last executing test programs: 4.962562281s ago: executing program 0 (id=109): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @private=0xa010101}, 0x2c, 0x0, 0x0, 0x0, 0x2000, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x3, 0x3, 0x1}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9587, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xc506}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 4.956843241s ago: executing program 0 (id=110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x1500, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4.939475272s ago: executing program 0 (id=111): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102"], 0x0) syz_usb_connect(0x6, 0xadb, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0xca, 0x2b, 0x8, 0x78, 0x12d1, 0x143b, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac9, 0x4, 0x3, 0x0, 0x60, 0x7f, "", [{{0x9, 0x4, 0x5c, 0xfc, 0x8, 0xda, 0xff, 0x23, 0xa, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8001, 0x1, 0xb, 0x6}, @as_header={0x7, 0x24, 0x1, 0x48, 0x7c, 0x5}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "9d8342c5"}, {0x5, 0x24, 0x0, 0xe88b}, {0xd, 0x24, 0xf, 0x1, 0x558, 0x8, 0xa13d, 0x6}, {0x6, 0x24, 0x1a, 0x4d8, 0x18}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x1}, @obex={0x5, 0x24, 0x15, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x3, 0xc9}, @dmm={0x7, 0x24, 0x14, 0x5, 0x6}]}], [{{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x10, 0xb, 0x1}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x7f, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x80, 0x80, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x4c50}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x8}]}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0xff, 0x0, 0x7}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x5, 0x5, 0x1, [@generic={0x59, 0x7, "d044330aa0d6f05f1f35da0458a4d2a1690b6dfc1d8892e30a2b007d799262c0769586f12d7dddab365be20463d9b46368956caa3b58c8284c545d0d5ba28a5e64741cf1e17c9e42627bc8905776c45b836f4e410cb9cc"}, @generic={0xaf, 0x0, "4b9544631273c2300f17f238a02d5c1fa82e09689888851080e77005eee6cdadb09aea248bc391d37004ecc8d80ca8f28a96d5c28e3d938758219de47e434ebd65ac2453de80ab4f30c76facff5fe0a0e579a77b7e31f721c8cf834496d54da4e5f386573d8835a4d723b2fcf73fb4a676517b4ba55ba29ecd0b0aff61eccf9823fd37cd90382e1f5a66010e494fe32ab75d14cce06fa45528bd92092236567faf321980d08474e3210297dcc7"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x21, 0x1, 0x1, [@generic={0xec, 0x7, "6a7fdc713706ee4cf77cbeb279247b520302a4cbbf1c3cc9831a7bbf4da815077e4eca141cc6e926729f1a5dea2f1a25813438ccab02b22f0d264e0a42190cc78f8211733d86fe69835ee02b018bc00431042c9e528d166fff4af05daeb879fbe7972ad6a2b1eab2689f81934e61a423f7a1f3539dc61e6a4c5551afdd63fbdeb55f5937f1af62de69a8e52ca857490add002036ba651bf2308f1a13f45cf9b18a740d4af3418cca1205e91f2e9a55d736bf83b629e1dd408df89d543d94379751f4794921f685eefa14dcedf15e613e8396f39767ac416f128b68b9854ff987a508b2e4d69ab520a793"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x0, 0x10, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x81}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x9, 0x4, 0x7}}]}}, {{0x9, 0x4, 0x3, 0x4, 0x3, 0x49, 0x8a, 0x56, 0x4, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "c49fc80a"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0x6, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x7f, 0x8, 0x80, 0x8, 0x6}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0x103, 0x24, 0x13, 0xb3, "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"}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x59, 0x5, 0x41}]}, @hid_hid={0x9, 0x21, 0x73b1, 0xf, 0x1, {0x22, 0x39d}}], [{{0x9, 0x5, 0xe, 0x8, 0x8, 0x7, 0xe, 0x8}}, {{0x9, 0x5, 0x8, 0xb, 0x40, 0x5, 0x4, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xcf, 0x200}]}}, {{0x9, 0x5, 0x80, 0x3, 0xf061cdd6ab9416ec, 0x9, 0x6a, 0xf}}]}}, {{0x9, 0x4, 0x15, 0x8, 0x9, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x54eb, 0x52f, 0x6, 0xff}, {0x6, 0x24, 0x1a, 0x0, 0x33}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3ff, 0x7, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xf, 0xc, 0x70, 0xd, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x40, 0x4, 0x81}]}], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0xa, 0x1, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x1, 0x9}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x3, 0x3, 0x4, [@generic={0x12, 0x8, "9278f169ec0c2dc41b381e4a914807fd"}, @generic={0x8, 0x8, "a2953a546a86"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x4, 0x84, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xc0}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x3ff}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x3, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x9, 0x3}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x2, 0xd}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0xb, 0xa8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6401}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x7, 0x9, 0x8, [@generic={0x8c, 0x6, "c12543aaf14f459e105ba28a574b1811721ebd0ed4d7421921f70dd6d6c8eddbbd0f0dc78524a870d444b1a337e9ca00b6c36f4875c11d20383243def203b57f2feb62213a9a58d1f5f3909f72931612a11a29c81b96a48b5229997f76617599da214c725a7354e6fa3c71b2f60de8d802aaebfcdaa8185bd50d5383c252e5d314787036c935b0fc2056"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x6}]}}]}}, {{0x9, 0x4, 0x61, 0x3, 0xf, 0xff, 0x5d, 0x1, 0x2, [], [{{0x9, 0x5, 0xb, 0x8, 0x3ff, 0xf9, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x1000}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x2, 0x1, [@generic={0xbc, 0xf, "69cd8fdede5721d42bda0f5fd7b531fb9e33380e6bf4a4e9b232ae150c5015f73ea0077e14d33969bb0b8be41a049ae325fa08a155cf8380134dfc265e71368c603b0a2df57a4976046ebaef5245098aeb80e33029ba3c1a7fa71856eb42cf8625d583827dfc780b54b985f8ff935a485c205f1e632d56ae511b92ed4d287598e7768c2ba2664db79ce3d9c8a1464153276ae295974c97e68e1ae13a37e9f36e72663719bed157c69238fed2116408329435b4e30cc35bb519f8"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x36, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x0, 0x1, 0x8, [@generic={0xdb, 0x10, "6a3e4b6a1fdfb8115caf5ab107cbaada8353d972d753aed2ae67f01615ac4c2c369f83242e12fbd7be82c8fb78e17b9fd1f421e02108ae70893cb70bdf8b83e65254967d3ecd19b638378889ac123fd1e09e1d082858384b688fc74bf42f7af8e42eb5763945fcebc67cc0d13d4a2b964b10c48e227900db2adb49a2ae375be0f844929157543f912d4cc65ccec78136066c2e27a488d6c68295cc362536f2754eabe6d4a064846ef0ce27b8bba4fcc18213cc04d032a468db81ab81acca0006108d9000345476e219bcd17d4973d9a10db581263e801741af"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}]}}, {{0x9, 0x5, 0xe, 0x0, 0x270, 0x3, 0x8, 0x2}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0xf, 0xe, 0x6, [@generic={0xa, 0x2a, "45732809c38df8b1"}, @generic={0xec, 0x2c, "10985d6888c988e3c5730d93cd5a1a28c5d5db98876f45c9ca841e2f82c663b30ed9f156f3c32e9980ffc2a66490befa9db831e16068aba6300e0d83f62808e9137fbb2ba75bc352b059d8dc4ee9da89ddaabe7afdc42fe8426644f6be0c4c230ff3d896c37b5125db93100dfcac5fcb9b9fb5d111a3bc36c26dd4e554952e695d4242b7bc1e67d775498e020c4f5a0c85455b6f0b87f99b3a041b9801b0a130dfc678b2599d8dd81a54fb2470cdb49a6b438368ff71e456a5e333dca101811498793b5e7e7c04a2ea4f7d6fb16cb9f428d950df03842dfe9f2bd83c5a671aad34f88ae232b3f596a4c2"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x2, 0xb, 0x13}}, {{0x9, 0x5, 0xf, 0x2, 0x200, 0x6, 0x5, 0x9, [@generic={0x64, 0x6, "76a981ed177c01747e46f6322541ddf3a03a8b444e1735dc2f737079dbcbb05a2154a78165d012224bd4a0059d7bfbc5285b7bf806f4666fbfe777ff589586cd1e5c496a6e2567623b3e8c1862fb839992dac2a2f094796d2a5cb1fe297867eeae94"}, @generic={0x57, 0x9, "4adbadfe161408487baf0609ebcaa5187cb18a48247d5aa39e66aa543079e6afce573dc0cddbd813f10c270a725cb8433169010de52d6e7bc1064af47f12210d2587f69f958577544f84a0e1f0f7fc2bffebb06934"}]}}, {{0x9, 0x5, 0x4, 0x7aa2650b9970dc5e, 0x8, 0x7f, 0x3, 0x7, [@generic={0x99, 0xe, "916b722417105470de5891ca34da0ec06dcc472bd4c0be2c1a5e7097dc338aa50b370c3fa719928c864690eab9cc2e7b1610268309d644537ae3051a1b8ef99e6c3c739a76e135036a0af225001736772cd372f550f0ae894afcb7dd492c158af82035db4449435cec44380bd1af748ba176147031ba541fc3b10145105b386c1840199af49927fbdb44f08be2f3fdc8f716c927708920"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x3, 0x40, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xffff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8e, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x1e, 0x10, 0x1, 0x5, 0x1, [@generic={0x92, 0x6, "066c758a071adfd446a7d0a198dd86265749920a07cb82091cd374582c618dc9f38583b9495a2870a28964b3ca9f689e151e284636af057922af1165586ea763c062ba35c19000f37da5f4c52d89083f176801862736fc26d07d59e8e550bb14e78d4bfc6baf41185883abe06d5ab8ece01f387094ec2436bfe992d7596d87df8ec8800610ee2afd18e9ed57dd1b8c1b"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x4, 0x7f, 0x10}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x5, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4a, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xfc}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x80, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x0, 0x5, 0x1}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x201, 0x1, 0x1e, 0x5, 0xff, 0x21}, 0x67, &(0x7f0000001080)={0x5, 0xf, 0x67, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x6, 0x1ff}, @ptm_cap={0x3}, @generic={0x55, 0x10, 0x2, "5bbf01c84e8640fad4deb82f8f5aeae2da611602e1d63bc1f7a913f0c67cec9c562b603b7ffaf19dd36edb1f0cd75879dd5c248695daf2aa26ada46865d5bfa3f0ddb59326831952e18569b51a29af9df55f"}]}, 