz [ 1224.987628][ T8790] usb 5-1: Manufacturer: syz [ 1224.993009][ T8790] usb 5-1: SerialNumber: syz [ 1225.002563][ T8790] usb 5-1: config 0 descriptor?? [ 1226.881913][ T8790] mos7840 5-1:0.0: required endpoints missing [ 1226.881999][T22321] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1226.969496][ T8790] usb 5-1: USB disconnect, device number 21 [ 1227.251885][T22321] CIFS mount error: No usable UNC path provided in device string! [ 1227.251885][T22321] [ 1227.288554][T22321] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1227.523707][T22333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4089'. [ 1227.533026][T17263] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1227.564680][T22333] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4089'. [ 1227.633840][ T30] audit: type=1400 audit(2000001518.852:1697): avc: denied { compute_member } for pid=22339 comm="syz.1.4092" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1227.789930][T17263] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1227.858931][T17263] usb 4-1: not running at top speed; connect to a high speed hub [ 1227.888838][T17263] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.945608][T17263] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1228.033930][T17263] usb 4-1: string descriptor 0 read error: -22 [ 1228.136518][T17263] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1228.146467][T17263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.183834][T17263] usb 4-1: 0:2 : does not exist [ 1228.843280][T22365] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.4097'. [ 1228.918829][T22365] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1229.052560][T22333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1229.059814][T22333] IPv6: NLM_F_CREATE should be set when creating new route [ 1229.067037][T22333] IPv6: NLM_F_CREATE should be set when creating new route [ 1229.074310][T22333] IPv6: NLM_F_CREATE should be set when creating new route [ 1230.317768][T22383] kvm: pic: non byte write [ 1230.672115][T17263] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1230.693619][T17263] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1230.719391][T17263] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1230.758791][T17263] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1230.816684][T17263] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1230.879986][T17263] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1231.002755][T17263] usb 4-1: USB disconnect, device number 107 [ 1231.903929][T22410] binder: BINDER_SET_CONTEXT_MGR already set [ 1231.916323][T22410] binder: 22408:22410 ioctl 4018620d 200000000040 returned -16 [ 1232.438290][T15792] kernel write not supported for file /uhid (pid: 15792 comm: kworker/0:0) [ 1232.614561][T22427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1232.719400][T17263] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1232.990708][T17263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.007666][T17263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.068205][T17263] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1233.113444][T17263] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1233.128958][T17263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.150121][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.150239][T17263] usb 6-1: config 0 descriptor?? [ 1233.162784][T22433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4115'. [ 1233.188170][T22434] ip6t_srh: unknown srh match flags 4000 [ 1233.387779][ T30] audit: type=1400 audit(2000001524.602:1698): avc: denied { getopt } for pid=22437 comm="syz.0.4117" lport=51234 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1233.718629][T17263] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1233.726375][T17263] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1233.830496][T17263] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1233.861133][T17263] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1233.878235][T17263] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1233.886286][T17263] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1233.966595][T22441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1233.998685][T17263] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1234.054229][T17263] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1234.086348][T17263] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1234.113662][T17263] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1234.156833][T17263] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1235.788379][T17263] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1235.958163][T17263] usb 4-1: Using ep0 maxpacket: 16 [ 1235.999464][T17263] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.038368][T22463] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1236.091802][T17263] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1236.117913][T17263] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1236.152175][T17263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.208126][T17263] usb 4-1: config 0 descriptor?? [ 1236.293545][ T5887] usb 6-1: USB disconnect, device number 10 [ 1236.581924][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4123'. [ 1236.596906][T22466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4123'. [ 1237.066546][T22478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1237.130753][T17263] usbhid 4-1:0.0: can't add hid device: -71 [ 1237.153683][T17263] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1237.186715][T17263] usb 4-1: USB disconnect, device number 108 [ 1237.372884][T22480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4127'. [ 1237.518175][ T30] audit: type=1400 audit(2000001528.732:1699): avc: denied { mount } for pid=22482 comm="syz.1.4126" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1237.703324][T22493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4131'. [ 1237.718193][T22493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4131'. [ 1237.749351][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1237.938447][T15792] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1238.358189][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1238.365272][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1238.376504][ T10] usb 5-1: config 0 has no interface number 0 [ 1238.386521][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1238.420219][T22498] tipc: Trying to set illegal importance in message [ 