last executing test programs: 4m46.540139473s ago: executing program 3 (id=1676): syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a000905000000000000000705", @ANYRES16], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0x24, r6, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) clock_getres(0xeaffffff, 0x0) r7 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r11, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r7, 0x46f3, 0x0, 0x0, 0x0, 0x0) r12 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r12, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) accept4(r1, 0x0, 0x0, 0x0) 4m43.178233963s ago: executing program 3 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0xf5ffffff}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 4m43.121119916s ago: executing program 3 (id=1694): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001038, r1, 0x0) fanotify_mark(0xffffffffffffffff, 0x201, 0x8000033, r1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x4b4c, &(0x7f0000000280)) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x20, 0x1, 0x4}}, 0x14) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = socket(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r6 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x1c}, 0x1c) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000030000000100000008000100", @ANYRES32=r8, @ANYBLOB="4c00088048000080200004000a004e2100000002000000000000000000000000000000010000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x68}, 0x1, 0x0, 0x0, 0x4009041}, 0x0) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r9}, 0x8) ioctl$RTC_IRQP_READ(r10, 0x8008700b, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 4m42.39483884s ago: executing program 3 (id=1698): sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) 4m41.394170724s ago: executing program 3 (id=1701): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x3) getpgid(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa0\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) io_setup(0xd, &(0x7f0000000000)) sendmsg$netlink(r6, &(0x7f0000009640)={0x0, 0x0, &(0x7f00000095c0)=[{&(0x7f0000007d40)={0x10, 0x10, 0x300, 0x70bd25, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r9, 0x0) 4m40.7389041s ago: executing program 3 (id=1704): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0, r2}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x274e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x7, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) socket$key(0xf, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r5, 0x7277, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x84002) sendto$inet6(r1, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0x10000c9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000d70200"/17], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='f2fs_shutdown\x00', r8, 0x0, 0x4}, 0x18) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='\"'], 0x922c3) r9 = getpid() process_vm_readv(r9, &(0x7f0000000100), 0x0, &(0x7f0000008640)=[{&(0x7f0000000200)=""/111, 0x6f}], 0x1, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 4m25.628835474s ago: executing program 32 (id=1704): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0, r2}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x274e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x7, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) socket$key(0xf, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r5, 0x7277, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x84002) sendto$inet6(r1, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0x10000c9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000d70200"/17], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='f2fs_shutdown\x00', r8, 0x0, 0x4}, 0x18) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='\"'], 0x922c3) r9 = getpid() process_vm_readv(r9, &(0x7f0000000100), 0x0, &(0x7f0000008640)=[{&(0x7f0000000200)=""/111, 0x6f}], 0x1, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 13.069948824s ago: executing program 2 (id=2591): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101, 0x0, {0xfffe}}) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x81}], 0x1, 0x44804) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001c00)=""/4075, 0xfeb}], 0x1}, 0x20012101) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.614220185s ago: executing program 2 (id=2593): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x30, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xff1f}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r10, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 11.508857015s ago: executing program 1 (id=2594): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r9, @ANYBLOB="0500030001"], 0x28}}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x5e}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) close(r5) 10.158108659s ago: executing program 2 (id=2598): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000004a80)=""/4083, 0xff3}], 0x1}}], 0x1, 0xa2, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000034c0)="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", 0x7fa}], 0x1}}], 0x1, 0x9200000000000004) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/crypto\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000140)=""/55, 0x37, 0x2a0005c1) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000480)={0x0, 0x0, {0xe, 0x4, 0x2, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2eb3}}, './file0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 9.586032696s ago: executing program 1 (id=2599): syz_emit_ethernet(0x76, &(0x7f0000000880)=ANY=[@ANYRESOCT=0x0], 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x531fe3dc) syz_clone3(&(0x7f00000016c0)={0xa4281200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @private2, 0xd}, 0x1c) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000580)={0x0, 0x2, 0x2, {0x1, @sliced={0x36de, [0xfffa, 0x5, 0xfff7, 0x8, 0x6, 0x1ff, 0x3, 0x6, 0x80, 0x5, 0xd3, 0xcfc9, 0xa, 0x7, 0xbb0, 0x7ff, 0x3, 0x1, 0x3, 0x9ab, 0x40, 0xfffe, 0x2, 0x1, 0xf72f, 0x3, 0x8001, 0x401, 0x1, 0x881, 0xffff, 0x8, 0x9, 0x7, 0x8, 0x5, 0xd, 0xff, 0x7e74, 0x945, 0xf, 0x8, 0x3, 0x9, 0x2d60, 0x4, 0xfffa, 0x9], 0x3}}}) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000004240)=0x40000006, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000101401002abd7000fcdbdf25080001000000000008000380"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x844) syz_fuse_handle_req(r1, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8774da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdf06375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d68f1c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361b851de34ccb3c8071b96f1128d7ee79b41246e5628e70272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0ff22321e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6beffffffff5e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf21dad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d1150129176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040fa0200000000000000002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x10000, {0x3, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, {0x0, 0x4, 0x0, 0xe, 0xe5c8563, 0x8, 0x0, 0xf77, 0x1, 0x8000, 0x2000, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) statx(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000240)) 9.522971655s ago: executing program 5 (id=2600): syz_open_dev$evdev(0x0, 0x2, 0x862b01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) epoll_create1(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setreuid(0xee01, 0xee01) 9.462218022s ago: executing program 0 (id=2601): r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x263c, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x7e000000, 0x169, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0xda79, 0x27, 0xfffffffe, 0x1, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) 9.025109912s ago: executing program 4 (id=2602): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/icmp\x00') r1 = socket$key(0xf, 0x3, 0x2) syz_open_dev$radio(0x0, 0x0, 0x2) fsopen(&(0x7f0000000200)='jffs2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010800000000084) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {0xfffffffffffff821, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x7e}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0xc7}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x40048c0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, 0x0) sync_file_range(r0, 0x1, 0x10, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) getegid() 8.369583275s ago: executing program 0 (id=2603): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101, 0x0, {0xfffe}}) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x81}], 0x1, 0x44804) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001c00)=""/4075, 0xfeb}], 0x1}, 0x20012101) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.323870586s ago: executing program 2 (id=2604): syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, &(0x7f00000001c0)={0xd}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {0x0, 0x0, 0xff9e}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) dup2(r2, r2) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\xd2+FG\tX)\x910\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xf3\xa7*O\xe3\xc3L\xd6H\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e34~\xa8\xb8aQtp\xc8r_\x14K\xd35;\x8f_\xe0|Y\x8b'}]}, 0xb8) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7.596694998s ago: executing program 0 (id=2605): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003296fb608229084d488ff01020301090233000104"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000180)=0xa7fa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16], 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe}, {0x7, 0xb}, {0xfffa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@mss={0x2, 0x9}, @mss={0x2, 0x244}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x0, 0x4, 0x600}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18e5ffffcfff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000b80000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/raw6\x00') read$usbmon(r5, &(0x7f00000005c0)=""/225, 0xe1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) 7.535323995s ago: executing program 5 (id=2606): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000002c0)={0x9, 0x800, "ecb3ee1b0136512f3c30ac2c00682921f2bfd9d1f9d220b9", {0x10000, 0x7fffffff}, 0x24}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000240)={0x300, 0x1, 0x71, '\x00', &(0x7f0000000200)=0xa5}) r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000780)="580000001400192340834ba0040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100080800414900400104080058", 0x58}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/185) 6.982184471s ago: executing program 1 (id=2607): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x500, 0x0}}], 0x3e8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae}}, 0x20}}, 0x0) 6.762122007s ago: executing program 2 (id=2608): socket$kcm(0x10, 0x5, 0x0) r0 = gettid() syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb6fcf20d813200039f700000001090212000100defbd500"], 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f00000000c0)=0x2, 0x6, 0xffffffff, 0x0, 0x0, 0x3) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x2, 0xe}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000001c0)={0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa031010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4080) mount$9p_fd(0x0, 0x0, 0x0, 0x420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x104f}}, 0x601) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz1\x00', {}, 0x40002, [0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x81], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6f], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x9) 6.448055241s ago: executing program 4 (id=2609): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) clock_gettime(0x6, &(0x7f0000000240)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000200)='f', 0x1, 0x5}]) 6.128043656s ago: executing program 1 (id=2610): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000002c0)={0x9, 0x800, "ecb3ee1b0136512f3c30ac2c00682921f2bfd9d1f9d220b9", {0x10000, 0x7fffffff}, 0x24}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000240)={0x300, 0x1, 0x71, '\x00', &(0x7f0000000200)=0xa5}) r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000780)="580000001400192340834ba0040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100080800414900400104080058", 0x58}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/185) 4.65342751s ago: executing program 4 (id=2611): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0x5, "0ae1ede5bb22d468e928383cd56689b434b8698ba2a13dc216d926f0c5b1461a", 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, &(0x7f0000000040)=""/37) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0xb}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x19c, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x188, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x81, 