0x5, [{0x4e, &(0x7f0000001100)=ANY=[@ANYBLOB="4e0329284f2870ab56cb7a2d61fe35e6cb93525978d602cdfbfea4095fed6df7a6e45f0c024670b1cc03a0642a5d92b10636d57268b949a8848f0e4bdb71c0b345954c3c5dcc3e39dcadcb89ea92"]}, {0xdc, &(0x7f0000001180)=@string={0xdc, 0x3, "06e45ba6fb7db244abf3b1ea50eb9d383ba23773ae9a6790e10a392189082481e1ce2102dbe8f6ccd078ad782588415b031f2a9341af36175cfb715cf25f185e10ca885f95b7996085e276eaf1c455671babaeea785635d09626dc44e779ac4aaf9d381d78781ac66c255a37f5ea015d8f147abf8f4e6888ce27448ce915532af9303a27c3a3bd19af13458c3a0fd82b1f6b47ce4df0b0fd883d92e14dc7d3ca5f1d3955890b7e8d83b40f00ae62a71a628b79a44426c787e3b62b01979ee635d692dfd0d3f7b07c4121bb78be4908b41c458c7b7b6548c7f232"}}, {0x1c, &(0x7f0000001280)=@string={0x1c, 0x3, "ee1338fcc12316c7c636c2b55f1a6b1c156a81f19a671fb2653b"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x814}}]}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000000)="836bb66f", 0x5ac, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) pipe(0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000102e10400000000000000000a000000300001802c00018014000300fe80000000000000fb"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_usb_connect$uac1(0x3, 0x98, &(0x7f0000000080)={{0x12, 0x1, 0x251, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x1, 0x80, 0xc3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x20}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x1, 0x0, 0xfff, 0x6, 0xd0}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x5, "ac96422369"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3bf, 0x1, 0x1, 0xfc, {0x7, 0x25, 0x1, 0x0, 0x2f, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa0, 0xff, 0x80, 0x3, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x6, 0x43, {0x7, 0x25, 0x1, 0x8, 0xb8, 0x46a4}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xca, 0x6, 0x2, 0x20, 0x8}, 0x1e, &(0x7f0000000200)={0x5, 0xf, 0x1e, 0x3, [@generic={0x13, 0x10, 0x4, "f43c91f20fec79c8213d3c1f358531519b92d2"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x7, [{0xc3, &(0x7f00000013c0)=@string={0xc3, 0x3, "ad7b7ee5181cea9f904ebc1800368664bfaaf1b5911ba62a54b429d768a4172067ce5d0dbefc072195e731435dc829cc436db4c644093c88fa3918816d8ec94d83eae2ebdc0025ef40daf7d6159c894b856a1f93ac113850c13dd9782c554d250fbb72508c4c2072e4789680097655afffd9c1614e937d4dfe9312ab8d43e8a450b54664387740ed1ca7c990b0bb2d619523240f2dbc6d78794f2acccd91384ca0663e8e4b029640a93786d3911ad48e2700299de697013c59959049c7585cbd70"}}, {0x11, &(0x7f0000000240)=@string={0x3b, 0x3, "f1ef8cbfdc2d20ee902f790a2e5bbbc34b3a02d394e11f39019d31ab9799040a3edfa4dede513eea991b3d504e673d2d91ce830e57f8bb41f4"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x448}}, {0x100, &(0x7f00000002c0)=@string={0x100, 0x3, "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"}}, {0x72, &(0x7f00000003c0)=@lang_id={0x0, 0x3, 0x2001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.262340055s ago: executing program 0 (id=120): r0 = userfaultfd(0x80001) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) fstat(r0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r2 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) r8 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001000000086a05ed0000000000000109022d00010000e0000904000009"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x1, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x35, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4e5b1500, 0x6, 0xa, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x40, 0xb1, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x1, 0x3}}}}}]}}]}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x501, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x10, 0x100, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x77a, 0x21}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xf7, 0x7, 0x3b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x40, 0x8, 0x40}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x250, 0x6, 0x6, 0x9, 0x10, 0x3}, 0xb8, &(0x7f0000000bc0)={0x5, 0xf, 0xb8, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "eaeb10b07d015f782db6fa0f00bf7c34"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x7ab, 0xf1e, 0x9, [0xff3f30, 0x0, 0x30, 0xff0000]}, @generic={0x76, 0x10, 0x2, "097ac13106ed4a292651b0684397500d782b8ef3584fb2bac5ec861b087a6e703b0120e0187be948cf06ced27fc34fc9e8acf0136898914e57515fad6b4d670053b581e2fb1bbc345b099a3457d9fb5d16dcbc3d3bfaefd324b3cc0e62bedb8c8dccf0287faf10d0e5f7875fa055ad2bd7bf5c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xa2, 0x2, 0x9}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x429}}]}) ioctl$TIOCL_PASTESEL(r9, 0x541c, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0xfff, 0x6, 0x4d, 0x7fff, 0x2, 0x8009, 0x5, 0x2, 0x800000, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe25e, 0x7fff, 0x4000b, 0x101, 0x7f7f, 0x4c74, 0x1, 0xc, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x80092a3, 0x4, 0x1, 0x20000000, 0xa, 0x0, 0x7, 0x6, 0xfffffaac, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2b, 0x5a04, 0x312, 0x1, 0x265, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x3, 0x20001, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x78, 0xf9f, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x8, 0xb, 0x3, 0x5, 0x1007, 0x0, 0xa40, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x5, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc53, 0x950bfaf, 0x1, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffef9, 0x6, 0x3, 0xc0, 0x2, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0xe, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x40006, 0x5, 0x0, 0x3, 0x80ce7, 0x10000202, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xfffb, 0x8e620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x1, 0xffff, 0xfffffffe, 0x1, 0x10080, 0x6, 0xb, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0xb1c, 0x8, 0x20000200, 0x4, 0xfff]}, 0x45c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) mremap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1000, 0x5850dacc4e5078d6, &(0x7f0000ff3000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000000904"], 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x2004, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0x0, 0xb2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x1, 0x3ab, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x2, 0x902c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 2.81456944s ago: executing program 1 (id=124): socket$netlink(0x10, 0x3, 0x4) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001e00)=ANY=[@ANYBLOB="100000001dc8d7002dbd7000fcdbdf25"], 0x10}], 0x1, &(0x7f0000008d80)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}], 0x20, 0x24000001}, 0x200000c0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000040)=""/37, 0x1000000, 0x1000, 0x0, 0x7}, 0x20) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'bond_slave_0\x00'}) (async) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB="06"], 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) (async) listen(r0, 0x6) 2.469325441s ago: executing program 3 (id=125): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000001980)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) 2.457518572s ago: executing program 3 (id=126): r0 = dup(0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.434321522s ago: executing program 3 (id=127): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @private=0xa010101}, 0x2c, 0x0, 0x0, 0x0, 0x2000, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x3, 0x3, 0x1}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9587, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xc506}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.433813952s ago: executing program 3 (id=128): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0xec5c350e84d78826, 0x0, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)}], 0x2}, 0x20008b88) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="f77201b0286b00235891825439ee3a45becd9947f2bf0e548f9e35f7c5e8b0e540bdb133af2248e6263684413ddce1b01464471e8ee3118f1a6f", 0x3a}], 0x1, 0xa) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0x2020) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0xfffffffc}, 0x1c) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000000)={@loopback, @broadcast}, 0xc) 2.366755264s ago: executing program 3 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001e00090002000000fcdbdf2508"], 0x20}, 0x1, 0x0, 0x2000000, 0x4000000}, 0x4000) 2.366043894s ago: executing program 3 (id=130): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a1f53ea73c32220190e02cb0b770bb154d1d5d1b343cb1feadca1752e4397955e1a151721f1b28b9e32b7966f9ddd7ad3822c5ff3dc03786c1c86c2a6f7c271710c573396ca95e95a524201b0bf0539042ae14072693f9734306f7a21f92421e8e0ea335d07d1f2839c4c195930cd35c65dfc527de84f2cab4f0c78474734d7c5cba0c70ee0fd10ad5ed3f4b70308c29000e8cd98d57c90c7d9298ee4a2c41b141614627880ace9cfde45a0ae5f6f5cf3eb31254454e92eacdab64eb048b144e4fcc16afe59e7d7dad7696df64aa223d14d69bbe8ee2f76e1d4a32477a7cf108fea86a7e085c1575f683857cff342574109f74cf05e3f63f328f46735ba0578d84b4978ce545621b1666ca7da451d40e961a037822eebcbba9bf9e92af7281442efcaa8e0d3ecd6111d8fc1c742d0e7efe8e51a1c5e6ea04fec02a986cba677d9dc642d110df6f55c786c73f7ce4ebf9415bdb2680d0ff4597006d96e3c164114a4effae84380e492822c002b2e96f160a0784fd0ebe448eddaa801921576287f61a15be332a94eea951c0826874d105173a6b3f2a6e420ed5ef00b1f699b74c524a1859cb7d6dfb7257b6f0b92e17ce21237da0ec892735601b29693dce455876447f76df303a8cb34bd9c9241da9904c1c17d416753c71aeed9cc07d26b4a438df4e302cf120cda73c04d5a1b7295f1cb7ff88084211adde5fdf991f97cb522b56c561ad1119a4675fbf566b77660dfd457467652d23c739cc9ba93bbd5b464c46e46187ce71d7aab533e670c861b227454d7c21f9f16000eee0c1772a152c26acd2744c5553ace622369f15d5354a3b5ac4bb9261a766830d351fa931558dee7ff30768b2e29025c3b115179ed6a12ea76a23db3626bc033f85a43c3c3f50b75b89a418277837ba571189e708f4aaaacc19537e7aa156b7058c200e8f9be1da8a63c7e878f3e733060a1cb24a2a09ea76413efdc4e0b1027a09c6830b4ca5ccd4695e2e0bb1610a21b0cc66012aab283b6c5dfbd20aef8d7ad04e4c618a065a588d05e3f780126eee290cf0f94fb4a2c5a8cb97f60d9e50301a4f01f3787ab052ef8782d6ef0f92385ab59015670a054dab1ab0400be74fdc4ac3d18fb5b5da13e55a05e29ad14dd0abf0435dea601ce80573548f3c8f21ecfcbe5361d1505a91c355d8477fe7e3866be005acae25cbab7bd8684294963c3c95924f7d62ca0ed2d7aa01048cbdcd4d7ae9717d4feb97e1e825f6156e9c5fc456509798d2f5adc9356752a8974894ff5bf9d14aab3ddf18fd4f9af23c66f7e4ef7e345e769260fd9d2a22ddd078dd7e44f904ea78dd3db5b0f4a8d7ce9ae7909cedde165b7458da24d576fc0e18d3c27cccaff21146ad51c1681c629a8f0b8a4ae213c88910c54de9af7890b0a4414e0d38c31d76a130b587b764260655f17f901f96b835a1fecb1f7438f5e18ff60720d37d19b1a9ae3e03dc10aa1c4f2abb918883d56ddd4e74b48a4aeadccf2329956ed18b2001d1e1e80bdf325449beda911916f802234f5b182264754cd3bb26b2ae658cc0ee185a19cba7f9e54e47c32f8b87d0fed97c911d28f971e70be5fb830109a57b600f734a4cc734cbb67a58e6a696ccb39c328c537fe467fd194183aad728f95b0a4afb4557615408a83785c0d313e666d1dab18d49a4feaf12993e73f5537998a1ed25b93f9bca346376129dee3a5a78675d30bd19a78b77f45ea8b5b48cb4c78a1bc30df00badb811585966b8f8ef42d89236f5e99f849a44d62d1431eb187333dcde91582a29e777b9cd6e1bc86eff512ba48d6030681d395bfb8c5259b0c22028400a1d3929a6e3fa0fcda3deb9cf8e7e079c21d7c20b1670eb880789ae809608bac2b05c45da5a3a0377d1d06b917a5a6ee7dbf35f54c327d7d7921266bcb4e8e816b02872139d03d575c491ee077140f7d1aca286f977869288bf90eedaf41727abcd79056936d830bf6480bf6b4573e4dd402f6206099716593a04813cd07437ffa80f10f72ef64e320e48fa59b5ac0e412d9ed14bfc2e9365c67fc21c327d5699f58c3984db4f3ec0c362b633a784c4dfba44187801a0f0fc0f6b7a4610594556b33f1617c7b8b4f95d5d6fba7553512a6098a2e64d10a45347f3a41d11e19f7690ebcbfb9239c59b489061aad4317a08c435fa92c4f5feb662f6413c3d06dca92647fef304d9f8e96a78b5251b0a4d15710937428ab676cc7da5f0006cd04f7fa884625116a0cbddabc012cf55e3f26a4b411cfa1ba8473c3aef570cd23fe2165bf1f9b54632c7e76e5a5818bb70086c5fa609f2199424b8f2de5387a5bf44d3f246bec62433182b0c950ecc2968dba1e6a845c48c506daf90ffb0c13d376be0ac8283abb4e4283f703206a47c2b9c6a642d4bf4a245b8ec978b09d8620fc5d9f917842f83bf5e2efd976e9b98c38a8f836773357ad6d23fca68ee26431acf0196ef0fcef25a979782dc2f1688acacc53b1b2c2f694b638c1256a869f56098b89bb4a14b2dc2d187773e6a75f7d37ed91b8f8aee84c0bdbaeec229139809eaa9948e7a5e18d783ece0cd7ea8996dc3e650b1cff351ad9fbd661f303f40de084d111ec1489ae42d2fc55ce8d892a3d6290f2d2eb72733b4fdc8c433569c34854a84653884b3d90652f499eeb83886bd4246b41f231141cf1a412f1c7840fb8a1595895cfdec1961d887ac9dd1f5ad4b66bbb451d5471fcb1fb4bb25a4c4d43b9c0e3c72a00e8fc83f700c812b1b9c2f37e40bd746c39cbbca41e6fecb8d64424c82e640d8f887cb7d8e75828b2969e1628c7000fba626381dcfdc7262b2b06f47f898d0aa0dab8636c089d4339a37e80f20f8f5196608a3d1ac1418ff9ac0ac54c45c124b15a77d61d50ca05e1603b1b6476cf09d79b138a7f7394a9cf35e6d64654504663db381712da505d0985cd9a4edbd067c0f09c393486b138f01deb4771566d987ac16a6ed0ac5c9b592a20878e5b4050e594f376523697a0aba321a6704db28b0f0fcdf0d8e2a6f1788064d49807f080d7aa29f795935d61bcf152fe39a45a713fd0a3b2982f65437828e110b2edcdbd7b462d5ef8e87ad0aa2352cf3fb1e05787602ed66efd77a7b88c73e76dd1b368e5845cc032ed719635b0db27b39ddc12d899b742a1499ffaa4b95c0a1f29cd85a7d2d30be5bd1fd384a6e4dd3b93b46352ece5144a2ce989bcb8e6255e04e6d5d0a6b4b2736715b116b06189491b4a4a9fd9e482413b2b8851b273b10820040b490de9414fcdee5126ddbedaaddcb8c844cc7e0264f65c4d3607dddf0dbd88a7f3d1ff35bea1bcb48eb576e7083fd8bf8d6a6a1567f77819c3bbe93ff92418632d30fa2b933b33fcf163b5a942d870f22d13ad6be938ddf61de391b35e68fc9ad71aeb7cddfb73e071162bfd1c7facd10e50e9f8046c7ee6f89830b70955a3908c18cc79138c335a5159adb3229e02576cbd1829b4c67504fbe785e3c2129d53cbc3b00a62b232e16a01e01b2dc159fea676ea8c0ad0d8f41ea1840092f4900d26f48b5c549211240a5c5ab663b4f9ac463df05c86af9a3f2e595d4f9981b108d44e9ee060fc8736d7ff71a609252fe6becd2aacb23b7ac66ad8a3dfca068fb7846b9588a0b027e45f96d73cdf6c2d9494c6c5c129a8f5a1e8c4f4e6a1adec722ba74e5a002b1c87793cfc5c689ac82881ac346c3e5be4f6570d3669f797916e2018a784d6a88671c6cd803585ba49cabea506177c5e41145d2c7f192012e1478e409d2dde7de2ac2b03b9d808afaf5f761032fd562d587c653eb07ad8ede76dc1aa8a1e7fb5a56f04e3dfa10e77ee1e51f6879c2670278c8471e03b0f62eee8ec60336b604b6721a81d8ef630749dac6298b488ec09a4aa61ced579231d4231a9cf6d7f20683194e6709fbea4ed66cfdec9a7238bbad6894ceb6c0ca3307274f2749be8450180456280289d0179d8396902250cddd7a440c24ae7df78bc8e146b1b8e5c9924d2b07646ff577da61968503bad37d240aacc9dbba0f665acf1d56667d1aa7e497b7947cca22f7a55113f5e10bc9987e9b5d9405f625a604f7099cf365ea8d3530dfba6b9977f8441e23147049ae8bf0231d824397e885589c693d8a7e756e46baf67f21b062cf6d8db25140c4301233bcb18b408e3c7959056a3307546f09f13e2e732dc26b9bab0ac74d72bc0f115f7cf682aed23d9c627da1c4e4b221bd85a6c19f0391b23137f551cfb99cb1da33d42840439d0ec5f2d0e75c74d15918460e915c18dccf2f9d0ee508292c871ec9f4f2a2d1628a914487df2e8aa43bbb0bf1427e2f99e8eaaa588df310b9e50aeba057b2ce863eaaf9ecca3fc190d88bf10", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100), 0x4) mkdir(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r6, &(0x7f0000000200)=""/95, 0x5f) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ptrace(0x10, r5) ptrace$peekuser(0x3, r5, 0x8) prlimit64(r5, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@empty, @in=@multicast1, 0x200, 0x0, 0x4e22, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffffffffffffffd}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x9, 0x0, 0x1, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004004) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x0, 0x24, 0x29, {0x29, 0x10, "3909517a3e2b6b9c8fbfe38f5cb6c190196f7f79f1875eb0adfe199944c98cefdeca87ec69c836"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, &(0x7f0000000100)=ANY=[@ANYBLOB="2df6f6641e0f58b100220a00000078eb"], &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x97, 0xa9, 0x1, {0x22, 0xb01}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200c03000000ddf1bb8105bda395499c9440b4011a9be14869dacee3820fe340171b7e350346c100e48642e5d3c9b0300bf692c908d23bd452dc21dd0789cc27aae16c21f74a42288add64a33a9f2fdbb5b2193e3c3d6e7f6a77713a885c85f10ad056c2845473b2c1aef7bf5f955de65d8b263a240d5e93cf2da6a3ba23b9e6e8"], &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) 1.56808351s ago: executing program 1 (id=131): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='wchan\x00') fchdir(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6d41, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x18, 0x31, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0xb006}, 0x4) 1.486742352s ago: executing program 1 (id=132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000080)=0xdddd5002) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000a00000800040001000000", 0x24) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r4, 0x341, 0x70bd2b, 0x25dfdffb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004815}, 0x8014) 1.340455667s ago: executing program 1 (id=136): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000001) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x5, 0x1000, 0x1000, &(0x7f0000007000/0x1000)=nil}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f0000000280)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f0000000000)={0x2, 0x1, 0x1}, &(0x7f0000000040)=[{}]) ioprio_get$pid(0x1, r4) 1.278639839s ago: executing program 2 (id=137): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffffffffffffff88a84f08810040000800455600b0006400008411907800000000ac1414aa4e204e23009c907801000000010000005fc1f41bc32dc152dd140238e85de1e60757fd22270fa1c8a9b45f8208773c1cb7396f47a02d0473823ab53760896bc485531e3d71e4b9374295e4991b2c90247a9f2fd7d3236843d296137552dda03332eb85e57c75749b04a3deba96b3f66c08b929a074add3af8b9b6aa1468f35da32c82b95cdf4233797ce7ca7446c98d7f62f50c1c7f2d09ea8e2dde856c8434e17ad584173d7e5a4fa720859eaa88feb966ccbb15ee0ae93f2"], 0xc6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xc43, 0x0) flock(r4, 0x5) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000080)) (async) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000080)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x9, 0x2000) (async) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x9, 0x2000) sendfile(r5, r6, 0x0, 0x100) write$P9_RLOPEN(r5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r7) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7020fbdcdf2505000000180001801400020069705f76746930000000000000000000050007"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x2000) syz_usb_connect(0x4, 0x24, 0x0, 0x0) 1.2430741s ago: executing program 1 (id=138): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x4, @remote, 0xdb}, 0x1c) 1.215016191s ago: executing program 2 (id=139): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0xfffb, 0x1, {0x0, 0x1}, {0x47, 0x2}, @const={0x200, {0xfffb, 0x6, 0xfff9, 0x7}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) pwritev(r2, &(0x7f00000022c0)=[{&(0x7f0000000200)="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", 0xfffffe40}], 0x1, 0x1, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000280)=@x86={0x56, 0x0, 0x2, 0x0, 0x6, 0xd, 0x3b, 0x5, 0xc, 0x8, 0x9, 0x2, 0x0, 0x3ff, 0x85b, 0x1, 0x0, 0x72, 0x4, '\x00', 0x81, 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, 0x0) 1.213261192s