1238.459045][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.468543][ T10] usb 5-1: Product: syz [ 1238.472960][ T10] usb 5-1: Manufacturer: syz [ 1238.480991][ T10] usb 5-1: SerialNumber: syz [ 1238.498175][T15792] usb 6-1: device descriptor read/64, error -71 [ 1238.507092][ T10] usb 5-1: config 0 descriptor?? [ 1238.550539][T22502] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1238.648962][T22502] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1238.758333][T15792] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1238.975417][T15792] usb 6-1: device descriptor read/64, error -71 [ 1239.088850][T15792] usb usb6-port1: attempt power cycle [ 1239.455540][T15792] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1239.478850][T15792] usb 6-1: device descriptor read/8, error -71 [ 1239.642245][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1239.653056][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1239.733614][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1239.761975][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1240.720314][T15792] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1240.750236][ T10] usb 5-1: USB disconnect, device number 22 [ 1240.872778][T15792] usb 6-1: device descriptor read/8, error -71 [ 1240.998614][T15792] usb usb6-port1: unable to enumerate USB device [ 1241.006050][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4140'. [ 1241.144336][T22532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4142'. [ 1241.298175][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1241.560435][T22540] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1241.916713][T22545] xt_hashlimit: size too large, truncated to 1048576 [ 1242.058345][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1242.068899][ T10] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.119396][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1242.126070][ T10] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1242.237384][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.269957][ T10] usb 5-1: config 0 descriptor?? [ 1242.274871][T22552] netlink: 'syz.5.4145': attribute type 11 has an invalid length. [ 1242.585737][T18127] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1242.594521][T18127] Bluetooth: hci3: Injecting HCI hardware error event [ 1242.670448][T18127] Bluetooth: hci3: hardware error 0x00 [ 1242.703559][T22553] kvm: pic: non byte write [ 1242.978762][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 1242.984774][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1243.005492][ T10] usb 5-1: USB disconnect, device number 23 [ 1243.199155][T22558] netlink: 'syz.5.4146': attribute type 13 has an invalid length. [ 1243.603228][T22565] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4150'. [ 1243.678814][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4148'. [ 1244.958185][T18127] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1244.991052][T22578] misc userio: No port type given on /dev/userio [ 1245.020809][ T30] audit: type=1400 audit(2000001536.242:1700): avc: denied { create } for pid=22576 comm="syz.4.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1245.021343][T22577] misc userio: No port type given on /dev/userio [ 1246.459604][T22600] netlink: 'syz.1.4156': attribute type 39 has an invalid length. [ 1246.637870][T22605] siw: device registration error -23 [ 1246.864723][T22610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=22610 comm=syz.5.4162 [ 1246.978201][T15792] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1247.158172][T15792] usb 1-1: Using ep0 maxpacket: 16 [ 1247.173012][T15792] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1247.271010][T15792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.330390][T15792] usb 1-1: Product: syz [ 1247.338242][T15792] usb 1-1: Manufacturer: syz [ 1247.349218][T15792] usb 1-1: SerialNumber: syz [ 1247.387621][T15792] usb 1-1: config 0 descriptor?? [ 1247.431227][T15792] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1247.467039][T15792] usb 1-1: Detected FT-X [ 1247.945465][T15792] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1247.951589][T22604] delete_channel: no stack [ 1247.954613][T15792] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1248.932584][T15792] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1248.945788][T15792] usb 1-1: USB disconnect, device number 19 [ 1248.954454][T15792] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1248.964627][T15792] ftdi_sio 1-1:0.0: device disconnected [ 1249.409847][ T30] audit: type=1400 audit(2000001540.622:1701): avc: denied { unmount } for pid=18608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1249.748246][T15792] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1250.249654][T15792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.259961][T15792] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1250.268995][T15792] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1250.283940][T15792] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1250.373325][T15792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.386916][T15792] usb 5-1: Product: syz [ 1250.391139][T15792] usb 5-1: Manufacturer: syz [ 1250.395851][T15792] usb 5-1: SerialNumber: syz [ 1250.409225][T15792] cdc_mbim 5-1:1.0: skipping garbage [ 1250.415583][T15792] usb 5-1: selecting invalid altsetting 1 [ 1250.419818][T22639] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4167'. [ 1250.629200][T22627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.670245][T22627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.700617][T15792] cdc_mbim 5-1:1.0: bind() failure [ 1250.708247][T22648] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4175'. [ 1250.737630][T15792] usb 5-1: USB disconnect, device number 24 [ 1253.088485][T22673] siw: device registration error -23 [ 1253.392589][ T5887] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1253.550510][ T5887] usb 4-1: config 0 has no interfaces? [ 1253.556068][ T5887] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1253.569442][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.593825][ T5887] usb 4-1: config 0 descriptor?? [ 1253.608260][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1253.813825][T22674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.832629][T22674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.937587][T16160] usb 4-1: USB disconnect, device number 109 [ 1254.986647][T16160] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1255.204115][T22694] kvm: pic: non byte write [ 1255.350795][T16160] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1255.359045][T16160] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1255.376699][T16160] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1255.388267][T16160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.398400][T16160] usb 4-1: Product: syz [ 1255.402817][T16160] usb 4-1: Manufacturer: syz [ 1255.407652][T16160] usb 4-1: SerialNumber: syz [ 1255.442587][T16160] rtl8150 4-1:1.0: couldn't find required endpoints [ 1255.467888][T16160] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1255.974307][T16160] usb 4-1: USB disconnect, device number 110 [ 1257.264415][T22699] kvm: pic: non byte write [ 1258.812141][ T30] audit: type=1804 audit(2000001550.022:1702): pid=22725 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.4195" name="bus" dev="ramfs" ino=87108 res=1 errno=0 [ 1259.154635][ T30] audit: type=1400 audit(2000001550.372:1703): avc: denied { map } for pid=22729 comm="syz.0.4196" path="socket:[87115]" dev="sockfs" ino=87115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1259.328202][ T30] audit: type=1400 audit(2000001550.372:1704): avc: denied { read } for pid=22729 comm="syz.0.4196" path="socket:[87115]" dev="sockfs" ino=87115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1259.431876][T16160] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1259.678291][T17263] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1260.051812][T16160] usb 1-1: not running at top speed; connect to a high speed hub [ 1260.063849][T17263] usb 6-1: Using ep0 maxpacket: 8 [ 1260.072142][T16160] usb 1-1: config 128 has an invalid interface number: 80 but max is 0 [ 1260.091728][T17263] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1260.099414][T16160] usb 1-1: config 128 has no interface number 0 [ 1260.099455][T16160] usb 1-1: config 128 interface 80 altsetting 196 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1260.099483][T16160] usb 1-1: config 128 interface 80 altsetting 196 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1260.099507][T16160] usb 1-1: config 128 interface 80 altsetting 196 has a duplicate endpoint with address 0x4, skipping [ 1260.099524][T16160] usb 1-1: config 128 interface 80 altsetting 196 has a duplicate endpoint with address 0x4, skipping [ 1260.099543][T16160] usb 1-1: config 128 interface 80 altsetting 196 endpoint 0x1 has invalid maxpacket 12376, setting to 64 [ 1260.236994][T17263] usb 6-1: config 6 interface 0 has no altsetting 0 [ 1260.287350][T22742] siw: device registration error -23 [ 1260.298559][T17263] usb 6-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=7e.1c [ 1260.308195][T16160] usb 1-1: config 128 interface 80 altsetting 196 has a duplicate endpoint with address 0xB, skipping [ 1260.355829][T17263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.375196][T16160] usb 1-1: config 128 interface 80 altsetting 196 has a duplicate endpoint with address 0xB, skipping [ 1260.385272][T17263] usb 6-1: Product: syz [ 1260.438948][T17263] usb 6-1: Manufacturer: syz [ 1260.451296][T17263] usb 6-1: SerialNumber: syz [ 1260.467047][T16160] usb 1-1: config 128 interface 80 altsetting 196 has a duplicate endpoint with address 0x2, skipping [ 1260.497356][T16160] usb 1-1: config 128 interface 80 altsetting 196 has a duplicate endpoint with address 0x1, skipping [ 1260.521546][T16160] usb 1-1: config 128 interface 80 altsetting 196 has a duplicate endpoint with address 0x5, skipping [ 1260.635605][T16160] usb 1-1: config 128 interface 80 altsetting 196 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1260.651029][T16160] usb 1-1: config 128 interface 80 has no altsetting 0 [ 1260.660262][T16160] usb 1-1: New USB device found, idVendor=19d2, idProduct=0073, bcdDevice=fd.a8 [ 1260.708158][T16160] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.718894][T16160] usb 1-1: Product: syz [ 1261.293903][T17263] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 1261.305858][T16160] usb 1-1: Manufacturer: syz [ 1261.311335][T17263] pwc: Failed to set LED on/off time (-71) [ 1261.313854][T16160] usb 1-1: SerialNumber: syz [ 1261.328894][T17263] pwc: send_video_command error -71 [ 1261.334251][T17263] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1261.432637][T17263] Philips webcam 6-1:6.0: probe with driver Philips webcam failed with error -71 [ 1261.488665][T17263] usb 6-1: USB disconnect, device number 15 [ 1261.568325][T16160] option 1-1:128.80: GSM modem (1-port) converter detected [ 1261.620507][T22752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4202'. [ 1261.629815][T16160] usb 1-1: USB disconnect, device number 20 [ 1261.921240][T22752] netlink: 'syz.1.4202': attribute type 1 has an invalid length. [ 1261.934716][T16160] option 1-1:128.80: device disconnected [ 1262.268974][T22759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.684764][T22769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4207'. [ 1264.328785][ T30] audit: type=1400 audit(2000001555.552:1705): avc: denied { getopt } for pid=22779 comm="syz.1.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1264.496492][T22790] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1265.305465][T22795] tipc: Started in network mode [ 1265.328546][T22792] kvm: pic: non byte write [ 1265.337657][T22795] tipc: Node identity 4e7b8b50e521, cluster identity 4711 [ 1265.391323][T22795] tipc: Enabled bearer , priority 0 [ 1265.569884][T22798] syzkaller0: entered promiscuous mode [ 1265.648439][T22798] syzkaller0: entered allmulticast mode [ 1265.903059][T22795] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4213'. [ 1267.243933][T22798] tipc: Resetting bearer [ 1268.185023][T22794] tipc: Resetting bearer [ 1268.234989][T22794] tipc: Disabling bearer [ 1268.292720][T15792] tipc: Node number set to 2874837840 [ 1268.944358][T22823] FAULT_INJECTION: forcing a failure. [ 1268.944358][T22823] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.959926][T22823] CPU: 1 UID: 0 PID: 22823 Comm: syz.4.4222 Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.959953][T22823] Tainted: [L]=SOFTLOCKUP [ 1268.959959][T22823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1268.959969][T22823] Call Trace: [ 1268.959975][T22823] [ 1268.959982][T22823] dump_stack_lvl+0x100/0x190 [ 1268.960014][T22823] should_fail_ex.cold+0x5/0xa [ 1268.960039][T22823] should_failslab+0xc2/0x120 [ 1268.960058][T22823] __kvmalloc_node_noprof+0xfa/0xa00 [ 1268.960092][T22823] ? traverse.part.0.constprop.0+0x397/0x650 [ 1268.960119][T22823] traverse.part.0.constprop.0+0x397/0x650 [ 1268.960139][T22823] ? __pfx__kstrtoull+0x10/0x10 [ 1268.960171][T22823] seq_read_iter+0x93f/0x1270 [ 1268.960191][T22823] ? __lock_acquire+0x4a5/0x2630 [ 1268.960216][T22823] seq_read+0x33b/0x4c0 [ 1268.960236][T22823] ? __pfx_seq_read+0x10/0x10 [ 1268.960264][T22823] ? selinux_file_permission+0x8f/0x6d0 [ 1268.960296][T22823] ? __pfx_seq_read+0x10/0x10 [ 1268.960314][T22823] proc_reg_read+0x240/0x330 [ 1268.960334][T22823] ? __pfx_proc_reg_read+0x10/0x10 [ 1268.960353][T22823] vfs_read+0x1e4/0xb30 [ 1268.960374][T22823] ? __pfx_vfs_read+0x10/0x10 [ 1268.960389][T22823] ? find_held_lock+0x2b/0x80 [ 1268.960412][T22823] ? __fget_files+0x215/0x3d0 [ 1268.960431][T22823] ? __fget_files+0x215/0x3d0 [ 1268.960455][T22823] ? __fget_files+0x21f/0x3d0 [ 1268.960482][T22823] __x64_sys_pread64+0x1eb/0x250 [ 1268.960501][T22823] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1268.960527][T22823] do_syscall_64+0x106/0xf80 [ 1268.960554][T22823] ? clear_bhb_loop+0x40/0x90 [ 1268.960577][T22823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.960595][T22823] RIP: 0033:0x7f310e99c819 [ 1268.960611][T22823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.960629][T22823] RSP: 002b:00007f310f7fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1268.960646][T22823] RAX: ffffffffffffffda RBX: 00007f310ec15fa0 RCX: 00007f310e99c819 [ 1268.960658][T22823] RDX: 0000000000018fd4 RSI: 0000200000000080 RDI: 0000000000000003 [ 1268.960669][T22823] RBP: 00007f310f7fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.960679][T22823] R10: 0000000000000c2a R11: 0000000000000246 R12: 0000000000000001 [ 1268.960689][T22823] R13: 00007f310ec16038 R14: 00007f310ec15fa0 R15: 00007ffd00dffdb8 [ 1268.960712][T22823] [ 1269.304015][T22826] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4221'. [ 1269.444040][T22826] netlink: 'syz.5.4221': attribute type 7 has an invalid length. [ 1269.483561][T22826] netlink: 'syz.5.4221': attribute type 8 has an invalid length. [ 1270.027636][T22838] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1270.694056][T22849] openvswitch: netlink: Unknown key attributes 2 [ 1271.591800][T22859] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1271.695233][T22863] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 1272.419328][ T5887] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1272.580014][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 1272.594255][ T5887] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.620137][ T5887] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1272.636911][ T5887] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1272.651507][ T5887] usb 6-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1272.665147][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.904170][ T5887] usb 6-1: config 0 descriptor?? [ 1273.429018][T17263] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1273.618200][T17263] usb 5-1: Using ep0 maxpacket: 8 [ 1273.632736][T17263] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1273.753462][T22895] netlink: 'syz.1.4241': attribute type 10 has an invalid length. [ 1274.325307][T17263] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 1274.335175][T17263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.634567][T17263] usb 5-1: Product: syz [ 1274.691580][ T5887] hid_parser_main: 5 callbacks suppressed [ 1274.691601][ T5887] steelseries 0003:1038:12C2.004A: unknown main item tag 0x0 [ 1274.704936][T17263] usb 5-1: Manufacturer: syz [ 1274.709693][T17263] usb 5-1: SerialNumber: syz [ 1274.717283][ T5887] steelseries 0003:1038:12C2.004A: unknown main item tag 0x0 [ 1274.727591][ T5887] steelseries 0003:1038:12C2.004A: unknown main item tag 0x0 [ 1274.740798][ T5887] steelseries 0003:1038:12C2.004A: unknown main item tag 0x0 [ 1274.749664][ T5887] steelseries 0003:1038:12C2.004A: unknown main item tag 0x0 [ 1274.757353][ T5887] steelseries 0003:1038:12C2.004A: unknown main item tag 0x0 [ 1274.887367][ T5887] steelseries 0003:1038:12C2.004A: unknown main item tag 0x0 [ 1274.898809][ T5887] steelseries 0003:1038:12C2.004A: unknown main item tag 0x0 [ 1274.918252][ T5887] steelseries 0003:1038:12C2.004A: unknown main item tag 0x0 [ 1274.938290][ T5887] steelseries 0003:1038:12C2.004A: unknown main item tag 0x0 [ 1275.012626][T22901] xt_hashlimit: size too large, truncated to 1048576 [ 1275.364460][T22912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4245'. [ 1275.441632][T22885] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1275.453665][ T5887] IPVS: starting estimator thread 0... [ 1275.468055][ T30] audit: type=1326 audit(2000001566.682:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22911 comm="syz.3.4245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f143199c819 code=0x0 [ 1275.514332][T22912] team0: entered promiscuous mode [ 1275.531295][T22912] team_slave_0: entered promiscuous mode [ 1275.537273][T22912] team_slave_1: entered promiscuous mode [ 1275.544399][T22912] .`: entered promiscuous mode [ 1275.553184][T22912] bond_slave_0: entered promiscuous mode [ 1275.561077][T22912] bond_slave_1: entered promiscuous mode [ 1275.567051][T22912] bridge0: entered promiscuous mode [ 1275.572718][T22912] team0: entered allmulticast mode [ 1275.578018][T22912] team_slave_0: entered allmulticast mode [ 1275.597907][T22912] team_slave_1: entered allmulticast mode [ 1275.598224][T22914] IPVS: using max 44 ests per chain, 105600 per kthread [ 1275.611230][T22912] .