0xb, 0x4, 0x6}, {0x7fd, 0x7c, 0x4, 0x10001}, {0x9, 0x0, 0xff, 0x27a5e454}, {0xeb00, 0x7, 0x1, 0x5}, {0x3, 0x66, 0xb4, 0x3ff}, {0x3, 0x8, 0x3, 0xffffffff}]}]}, {0x11, 0x6, "4e09f99ec47a0201106423ff2b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x104, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0xd6, 0x6, "f47a6ee8ea49a5b3b54f330a5102ad0a304a72b343ca1664ff7e6f2c894c9141525599750abfef4c636261a56d5760c05a185bd2b24551690d63428f5113b59e2283d2b2c472c5a0f8fa0ea220741d7f0b40315eb2df82c2043d7a9489ba49e38abf65523f9c87a91982ee91708eabc61d608904be37a98fe09c9b19c3106a6053153aecb0e0b8641b1ea3fff4bf38ea1ffcd7c872d236f338c470bacb3b7da97a71292f3dd98564f78b318b8d5f9e4f6fe94ff0545f85071f742580be7fe2dd1ad3e1390b6352a35ad59ebbaabca4dfe3d1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 3.854052157s ago: executing program 4 (id=2612): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x3) getpgid(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa0\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) io_setup(0xd, &(0x7f0000000000)) sendmsg$netlink(r6, &(0x7f0000009640)={0x0, 0x0, &(0x7f00000095c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r9, 0x0) 3.851012481s ago: executing program 0 (id=2613): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r0, 0xf, &(0x7f0000000080)={0xffffffff00000003, 0x3a}, 0x0) epoll_create1(0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="987efc3090a5d4a252dc59a2965ec904b19320d9e95fa203cc3d2e74598e720780304360e6e29c32754c3df8ed548c0fb24fa47d67077948e8f068724324b863309a016a3162fa085cd88f3bd3af68af3e3702cba3ccfc7a00a0dd7e5a93ee894d0299059872c06860faec1b56dd1a3545a8c98a", @ANYRES32=r3, @ANYBLOB='\b\x00\b', @ANYBLOB="08000300030000000a0002", @ANYRES32=0x0, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r5, @ANYBLOB="080002"], 0x40}}, 0x8080) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, &(0x7f0000000000)) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) 3.315712509s ago: executing program 5 (id=2614): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000040)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0xb000000) 2.815658584s ago: executing program 0 (id=2615): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x44, 0x19, 0x901, 0x70bd29, 0x25dfdbfb, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xff, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x240003) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x87) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(0xffffffffffffffff, 0x1) close(r0) 2.722132803s ago: executing program 5 (id=2616): syz_open_dev$evdev(0x0, 0x2, 0x862b01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) epoll_create1(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setreuid(0xee01, 0xee01) 2.679616067s ago: executing program 2 (id=2617): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) socket(0x18, 0x4, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) sendmmsg(r8, &(0x7f0000001b00)=[{{&(0x7f0000000440)=@in6={0xa, 0x4e23, 0xfffff211, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000600)="845f53482e6f6c33e9a6ae1d2aa2b84236eb10458549eea71a5e2895578c2e3f10858f5790befb6228dafe9dae42479bcf3d5b60f68e2dbc163cac3c4a1e36b2da91b548657c14f5d1d28e883ce87a8336e6fd519ad1e22d2c6de4716d9b9afcf76baa72e1fc440e7ebcf8b741f90a1d82e144d4ac222589595bc822b5", 0x7d}, {&(0x7f00000007c0)="03c8a0b1b9c24560d3c9f59951050e54fe1c678de9da3929b4793b20a3e6a2ca9a5e92060facae6491b1d2983eaa814e83447fd3f8c0072655d77db2f92f1cac60a41ca840f49447d417134e29b28ead09cacfde915c1a5808aef49ea40ac81d588c3b45c399df2986a717fc956fa1f8f5e3e2caa75d5a17a1d2026eaa3d5574683afce6e869c3e7acf736b022c12e3d4c807dd90029cd135bcadb5e1c3ebb4b206964c342753f678ab4f556924678fdffa6a7346fdbaa1c5cdb37b0ca3fd54cd2b916b5cd5c8a07db854342f5daaaedac7fd357", 0xd4}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000680)="e76db00620384720e677ed8784754237edf41c8cf95323eb2e1364ba5b836ebc51e96d52acb1e2077082a751882b3de5f191b75e955ff52eb296d28f671e71bc5941340f80f0cddc5c96b428b75cc8f6558d5f67b339fdb330c8b4a228ad72b004805f3dc6b01de92304bd1c889dffc8b2fb90a7bff199acf5599c87d24f20f634c68b808874ce6040a51e99cef7daa6902009e690750a3332b75646a776b5e6a0cd10839dd1f4afd9459305d376c4fb6c2965341336521f3bc40c", 0xbb}, {&(0x7f00000018c0)="53aff54d545736d1df47bbb241833d905d5935a4649a940202c7ad744216a12f10c43e90393b30d8daa5fe9f44a07875a0e081b8a0e37e0f0f0da75e5bdcdf773ea1211f6354944a85e139e015d067657c439955d08dc81d9f729f076827b9956b425351f59975e776c4e1fff57f299eefce8f802813722e9f4a8ee5a4e56755dab1721c632a33fd2e4e0c305adba4b6d69b260e769962adca5d3758331fc9da0a0fade167", 0xa5}, {&(0x7f0000001980)="296e1893880b234b5c1e643c7b4e882835150c7dc96f13964b463b86162d2d91a7eedce6fb3e66837a7c74919c89791e1e3921fa449d1745c9dceb1e5409b63da33a83b9ef6377a9c490e7222042a0a307c8da93ca12376db21cc6124e1b91fb628de6bf333669938f2d4fbb12380a96e62a1db59dc2fa28871f07a5ec7b223ce1c459f2018428d0b042225e4345525d10034a1a6823643f1395175b", 0x9c}, {&(0x7f00000001c0)="aae77f74b332d0e4fd32910f92e8c7753518db9aa1b86d3b4c", 0x19}, {&(0x7f00000002c0)="296cbc5e9664895b7a517350ef1166726a7d1ed445c2c8c108035dde613848f8f6c11078e1b2bf1fd6937cf0fc4abebe4f042f8423260e60bf", 0x39}, {&(0x7f0000000580)="1e72be09d71496d1aacdb1d524dfb7950b12f804c96e615d0a8757827d4ee38e9208ad08d18e27006b2fa698b4ce519a507b3dd8f3e5ac8d23bf5984ae7562", 0x3f}], 0x9}}], 0x1, 0x40) 2.545313687s ago: executing program 1 (id=2618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a820000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4ad412145acb3da400001fb700674f19b44e09f9315033bf79ac2dff060106003901000d0000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e205007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000008942f335", 0xc0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf2508000000180004"], 0x2c}}, 0x26008890) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409afd53815f775ab04810637bd8c9b2606a8512ee5622829a369d77900cfc7987f950003fb657f4c17131695efdcead8816ddae634049c3dab49a0ca36b1d5d93c8dac8fa0ba2a74f55d159667e3b52ec903f439a21a023b4bc7bf4463d73f5ae46a680f138c34f0ab2e8503ce342bfb26e481f087a08d410a8886335ac1fda0df344dfbb68b6bb8fcc2bf9a85fe835f350fb281e1159b093d52c519a3d61cd4979941c87ebf52404bdb04ebce4e1980314c1b03a674a86d6cf027b9076559eecadd6cbc5daab4002468d3653a11bbcb9cf625b1e4fe49a398e63200944d4ecee2741a09daf3650edb6a8dca6dc705873b78767c0e942a766c8b", 0x1c4}], 0x1}}], 0x1, 0x400c0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2.051404154s ago: executing program 4 (id=2619): accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000951ceeff000000002353aff4d6d77a41495d229bc896c20d67b23b34ac89f77caeb6081dbf98e140e9db623e77cf58522d0a64aaeb76704bedf22ae01b93a883752521b145972cd464628952a0a1cb258b2ce1a7bf96e988754cc154f1d2a09fd47ecae13f7007fc0348bafd0b0797727904ba47b2ff7d0e93aa4d5c10d8fc7ceca26f3f74f9737fc0d8f951046b15ab06197c1bd5f1e17b860a5820c1adc7d5f8d58ed94d870f02fdcaccff7d80d9c9b0eafa63a23245bd707a468544ce92454173518265c4e6869204274ec82e6965a6a30acc2c4d08be9a"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) listen(r5, 0x4) r6 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000400002000000", 0x4c}], 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500f00000000000000001000000000000000c41000000140014"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.369389743s ago: executing program 5 (id=2620): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)={0x5, 0x0, @auto=[0x2f, 0x35, 0x39, 0x13]}, 0xc, 0xfffffffffffffffa) r3 = request_key(0x0, &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) keyctl$instantiate_iov(0x14, r2, &(0x7f0000001880), 0x0, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, 0x0, 0x200002e6) fcntl$setpipe(r6, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000001e7e130000008d87ac17072a99610020b965e5975f8214ab", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703080008000000b7040000000000008500000001", @ANYBLOB="6ce0fbdebd2f940f17123b00ba30d64eb5592d4bbbce45e069a8b6bb3067b0b6a67b9d8e0d926685c051750d967d3b73d37e7c962f07b8224ef2c2cfe995463598577d6465923b7b06fe9b4b4da4f5e363d404b8a77dea5d", @ANYRESHEX=0x0, @ANYRES8=r5, @ANYBLOB, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8044) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.106163827s ago: executing program 1 (id=2621): r0 = inotify_init1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000180)=0x1, 0x4) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x80000008, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x23, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0x9, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800001, 0x800001}, {0x5, 0x4}, {0x8}, {0x5189, 0x21001}, {}, {0x0, 0x8000000}, {}, {}, {0x0, 0xe68b}], 0xc}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 119.510087ms ago: executing program 0 (id=2622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff00000000a4040000000002000f030000000000003404000001ed0a0014040000170000801c400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000003c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d80000800034000000001"], 0xf0}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 73.550266ms ago: executing program 4 (id=2623): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xb59, 0x0, 0x6000, 0xd, r6, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000194c0)={0x1468, 0x3f, 0x300, 0x70bd2d, 0x25dfdbfc, {0x5}, [@typed={0x20, 0x4f, 0x0, 0x0, @binary="1b125257721d373dc186df1d7549d2fba6410ccaccdec21a618db275"}, @generic="27d042", @generic="ad06147bd811f36172bf2d1a81e9c798e2ae14fa3167659defe8d8e4ea9d07b4a8268558ea8f1488d99f1eca6cfeb4add9a0e93f245045fede5c18a4d63c8071a9e25bacadbcee1d5228c30cb50b8a756e0e1a289b53b3babf5dd11787d947ac34c0403c1b88b803fc60", @generic="0353f51ad6b0413456d68fab3996f31a3b3be41690c1ca633c18541aa0ad673ed874c91caac3c4a10fff2924fc2fd27579f2c09b89e2de255796ff70cb8e240acb3718bb4cb7f7afc01ac0d545bc40979a6ff1853a668284d24c93f651c9881bae97df5f4ad911836863f06fd14ac584614991fea13962a61b74aaa47b48bb4219ecc88561934db4118947ea8b3ee415218ea622848ed2ff260a6bf3db929bc7eb6e075dad67974acaac551e7dfec09e5304c672bad3c13e2467b8d254eaa5cde6161590a3171d6504e2b9", @nested={0x168, 0x12c, 0x0, 0x1, [@nested={0x4, 0x4}, @generic="fc0b0c62ebf2743fc8b0ba8311bdff044b9b9ce10a95afaa4aa9283f0a9dfd83a84bec8da5de3b3cb66da3c37b843fe21c0159c12f6df1ca6e3202a31d44ac39c73e751bb0d7d34a31d772f8ffec19efd32d9a196e9c1a3ece9d91f82c86695301bf478462edbb65873de2cc92a332ebd962d8d648bd52fafd28d4747e6d4570399eeeddaa014c291b84af0c9bccb9fdd67e8276786c781ce69eb78fd70dacc8ca189da5fadddc014e9410923b2699141fdc7d320746dec92312a95076bf9eed92e3e5ccc93745bdddbb04c2073babc6c37aad21a9e6a18948caef2b4482a71ed7c85badb24083ca25ab5dc20423d89c70c08d66", @typed={0x5, 0x53, 0x0, 0x0, @str='\x00'}, @typed={0x10, 0x140, 0x0, 0x0, @str='streebog256\x00'}, @generic="64346de232a44aaa9fae1946cc0347a78497822e93c547be45230901367ca12eb8db5a80d9a177295de0cc5b25a9072e4b4ee213093f248eee8f9573ec3109cd2afb0e3e8d7d83755a280afb", @generic, @typed={0x4, 0x73}, @nested={0x4, 0xe}]}, @nested={0x192, 0xb3, 0x0, 0x1, [@nested={0x4, 0x76}, @nested={0x4, 0x61}, @typed={0x8, 0x15, 0x0, 0x0, @uid=r6}, @typed={0x14, 0x47, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @generic="0b89dae81836734134d7b57bb010c92b40147ea36feca47c4be0f72fe4ace9124fac96887ae12c53cfb5fa8883246803e875c82f922808552bfe1b7ed479c3dd749332fa7892129edb3f530794ae8e", @typed={0x8, 0x12f, 0x0, 0x0, @uid}, @generic="fdff5614cefd84e72e28aad0ca2db3c860ac0f7dc3cc001269df4f361193de7d80b98583de3d2a89bd9b315dd81040fe92791f245cfda31610cc8aedd4d093f1c8cb1e1a4b795ec8b02b07dea58e0aa4becba3e47045ac33d5590c663404d5b3ddeb136847a21a1389afe61cfa7625d95d", @generic="733e043dc785951e48f513bad332a1c2e98d0da0b5024e5f641439b2072fd892204dce1b26239cafd0eb8128189df7c553f125a7516d3f32011e7a02a1c120342c9e67624b1fe9053dce7891303f183b41747db809a5df5733ae24e379263e19cbbcfe403bce880f9643173fd595cf367379cef9d86c720860aeb5474588df1269a7dd1e4c93d9315c03", @generic="1a8920ac4137014062739489161411d037f999e454c86687"]}, @generic="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"]}, 0x1468}, 0x1, 0x0, 0x0, 0x11}, 0x4000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019300)=@updpolicy={0x18c, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}}, [@lifetime_val={0x24, 0x9, {0xffffffffffff8000, 0xbb26, 0x1e75, 0x5}}, @address_filter={0x28, 0x1a, {@in=@empty, @in=@rand_addr=0x64010102, 0xa, 0x2, 0x6}}, @algo_auth_trunc={0x72, 0x14, {{'streebog256\x00'}, 0x130, 0x40, "b683d755cc8c1b15a9a16226b60d7693663665a63c962465167253a887d8fbd21d1620de98fc"}}, @coaddr={0x14, 0xe, @in6=@mcast1}]}, 0x18c}}, 0x0) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x40) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0xc4c03d16, 0x0) accept$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) 0s ago: executing program 5 (id=2624): syz_emit_vhci(0x0, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$peek(0x3, r2, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000480)=0x1) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000001c0)={0x80, 0x7, 0x80000000, 0x4, 