ago: executing program 1 (id=140): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000140), 0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000300)="a6", 0xfffffffffffffff3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback}, 0x1c) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="a1", 0x1}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x646401, 0x0) signalfd(r2, &(0x7f0000000040)={[0x5]}, 0x8) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x201002) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) ioctl$HIDIOCGUSAGE(r3, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x400, 0x0, 0xfffffffc}) r4 = syz_usb_connect$uac3(0x3, 0x13e, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12c, 0x3, 0x1, 0xf5, 0x20, 0x4, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x50, 0x9}, [@feature_unit={0x19, 0x24, 0x7, 0x6, 0x3, [0x0, 0xc, 0xd, 0x1, 0x6]}, @source_unit={0xc, 0x24, 0xb, 0x0, 0x2, 0x401, 0x9, 0x2}, @power_domain={0x10, 0x24, 0x10, 0x4, 0x9, 0x2, 0x4, "e4a871c67e1821"}, @power_domain={0x11, 0x24, 0x10, 0x5, 0x100, 0x3, 0xb, "e8dce5371b514057"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x5, 0x10}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x7c}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0x3298, 0x3, "88d68d6d2294"}, @as_header={0x17, 0x24, 0x1, 0x1, 0x60000000, 0x4, 0x22641dec92c2c097, 0x81, 0x45, 0x2, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x6, 0x9e, 0x3}, @as_header={0x17, 0x24, 0x1, 0x0, 0xf0, 0x6, 0x3, 0xb0, 0x9, 0x8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x2, 0x96, {0xa, 0x25, 0x25, 0xc879, 0x1, 0xb26}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x90cb, 0x80, "31bc71f303"}, @as_header={0x17, 0x24, 0x1, 0x3, 0x8, 0x6, 0x0, 0x2, 0x2, 0x3, 0xb1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x8, 0xe9, {0xa, 0x25, 0x25, 0x4}}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x2, 0x5, 0x8, 0x20, 0x7}, 0xf, &(0x7f0000000500)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x8, 0x2, 0x9c21}]}, 0x9, [{0x22, &(0x7f0000000540)=@string={0x22, 0x3, "5de6d4dccb71bbb0eb788b2de6b2208c3dc6370e7c509cf37976560607eb9c2e"}}, {0xc1, &(0x7f0000000580)=@string={0xc1, 0x3, "dd79b05b2273a882c6ae803346ac12740cc27f04f8f5c2171be068bf4a750eb962dc533b22cc502c7ca9a222301b886916221a4c5a304bbb5a1484b6f8be76b691d620efc03935028bb400cecb23a6210bb3bfacf9b9dcb28ec731369a405d840590b02d167229f10be9b7b87fe85b618a9baeadd43c0972df1592a9bca16df2f2233071f546fd3c5d34b80a572b49eb081943f442ee485921bb44c7b5bb991afcdfdc1f156c76264029e069643cc070ea8ec704aa45fe94d8765e0274a0b0"}}, {0x7a, &(0x7f0000000680)=@string={0x7a, 0x3, "7b0ccc5c9942d7200dc5dfd2b590a15e52a4698857f7f06a3eb8e67f69b01aef82b2c6b35eb89d8b939e71b16c2123a1f7cdf0da1303731f43205eb1f2462b581f67de019ffca3f488c8fc261cace338ee0a4f6137c17470a233c7fd5fe5fb5a6c6140c2d72c238ed3c0fabf8500342b77ae9600e8ddee32"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x13}}, {0x1c, &(0x7f0000000740)=@string={0x1c, 0x3, "588774e9faf963fa6ade0def1f2eb538d616361bf629df9a6052"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x443}}, {0x59, &(0x7f00000007c0)=@string={0x59, 0x3, "e3767e01a57c7b12ad58d175bc6df5970edb59c728195834545a647720a1a86c9b4c29f9dc431cf4afc4313ddff6077b2086002902c2bcc263ba0ad23f11d17d0124dcc82d9b4e1219d01c069cbb97b633139895522f64"}}, {0x7b, &(0x7f0000000840)=@string={0x7b, 0x3, "74d22e7ac0ed8059d6b0fb0f4b24ac10916886da9133d0cad7f04409c5dae3dfbae476d44da6f15633ca78be9cf13d7856451c9138bd1be81fba8c540dd724a6f2e821672b597122e0ac438389dbf252e3418f00d404170bd76276ee51c6c02c534ee51bd3152ddf39762d553c09dd26811671ebba95d78af6"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$uac3(r4, &(0x7f0000000a80)={0x14, &(0x7f00000009c0)={0x40, 0xf, 0x3e, {0x3e, 0x9, "bfc2170519a510d77213558d52b671e5dd356c1dc3488f02ec5f9e58486e2e4ac95824eec1f49cd85a55e19f4863dad57b18de9e101f78f17ce17473"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)={0x0, 0x5, 0x6d, "4fe63eadc22a214191b3e8aebc759e1649d10376ab12da85296d795bb2c13c0adb05be553b7f11959d3344ff04a044dd145f067beb1b2de0727c0721f05548600a454a73de06db1ed9e41be586f80d34049bfeac2b90e6c0ee360fe98e2b13187da237ae81cdf82e0576e6be37"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c40)={0x20, 0x81, 0x2, '(O'}, &(0x7f0000000c80)={0x20, 0x82, 0x3, "29044f"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "a8ad35"}, &(0x7f0000000d00)={0x20, 0x84, 0x2, "1db7"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "01537e"}}) 666.675919ms ago: executing program 2 (id=141): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x3000000) 660.150539ms ago: executing program 2 (id=142): r0 = socket(0x8000000010, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) write(r0, &(0x7f0000000100)="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", 0xfc) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$bind(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x1002831, 0x0) 623.93979ms ago: executing program 2 (id=143): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x39264000) fadvise64(r0, 0x7, 0x1c000000000000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_pidfd_open(0x0, 0x0) 494.663795ms ago: executing program 2 (id=144): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000001980)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) 50.404689ms ago: executing program 0 (id=145): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 0 (id=146): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x2, 0x4, 0x52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7, 0x80, 0x8001, 0x6}}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, r2}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000104010400000000ff0f0040decd0000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x24040001) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 23.031338][ T36] audit: type=1400 audit(1779233505.050:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.032399][ T286] cgroup: Unknown subsys name 'net' [ 23.054045][ T36] audit: type=1400 audit(1779233505.050:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.081392][ T36] audit: type=1400 audit(1779233505.080:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.081871][ T286] cgroup: Unknown subsys name 'devices' [ 23.246224][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.251883][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.427002][ T36] audit: type=1400 audit(1779233505.450:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.450200][ T36] audit: type=1400 audit(1779233505.450:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.475072][ T36] audit: type=1400 audit(1779233505.450:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.484282][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.506971][ T36] audit: type=1400 audit(1779233505.530:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.532442][ T36] audit: type=1400 audit(1779233505.530:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.566420][ T36] audit: type=1400 audit(1779233505.590:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.592019][ T36] audit: type=1400 audit(1779233505.590:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.592258][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.338170][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.345459][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.352536][ T293] bridge_slave_0: entered allmulticast mode [ 24.358901][ T293] bridge_slave_0: entered promiscuous mode [ 24.366415][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.373453][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.380551][ T293] bridge_slave_1: entered allmulticast mode [ 24.386749][ T293] bridge_slave_1: entered promiscuous mode [ 24.519887][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.527126][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.534382][ T294] bridge_slave_0: entered allmulticast mode [ 24.540570][ T294] bridge_slave_0: entered promiscuous mode [ 24.546963][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.554005][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.561125][ T296] bridge_slave_0: entered allmulticast mode [ 24.567469][ T296] bridge_slave_0: entered promiscuous mode [ 24.574148][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.581187][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.588340][ T296] bridge_slave_1: entered allmulticast mode [ 24.594720][ T296] bridge_slave_1: entered promiscuous mode [ 24.604273][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.611325][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.618480][ T294] bridge_slave_1: entered allmulticast mode [ 24.624832][ T294] bridge_slave_1: entered promiscuous mode [ 24.671514][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.678605][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.686015][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.693068][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.733698][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.740993][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.748115][ T295] bridge_slave_0: entered allmulticast mode [ 24.754623][ T295] bridge_slave_0: entered promiscuous mode [ 24.761150][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.768225][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.775399][ T295] bridge_slave_1: entered allmulticast mode [ 24.781598][ T295] bridge_slave_1: entered promiscuous mode [ 