`: entered allmulticast mode [ 1275.616141][T22912] bond_slave_0: entered allmulticast mode [ 1275.627047][T22912] bond_slave_1: entered allmulticast mode [ 1275.640569][T22912] bridge0: entered allmulticast mode [ 1275.678807][T22912] team0: Cannot enslave team device to itself [ 1275.969758][T17263] kalmia 5-1:1.0: probe with driver kalmia failed with error -22 [ 1275.983924][T17263] usb 5-1: USB disconnect, device number 25 [ 1276.538495][T17263] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1276.719963][T17263] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1276.729601][T17263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.740833][T17263] usb 5-1: config 0 descriptor?? [ 1276.749424][T17263] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1276.946839][ T5887] usb 6-1: USB disconnect, device number 16 [ 1276.960554][T17263] gspca_cpia1: usb_control_msg 05, error -71 [ 1276.977474][T17263] gspca_cpia1: usb_control_msg 01, error -71 [ 1278.083977][T17263] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1278.093626][T17263] usb 5-1: USB disconnect, device number 26 [ 1278.921602][T22949] netlink: 'syz.0.4255': attribute type 5 has an invalid length. [ 1279.361339][T22954] FAULT_INJECTION: forcing a failure. [ 1279.361339][T22954] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.374393][T22954] CPU: 1 UID: 0 PID: 22954 Comm: syz.0.4257 Tainted: G L syzkaller #0 PREEMPT(full) [ 1279.374421][T22954] Tainted: [L]=SOFTLOCKUP [ 1279.374428][T22954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1279.374439][T22954] Call Trace: [ 1279.374445][T22954] [ 1279.374451][T22954] dump_stack_lvl+0x100/0x190 [ 1279.374483][T22954] should_fail_ex.cold+0x5/0xa [ 1279.374508][T22954] should_failslab+0xc2/0x120 [ 1279.374527][T22954] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1279.374555][T22954] ? __alloc_skb+0x140/0x710 [ 1279.374583][T22954] __alloc_skb+0x140/0x710 [ 1279.374605][T22954] ? __alloc_skb+0x5b7/0x710 [ 1279.374628][T22954] ? __pfx___alloc_skb+0x10/0x10 [ 1279.374658][T22954] netlink_alloc_large_skb+0x69/0x150 [ 1279.374683][T22954] netlink_sendmsg+0x680/0xda0 [ 1279.374700][T22954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1279.374724][T22954] ? __might_fault+0x50/0x140 [ 1279.374756][T22954] ____sys_sendmsg+0x9e1/0xb70 [ 1279.374773][T22954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1279.374801][T22954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1279.374831][T22954] ___sys_sendmsg+0x190/0x1e0 [ 1279.374853][T22954] ? __pfx____sys_sendmsg+0x10/0x10 [ 1279.374907][T22954] __sys_sendmsg+0x170/0x220 [ 1279.374933][T22954] ? __pfx___sys_sendmsg+0x10/0x10 [ 1279.374973][T22954] do_syscall_64+0x106/0xf80 [ 1279.375000][T22954] ? clear_bhb_loop+0x40/0x90 [ 1279.375022][T22954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.375041][T22954] RIP: 0033:0x7f8d9c59c819 [ 1279.375056][T22954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.375073][T22954] RSP: 002b:00007f8d9d37d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1279.375090][T22954] RAX: ffffffffffffffda RBX: 00007f8d9c815fa0 RCX: 00007f8d9c59c819 [ 1279.375101][T22954] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1279.375111][T22954] RBP: 00007f8d9d37d090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.375122][T22954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.375132][T22954] R13: 00007f8d9c816038 R14: 00007f8d9c815fa0 R15: 00007ffeecaabf38 [ 1279.375155][T22954] [ 1280.497833][T16160] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1280.612085][T22968] kAFS: No cell specified [ 1280.668158][T16160] usb 4-1: Using ep0 maxpacket: 16 [ 1280.675909][T16160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 138, changing to 11 [ 1280.754827][T16160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41510, setting to 1024 [ 1280.776999][T16160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1280.811129][T16160] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1280.835698][T16160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.858445][T16160] usb 4-1: config 0 descriptor?? [ 1281.292802][T16160] microsoft 0003:045E:07DA.004B: ignoring exceeding usage max [ 1281.314618][T16160] microsoft 0003:045E:07DA.004B: ignoring exceeding usage max [ 1281.338983][T16160] microsoft 0003:045E:07DA.004B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1281.351845][T16160] microsoft 0003:045E:07DA.004B: no inputs found [ 1281.358911][T16160] microsoft 0003:045E:07DA.004B: could not initialize ff, continuing anyway [ 1281.368234][T15792] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1281.478147][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1281.548594][T15792] usb 5-1: Using ep0 maxpacket: 32 [ 1281.573547][T15792] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1281.582094][T15792] usb 5-1: config 0 has no interface number 0 [ 1281.618264][T15792] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1281.650292][ T10] usb 1-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 1281.666162][T15792] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1281.745236][T22984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4266'. [ 1281.755864][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1281.972760][T15792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.984007][T15792] usb 5-1: Product: syz [ 1281.989394][T15792] usb 5-1: Manufacturer: syz [ 1281.994078][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1282.012632][T15792] usb 5-1: SerialNumber: syz [ 1282.017934][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.030954][T15792] usb 5-1: config 0 descriptor?? [ 1282.038762][ T10] usb 1-1: config 0 descriptor?? [ 1282.048466][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1282.056360][T22975] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1282.096161][T22986] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4267'. [ 1282.279648][T22975] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1282.629589][T17263] usb 4-1: USB disconnect, device number 111 [ 1283.727957][T23008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.737327][T23008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.757744][T23008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4265'. [ 1284.520517][T23014] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1284.919048][T17263] usb 1-1: USB disconnect, device number 21 [ 1285.411942][T15792] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1285.422718][T15792] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1285.433693][T15792] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1285.496351][T15792] usb 5-1: USB disconnect, device number 27 [ 1285.565027][T23030] tmpfs: Unknown parameter 'mpwl' [ 1285.667358][T23034] kAFS: unparsable volume name [ 1286.031512][T23039] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1286.308528][T17263] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1286.360994][T23037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4280'. [ 1286.539724][T17263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.556116][T17263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.626227][T17263] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1286.668659][T17263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.738028][T17263] usb 4-1: config 0 descriptor?? [ 1286.998587][ T5887] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1287.213997][ T5887] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 