0x8, "4720dcc7b11929043a30c84b4ef1dc73754a73", 0x7ff, 0xfffffff9}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xff01) kernel console output (not intermixed with test programs): .162817][T13307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2566 sclass=netlink_tcpdiag_socket pid=13307 comm=syz.4.1855 [ 952.227507][ T5851] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 952.236991][T13170] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 952.262080][ T5851] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.288414][ T5851] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 952.309931][ T5851] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 952.342138][ T5851] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 952.353228][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 952.361277][ T5851] usb 3-1: Product: syz [ 952.367521][ T5851] usb 3-1: Manufacturer: syz [ 952.377582][T13291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 952.386707][ T5851] cdc_wdm 3-1:1.0: skipping garbage [ 952.392686][T13170] usb 2-1: device descriptor read/64, error -71 [ 952.402238][ T5851] cdc_wdm 3-1:1.0: skipping garbage [ 952.418933][ T5851] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 952.425603][ T5851] cdc_wdm 3-1:1.0: Unknown control protocol [ 952.593426][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 952.600332][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 952.606791][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 952.613399][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 952.620138][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 952.626757][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 952.633072][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 952.639686][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 952.646459][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 952.653070][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 952.659338][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 952.665917][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 952.672511][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 952.679109][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 952.685353][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 952.691936][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 952.699918][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 952.706514][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 952.713010][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 952.719586][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 952.727232][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 952.729227][ T30] audit: type=1400 audit(1764016021.268:997): avc: denied { read write } for pid=13290 comm="syz.2.1850" name="cdc-wdm0" dev="devtmpfs" ino=3356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 952.788988][T11991] usb 3-1: USB disconnect, device number 41 [ 952.803173][T13170] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 953.023599][ T30] audit: type=1400 audit(1764016021.268:998): avc: denied { open } for pid=13290 comm="syz.2.1850" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 953.074746][T13170] usb 2-1: device descriptor read/64, error -71 [ 953.116570][T13325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1860'. [ 953.165423][T13325] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 953.234257][T13170] usb usb2-port1: attempt power cycle [ 953.574702][T13344] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 953.631925][T13170] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 953.666471][T13345] ubi31: attaching mtd0 [ 953.670687][T13345] ubi31 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 953.977067][T13170] usb 2-1: device descriptor read/8, error -71 [ 954.244619][T13170] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 954.387047][T13359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.846149][T13170] usb 2-1: device descriptor read/8, error -71 [ 954.952164][ T976] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 954.974139][T13170] usb usb2-port1: unable to enumerate USB device [ 955.112103][ T976] usb 1-1: Using ep0 maxpacket: 8 [ 955.972206][ T976] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 955.981261][ T976] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 956.090140][ T976] usb 1-1: Product: syz [ 956.112333][ T976] usb 1-1: Manufacturer: syz [ 956.123445][ T976] usb 1-1: SerialNumber: syz [ 956.145698][ T976] usb 1-1: config 0 descriptor?? [ 958.384049][T13357] md: superblock version 2020439152 not known [ 958.429416][T13357] md: couldn't set array info. -22 [ 958.481853][T13408] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1873'. [ 958.686703][T13399] wg1 speed is unknown, defaulting to 1000 [ 958.700125][T13410] wg1 speed is unknown, defaulting to 1000 [ 958.721326][ T976] usb 1-1: USB disconnect, device number 54 [ 959.721003][T13435] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 960.530300][ T976] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 961.224532][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 961.235309][ T976] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.258021][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 961.272590][ T976] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 961.282214][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.293462][ T976] usb 5-1: config 0 descriptor?? [ 961.721550][ T5851] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 961.730603][ T976] nzxt-smart2 0003:1E71:2009.001D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 961.771534][T11991] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 961.903531][ T5851] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 961.931538][ T5851] usb 2-1: config 0 has no interface number 0 [ 961.933648][T11991] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.941601][ T5851] usb 2-1: config 0 interface 154 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 961.958310][T11991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 961.967141][ T5851] usb 2-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=c0.43 [ 961.979361][T11991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 961.988964][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.989490][T11991] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 962.007704][ T5851] usb 2-1: Product: syz [ 962.014260][ T5851] usb 2-1: Manufacturer: syz [ 962.018897][ T5851] usb 2-1: SerialNumber: syz [ 962.020646][T11991] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 962.032626][ T5851] usb 2-1: config 0 descriptor?? [ 962.033350][T13459] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 962.041460][T11991] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 962.048539][ T5851] pl2303 2-1:0.154: required interrupt-in endpoint missing [ 962.053177][T11991] usb 6-1: Manufacturer: syz [ 962.061845][ T6014] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 962.074960][T11991] usb 6-1: config 0 descriptor?? [ 962.165218][T13444] fuse: Unknown parameter 'fd<0x0000000000000006' [ 962.177795][ T979] usb 5-1: USB disconnect, device number 52 [ 962.234248][ T6014] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 962.243148][ T6014] usb 3-1: config 0 has no interface number 0 [ 962.249341][ T6014] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 962.281902][ T6014] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 962.313955][ T6014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.338795][ T6014] usb 3-1: Product: syz [ 962.355198][ T6014] usb 3-1: Manufacturer: syz [ 962.368542][ T6014] usb 3-1: SerialNumber: syz [ 962.381536][ T30] audit: type=1400 audit(1764016031.058:999): avc: denied { override_creds } for pid=13458 comm="syz.1.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 962.423030][T11991] rc_core: IR keymap rc-hauppauge not found [ 962.430658][ T6014] usb 3-1: config 0 descriptor?? [ 962.441508][T11991] Registered IR keymap rc-empty [ 962.448839][T13464] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 962.456702][T11991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 962.470591][ T6014] ums-karma 3-1:0.46: USB Mass Storage device detected [ 962.477767][T13459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.492701][T11991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 962.543716][T11991] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 962.556285][ T6014] ums-karma 3-1:0.46: probe with driver ums-karma failed with error -5 [ 962.598824][T11991] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input29 [ 962.683248][T11991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 962.701624][T11991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 962.715729][ T5851] usb 3-1: USB disconnect, device number 42 [ 962.735217][T11991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 962.764510][T11991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 962.792297][T11991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 963.803489][T11991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.046242][T11991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.087607][T11991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.111558][T11991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.247593][T11991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.272887][T11991] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 964.338280][T11991] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 964.367684][T11991] usb 6-1: USB disconnect, device number 3 [ 964.684707][ T5851] usb 2-1: USB disconnect, device number 41 [ 965.007038][T13483] tipc: Started in network mode [ 965.017144][T13483] tipc: Node identity 46, cluster identity 4711 [ 965.043511][T13483] tipc: Node number set to 70 [ 966.456058][T13515] FAULT_INJECTION: forcing a failure. [ 966.456058][T13515] name failslab, interval 1, probability 0, space 0, times 0 [ 966.468902][T13515] CPU: 1 UID: 0 PID: 13515 Comm: syz.2.1901 Not tainted syzkaller #0 PREEMPT(full) [ 966.468929][T13515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 966.468941][T13515] Call Trace: [ 966.468949][T13515] [ 966.468957][T13515] dump_stack_lvl+0x16c/0x1f0 [ 966.468982][T13515] should_fail_ex+0x512/0x640 [ 966.469005][T13515] ? __kmalloc_cache_noprof+0x5f/0x780 [ 966.469036][T13515] should_failslab+0xc2/0x120 [ 966.469059][T13515] __kmalloc_cache_noprof+0x72/0x780 [ 966.469084][T13515] ? trace_sched_exit_tp+0xd1/0x120 [ 966.469107][T13515] ? loop_add+0xb6/0xb70 [ 966.469137][T13515] ? loop_add+0xb6/0xb70 [ 966.469159][T13515] loop_add+0xb6/0xb70 [ 966.469189][T13515] ? __pfx_loop_add+0x10/0x10 [ 966.469236][T13515] ? rcu_is_watching+0x12/0xc0 [ 966.469260][T13515] ? irqentry_exit+0x3b/0x90 [ 966.469283][T13515] loop_control_ioctl+0x13e/0x630 [ 966.469311][T13515] ? __pfx_loop_control_ioctl+0x10/0x10 [ 966.469338][T13515] ? __x64_sys_ioctl+0x123/0x210 [ 966.469369][T13515] ? __pfx_loop_control_ioctl+0x10/0x10 [ 966.469397][T13515] __x64_sys_ioctl+0x18e/0x210 [ 966.469426][T13515] do_syscall_64+0xcd/0xfa0 [ 966.469447][T13515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.469468][T13515] RIP: 0033:0x7fef2498f749 [ 966.469484][T13515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.469502][T13515] RSP: 002b:00007fef25755038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.469521][T13515] RAX: ffffffffffffffda RBX: 00007fef24be6090 RCX: 00007fef2498f749 [ 966.469534][T13515] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000009 [ 966.469546][T13515] RBP: 00007fef25755090 R08: 0000000000000000 R09: 0000000000000000 [ 966.469558][T13515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.469569][T13515] R13: 00007fef24be6128 R14: 00007fef24be6090 R15: 00007ffc64a7e908 [ 966.469599][T13515] [ 967.064125][T13523] overlay: Unknown parameter ' ¹ÅÒ' [ 967.371602][ T30] audit: type=1400 audit(1764016036.048:1000): avc: denied { ioctl } for pid=13518 comm="syz.1.1903" path="socket:[44702]" dev="sockfs" ino=44702 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 967.595916][ T30] audit: type=1400 audit(1764016036.278:1001): avc: denied { map } for pid=13530 comm="syz.2.1906" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 967.683031][ T30] audit: type=1400 audit(1764016036.278:1002): avc: denied { execute } for pid=13530 comm="syz.2.1906" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 970.467177][T13566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 971.306826][T13570] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 971.313378][T13570] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 971.338969][T13570] vhci_hcd vhci_hcd.0: Device attached [ 971.404961][T13578] ubi31: attaching mtd0 [ 971.409134][T13578] ubi31 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 971.581697][T11991] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 971.905838][T13574] vhci_hcd: connection reset by peer [ 971.919397][ T5944] vhci_hcd: stop threads [ 971.935739][ T5944] vhci_hcd: release socket [ 971.953249][ T5944] vhci_hcd: disconnect device [ 972.361828][T13170] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 972.785198][T13604] delete_channel: no stack [ 973.043226][T13170] usb 3-1: Using ep0 maxpacket: 32 [ 973.054915][T13170] usb 3-1: config 3 has an invalid interface number: 136 but max is 0 [ 973.082352][T13170] usb 3-1: config 3 has no interface number 0 [ 973.097733][T13170] usb 3-1: config 3 interface 136 has no altsetting 0 [ 973.163914][T13170] usb 3-1: New USB device found, idVendor=0bda, idProduct=0158, bcdDevice= 0.4b [ 973.192785][T13170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.211487][ T30] audit: type=1400 audit(1764016041.878:1003): avc: denied { shutdown } for pid=13602 comm="syz.4.