24.875729][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.882808][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.890099][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.897141][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.911273][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.918588][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.926184][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.933599][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.951041][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.958134][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.974889][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.981949][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.017870][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.024969][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.049304][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.056392][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.063905][ T293] veth0_vlan: entered promiscuous mode [ 25.093500][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.100604][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.110120][ T293] veth1_macvtap: entered promiscuous mode [ 25.118981][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.126152][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.138441][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.145518][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.153169][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.160230][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.180296][ T296] veth0_vlan: entered promiscuous mode [ 25.204038][ T296] veth1_macvtap: entered promiscuous mode [ 25.238181][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.259143][ T295] veth0_vlan: entered promiscuous mode [ 25.273473][ T294] veth0_vlan: entered promiscuous mode [ 25.308023][ T294] veth1_macvtap: entered promiscuous mode [ 25.322568][ T295] veth1_macvtap: entered promiscuous mode [ 25.437163][ T325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=325 comm=syz.0.1 [ 25.458370][ T325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 25.468313][ T325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=325 comm=syz.0.1 [ 25.942357][ T335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.054238][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.227078][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 26.240209][ T64] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 26.259764][ T64] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 26.280048][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.294972][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.307377][ T64] usb 1-1: Product: syz [ 26.307445][ T346] netlink: 'syz.1.12': attribute type 2 has an invalid length. [ 26.311573][ T64] usb 1-1: Manufacturer: syz [ 26.311591][ T64] usb 1-1: SerialNumber: syz [ 26.343462][ T346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 26.355791][ T340] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 26.420419][ T349] netlink: 'syz.2.13': attribute type 4 has an invalid length. [ 26.430431][ T352] process 'syz.2.13' launched './file0' with NULL argv: empty string added [ 26.485633][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.494353][ T311] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 26.513613][ T311] usb 4-1: string descriptor 0 read error: -22 [ 26.520228][ T311] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 26.530246][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.582333][ T64] usb 1-1: MIDIStreaming interface descriptor not found [ 26.601109][ T64] usb 1-1: USB disconnect, device number 2 [ 26.627438][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.394338][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.544365][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 27.550676][ T45] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 27.559149][ T45] usb 1-1: config 0 has no interface number 0 [ 27.566963][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 27.576333][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.584489][ T45] usb 1-1: Product: syz [ 27.588798][ T45] usb 1-1: Manufacturer: syz [ 27.593417][ T45] usb 1-1: SerialNumber: syz [ 27.602198][ T45] usb 1-1: config 0 descriptor?? [ 27.796889][ T370] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22'. [ 28.179405][ T45] usb 1-1: USB disconnect, device number 3 [ 28.217595][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 28.217614][ T36] audit: type=1400 audit(1779233510.240:132): avc: denied { create } for pid=387 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.274138][ T36] audit: type=1400 audit(1779233510.260:133): avc: denied { bind } for pid=387 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.308728][ T36] audit: type=1400 audit(1779233510.270:134): avc: denied { setopt } for pid=387 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.544164][ T45] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 28.665507][ T311] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 28.683949][ T311] usb 4-1: USB disconnect, device number 2 [ 28.696627][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.707140][ T394] netlink: 'syz.3.31': attribute type 2 has an invalid length. [ 28.717635][ T394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 28.738044][ T45] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 28.753352][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.765628][ T45] usb 1-1: Product: syz [ 28.769897][ T45] usb 1-1: Manufacturer: syz [ 28.774815][ T45] usb 1-1: SerialNumber: syz [ 28.781420][ T45] usb 1-1: config 0 descriptor?? [ 28.784612][ T36] audit: type=1400 audit(1779233510.800:135): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.787708][ T45] plusb 1-1:0.0: probe with driver plusb failed with error -22 [ 28.856765][ T36] audit: type=1400 audit(1779233510.880:136): avc: denied { create } for pid=408 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.876133][ T36] audit: type=1400 audit(1779233510.880:137): avc: denied { write } for pid=408 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.895665][ T36] audit: type=1400 audit(1779233510.900:138): avc: denied { connect } for pid=408 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.929826][ T417] netlink: 'syz.2.39': attribute type 46 has an invalid length. [ 28.963466][ T36] audit: type=1400 audit(1779233510.980:139): avc: denied { unlink } for pid=420 comm="syz.2.41" name="#1" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 28.987038][ T36] audit: type=1400 audit(1779233510.980:140): avc: denied { mount } for pid=420 comm="syz.2.41" name="/" dev="overlay" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.008916][ T36] audit: type=1400 audit(1779233511.010:141): avc: denied { create } for pid=420 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 29.131766][ T433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 29.148429][ T31] usb 1-1: USB disconnect, device number 4 [ 29.192859][ T434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 29.210345][ T438] netlink: 'syz.3.48': attribute type 2 has an invalid length. [ 29.218118][ T438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 29.354274][ T455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 29.474215][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.624172][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 29.630574][ T311] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.641687][ T311] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.652597][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 29.661716][ T311] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 29.670176][ T311] usb 4-1: Product: syz [ 29.674504][ T311] usb 4-1: Manufacturer: syz [ 29.681025][ T311] hub 4-1:4.0: USB hub found [ 29.882285][ T311] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 30.054415][ T64] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 30.194603][ T456] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.204186][ T64] usb 1-1: device descriptor read/64, error -71 [ 30.207261][ T31] usb 4-1: USB disconnect, device number 3 [ 30.355305][ T456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.366437][ T456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.376546][ T456] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 30.386023][ T456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.395137][ T456] usb 2-1: config 0 descriptor?? [ 30.444195][ T64] usb 1-1: device descriptor read/64, error -71 [ 30.603745][ T456] pyra 0003:1E7D:2CF6.0001: item fetching failed at offset 6/7 [ 30.620405][ T456] pyra 0003:1E7D:2CF6.0001: parse failed [ 30.626856][ T456] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -22 [ 30.684231][ T64] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 30.802733][ T10] usb 2-1: USB disconnect, device number 2 [ 30.816427][ T64] usb 1-1: device descriptor read/64, error -71 [ 30.904561][ T456] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 31.055224][ T456] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.065526][ T64] usb 1-1: device descriptor read/64, error -71 [ 31.071874][ T456] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 31.084806][ T456] usb 4-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 31.093864][ T456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.102617][ T456] usb 4-1: config 0 descriptor?? [ 31.104166][ T45] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 31.174310][ T64] usb usb1-port1: attempt power cycle [ 31.265339][ T45] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 