1287.227329][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.273100][ T5887] usb 5-1: config 0 has no interfaces? [ 1287.294747][ T5887] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1287.490068][T17263] usbhid 4-1:0.0: can't add hid device: -71 [ 1287.528787][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.537636][T17263] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1287.572904][ T5887] usb 5-1: config 0 descriptor?? [ 1287.960739][T17263] usb 4-1: USB disconnect, device number 112 [ 1288.983506][T23084] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4293'. [ 1289.347249][ T30] audit: type=1800 audit(2000001580.562:1707): pid=23092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4295" name="file1" dev="overlay" ino=651 res=0 errno=0 [ 1289.698249][ T10] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1290.424403][ T5887] usb 5-1: string descriptor 0 read error: -71 [ 1290.438971][ T5887] usb 5-1: USB disconnect, device number 28 [ 1290.465129][T23104] syzkaller0: entered promiscuous mode [ 1290.588341][T23106] simple: basic_1 [ 1290.592347][T23106] simple: basic_2 [ 1290.596017][T23106] simple: basic_3 [ 1290.599713][T23106] simple: basic_4 [ 1290.603370][T23106] simple: basic_5 [ 1290.607020][T23106] simple: basic_6 [ 1290.610682][T23106] simple: basic_7 [ 1290.614330][T23106] simple: basic_8 [ 1290.617981][T23106] simple: basic_9 [ 1290.621640][T23106] simple: basic_10 [ 1290.625381][T23106] simple: basic_11 [ 1290.629132][T23106] simple: basic_12 [ 1290.632877][T23106] simple: basic_13 [ 1290.636610][T23106] simple: basic_14 [ 1290.640376][T23106] simple: basic_15 [ 1290.644117][T23106] simple: basic_16 [ 1290.647847][T23106] simple: basic_17 [ 1290.651618][T23106] 0: reclassify loop, rule prio 0, protocol 800 [ 1290.863751][ T30] audit: type=1400 audit(2000001582.032:1708): avc: denied { connect } for pid=23094 comm="syz.1.4297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1290.958258][T23104] syzkaller0: entered allmulticast mode [ 1292.466581][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1292.611445][ T10] usb 2-1: no configurations [ 1292.616071][ T10] usb 2-1: can't read configurations, error -22 [ 1292.827158][T23129] kvm: pic: non byte write [ 1292.841678][T17263] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1292.998197][T17263] usb 5-1: Using ep0 maxpacket: 16 [ 1293.016240][T17263] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 1293.028127][T17263] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1293.036184][T17263] usb 5-1: Product: syz [ 1293.043841][T17263] usb 5-1: SerialNumber: syz [ 1293.067059][T17263] usb 5-1: config 0 descriptor?? [ 1293.080230][T17263] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1293.097065][T17263] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1293.114720][T17263] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1293.128453][T17263] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1294.559877][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.778357][T23168] kvm: pic: non byte write [ 1294.979932][T23172] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4316'. [ 1295.077261][T23177] netlink: 'syz.1.4317': attribute type 10 has an invalid length. [ 1295.085606][T23177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4317'. [ 1295.094807][T23177] bridge0: port 3(dummy0) entered blocking state [ 1295.101303][T23177] bridge0: port 3(dummy0) entered disabled state [ 1295.107977][T23177] dummy0: entered allmulticast mode [ 1295.116171][T23177] dummy0: entered promiscuous mode [ 1295.163321][T23177] netlink: 'syz.1.4317': attribute type 23 has an invalid length. [ 1296.090431][T15792] usb 5-1: USB disconnect, device number 29 [ 1296.415444][T23190] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1296.896146][T23210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4324'. [ 1296.905418][T23210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4324'. [ 1297.374449][T23214] comedi comedi0: Minor 3 could not be opened [ 1299.950397][T23247] kthread_run failed with err -4 [ 1300.117493][T23255] netlink: 'syz.3.4334': attribute type 3 has an invalid length. [ 1300.518168][T18127] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1300.527802][T18127] Bluetooth: hci0: command 0x0406 tx timeout [ 1300.628275][T23264] kvm: pic: non byte write [ 1300.829579][T23273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4339'. [ 1301.198324][T23268] kvm: pic: non byte write [ 1302.022775][T23282] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1307.245597][T23309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=23309 comm=syz.4.4348 [ 1307.482979][T23305] kvm: pic: non byte write [ 1307.837280][T23313] misc userio: The device must be registered before sending interrupts [ 1308.052566][T17263] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1308.587081][T17263] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 1308.747990][T23326] kvm: pic: non byte write [ 1308.839252][T17263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.979384][T17263] usb 6-1: Product: syz [ 1308.998554][T17263] usb 6-1: Manufacturer: syz [ 1309.003244][T17263] usb 6-1: SerialNumber: syz [ 1309.029629][T17263] usb 6-1: config 0 descriptor?? [ 1309.040040][T17263] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1309.055089][T17263] usb 6-1: Detected FT232HP [ 1309.378574][ T5887] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1309.514653][T23330] kvm: pic: non byte write [ 1309.599043][ T29] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1309.662545][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.723238][ T5887] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1309.739237][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.772259][ T5887] usb 2-1: config 0 descriptor?? [ 1309.811870][T17263] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1309.825803][T17263] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1309.835076][ T5887] pwc: Askey VC010 type 2 USB webcam detected. [ 1309.843890][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1309.849910][T17263] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1309.872620][ T29] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.899691][T17263] usb 6-1: USB disconnect, device number 17 [ 1309.908280][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1309.914975][ T29] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1309.924500][ C1] ------------[ cut here ]------------ [ 1309.924546][ C1] ODEBUG: free active (active