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 973.214421][T13170] usb 3-1: Product: syz [ 973.265243][T13170] usb 3-1: Manufacturer: syz [ 973.286487][T13170] usb 3-1: SerialNumber: syz [ 973.508365][T13611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 973.958473][T13170] ums-realtek 3-1:3.136: USB Mass Storage device detected [ 974.165987][T13170] usb 3-1: USB disconnect, device number 43 [ 976.563261][T13663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.524290][T11991] vhci_hcd: vhci_device speed not set [ 977.915604][T13673] overlayfs: failed lookup in lower (newroot/386, name='file0', err=-40): overlapping layers [ 978.333722][T13689] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1948'. [ 978.406171][T13689] validate_nla: 37 callbacks suppressed [ 978.406226][T13689] netlink: 'syz.1.1948': attribute type 4 has an invalid length. [ 982.001565][ T30] audit: type=1400 audit(1764016050.258:1004): avc: denied { ioctl } for pid=13729 comm="syz.4.1962" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 983.207040][T13753] bridge1: entered allmulticast mode [ 983.271019][T13753] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1966'. [ 983.280472][T13753] ksmbd: Unknown IPC event: 3, ignore. [ 984.548111][T13763] Bluetooth: MGMT ver 1.23 [ 987.549869][T13790] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1977'. [ 989.331628][T13170] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 989.408527][T13811] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1982'. [ 989.417958][T13811] ksmbd: Unknown IPC event: 3, ignore. [ 989.489013][T13810] bridge10: entered allmulticast mode [ 989.780183][T13819] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1983'. [ 989.802884][T13820] veth0_virt_wifi: mtu greater than device maximum [ 989.824120][T13820] : renamed from bridge_slave_0 (while UP) [ 989.830207][ T30] audit: type=1400 audit(1764016058.488:1005): avc: denied { ioctl } for pid=13813 comm="syz.0.1981" path="socket:[46445]" dev="sockfs" ino=46445 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 989.857518][T13170] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 989.878369][T13170] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 989.893547][T13170] usb 2-1: config 220 has an invalid descriptor of length 59, skipping remainder of the config [ 989.936704][T13823] netlink: 'syz.5.1983': attribute type 4 has an invalid length. [ 989.944600][T13170] usb 2-1: config 220 has no interface number 2 [ 990.006462][T13170] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 990.131064][T13170] usb 2-1: config 220 interface 0 has no altsetting 0 [ 990.384609][T13170] usb 2-1: config 220 interface 76 has no altsetting 0 [ 990.401724][T13170] usb 2-1: config 220 interface 1 has no altsetting 0 [ 990.410811][T13170] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 990.439299][T13170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.580885][T13170] usb 2-1: Product: syz [ 990.602841][T13170] usb 2-1: Manufacturer: syz [ 990.661989][T13170] usb 2-1: SerialNumber: syz [ 990.741274][T13170] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 990.769260][T13170] uvcvideo 2-1:220.0: No valid video chain found. [ 990.815737][T13170] usb 2-1: selecting invalid altsetting 0 [ 990.926505][ T30] audit: type=1400 audit(1764016059.608:1006): avc: denied { read } for pid=13836 comm="syz.1.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 990.953071][T13170] usb 2-1: selecting invalid altsetting 0 [ 990.981164][T13170] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 991.071752][T13170] usb 2-1: USB disconnect, device number 42 [ 991.077714][ T30] audit: type=1400 audit(1764016059.658:1007): avc: denied { mount } for pid=13836 comm="syz.1.1986" name="/" dev="ramfs" ino=45636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 992.821952][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.787272][T13890] overlayfs: failed lookup in lower (newroot/38, name='file0', err=-40): overlapping layers [ 993.802192][ T979] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 993.864940][ T30] audit: type=1400 audit(1764016062.548:1008): avc: denied { remount } for pid=13888 comm="syz.2.2000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 994.513255][ T979] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 994.573364][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.608449][ T979] usb 5-1: config 0 descriptor?? [ 994.730991][ T979] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 994.863614][T13908] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2004'. [ 995.005976][T13908] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2004'. [ 995.061019][T13908] netlink: 444 bytes leftover after parsing attributes in process `syz.0.2004'. [ 995.076829][ T30] audit: type=1400 audit(1764016063.738:1009): avc: denied { nlmsg_read } for pid=13905 comm="syz.0.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 995.126804][ T979] gp8psk: usb in 128 operation failed. [ 996.415065][T13924] tipc: Started in network mode [ 996.420069][T13924] tipc: Node identity 4, cluster identity 4711 [ 996.426397][T13924] tipc: Node number set to 4 [ 997.385472][ T30] audit: type=1400 audit(1764016065.148:1010): avc: denied { setopt } for pid=13917 comm="syz.2.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 997.391400][ T979] gp8psk: usb in 137 operation failed. [ 997.589935][ T979] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 997.619115][ T979] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 997.639783][ T979] usb 5-1: USB disconnect, device number 53 [ 998.038097][T13927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 999.194173][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2017'. [ 1001.919591][T13996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2024'. [ 1002.541496][ T5851] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1002.742147][ T5851] usb 6-1: Using ep0 maxpacket: 32 [ 1002.751345][ T5851] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1002.761309][T14011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2028'. [ 1002.824818][ T5851] usb 6-1: config 0 has no interface number 0 [ 1002.867320][ T5851] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.893593][ T5851] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.982369][ T5851] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1003.051355][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.145211][ T5851] usb 6-1: config 0 descriptor?? [ 1004.140797][ T5851] usbhid 6-1:0.1: can't add hid device: -71 [ 1004.161527][ T5851] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 1004.231663][ T5851] usb 6-1: USB disconnect, device number 4 [ 1004.677765][T14039] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2034'. [ 1004.687304][T14039] ksmbd: Unknown IPC event: 3, ignore. [ 1004.767900][T14037] bridge12: entered allmulticast mode [ 1006.629512][T14056] tipc: Started in network mode [ 1006.634525][T14056] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1006.643991][T14056] tipc: Enabling of bearer rejected, failed to enable media [ 1007.248725][ T5851] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1007.448973][ T5851] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1007.626989][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.638788][ T5851] usb 6-1: Product: syz [ 1007.651548][ T5851] usb 6-1: Manufacturer: syz [ 1007.657671][ T5851] usb 6-1: SerialNumber: syz [ 1007.672643][ T5851] usb 6-1: config 0 descriptor?? [ 1007.946869][ T5851] usb 6-1: ignoring: probably an ADSL modem [ 1008.377958][T14067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2040'. [ 1009.615438][ T5851] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1009.650278][ T5851] usb 6-1: USB disconnect, device number 5 [ 1012.716855][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2053'. [ 1013.199262][T14128] ubi31: attaching mtd0 [ 1013.203834][T14128] ubi31 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 1013.541516][ T5851] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1013.965567][ T5851] usb 6-1: Using ep0 maxpacket: 8 [ 1013.981090][ T5851] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1013.990810][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1014.209278][ T5851] usb 6-1: Product: syz [ 1014.214543][ T5851] usb 6-1: Manufacturer: syz [ 1014.220586][ T5851] usb 6-1: SerialNumber: syz [ 1014.601671][ T30] audit: type=1400 audit(1764016082.968:1011): avc: denied { getopt } for pid=14136 comm="syz.0.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1014.685777][ T5851] usb 6-1: config 0 descriptor?? [ 1014.706840][T14143] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1014.716524][ T30] audit: type=1400 audit(1764016083.248:1012): avc: denied { name_bind } for pid=14136 comm="syz.0.2057" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1016.276086][ T5851] usb 6-1: USB disconnect, device number 6 [ 1016.337313][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.449843][ C0] vkms_vblank_simulate: vblank timer overrun [ 1017.181783][ T30] audit: type=1400 audit(1764016085.808:1013): avc: denied { accept } for pid=14181 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1020.833967][ T30] audit: type=1400 audit(1764016089.508:1014): avc: denied { ioctl } for pid=14229 comm="syz.1.2079" path="socket:[47425]" dev="sockfs" ino=47425 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1020.952559][T14240] sctp: [Deprecated]: syz.2.2081 (pid 14240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1020.952559][T14240] Use struct sctp_sack_info instead [ 1022.116451][T14260] overlayfs: missing 'lowerdir' [ 1022.257790][ T5851] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1022.766874][ T5851] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1022.812076][ T5851] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1022.825904][ T5851] usb 1-1: can't read configurations, error -71 [ 1022.892671][T14271] overlayfs: missing 'lowerdir' [ 1023.394870][ T30] audit: type=1400 audit(1764016092.028:1015): avc: denied { watch watch_reads } for pid=14276 comm="syz.5.2093" path="/proc/206" dev="proc" ino=47503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1023.751191][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2094'. [ 1023.909497][ T30] audit: type=1400 audit(1764016092.588:1016): avc: denied { map } for pid=14282 comm="syz.1.2094" path="socket:[47515]" dev="sockfs" ino=47515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1024.968029][ T30] audit: type=1400 audit(1764016093.648:1017): avc: denied { ioctl } for pid=14298 comm="syz.5.2099" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1025.087017][ T30] audit: type=1400 audit(1764016093.648:1018): avc: denied { create } for pid=14298 comm="syz.5.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1025.092653][T14302] overlayfs: missing 'lowerdir' [ 1027.256155][ T30] audit: type=1400 audit(1764016094.878:1019): avc: denied { firmware_load } for pid=14325 comm="syz.4.2108" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1027.942320][ T30] audit: type=1400 audit(1764016096.628:1020): avc: denied { connect } for pid=14338 comm="syz.1.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1027.985917][T14340] afs: Unknown parameter 'dynv/kvm' [ 1028.294378][T14349] overlayfs: missing 'lowerdir' [ 1028.900071][ T30] audit: type=1400 audit(1764016097.088:1021): avc: denied { ioctl } for pid=14343 comm="syz.2.2112" path="socket:[48640]" dev="sockfs" ino=48640 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1029.732174][ T30] audit: type=1400 audit(1764016098.418:1022): avc: denied { bind } for pid=14364 comm="syz.4.