31.273597][ T45] usb 3-1: config 0 has no interface number 0 [ 31.279752][ T45] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 31.292273][ T45] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 31.301416][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.309787][ T45] usb 3-1: Product: syz [ 31.313969][ T45] usb 3-1: Manufacturer: syz [ 31.318685][ T45] usb 3-1: SerialNumber: syz [ 31.327748][ T45] usb 3-1: config 0 descriptor?? [ 31.333023][ T543] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 31.343853][ T45] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, a6:8c:eb:54:4d:60 [ 31.395157][ T552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'. [ 31.490333][ T572] ======================================================= [ 31.490333][ T572] WARNING: The mand mount option has been deprecated and [ 31.490333][ T572] and is ignored by this kernel. Remove the mand [ 31.490333][ T572] option from the mount to silence this warning. [ 31.490333][ T572] ======================================================= [ 31.526873][ T572] fuse: Bad value for 'fd' [ 31.534223][ T64] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 31.564161][ T64] usb 1-1: device descriptor read/8, error -71 [ 31.695270][ T64] usb 1-1: device descriptor read/8, error -71 [ 31.800241][ T10] usb 3-1: USB disconnect, device number 2 [ 31.806640][ T10] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 31.894227][ T456] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.934254][ T64] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 31.956790][ T64] usb 1-1: device descriptor read/8, error -71 [ 32.014845][ T608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.023401][ T608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.033648][ T608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.042173][ T608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.055363][ T456] usb 2-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 32.065838][ T456] usb 2-1: config 0 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 32.078954][ T456] usb 2-1: config 0 interface 0 has no altsetting 0 [ 32.085666][ T456] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 32.094973][ T456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.103767][ T64] usb 1-1: device descriptor read/8, error -71 [ 32.111962][ T456] usb 2-1: config 0 descriptor?? [ 32.118315][ T456] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 32.214269][ T64] usb usb1-port1: unable to enumerate USB device [ 33.214154][ T64] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 33.385230][ T64] usb 1-1: config 0 has no interfaces? [ 33.390756][ T64] usb 1-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 33.414141][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.423343][ T64] usb 1-1: config 0 descriptor?? [ 33.759852][ T456] usb 4-1: USB disconnect, device number 4 [ 33.795871][ T624] FAULT_INJECTION: forcing a failure. [ 33.795871][ T624] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.809347][ T624] CPU: 1 UID: 0 PID: 624 Comm: syz.3.82 Not tainted syzkaller #0 3e7fae14ba6b85f6920b1ae189ed61b1234f6a84 [ 33.809380][ T624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 33.809393][ T624] Call Trace: [ 33.809400][ T624] [ 33.809409][ T624] __dump_stack+0x21/0x30 [ 33.809445][ T624] dump_stack_lvl+0x140/0x1c0 [ 33.809473][ T624] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.809503][ T624] ? check_stack_object+0x12b/0x150 [ 33.809526][ T624] dump_stack+0x19/0x20 [ 33.809553][ T624] should_fail_ex+0x3d7/0x530 [ 33.809574][ T624] should_fail+0xf/0x20 [ 33.809592][ T624] should_fail_usercopy+0x1e/0x30 [ 33.809613][ T624] _copy_to_user+0x24/0xa0 [ 33.809638][ T624] simple_read_from_buffer+0xed/0x160 [ 33.809667][ T624] proc_fail_nth_read+0x1aa/0x220 [ 33.809696][ T624] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 33.809723][ T624] ? release_sock+0x171/0x1f0 [ 33.809749][ T624] ? bpf_lsm_file_permission+0xd/0x20 [ 33.809776][ T624] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 33.809804][ T624] vfs_read+0x286/0xcb0 [ 33.809824][ T624] ? hook_socket_connect+0x50/0x50 [ 33.809861][ T624] ? __cfi_tipc_sk_bind+0x10/0x10 [ 33.809883][ T624] ? __cfi_vfs_read+0x10/0x10 [ 33.809903][ T624] ? __kasan_check_write+0x18/0x20 [ 33.809923][ T624] ? mutex_lock+0x97/0x1d0 [ 33.809948][ T624] ? __cfi_mutex_lock+0x10/0x10 [ 33.809972][ T624] ? __fget_files+0x2c5/0x340 [ 33.809998][ T624] ksys_read+0x145/0x260 [ 33.810018][ T624] ? __cfi_ksys_read+0x10/0x10 [ 33.810039][ T624] ? __kasan_check_read+0x15/0x20 [ 33.810060][ T624] __x64_sys_read+0x7f/0x90 [ 33.810080][ T624] x64_sys_call+0x2638/0x2ee0 [ 33.810101][ T624] do_syscall_64+0x57/0xf0 [ 33.810121][ T624] ? clear_bhb_loop+0x50/0xa0 [ 33.810146][ T624] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.810169][ T624] RIP: 0033:0x7f300855d68e [ 33.810187][ T624] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 33.810204][ T624] RSP: 002b:00007f300937efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 33.810229][ T624] RAX: ffffffffffffffda RBX: 00007f300937f6c0 RCX: 00007f300855d68e [ 33.810245][ T624] RDX: 000000000000000f RSI: 00007f300937f0a0 RDI: 0000000000000004 [ 33.810259][ T624] RBP: 00007f300937f090 R08: 0000000000000000 R09: 0000000000000000 [ 33.810273][ T624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.810286][ T624] R13: 00007f3008816038 R14: 00007f3008815fa0 R15: 00007fff6a1d04b8 [ 33.810304][ T624] [ 34.101213][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 34.101233][ T36] audit: type=1400 audit(1779233516.120:171): avc: denied { create } for pid=628 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.101892][ T629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=629 comm=syz.3.84 [ 34.114149][ T36] audit: type=1400 audit(1779233516.120:172): avc: denied { write } for pid=628 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.254564][ T36] audit: type=1400 audit(1779233516.280:173): avc: denied { write } for pid=628 comm="syz.3.84" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.404163][ T456] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.421465][ T632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.430673][ T632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.443127][ T632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.452172][ T632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.663649][ T31] usb 2-1: USB disconnect, device number 3 [ 35.468614][ T36] audit: type=1400 audit(1779233517.490:174): avc: denied { ioctl } for pid=650 comm="syz.3.92" path="socket:[5021]" dev="sockfs" ino=5021 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 35.490569][ T655] netlink: 'syz.3.94': attribute type 4 has an invalid length. [ 35.493657][ T36] audit: type=1400 audit(1779233517.490:175): avc: granted { setsecparam } for pid=650 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 35.619017][ T36] audit: type=1400 audit(1779233517.640:176): avc: denied { read write } for pid=661 comm="syz.2.97" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 35.644172][ T36] audit: type=1400 audit(1779233517.640:177): avc: denied { open } for pid=661 comm="syz.2.97" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 35.678188][ T36] audit: type=1400 audit(1779233517.700:178): avc: denied { create } for pid=661 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.697604][ T36] audit: type=1400 audit(1779233517.700:179): avc: denied { setopt } for pid=661 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.834206][ T456] usb 4-1: device descriptor read/64, error -71 [ 35.914227][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.948034][ T311] usb 1-1: USB disconnect, device number 9 [ 35.972390][ T679] netlink: 'syz.0.105': attribute type 2 has an invalid length. [ 35.980173][ T679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 35.999136][ T36] audit: type=1400 audit(1779233518.020:180): avc: denied { remount } for pid=680 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.064178][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 36.070320][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.080647][ T10] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 36.089865][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.094154][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.098320][ T456] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 36.114725][ T495] bridge_slave_1: left allmulticast mode [ 36.120396][ T495] bridge_slave_1: left promiscuous mode [ 36.126312][ T10] usb 3-1: config 0 descriptor?? [ 36.132282][ T10] usb 3-1: bad CDC descriptors [ 36.137418][ T495] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.145059][ T10] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 36.152935][ T10] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 36.160379][ T495] bridge_slave_0: left allmulticast mode [ 36.166105][ T495] bridge_slave_0: left promiscuous mode [ 36.171841][ T10] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 36.179927][ T495] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.191066][ T456] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 36.200325][ T456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.212998][ T456] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 36.227907][ T456] usb 4-1: No valid video chain found. [ 36.275300][ T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 36.286526][ T45] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.300126][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.306891][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 