state 0) object: ffff88802bb1cc90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1309.924584][ C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: kworker/1:1/29 [ 1309.924624][ C1] Modules linked in: [ 1309.924682][ C1] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1309.924712][ C1] Tainted: [L]=SOFTLOCKUP [ 1309.924720][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1309.924735][ C1] Workqueue: usb_hub_wq hub_event [ 1309.924766][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1309.924796][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 05 e5 0b 41 56 48 8b 14 dd e0 2f 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c c2 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1309.924817][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 1309.924834][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1309.924848][ C1] RDX: ffffffff8c1b2f20 RSI: ffffffff8c1b2b40 RDI: ffffffff90e44950 [ 1309.924884][ C1] RBP: 0000000000000001 R08: ffff88802bb1cc90 R09: ffffffff8bb2bba0 [ 1309.924898][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2b40 [ 1309.924912][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7ce7b0 R15: ffffc90000a08b38 [ 1309.924926][ C1] FS: 0000000000000000(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 1309.924946][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1309.924970][ C1] CR2: 00007fc4efea54d0 CR3: 000000004d68b000 CR4: 00000000003526f0 [ 1309.924984][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000002 [ 1309.924997][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1309.925011][ C1] Call Trace: [ 1309.925018][ C1] [ 1309.925026][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1309.925048][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1309.925081][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1309.925121][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1309.925158][ C1] ? mark_held_locks+0x40/0x70 [ 1309.925180][ C1] ? kasan_quarantine_put+0x104/0x240 [ 1309.925209][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1309.925241][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1309.925266][ C1] kfree+0x38f/0x6b0 [ 1309.925298][ C1] rose_timer_expiry+0x53f/0x630 [ 1309.925325][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1309.925349][ C1] call_timer_fn+0x19a/0x670 [ 1309.925378][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1309.925404][ C1] ? debug_object_activate+0x331/0x490 [ 1309.925438][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1309.925463][ C1] ? mark_held_locks+0x40/0x70 [ 1309.925486][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1309.925509][ C1] __run_timers+0x757/0xb30 [ 1309.925545][ C1] ? __pfx___run_timers+0x10/0x10 [ 1309.925586][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1309.925619][ C1] run_timer_base+0x114/0x190 [ 1309.925647][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1309.925680][ C1] run_timer_softirq+0x1a/0x50 [ 1309.925707][ C1] handle_softirqs+0x1eb/0x9e0 [ 1309.925738][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1309.925770][ C1] __irq_exit_rcu+0xef/0x150 [ 1309.925795][ C1] irq_exit_rcu+0x9/0x30 [ 1309.925819][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1309.925848][ C1] [ 1309.925874][ C1] [ 1309.925885][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1309.925908][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 1309.925935][ C1] Code: 00 e8 01 54 29 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 af 4f 21 00 48 85 ed 0f 85 d7 01 00 00 e8 c1 54 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 1309.925954][ C1] RSP: 0018:ffffc90000a57350 EFLAGS: 00000283 [ 1309.925977][ C1] RAX: ffffffff8f514158 RBX: ffffffff8f514100 RCX: ffffc9001a2f1000 [ 1309.925992][ C1] RDX: 0000000000100000 RSI: ffffffff81e7a85f RDI: ffff88801eeec980 [ 1309.926006][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1309.926019][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000003a78 [ 1309.926031][ C1] R13: ffffffff8f514158 R14: ffffc90000a573d0 R15: dffffc0000000000 [ 1309.926054][ C1] ? console_flush_one_record+0xabf/0xe50 [ 1309.926091][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1309.926126][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1309.926158][ C1] console_unlock+0x103/0x260 [ 1309.926185][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1309.926216][ C1] ? dev_vprintk_emit+0x394/0x3e0 [ 1309.926246][ C1] vprintk_emit+0x407/0x6b0 [ 1309.926273][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1309.926309][ C1] dev_vprintk_emit+0x394/0x3e0 [ 1309.926337][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1309.926366][ C1] ? usb_get_configuration+0x257f/0x4320 [ 1309.926397][ C1] dev_printk_emit+0xd2/0x10d [ 1309.926422][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1309.926462][ C1] __dev_printk+0xcb/0x100 [ 1309.926489][ C1] _dev_info+0xef/0x127 [ 1309.926514][ C1] ? __pfx__dev_info+0x10/0x10 [ 1309.926537][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 1309.926560][ C1] ? usb_match_device+0xd5/0x570 [ 1309.926592][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 1309.926628][ C1] usb_new_device.cold+0x341/0x115c [ 1309.926659][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1309.926684][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 1309.926713][ C1] ? mark_held_locks+0x40/0x70 [ 1309.926737][ C1] hub_event+0x314d/0x4af0 [ 1309.926789][ C1] ? __pfx_hub_event+0x10/0x10 [ 1309.926821][ C1] ? lock_acquire+0x5e/0x380 [ 1309.926845][ C1] ? rcu_is_watching+0x12/0xc0 [ 1309.926892][ C1] process_one_work+0xa23/0x19a0 [ 1309.926927][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1309.926959][ C1] ? __pfx_hub_event+0x10/0x10 [ 1309.926995][ C1] worker_thread+0x5ef/0xe50 [ 1309.927029][ C1] ? kthread+0x13a/0x450 [ 1309.927049][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1309.927070][ C1] kthread+0x370/0x450 [ 1309.927090][ C1] ? __pfx_kthread+0x10/0x10 [ 1309.927113][ C1] ret_from_fork+0x754/0xd80 [ 1309.927137][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1309.927162][ C1] ? __switch_to+0x7b4/0x1120 [ 1309.927188][ C1] ? __pfx_kthread+0x10/0x10 [ 1309.927210][ C1] ret_from_fork_asm+0x1a/0x30 [ 1309.927249][ C1] [ 1309.927260][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1309.927275][ C1] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1309.927302][ C1] Tainted: [L]=SOFTLOCKUP [ 1309.927310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1309.927323][ C1] Workqueue: usb_hub_wq hub_event [ 1309.927349][ C1] Call