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1030.819680][ T5851] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1031.048722][ T5851] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 1031.150349][ T5851] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.208935][ T5851] usb 5-1: config 171 has no interface number 0 [ 1031.235793][ T5851] usb 5-1: config 171 interface 109 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1031.278860][ T5851] usb 5-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1031.376827][ T30] audit: type=1400 audit(1764016100.058:1023): avc: denied { mount } for pid=14385 comm="syz.5.2127" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1031.389194][ T5851] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1031.399210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.417647][ T30] audit: type=1400 audit(1764016100.098:1024): avc: denied { remount } for pid=14385 comm="syz.5.2127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1031.417741][T14386] devtmpfs: Unknown parameter 'nr_blocka' [ 1031.438826][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.467188][ T5851] usb 5-1: Product: syz [ 1031.480801][ T5851] usb 5-1: Manufacturer: syz [ 1031.493156][ T5851] usb 5-1: SerialNumber: syz [ 1031.603983][T14391] overlayfs: missing 'lowerdir' [ 1031.613854][ T30] audit: type=1400 audit(1764016100.298:1025): avc: denied { unmount } for pid=12830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1031.832253][ T5932] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1032.065878][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 1032.073560][ T5932] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1032.083577][ T5932] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1032.192054][ T5932] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1032.266154][ T5932] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1032.269088][T14365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.286625][T14365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.323553][ T5932] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1032.364724][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.692354][ T5851] ath6kl: Failed to submit usb control message: -110 [ 1032.699087][ T5851] ath6kl: unable to send the bmi data to the device: -110 [ 1032.707367][ T5851] ath6kl: Unable to send get target info: -110 [ 1032.723969][ T5932] usb 2-1: usb_control_msg returned -32 [ 1032.736124][ T30] audit: type=1400 audit(1764016101.408:1026): avc: denied { connect } for pid=14388 comm="syz.1.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1032.773576][ T5851] ath6kl: Failed to init ath6kl core: -110 [ 1032.786192][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2134'. [ 1032.795460][ T5932] usbtmc 2-1:16.0: can't read capabilities [ 1032.819130][ T5851] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 1032.887547][ T5932] usb 2-1: USB disconnect, device number 43 [ 1033.013381][T14421] syz.5.2134: attempt to access beyond end of device [ 1033.013381][T14421] ram200: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 1033.342413][ T30] audit: type=1400 audit(1764016101.998:1027): avc: denied { accept } for pid=14418 comm="syz.2.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1033.362092][ C1] vkms_vblank_simulate: vblank timer overrun [ 1033.574384][T14365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1033.738684][ T1015] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.749371][ T1015] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.760493][ T1015] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.808150][ T5851] usb 5-1: USB disconnect, device number 54 [ 1036.427075][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2145'. [ 1037.278866][ T30] audit: type=1400 audit(1764016105.958:1028): avc: denied { setopt } for pid=14471 comm="syz.5.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1040.451014][T14519] ubi31: attaching mtd0 [ 1040.455323][T14519] ubi31 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 1040.482781][ T5851] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1040.601903][ T30] audit: type=1400 audit(1764016109.268:1029): avc: denied { map } for pid=14520 comm="syz.4.2164" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1040.611500][T11991] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1040.625333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.941443][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 1040.974584][ T5851] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1040.990755][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1041.002314][ T5851] usb 2-1: Product: syz [ 1041.002375][ T5134] Bluetooth: hci1: command 0x0406 tx timeout [ 1041.006530][ T5851] usb 2-1: Manufacturer: syz [ 1041.088417][ T5851] usb 2-1: SerialNumber: syz [ 1041.143671][ T5851] usb 2-1: config 0 descriptor?? [ 1041.261585][T11991] usb 1-1: Using ep0 maxpacket: 8 [ 1041.299740][T11991] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1041.329590][T11991] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1041.369147][T11991] usb 1-1: Product: syz [ 1041.393020][T11991] usb 1-1: Manufacturer: syz [ 1041.397667][T11991] usb 1-1: SerialNumber: syz [ 1041.447526][T11991] usb 1-1: config 0 descriptor?? [ 1041.667585][T14529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2166'. [ 1043.008732][ T5851] usb 2-1: USB disconnect, device number 44 [ 1043.464164][T11991] usb 1-1: USB disconnect, device number 57 [ 1043.919277][T14560] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1044.031777][T14565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.058395][ T30] audit: type=1400 audit(1764016112.738:1030): avc: denied { mounton } for pid=14566 comm="syz.5.2176" path="/69/file0" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1044.688438][T14585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2179'. [ 1045.666764][T14591] binder: BINDER_SET_CONTEXT_MGR already set [ 1045.673287][T14591] binder: 14589:14591 ioctl 4018620d 200000000040 returned -16 [ 1045.930682][T14593] syzkaller1: entered promiscuous mode [ 1045.936570][T14593] syzkaller1: entered allmulticast mode [ 1046.478045][T14599] fuse: Bad value for 'group_id' [ 1046.485147][T14599] fuse: Bad value for 'group_id' [ 1047.228767][T14604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2186'. [ 1049.304750][T14635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2192'. [ 1049.321469][T14634] xt_hashlimit: max too large, truncated to 1048576 [ 1049.330690][T14634] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1050.358675][T14644] trusted_key: encrypted_key: insufficient parameters specified [ 1050.481875][ T5851] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 1050.947871][ T5851] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 1050.981566][ T5851] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.009581][ T5851] usb 2-1: config 7 has no interface number 0 [ 1051.019217][ T5851] usb 2-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1051.161436][ T5851] usb 2-1: config 7 interface 252 has no altsetting 0 [ 1051.717527][ T5851] usb 2-1: string descriptor 0 read error: -22 [ 1051.730291][ T5851] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1051.944235][T14668] netlink: 'syz.5.2200': attribute type 3 has an invalid length. [ 1052.125656][T14668] netlink: 'syz.5.2200': attribute type 3 has an invalid length. [ 1052.133916][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.142378][T14668] netlink: 'syz.5.2200': attribute type 3 has an invalid length. [ 1052.150872][T14668] netlink: 'syz.5.2200': attribute type 3 has an invalid length. [ 1052.161683][T14668] netlink: 'syz.5.2200': attribute type 3 has an invalid length. [ 1052.434769][T14681] netlink: 'syz.4.2203': attribute type 10 has an invalid length. [ 1052.468689][T14668] netlink: 'syz.5.2200': attribute type 3 has an invalid length. [ 1052.828433][T14668] netlink: 'syz.5.2200': attribute type 3 has an invalid length. [ 1052.861331][T14668] netlink: 'syz.5.2200': attribute type 3 has an invalid length. [ 1052.869856][ T5932] usb 2-1: USB disconnect, device number 45 [ 1052.902863][T14668] netlink: 'syz.5.2200': attribute type 3 has an invalid length. [ 1052.947945][T14681] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1053.051680][ T6014] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1053.077432][T14686] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1053.211507][ T6014] usb 1-1: Using ep0 maxpacket: 8 [ 1053.230876][ T6014] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1053.361468][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1053.369802][ T6014] usb 1-1: Product: syz [ 1053.460309][T14698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2207'. [ 1053.840644][ T6014] usb 1-1: Manufacturer: syz [ 1053.854851][ T6014] usb 1-1: SerialNumber: syz [ 1053.879669][ T6014] usb 1-1: config 0 descriptor?? [ 1054.260078][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.452015][T11991] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1054.732303][T11991] usb 6-1: Using ep0 maxpacket: 16 [ 1054.760870][T11991] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1054.787553][T11991] usb 6-1: config 0 has no interface number 0 [ 1054.794371][T11991] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1054.804866][T11991] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1054.848918][T11991] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1054.864249][T11991] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1054.874559][T11991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.106996][T11991] usb 6-1: Product: syz [ 1055.111330][T11991] usb 6-1: Manufacturer: syz [ 1055.138370][T11991] usb 6-1: SerialNumber: syz [ 1055.164530][ T5851] usb 1-1: USB disconnect, device number 58 [ 1055.178066][T11991] usb 6-1: config 0 descriptor?? [ 1055.192058][T14701] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1055.199305][T14701] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1055.668625][T14701] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1055.697615][T14701] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1056.022244][T14730] trusted_key: encrypted_key: insufficient parameters specified [ 1056.040571][T14730] kAFS: unable to lookup cell 'ÿ' [ 1056.046690][T14730] kAFS: unable to lookup cell '(,c¾Ì' [ 1056.454260][ T30] audit: type=1400 audit(1764016125.088:1031): avc: denied { getopt } for pid=14700 comm="syz.5.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1056.925600][T11991] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1057.015764][T11991] usb 6-1: USB disconnect, device number 7 [ 1063.769818][T14819] bridge11: entered allmulticast mode [ 1063.797816][T14819] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2243'. [ 1063.812047][T14819] ksmbd: Unknown IPC event: 3, ignore. [ 1065.296642][T14823] validate_nla: 44 callbacks suppressed [ 1065.296656][T14823] netlink: 'syz.1.2245': attribute type 3 has an invalid length. [ 1065.766889][T14831] netlink: 'syz.4.2246': attribute type 1 has an invalid length. [ 1065.775334][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 1065.957055][T14823] netlink: 'syz.1.2245': attribute type 3 has an invalid length. [ 1065.965839][T14823] netlink: 'syz.1.2245': attribute type 3 has an invalid length. [ 1065.978156][T14823] netlink: 'syz.1.2245': attribute type 3 has an invalid length. [ 1065.986671][T14823] netlink: 'syz.1.2245': attribute type 3 has an invalid length. [ 1065.995728][T14823] netlink: 'syz.1.2245': attribute type 3 has an invalid length. [ 1066.005541][T14823] netlink: 'syz.1.2245': attribute type 3 has an invalid length. [ 1066.084806][T14823] netlink: 'syz.1.2245': attribute type 3 has an invalid length. [ 1066.106979][T14823] netlink: 'syz.1.2245': attribute type 3 has an invalid length. [ 1066.426687][T14843] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2248'. [ 1066.983189][T11991] kernel read not supported for file /cpu/0/msr (pid: 11991 comm: kworker/1:0) [ 1066.996266][ T30] audit: type=1400 audit(1764016135.668:1032): avc: denied { write } for pid=14853 comm="syz.1.2252" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1067.019064][ C1] vkms_vblank_simulate: vblank timer overrun [ 1067.509962][T14861] FAULT_INJECTION: forcing a failure. [ 1067.509962][T14861] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.717212][T14861] CPU: 1 UID: 0 PID: 14861 Comm: syz.2.2251 Not tainted syzkaller #0 PREEMPT(full) [ 1067.717239][T14861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1067.717250][T14861] Call Trace: [ 1067.717256][T14861] [ 1067.717264][T14861] dump_stack_lvl+0x16c/0x1f0 [ 1067.717289][T14861] should_fail_ex+0x512/0x640 [ 1067.717311][T14861] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1067.717341][T14861] should_failslab+0xc2/0x120 [ 1067.717364][T14861] __kmalloc_cache_noprof+0x72/0x780 [ 1067.717389][T14861] ? __pfx___might_resched+0x10/0x10 [ 1067.717414][T14861] ? vhost_task_create+0xe5/0x370 [ 1067.717441][T14861] ? rcu_is_watching+0x12/0xc0 [ 1067.717464][T14861] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1067.717492][T14861] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1067.717519][T14861] ? vhost_task_create+0xe5/0x370 [ 1067.717538][T14861] vhost_task_create+0xe5/0x370 [ 1067.717557][T14861] ? __pfx_vhost_task_create+0x10/0x10 [ 1067.717587][T14861] ? __pfx_vhost_task_fn+0x10/0x10 [ 1067.717621][T14861] kvm_mmu_post_init_vm+0x1b7/0x380 [ 1067.717644][T14861] kvm_arch_vcpu_ioctl_run+0x66/0x1920 [ 1067.717664][T14861] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 1067.717695][T14861] kvm_vcpu_ioctl+0x5eb/0x1690 [ 1067.717724][T14861] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1067.717748][T14861] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1067.717775][T14861] ? do_vfs_ioctl+0x128/0x14f0 [ 1067.717801][T14861] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1067.717827][T14861] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1067.717860][T14861] ? hook_file_ioctl_common+0x145/0x410 [ 1067.717895][T14861] ? selinux_file_ioctl+0x180/0x270 [ 1067.717915][T14861] ? selinux_file_ioctl+0xb4/0x270 [ 1067.717939][T14861] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1067.717966][T14861] __x64_sys_ioctl+0x18e/0x210 [ 1067.717994][T14861] do_syscall_64+0xcd/0xfa0 [ 1067.718016][T14861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.718035][T14861] RIP: 0033:0x7fef2498f749 [ 1067.718051][T14861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.718069][T14861] RSP: 002b:00007fef25755038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1067.718087][T14861] RAX: ffffffffffffffda RBX: 00007fef24be6090 RCX: 00007fef2498f749 [ 1067.718100][T14861] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1067.718111][T14861] RBP: 00007fef25755090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.718123][T14861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.718133][T14861] R13: 00007fef24be6128 R14: 00007fef24be6090 R15: 00007ffc64a7e908 [ 1067.718163][T14861] [ 1067.979845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.262989][T14879] bridge13: entered allmulticast mode [ 1069.287667][T14882] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2258'. [ 1069.305400][T14882] ksmbd: Unknown IPC event: 3, ignore. [ 1069.999440][T14889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2262'. [ 1070.355733][T14896] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1070.374330][T14899] binfmt_misc: register: failed to install interpreter file ./file0 [ 1070.821619][ T5932] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1071.362844][T14921] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2269'. [ 1071.372653][ T5932] usb 6-1: device descriptor read/64, error -71 [ 1071.388743][T14921] validate_nla: 38 callbacks suppressed [ 1071.388760][T14921] netlink: 'syz.0.2269': attribute type 4 has an invalid length. [ 1071.491202][T14923] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2270'. [ 1071.536907][T14922] netlink: 'syz.4.2270': attribute type 4 has an invalid length. [ 1071.641585][ T5932] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1071.791485][ T5932] usb 6-1: device descriptor read/64, error -71 [ 1071.901790][ T5932] usb usb6-port1: attempt power cycle [ 1072.281456][ T5932] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1072.302295][ T5932] usb 6-1: device descriptor read/8, error -71 [ 1072.551966][ T5932] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1072.572151][ T5932] usb 6-1: device descriptor read/8, error -71 [ 1072.682196][ T5932] usb usb6-port1: unable to enumerate USB device [ 1072.742429][T14929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14929 comm=syz.1.2272 [ 1072.889641][T14945] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2275'. [ 1073.011798][T14947] bridge6: entered allmulticast mode [ 1073.037706][T14947] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2276'. [ 1073.047625][T14947] ksmbd: Unknown IPC event: 3, ignore. [ 1074.101910][T14954] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2278'. [ 1074.481602][ T979] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1074.653212][ T979] usb 3-1: Using ep0 maxpacket: 16 [ 1074.705356][ T979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.762927][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1074.810369][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1074.837659][ T979] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1074.848487][ T979] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1074.872001][T13170] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1075.038148][ T979] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1075.061446][ T979] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1075.088071][ T979] usb 3-1: Manufacturer: syz [ 1075.101466][T13170] usb 5-1: Using ep0 maxpacket: 8 [ 1075.110954][T13170] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.124093][T13170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1075.138073][ T979] usb 3-1: config 0 descriptor?? [ 1075.514572][T13170] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1075.562655][T13170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.578141][T13170] usb 5-1: Product: syz [ 1075.588612][T13170] usb 5-1: Manufacturer: syz [ 1075.600770][T13170] usb 5-1: SerialNumber: syz [ 1075.613090][T13170] usb 5-1: config 0 descriptor?? [ 1075.638498][ T979] rc_core: IR keymap rc-hauppauge not found [ 1075.677868][ T979] Registered IR keymap rc-empty [ 1075.691688][ T979] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1076.127746][ T979] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1076.155955][ T979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1076.156566][ T5851] usb 5-1: USB disconnect, device number 55 [ 1076.255598][ T979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 1076.300319][ T979] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1076.322305][ T979] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1076.392304][ T979] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1076.412474][ T979] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1076.432493][ T979] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1076.702174][ T979] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1076.811956][ T979] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1076.842288][ T979] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1076.892699][ T979] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1076.926107][ T979] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1076.955622][ T979] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1076.970211][ T979] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1076.991332][ T979] usb 3-1: USB disconnect, device number 44 [ 1078.731816][ T979] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1078.886013][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.886057][ T979] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1078.886091][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.983384][T15016] netlink: 'syz.4.2295': attribute type 21 has an invalid length. [ 1078.983401][T15016] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2295'. [ 1078.994781][ T979] usb 3-1: config 0 descriptor?? [ 1079.001017][ T30] audit: type=1400 audit(1764016147.658:1033): avc: denied { read } for pid=15015 comm="syz.4.2295" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1079.064209][T15016] netlink: 'syz.4.2295': attribute type 4 has an invalid length. [ 1079.064258][T15016] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2295'. [ 1079.410434][T15026] bridge0: entered allmulticast mode [ 1079.413603][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1079.413922][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1079.414355][ T979] usbhid 3-1:0.0: can't add hid device: -71 [ 1079.414432][ T979] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1079.416108][ T979] usb 3-1: USB disconnect, device number 45 [ 1079.437914][T15026] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2298'. [ 1079.437965][T15026] ksmbd: Unknown IPC event: 3, ignore. [ 1080.081479][ T5851] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1080.283675][ T5851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.338073][ T30] audit: type=1400 audit(1764016148.978:1034): avc: denied { view } for pid=15027 comm="syz.0.2299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1080.370676][ T5851] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1080.382359][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.407215][ T5851] usb 5-1: Product: syz [ 1080.412890][ T5851] usb 5-1: Manufacturer: syz [ 1080.417736][ T5851] usb 5-1: SerialNumber: syz [ 1080.552995][T15034] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1080.564216][T15034] block device autoloading is deprecated and will be removed. [ 1081.031451][ T979] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1081.262044][ T979] usb 1-1: Using ep0 maxpacket: 8 [ 1082.030819][ T979] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1082.040014][ T979] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1082.048705][ T979] usb 1-1: Product: syz [ 1082.059627][ T979] usb 1-1: Manufacturer: syz [ 1082.066142][ T979] usb 1-1: SerialNumber: syz [ 1082.179285][ T979] usb 1-1: config 0 descriptor?? [ 1082.351532][ T5851] cdc_ncm 5-1:1.0: failed to get mac address [ 1082.367364][ T5851] cdc_ncm 5-1:1.0: bind() failure [ 1082.563085][ T5851] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1082.806405][ T5851] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1082.837724][ T5851] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1082.919095][ T5851] usb 5-1: USB disconnect, device number 56 [ 1084.092280][T15078] netlink: 35 bytes leftover after parsing attributes in process `syz.5.2310'. [ 1084.102893][ T5851] usb 1-1: USB disconnect, device number 59 [ 1084.266256][T15083] netlink: 'syz.5.2310': attribute type 4 has an invalid length. [ 1086.374563][ T5851] IPVS: starting estimator thread 0... [ 1086.561534][T15108] IPVS: using max 63 ests per chain, 151200 per kthread [ 1087.477343][T15115] syz.2.2321: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1087.521629][T15115] CPU: 0 UID: 0 PID: 15115 Comm: syz.2.2321 Not tainted syzkaller #0 PREEMPT(full) [ 1087.521661][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1087.521672][T15115] Call Trace: [ 1087.521679][T15115] [ 1087.521689][T15115] dump_stack_lvl+0x16c/0x1f0 [ 1087.521715][T15115] warn_alloc+0x248/0x3a0 [ 1087.521749][T15115] ? __pfx_warn_alloc+0x10/0x10 [ 1087.521777][T15115] ? __pfx_stack_trace_save+0x10/0x10 [ 1087.521809][T15115] ? kasan_save_stack+0x42/0x60 [ 1087.521828][T15115] ? kasan_save_stack+0x33/0x60 [ 1087.521845][T15115] ? kasan_save_track+0x14/0x30 [ 1087.521864][T15115] ? xskq_create+0x52/0x1d0 [ 1087.521886][T15115] ? xsk_setsockopt+0x74e/0x9a0 [ 1087.521907][T15115] ? do_sock_setsockopt+0xf3/0x1d0 [ 1087.521936][T15115] ? xskq_create+0xfb/0x1d0 [ 1087.521964][T15115] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 1087.522001][T15115] ? xskq_create+0xfb/0x1d0 [ 1087.522034][T15115] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1087.522067][T15115] ? xskq_create+0xfb/0x1d0 [ 1087.522087][T15115] vmalloc_user_noprof+0x9e/0xe0 [ 1087.522109][T15115] ? xskq_create+0xfb/0x1d0 [ 1087.522131][T15115] xskq_create+0xfb/0x1d0 [ 1087.522159][T15115] xsk_setsockopt+0x74e/0x9a0 [ 1087.522186][T15115] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1087.522211][T15115] ? find_held_lock+0x2b/0x80 [ 1087.522242][T15115] ? selinux_socket_setsockopt+0x6a/0x80 [ 1087.522265][T15115] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1087.522292][T15115] do_sock_setsockopt+0xf3/0x1d0 [ 1087.522326][T15115] __sys_setsockopt+0x1a0/0x230 [ 1087.522357][T15115] __x64_sys_setsockopt+0xbd/0x160 [ 1087.522382][T15115] ? do_syscall_64+0x91/0xfa0 [ 1087.522401][T15115] ? lockdep_hardirqs_on+0x7c/0x110 [ 1087.522422][T15115] do_syscall_64+0xcd/0xfa0 [ 1087.522442][T15115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.522461][T15115] RIP: 0033:0x7fef2498f749 [ 1087.522477][T15115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.522497][T15115] RSP: 002b:00007fef25776038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1087.522550][T15115] RAX: ffffffffffffffda RBX: 00007fef24be5fa0 RCX: 00007fef2498f749 [ 1087.522566][T15115] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1087.522579][T15115] RBP: 00007fef24a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 1087.522591][T15115] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.522606][T15115] R13: 00007fef24be6038 R14: 00007fef24be5fa0 R15: 00007ffc64a7e908 [ 1087.522637][T15115] [ 1087.522655][T15115] Mem-Info: [ 1087.596416][T15117] binder: 15112:15117 ioctl c0306201 200000000080 returned -14 [ 1087.805739][T15115] active_anon:42800 inactive_anon:0 isolated_anon:0 [ 1087.805739][T15115] active_file:23444 inactive_file:40925 isolated_file:0 [ 1087.805739][T15115] unevictable:768 dirty:403 writeback:0 [ 1087.805739][T15115] slab_reclaimable:12845 slab_unreclaimable:100546 [ 1087.805739][T15115] mapped:33315 shmem:33366 pagetables:1339 [ 1087.805739][T15115] sec_pagetables:0 bounce:0 [ 1087.805739][T15115] kernel_misc_reclaimable:0 [ 1087.805739][T15115] free:1250001 free_pcp:19293 free_cma:0 [ 1087.917620][T15115] Node 0 active_anon:160300kB inactive_anon:0kB active_file:93744kB inactive_file:163496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129140kB dirty:1608kB writeback:0kB shmem:125328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12096kB pagetables:5092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1088.313295][T15115] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1088.793003][T15117] binder_alloc: 15112: binder_alloc_buf, no vma [ 1088.887547][ T30] audit: type=1400 audit(1764016157.468:1035): avc: denied { call } for pid=15112 comm="syz.2.