36.316015][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.329238][ T45] usb 2-1: config 0 descriptor?? [ 36.333806][ T456] usb 3-1: USB disconnect, device number 3 [ 36.349230][ T495] veth1_macvtap: left promiscuous mode [ 36.354912][ T495] veth0_vlan: left promiscuous mode [ 36.409455][ T683] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.416615][ T683] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.423760][ T683] bridge_slave_0: entered allmulticast mode [ 36.430895][ T683] bridge_slave_0: entered promiscuous mode [ 36.437781][ T683] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.444915][ T683] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.452068][ T683] bridge_slave_1: entered allmulticast mode [ 36.459428][ T683] bridge_slave_1: entered promiscuous mode [ 36.524181][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.531327][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.539556][ T689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.541913][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.550155][ T689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.555006][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.564067][ T689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.581342][ T689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.590544][ T689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.600676][ T683] veth0_vlan: entered promiscuous mode [ 36.600858][ T689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.617474][ T683] veth1_macvtap: entered promiscuous mode [ 36.618580][ T689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.637440][ T689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.646717][ T689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.657521][ T689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.674672][ T45] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0002/input/input4 [ 36.692402][ T45] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0002/input/input5 [ 36.706343][ T45] kye 0003:0458:5012.0002: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 37.014223][ T45] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 37.165347][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.175805][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 37.184927][ T45] usb 1-1: config 1 has no interface number 0 [ 37.191039][ T45] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.202051][ T45] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 37.212915][ T45] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 37.222045][ T45] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 37.236516][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.245622][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.253714][ T45] usb 1-1: Product: syz [ 37.257955][ T45] usb 1-1: Manufacturer: syz [ 37.262582][ T45] usb 1-1: SerialNumber: syz [ 37.268310][ T699] raw-gadget.7 gadget.0: fail, usb_ep_enable returned -22 [ 37.478168][ T699] capability: warning: `syz.0.111' uses 32-bit capabilities (legacy support in use) [ 37.524353][ T708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 37.693315][ T699] raw-gadget.7 gadget.0: fail, usb_ep_enable returned -22 [ 37.901556][ T45] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 37.908034][ T45] cdc_ncm 1-1:1.1: bind() failure [ 37.916081][ T45] usb 1-1: USB disconnect, device number 10 [ 38.493621][ T64] usb 4-1: USB disconnect, device number 5 [ 38.544193][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.654173][ T10] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 38.694170][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 38.700414][ T45] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 38.708848][ T45] usb 3-1: config 0 has no interface number 0 [ 38.716544][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 38.725682][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.733708][ T45] usb 3-1: Product: syz [ 38.737925][ T45] usb 3-1: Manufacturer: syz [ 38.742650][ T45] usb 3-1: SerialNumber: syz [ 38.748599][ T45] usb 3-1: config 0 descriptor?? [ 38.754651][ T45] smsc95xx v2.0.0 [ 38.805271][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.815440][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 38.828574][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 38.833682][ T315] usb 2-1: USB disconnect, device number 4 [ 38.838204][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.863153][ T10] usb 1-1: config 0 descriptor?? [ 39.214184][ T315] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.284565][ T740] netlink: 60 bytes leftover after parsing attributes in process `syz.3.128'. [ 39.374135][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 39.380373][ T315] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.390538][ T315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.400853][ T315] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.409978][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.417996][ T315] usb 2-1: Product: syz [ 39.422161][ T315] usb 2-1: Manufacturer: syz [ 39.426817][ T315] usb 2-1: SerialNumber: syz [ 39.564179][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.636714][ T315] usb 2-1: 0:2 : does not exist [ 39.643437][ T315] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 39.654690][ T315] usb 2-1: USB disconnect, device number 5 [ 39.663836][ T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.715350][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.726342][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.736154][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 39.745249][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.753969][ T10] usb 4-1: config 0 descriptor?? [ 39.759814][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 39.770655][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 39.780049][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 39.785732][ T746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.791361][ T45] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 39.800750][ T746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.811056][ T45] usb 3-1: USB disconnect, device number 4 [ 39.823562][ T746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.832149][ T746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.153651][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 40.153690][ T36] audit: type=1400 audit(1779233522.170:197): avc: denied { read } for pid=753 comm="syz.1.131" dev="sockfs" ino=5893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.181386][ T36] audit: type=1400 audit(1779233522.180:198): avc: denied { name_bind } for pid=743 comm="syz.3.130" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.203246][ T36] audit: type=1400 audit(1779233522.180:199): avc: denied { node_bind } for pid=743 comm="syz.3.130" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 40.226041][ T36] audit: type=1400 audit(1779233522.200:200): avc: denied { append } for pid=753 comm="syz.1.131" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.249050][ T36] audit: type=1400 audit(1779233522.200:201): avc: denied { open } for pid=753 comm="syz.1.131" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.389517][ T36] audit: type=1400 audit(1779233522.410:202): avc: denied { write } for pid=767 comm="syz.1.136" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.418171][ T36] audit: type=1400 audit(1779233522.430:203): avc: denied { ioctl } for pid=767 comm="syz.1.136" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.443957][ T768] No source specified [ 40.472616][ T36] audit: type=1400 audit(1779233522.460:204): avc: denied { mounton } for pid=767 comm="syz.1.136" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 40.508673][ T36] audit: type=1400 audit(1779233522.530:205): avc: denied { ioctl } for pid=778 comm="syz.2.139" path="/dev/input/event2" dev="devtmpfs" ino=209 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.569616][ T36] audit: type=1400 audit(1779233522.560:206): avc: denied { read write } for pid=778 comm="syz.2.139" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.754155][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.905549][ T45] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 40.913998][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.934207][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.943998][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.956924][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.966023][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.974880][ T45] usb 2-1: config 0 descriptor?? [ 41.018379][ T784] netlink: 'syz.2.141': attribute type 2 has an invalid length. [ 41.026317][ T784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 41.069168][ T786] netlink: 188 bytes leftover after parsing attributes in process `syz.2.142'. [ 41.156787][ T494] bridge_slave_1: left allmulticast mode [ 41.162543][ T494] bridge_slave_1: left promiscuous mode [ 41.168649][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.177834][ T494] bridge_slave_0: left allmulticast mode [ 41.183654][ T494] bridge_slave_0: left promiscuous mode [ 41.193490][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.337734][ T494] veth1_macvtap: left promiscuous mode [ 41.343369][ T494] veth0_vlan: left promiscuous mode [ 41.407176][ T45] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 41.427816][ T45] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 