Trace: [ 1309.927357][ C1] [ 1309.927365][ C1] dump_stack_lvl+0x100/0x190 [ 1309.927396][ C1] vpanic+0x552/0x970 [ 1309.927416][ C1] ? __pfx_vpanic+0x10/0x10 [ 1309.927445][ C1] panic+0xd1/0xe0 [ 1309.927465][ C1] ? __pfx_panic+0x10/0x10 [ 1309.927493][ C1] ? check_panic_on_warn+0x1f/0x90 [ 1309.927516][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1309.927538][ C1] ? debug_print_object+0x18e/0x2a0 [ 1309.927565][ C1] __warn.cold+0x191/0x348 [ 1309.927589][ C1] __report_bug+0x296/0x3d0 [ 1309.927615][ C1] ? debug_print_object+0x18e/0x2a0 [ 1309.927645][ C1] ? __pfx___report_bug+0x10/0x10 [ 1309.927673][ C1] ? lock_acquire+0x1cf/0x380 [ 1309.927698][ C1] ? mark_held_locks+0x40/0x70 [ 1309.927717][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1309.927745][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1309.927777][ C1] report_bug_entry+0xe1/0x290 [ 1309.927805][ C1] ? debug_print_object+0x19b/0x2a0 [ 1309.927833][ C1] handle_bug+0x1cd/0x2a0 [ 1309.927859][ C1] exc_invalid_op+0x17/0x50 [ 1309.927880][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1309.927899][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1309.927928][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 05 e5 0b 41 56 48 8b 14 dd e0 2f 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c c2 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1309.927946][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 1309.927967][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1309.927979][ C1] RDX: ffffffff8c1b2f20 RSI: ffffffff8c1b2b40 RDI: ffffffff90e44950 [ 1309.927992][ C1] RBP: 0000000000000001 R08: ffff88802bb1cc90 R09: ffffffff8bb2bba0 [ 1309.928006][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2b40 [ 1309.928019][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7ce7b0 R15: ffffc90000a08b38 [ 1309.928034][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1309.928066][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1309.928084][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1309.928113][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1309.928149][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1309.928183][ C1] ? mark_held_locks+0x40/0x70 [ 1309.928202][ C1] ? kasan_quarantine_put+0x104/0x240 [ 1309.928230][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1309.928261][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1309.928284][ C1] kfree+0x38f/0x6b0 [ 1309.928314][ C1] rose_timer_expiry+0x53f/0x630 [ 1309.928340][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1309.928364][ C1] call_timer_fn+0x19a/0x670 [ 1309.928392][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1309.928418][ C1] ? debug_object_activate+0x331/0x490 [ 1309.928452][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1309.928476][ C1] ? mark_held_locks+0x40/0x70 [ 1309.928499][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1309.928521][ C1] __run_timers+0x757/0xb30 [ 1309.928557][ C1] ? __pfx___run_timers+0x10/0x10 [ 1309.928595][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1309.928626][ C1] run_timer_base+0x114/0x190 [ 1309.928654][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1309.928686][ C1] run_timer_softirq+0x1a/0x50 [ 1309.928713][ C1] handle_softirqs+0x1eb/0x9e0 [ 1309.928742][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1309.928773][ C1] __irq_exit_rcu+0xef/0x150 [ 1309.928798][ C1] irq_exit_rcu+0x9/0x30 [ 1309.928822][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1309.928850][ C1] [ 1309.928857][ C1] [ 1309.928866][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1309.928888][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 1309.928914][ C1] Code: 00 e8 01 54 29 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 af 4f 21 00 48 85 ed 0f 85 d7 01 00 00 e8 c1 54 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 1309.928932][ C1] RSP: 0018:ffffc90000a57350 EFLAGS: 00000283 [ 1309.928948][ C1] RAX: ffffffff8f514158 RBX: ffffffff8f514100 RCX: ffffc9001a2f1000 [ 1309.928968][ C1] RDX: 0000000000100000 RSI: ffffffff81e7a85f RDI: ffff88801eeec980 [ 1309.928982][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1309.928994][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000003a78 [ 1309.929007][ C1] R13: ffffffff8f514158 R14: ffffc90000a573d0 R15: dffffc0000000000 [ 1309.929029][ C1] ? console_flush_one_record+0xabf/0xe50 [ 1309.929064][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1309.929098][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1309.929130][ C1] console_unlock+0x103/0x260 [ 1309.929155][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1309.929187][ C1] ? dev_vprintk_emit+0x394/0x3e0 [ 1309.929215][ C1] vprintk_emit+0x407/0x6b0 [ 1309.929242][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1309.929274][ C1] dev_vprintk_emit+0x394/0x3e0 [ 1309.929301][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1309.929330][ C1] ? usb_get_configuration+0x257f/0x4320 [ 1309.929359][ C1] dev_printk_emit+0xd2/0x10d [ 1309.929383][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1309.929422][ C1] __dev_printk+0xcb/0x100 [ 1309.929448][ C1] _dev_info+0xef/0x127 [ 1309.929472][ C1] ? __pfx__dev_info+0x10/0x10 [ 1309.929495][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 1309.929518][ C1] ? usb_match_device+0xd5/0x570 [ 1309.929549][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 1309.929584][ C1] usb_new_device.cold+0x341/0x115c [ 1309.929614][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1309.929638][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 1309.929667][ C1] ? mark_held_locks+0x40/0x70 [ 1309.929690][ C1] hub_event+0x314d/0x4af0 [ 1309.929742][ C1] ? __pfx_hub_event+0x10/0x10 [ 1309.929776][ C1] ? lock_acquire+0x5e/0x380 [ 1309.929801][ C1] ? rcu_is_watching+0x12/0xc0 [ 1309.929828][ C1] process_one_work+0xa23/0x19a0 [ 1309.929862][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1309.929894][ C1] ? __pfx_hub_event+0x10/0x10 [ 1309.929925][ C1] worker_thread+0x5ef/0xe50 [ 1309.929959][ C1] ? kthread+0x13a/0x450 [ 1309.929982][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1309.930003][ C1] kthread+0x370/0x450 [ 1309.930021][ C1] ? __pfx_kthread+0x10/0x10 [ 1309.930043][ C1] ret_from_fork+0x754/0xd80 [ 1309.930065][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1309.930089][ C1] ? __switch_to+0x7b4/0x1120 [ 1309.930114][ C1] ? __pfx_kthread+0x10/0x10 [ 1309.930136][ C1] ret_from_fork_asm+0x1a/0x30 [ 1309.930175][ C1] [ 1309.930462][ C1] Kernel Offset: disabled