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1088.954581][T15115] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1089.041961][T15115] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1089.047755][T15115] Node 0 DMA32 free:1091664kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:159312kB inactive_anon:0kB active_file:93744kB inactive_file:163496kB unevictable:1536kB writepending:1664kB zspages:0kB present:3129332kB managed:2544852kB mlocked:0kB bounce:0kB free_pcp:69984kB local_pcp:54148kB free_cma:0kB [ 1089.063651][T15125] netlink: 'syz.5.2325': attribute type 10 has an invalid length. [ 1089.081309][ C0] vkms_vblank_simulate: vblank timer overrun [ 1089.098590][T15125] team0: Device veth1_macvtap failed to register rx_handler [ 1089.124766][T15115] lowmem_reserve[]: 0 0 1 1 1 [ 1089.130052][T15115] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1089.165895][T15115] lowmem_reserve[]: 0 0 0 0 0 [ 1089.170657][T15115] Node 1 Normal free:3898896kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12800kB local_pcp:12800kB free_cma:0kB [ 1089.203049][ C0] vkms_vblank_simulate: vblank timer overrun [ 1089.210011][T15115] lowmem_reserve[]: 0 0 0 0 0 [ 1089.220381][T15115] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1089.251748][T15115] Node 0 DMA32: 647*4kB (UME) 943*8kB (UME) 466*16kB (UME) 237*32kB (UME) 74*64kB (UME) 41*128kB (UME) 11*256kB (UME) 16*512kB (U) 7*1024kB (UM) 12*2048kB (UME) 249*4096kB (UM) = 1097812kB [ 1089.270384][ C0] vkms_vblank_simulate: vblank timer overrun [ 1089.311676][T15115] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1089.326565][T15115] Node 1 Normal: 174*4kB (UME) 47*8kB (UME) 44*16kB (UME) 217*32kB (UE) 84*64kB (UME) 14*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (ME) 946*4096kB (M) = 3898896kB [ 1089.371465][T15115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1089.394514][T15132] fuse: Bad value for 'group_id' [ 1089.399485][T15132] fuse: Bad value for 'group_id' [ 1089.433479][T15115] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1089.442971][T15115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1089.466087][T15115] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1089.476042][T15115] 87231 total pagecache pages [ 1089.480728][T15115] 0 pages in swap cache [ 1089.485015][T15115] Free swap = 124996kB [ 1089.489296][T15115] Total swap = 124996kB [ 1089.494011][T15115] 2097051 pages RAM [ 1089.498674][T15115] 0 pages HighMem/MovableOnly [ 1089.503770][T15115] 428748 pages reserved [ 1089.508299][T15115] 0 pages cma reserved [ 1089.603379][T15144] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2331'. [ 1089.821470][ T979] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 1089.998704][ T979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.453643][T15153] 9pnet_fd: p9_fd_create_tcp (15153): problem connecting socket to 127.0.0.1 [ 1090.546651][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 184, setting to 8 [ 1090.614933][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1090.684808][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1090.699146][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1090.734900][ T979] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1090.744762][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.791586][ T979] usb 5-1: config 0 descriptor?? [ 1090.919729][T15161] ipt_ECN: cannot use operation on non-tcp rule [ 1090.949154][T15161] syzkaller1: entered promiscuous mode [ 1090.955483][T15161] syzkaller1: entered allmulticast mode [ 1091.281434][ T979] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1092.242004][ T30] audit: type=1400 audit(1764016160.108:1036): avc: denied { read } for pid=15139 comm="syz.4.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1092.331554][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 1092.348780][ T979] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1092.360005][ T979] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1092.369194][ T979] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1092.398691][ T979] usb 3-1: Product: syz [ 1092.418174][ T979] usb 3-1: Manufacturer: syz [ 1092.423229][ T979] usb 3-1: SerialNumber: syz [ 1092.655987][T15169] syzkaller1: entered promiscuous mode [ 1092.661861][T15169] syzkaller1: entered allmulticast mode [ 1092.672159][ T979] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1092.684146][ T979] usb 3-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 1092.704367][ T979] usb 3-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 1092.731955][ T979] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1092.881321][ T979] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1092.915564][ T979] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1092.952384][ T979] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1093.090944][T15162] syz.2.2335: attempt to access beyond end of device [ 1093.090944][T15162] ram201: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 1093.123723][ T979] usb 3-1: USB disconnect, device number 46 [ 1093.148403][ T979] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1093.189826][ T979] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1093.213477][ T979] visor 3-1:1.0: device disconnected [ 1093.324421][ T5851] usb 5-1: USB disconnect, device number 57 [ 1093.541570][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2339'. [ 1094.131491][ T979] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1094.843496][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.854543][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.869995][ T979] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1094.894361][ T979] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1094.921276][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.951432][ T979] usb 3-1: config 0 descriptor?? [ 1095.255518][T15202] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2346'. [ 1095.494253][ T5851] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1095.571501][ T6014] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1095.593145][ T979] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1095.663772][ T5851] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 1095.685661][ T5851] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1095.699740][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.719887][ T5851] uvcvideo 5-1:250.0: Found UVC 0.00 device (046d:08c1) [ 1095.736004][ T5851] uvcvideo 5-1:250.0: No valid video chain found. [ 1095.783931][ T6014] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 1095.806713][ T6014] usb 6-1: config 0 has no interface number 0 [ 1095.819786][ T6014] usb 6-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 1095.832244][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.840431][ T6014] usb 6-1: Product: syz [ 1095.844900][ T6014] usb 6-1: Manufacturer: syz [ 1095.850953][ T6014] usb 6-1: SerialNumber: syz [ 1095.861391][T15214] syz.2.2341 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1095.879554][ T6014] usb 6-1: config 0 descriptor?? [ 1096.027854][ T979] usb 5-1: USB disconnect, device number 58 [ 1096.535260][ T6014] usb-storage 6-1:0.133: USB Mass Storage device detected [ 1096.824388][T15227] netlink: 'syz.5.2345': attribute type 2 has an invalid length. [ 1096.850817][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2345'. [ 1097.107260][T15230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2352'. [ 1097.651464][ T6014] usb 3-1: reset high-speed USB device number 47 using dummy_hcd [ 1098.295026][T15243] bridge12: entered allmulticast mode [ 1098.897461][T11991] usb 6-1: USB disconnect, device number 12 [ 1098.995282][ T979] usb 3-1: USB disconnect, device number 47 [ 1099.435217][T15258] binder: 15253:15258 ioctl c0306201 200000000640 returned -22 [ 1099.907351][T15254] netlink: 'syz.2.2359': attribute type 4 has an invalid length. [ 1100.624618][ T5851] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1100.873147][ T5851] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1100.992117][ T5851] usb 5-1: config 0 has no interface number 0 [ 1101.023549][ T5851] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.090565][ T5851] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.116425][ T5851] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1101.446085][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.546561][ T5851] usb 5-1: config 0 descriptor?? [ 1102.098806][ T5851] prodikeys 0003:041E:2801.001F: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 1102.124310][ T5851] hid_prodikeys: hid-prodikeys: failed to find output report [ 1102.124310][ T5851] [ 1102.181918][ T5932] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1102.293302][T11991] usb 5-1: USB disconnect, device number 59 [ 1102.321648][ T5932] usb 6-1: device descriptor read/64, error -71 [ 1102.501626][T15298] netlink: 'syz.2.2372': attribute type 4 has an invalid length. [ 1102.628634][T15302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1102.655818][ T5932] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1103.161488][ T5932] usb 6-1: device descriptor read/64, error -71 [ 1103.296390][T15306] netlink: 'syz.1.2374': attribute type 4 has an invalid length. [ 1103.352493][ T5932] usb usb6-port1: attempt power cycle [ 1103.892161][ T5932] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1104.003552][ T5932] usb 6-1: device descriptor read/8, error -71 [ 1104.572066][ T5932] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1104.635180][ T5932] usb 6-1: device descriptor read/8, error -71 [ 1105.131718][ T5932] usb usb6-port1: unable to enumerate USB device [ 1105.411566][ T5932] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1105.573575][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.591426][ T5932] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1105.610604][ T5932] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1105.644185][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.681250][ T5932] usb 3-1: config 0 descriptor?? [ 1105.714990][ T5932] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1105.736946][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 1105.770219][ T5932] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1105.797607][ T5932] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1105.842379][ T5932] usb 3-1: media controller created [ 1105.849216][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1105.886947][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 1105.907795][T15326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.918698][T15326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.950689][ T5932] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1105.972896][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 1106.003583][ T5932] dvb-usb: schedule remote query interval to 150 msecs. [ 1106.237857][ T5932] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1106.983627][ T5851] dvb-usb: bulk message failed: -22 (1/0) [ 1106.992820][ T5851] dvb-usb: error while querying for an remote control event. [ 1107.051758][T13170] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1107.552295][ T5932] usb 3-1: USB disconnect, device number 48 [ 1107.558984][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 1107.564897][ T976] dvb-usb: error while querying for an remote control event. [ 1107.743598][T13170] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1107.995896][T13170] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1108.099832][T13170] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1108.109089][T13170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.122722][ T5932] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1108.180295][T15341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1108.192552][T15341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1108.228555][T13170] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1108.267868][T15362] befs: (nbd2): No write support. Marking filesystem read-only [ 1108.487600][T13170] usb 1-1: USB disconnect, device number 60 [ 1108.509565][ T30] audit: type=1400 audit(1764016177.188:1037): avc: denied { connect } for pid=15368 comm="syz.4.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1109.275620][T15388] syzkaller1: entered promiscuous mode [ 1109.283132][T15388] syzkaller1: entered allmulticast mode [ 1109.932184][ T30] audit: type=1400 audit(1764016178.568:1038): avc: denied { accept } for pid=15397 comm="syz.0.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1111.007889][T15409] wg1 speed is unknown, defaulting to 1000 [ 1112.115029][T15431] netlink: 'syz.5.2410': attribute type 10 has an invalid length. [ 1112.138328][T15431] team0: Device veth1_macvtap failed to register rx_handler [ 1112.978477][T11991] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1113.125120][ T30] audit: type=1400 audit(1764016181.808:1039): avc: denied { getopt } for pid=15436 comm="syz.0.