41.464702][ T45] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 41.608676][ T779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.621762][ T779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.640775][ T64] usb 2-1: USB disconnect, device number 6 [ 41.665086][ T456] usb 1-1: USB disconnect, device number 11 [ 41.725179][ T788] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.734261][ T788] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.744046][ T788] bridge_slave_0: entered allmulticast mode [ 41.751099][ T788] bridge_slave_0: entered promiscuous mode [ 41.758795][ T788] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.766070][ T788] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.773225][ T788] bridge_slave_1: entered allmulticast mode [ 41.780571][ T788] bridge_slave_1: entered promiscuous mode [ 41.818393][ T494] ------------[ cut here ]------------ [ 41.823980][ T494] WARNING: CPU: 0 PID: 494 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 41.834052][ T494] Modules linked in: [ 41.838022][ T494] CPU: 0 UID: 0 PID: 494 Comm: kworker/u8:37 Not tainted syzkaller #0 3e7fae14ba6b85f6920b1ae189ed61b1234f6a84 [ 41.849800][ T494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 41.859927][ T494] Workqueue: netns cleanup_net [ 41.864783][ T494] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 41.870822][ T494] Code: e8 c1 fa d2 fc 4b 83 3c 3e 00 75 19 e8 f5 6e 7a fc 49 81 ff f8 07 00 00 74 1b e8 e7 6e 7a fc 49 83 c7 08 eb c9 e8 dc 6e 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 41.890488][ T494] RSP: 0018:ffffc9000da77b90 EFLAGS: 00010293 [ 41.896624][ T494] RAX: ffffffff850d54c4 RBX: ffff88812a1a0000 RCX: ffff888116bc2600 [ 41.904650][ T494] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888104bd40b8 [ 41.912668][ T494] RBP: ffffc9000da77bb0 R08: ffffffff87d49147 R09: 1ffffffff0fa9228 [ 41.920707][ T494] R10: dffffc0000000000 R11: fffffbfff0fa9229 R12: dffffc0000000000 [ 41.928756][ T494] R13: dffffc0000000000 R14: ffff888104bd4000 R15: 00000000000000b8 [ 41.936789][ T494] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 41.945980][ T494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.952670][ T494] CR2: 00007fbb96434ff8 CR3: 000000012537a000 CR4: 00000000003526b0 [ 41.960727][ T494] Call Trace: [ 41.964043][ T494] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 41.967016][ T494] cleanup_net+0x6c0/0xc90 [ 41.971481][ T494] ? __cfi_cleanup_net+0x10/0x10 [ 41.976488][ T494] process_scheduled_works+0x7d4/0x1020 [ 41.977726][ T788] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.982083][ T494] worker_thread+0xc51/0x1370 [ 41.989120][ T788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.989209][ T788] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.993812][ T494] kthread+0x2c9/0x370 [ 42.000998][ T788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.008027][ T494] ? __cfi_worker_thread+0x10/0x10 [ 42.024774][ T494] ? __cfi_kthread+0x10/0x10 [ 42.029510][ T494] ret_from_fork+0x67/0xa0 [ 42.033969][ T494] ? __cfi_kthread+0x10/0x10 [ 42.038641][ T494] ret_from_fork_asm+0x1a/0x30 [ 42.043458][ T494] [ 42.046548][ T494] ---[ end trace 0000000000000000 ]--- [ 42.053293][ T494] ------------[ cut here ]------------ [ 42.058846][ T494] WARNING: CPU: 0 PID: 494 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 42.068999][ T494] Modules linked in: [ 42.072970][ T494] CPU: 0 UID: 0 PID: 494 Comm: kworker/u8:37 Tainted: G W syzkaller #0 3e7fae14ba6b85f6920b1ae189ed61b1234f6a84 [ 42.086241][ T494] Tainted: [W]=WARN [ 42.090080][ T494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 42.100191][ T494] Workqueue: netns cleanup_net [ 42.105032][ T494] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 42.111159][ T494] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 a0 6e 7a fc 49 81 ff f8 07 00 00 74 1b e8 92 6e 7a fc 49 83 c7 08 eb c5 e8 87 6e 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 77 6e 7a fc 5b 41 5c 41 5e 41 [ 42.130838][ T494] RSP: 0018:ffffc9000da77b90 EFLAGS: 00010293 [ 42.136977][ T494] RAX: ffffffff850d5519 RBX: ffff888104bd4800 RCX: ffff888116bc2600 [ 42.145042][ T494] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888104bd4808 [ 42.153042][ T494] RBP: ffffc9000da77bb0 R08: ffffffff87d49147 R09: 1ffffffff0fa9228 [ 42.161084][ T494] R10: dffffc0000000000 R11: fffffbfff0fa9229 R12: dffffc0000000000 [ 42.169164][ T494] R13: dffffc0000000000 R14: ffff888104bd4000 R15: 0000000000000008 [ 42.177206][ T494] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 42.186200][ T494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.192839][ T494] CR2: 00007fbb96434ff8 CR3: 00000001208ba000 CR4: 00000000003526b0 [ 42.200853][ T494] Call Trace: [ 42.204185][ T494] [ 42.207126][ T494] cleanup_net+0x6c0/0xc90 [ 42.211551][ T494] ? __cfi_cleanup_net+0x10/0x10 [ 42.216521][ T494] process_scheduled_works+0x7d4/0x1020 [ 42.222099][ T494] worker_thread+0xc51/0x1370 [ 42.226854][ T494] kthread+0x2c9/0x370 [ 42.230949][ T494] ? __cfi_worker_thread+0x10/0x10 [ 42.236090][ T494] ? __cfi_kthread+0x10/0x10 [ 42.240752][ T494] ret_from_fork+0x67/0xa0 [ 42.245214][ T494] ? __cfi_kthread+0x10/0x10 [ 42.249841][ T494] ret_from_fork_asm+0x1a/0x30 [ 42.254667][ T494] [ 42.257724][ T494] ---[ end trace 0000000000000000 ]--- [ 42.316949][ T494] ------------[ cut here ]------------ [ 42.322492][ T494] WARNING: CPU: 0 PID: 494 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 42.332053][ T494] Modules linked in: [ 42.336019][ T494] CPU: 0 UID: 0 PID: 494 Comm: kworker/u8:37 Tainted: G W syzkaller #0 3e7fae14ba6b85f6920b1ae189ed61b1234f6a84 [ 42.349462][ T494] Tainted: [W]=WARN [ 42.353394][ T494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 42.363496][ T494] Workqueue: netns cleanup_net [ 42.368321][ T494] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 42.373899][ T494] Code: 3c 20 00 74 08 48 89 df e8 2f c7 ed fc 48 8b 3b e8 f7 ce d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 eb b7 00 cc e8 52 3b 95 fc <0f> 0b e9 b0 fd ff ff e8 46 3b 95 fc 0f 0b e9 18 fe ff ff e8 3a 3b [ 42.393571][ T494] RSP: 0018:ffffc9000da77b70 EFLAGS: 00010293 [ 42.399687][ T494] RAX: ffffffff84f2884e RBX: ffff88812a1a0000 RCX: ffff888116bc2600 [ 42.407713][ T494] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888116bc2600 [ 42.415746][ T494] RBP: ffffc9000da77b98 R08: ffffffff87d49147 R09: 1ffffffff0fa9228 [ 42.423736][ T494] R10: dffffc0000000000 R11: fffffbfff0fa9229 R12: 1ffffffff0fa8f78 [ 42.431910][ T494] R13: dffffc0000000000 R14: ffff88812a1a0c00 R15: dffffc0000000000 [ 42.440048][ T494] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 42.449025][ T494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.455660][ T494] CR2: 00007fbb96434ff8 CR3: 000000010cf34000 CR4: 00000000003526b0 [ 42.463654][ T494] Call Trace: [ 42.466974][ T494] [ 42.469928][ T494] xfrm_net_exit+0x31/0x80 [ 42.474394][ T494] cleanup_net+0x6c0/0xc90 [ 42.478840][ T494] ? __cfi_cleanup_net+0x10/0x10 [ 42.483784][ T494] process_scheduled_works+0x7d4/0x1020 [ 42.489371][ T494] worker_thread+0xc51/0x1370 [ 42.494074][ T494] kthread+0x2c9/0x370 [ 42.498200][ T494] ? __cfi_worker_thread+0x10/0x10 [ 42.503316][ T494] ? __cfi_kthread+0x10/0x10 [ 42.508042][ T494] ret_from_fork+0x67/0xa0 [ 42.512526][ T494] ? __cfi_kthread+0x10/0x10 [ 42.517147][ T494] ret_from_fork_asm+0x1a/0x30 [ 42.521962][ T494] [ 42.525017][ T494] ---[ end trace 0000000000000000 ]--- [ 42.584317][ T467] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.591615][ T467] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.636334][ T494] bridge_slave_1: left allmulticast mode [ 42.642042][ T494] bridge_slave_1: left promiscuous mode [ 42.647974][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.650045][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 42.661094][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 42.661272][ T494] bridge_slave_0: left allmulticast mode [ 42.676700][ T10] usb 4-1: USB disconnect, device number 6 [ 42.677914][ T494] bridge_slave_0: left promiscuous mode [ 42.688255][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.696465][ T494] bridge_slave_1: left allmulticast mode [ 42.702101][ T494] bridge_slave_1: left promiscuous mode [ 42.707792][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.715187][ T494] bridge_slave_0: left allmulticast mode [ 42.720817][ T494] bridge_slave_0: left promiscuous mode [ 42.726542][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.937510][ T494] veth1_macvtap: left promiscuous mode [ 42.943032][ T494] veth0_vlan: left promiscuous mode [ 42.948686][ T494] veth1_macvtap: left promiscuous mode [ 42.954264][ T494] veth0_vlan: left promiscuous mode [ 43.355741][ T494] bridge_slave_1: left allmulticast mode [ 43.361428][ T494] bridge_slave_1: left promiscuous mode [ 43.367089][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.374473][ T494] bridge_slave_0: left allmulticast mode [ 43.380123][ T494] bridge_slave_0: left promiscuous mode [ 43.385767][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.393310][ T494] bridge_slave_1: left allmulticast mode [ 43.398988][ T494] bridge_slave_1: left promiscuous mode [ 43.404596][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.411936][ T494] bridge_slave_0: left allmulticast mode [ 43.417676][ T494] bridge_slave_0: left promiscuous mode [ 43.423269][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.586716][ T494] veth1_macvtap: left promiscuous mode [ 43.592261][ T494] veth0_vlan: left promiscuous mode