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1113.304437][T11991] usb 3-1: Using ep0 maxpacket: 16 [ 1113.328036][T11991] usb 3-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 1113.354284][T11991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.423940][T11991] usb 3-1: config 0 descriptor?? [ 1115.421658][ T6014] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1115.432488][T15474] netlink: 'syz.5.2423': attribute type 2 has an invalid length. [ 1115.442307][T15474] netlink: 'syz.5.2423': attribute type 2 has an invalid length. [ 1115.474414][T15472] SELinux: failed to load policy [ 1115.584941][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.596069][ T6014] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1115.606050][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.628212][ T6014] usb 5-1: config 0 descriptor?? [ 1115.634126][ T30] audit: type=1400 audit(1764016184.308:1040): avc: denied { ioctl } for pid=15479 comm="syz.1.2425" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1115.696195][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.210000][T11991] pegasus 3-1:0.0: can't locate MII phy, using default [ 1116.299188][T11991] pegasus 3-1:0.0: eth5, D-Link DSB-650TX, 36:21:67:d6:87:fa [ 1116.364617][T11991] usb 3-1: USB disconnect, device number 49 [ 1116.461322][ T6014] uclogic 0003:5543:0064.0020: unknown main item tag 0x1 [ 1116.513357][ T6014] uclogic 0003:5543:0064.0020: item fetching failed at offset 2/5 [ 1116.559455][ T6014] uclogic 0003:5543:0064.0020: parse failed [ 1116.612293][ T6014] uclogic 0003:5543:0064.0020: probe with driver uclogic failed with error -22 [ 1116.873282][ T6014] usb 5-1: USB disconnect, device number 60 [ 1118.639553][ T976] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1118.842160][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.856413][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.916457][ T976] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1118.947956][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.062049][ T976] usb 5-1: config 0 descriptor?? [ 1119.213034][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'. [ 1119.245535][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'. [ 1119.747004][ T976] hid-led 0003:0FC5:B080.0021: unknown main item tag 0x0 [ 1119.774021][ T976] hid-led 0003:0FC5:B080.0021: item fetching failed at offset 1/3 [ 1119.797409][ T976] hid-led 0003:0FC5:B080.0021: probe with driver hid-led failed with error -22 [ 1119.950907][ T6014] usb 5-1: USB disconnect, device number 61 [ 1120.281564][T11991] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1120.441501][T11991] usb 2-1: Using ep0 maxpacket: 8 [ 1120.452940][T11991] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.482973][T11991] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1120.535982][T11991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.601774][T11991] usb 2-1: Product: syz [ 1120.704991][T11991] usb 2-1: Manufacturer: syz [ 1120.717755][T11991] usb 2-1: SerialNumber: syz [ 1120.742287][T11991] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1120.745992][T15569] fuse: Bad value for 'fd' [ 1120.756792][T11991] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1120.968982][T15550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.013985][T15550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.022028][ T6014] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1121.191764][ T6014] usb 1-1: Using ep0 maxpacket: 8 [ 1121.205429][ T6014] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1121.217306][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1121.218264][ T976] usb 2-1: USB disconnect, device number 46 [ 1121.226005][ T6014] usb 1-1: Product: syz [ 1121.260100][ T6014] usb 1-1: Manufacturer: syz [ 1121.287931][ T6014] usb 1-1: SerialNumber: syz [ 1121.335035][ T6014] usb 1-1: config 0 descriptor?? [ 1121.720567][T15586] comedi comedi0: comedi_config --init_data is deprecated [ 1122.922124][ T6014] usb 1-1: USB disconnect, device number 61 [ 1122.929320][ T30] audit: type=1326 audit(1764016191.608:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.5.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd8f749 code=0x7ffc0000 [ 1123.056713][T14721] udevd[14721]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1123.127517][ T30] audit: type=1326 audit(1764016191.608:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.5.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd8f749 code=0x7ffc0000 [ 1123.229221][T15601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2453'. [ 1123.251452][ T976] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1123.280113][ T30] audit: type=1326 audit(1764016191.638:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.5.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f7bbcd8f749 code=0x7ffc0000 [ 1123.305664][T15601] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2453'. [ 1123.413616][T15601] ubi31: attaching mtd0 [ 1123.419819][T15601] ubi31 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 1123.697247][ T976] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 1123.706420][ T976] usb 6-1: config 0 has no interface number 0 [ 1123.805977][ T30] audit: type=1326 audit(1764016191.638:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.5.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd8f749 code=0x7ffc0000 [ 1123.829591][ T976] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1123.841211][ T976] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1123.855091][ T30] audit: type=1326 audit(1764016191.638:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.5.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd8f749 code=0x7ffc0000 [ 1124.386875][ T30] audit: type=1326 audit(1764016191.638:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.5.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bbcd8df90 code=0x7ffc0000 [ 1124.410506][ T30] audit: type=1326 audit(1764016191.638:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.5.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7bbcd8f34b code=0x7ffc0000 [ 1124.434412][ T30] audit: type=1326 audit(1764016191.638:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.5.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7bbcd8f34b code=0x7ffc0000 [ 1124.459726][ T30] audit: type=1326 audit(1764016191.688:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.5.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7bbcd8f34b code=0x7ffc0000 [ 1124.464196][ T976] usb 6-1: New USB device found, idVendor=0499, idProduct=6bab, bcdDevice=68.2f [ 1124.499218][ T30] audit: type=1326 audit(1764016191.688:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.5.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7bbcd8f34b code=0x7ffc0000 [ 1124.591962][ T976] usb 6-1: New USB device strings: Mfr=20, Product=2, SerialNumber=3 [ 1124.600151][ T976] usb 6-1: Product: syz [ 1124.611512][ T976] usb 6-1: Manufacturer: syz [ 1124.616149][ T976] usb 6-1: SerialNumber: syz [ 1124.636358][ T976] usb 6-1: config 0 descriptor?? [ 1124.671685][ T6014] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1124.872951][ T6014] usb 1-1: Using ep0 maxpacket: 8 [ 1124.886650][ T6014] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1124.901507][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1124.921784][T11991] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1124.930819][ T6014] usb 1-1: Product: syz [ 1124.939808][ T6014] usb 1-1: Manufacturer: syz [ 1124.945845][ T6014] usb 1-1: SerialNumber: syz [ 1124.953405][ T976] usb 6-1: USB disconnect, device number 17 [ 1124.978243][ T6014] usb 1-1: config 0 descriptor?? [ 1124.983776][T14721] udevd[14721]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1125.791803][T11991] usb 5-1: Using ep0 maxpacket: 16 [ 1125.808071][T11991] usb 5-1: device descriptor read/all, error -71 [ 1129.051926][T15669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1129.576749][ T6014] usb 1-1: USB disconnect, device number 62 [ 1129.691706][T15678] fuse: Bad value for 'fd' [ 1131.251712][ T6014] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1131.345023][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1131.345039][ T30] audit: type=1400 audit(1764016200.028:1078): avc: denied { read } for pid=15710 comm="syz.4.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1131.371173][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2472'. [ 1131.381994][T15712] binder: 15710:15712 ioctl 40489426 200000000040 returned -22 [ 1131.421480][ T6014] usb 1-1: Using ep0 maxpacket: 8 [ 1131.600079][ T6014] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1131.621130][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1131.635268][ T6014] usb 1-1: Product: syz [ 1131.639929][ T6014] usb 1-1: Manufacturer: syz [ 1131.646384][ T6014] usb 1-1: SerialNumber: syz [ 1131.953449][ T6014] usb 1-1: config 0 descriptor?? [ 1131.999564][T15716] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1132.006106][T15716] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1132.025737][T15716] vhci_hcd vhci_hcd.0: Device attached [ 1132.054289][ T30] audit: type=1804 audit(1764016200.718:1079): pid=15721 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2473" name="/newroot/504/file0" dev="tmpfs" ino=2721 res=1 errno=0 [ 1132.080073][T15723] vhci_hcd: connection closed [ 1132.080360][ T9353] vhci_hcd: stop threads [ 1132.118044][ T9353] vhci_hcd: release socket [ 1132.124332][ T9353] vhci_hcd: disconnect device [ 1133.145324][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2482'. [ 1133.216638][T15753] fuse: Bad value for 'fd' [ 1133.706372][ T6014] usb 1-1: USB disconnect, device number 63 [ 1134.458836][T14721] udevd[14721]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1134.572958][T15771] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2488'. [ 1135.871758][T13170] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1135.957381][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 1136.493505][T13170] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1136.532928][T13170] usb 6-1: config 0 has no interface number 0 [ 1136.561109][ T6014] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1136.561133][T13170] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.561176][T13170] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.730790][T13170] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1136.741781][T13170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.762872][T13170] usb 6-1: config 0 descriptor?? [ 1136.932574][ T6014] usb 1-1: device descriptor read/64, error -71 [ 1137.176779][T13170] usbhid 6-1:0.1: can't add hid device: -71 [ 1137.221643][ T979] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1137.226070][T13170] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 1137.255000][ T6014] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1137.348819][T13170] usb 6-1: USB disconnect, device number 18 [ 1137.422113][ T6014] usb 1-1: device descriptor read/64, error -71 [ 1137.444369][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1137.451165][ T979] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1137.461426][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.474735][ T979] usb 3-1: config 0 descriptor?? [ 1137.541941][ T6014] usb usb1-port1: attempt power cycle [ 1137.701450][ T976] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1137.887704][ T979] usbhid 3-1:0.0: can't add hid device: -71 [ 1137.893888][ T6014] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1137.901793][ T979] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1137.913001][ T979] usb 3-1: USB disconnect, device number 50 [ 1137.926960][ T6014] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1137.936274][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.945484][ T6014] usb 1-1: Product: syz [ 1137.950816][ T6014] usb 1-1: Manufacturer: syz [ 1137.962816][ T6014] usb 1-1: SerialNumber: syz [ 1137.963784][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 1138.009760][T15806] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2497'. [ 1138.075422][ T976] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1138.101559][ T976] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1138.110317][ T976] usb 2-1: Product: syz [ 1138.115411][ T976] usb 2-1: Manufacturer: syz [ 1138.119014][ T6014] usb 1-1: config 0 descriptor?? [ 1138.152770][ T976] usb 2-1: SerialNumber: syz [ 1138.192193][ T976] usb 2-1: config 0 descriptor?? [ 1138.753280][T15812] syz.5.2499: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1138.770055][T15812] CPU: 1 UID: 0 PID: 15812 Comm: syz.5.2499 Not tainted syzkaller #0 PREEMPT(full) [ 1138.770089][T15812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1138.770103][T15812] Call Trace: [ 1138.770110][T15812] [ 1138.770119][T15812] dump_stack_lvl+0x16c/0x1f0 [ 1138.770145][T15812] warn_alloc+0x248/0x3a0 [ 1138.770180][T15812] ? __pfx_warn_alloc+0x10/0x10 [ 1138.770205][T15812] ? __pfx_stack_trace_save+0x10/0x10 [ 1138.770243][T15812] ? kasan_save_stack+0x42/0x60 [ 1138.770261][T15812] ? kasan_save_stack+0x33/0x60 [ 1138.770280][T15812] ? kasan_save_track+0x14/0x30 [ 1138.770299][T15812] ? xskq_create+0x52/0x1d0 [ 1138.770323][T15812] ? xsk_setsockopt+0x74e/0x9a0 [ 1138.770345][T15812] ? do_sock_setsockopt+0xf3/0x1d0 [ 1138.770378][T15812] ? xskq_create+0xfb/0x1d0 [ 1138.770405][T15812] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 1138.770443][T15812] ? xskq_create+0xfb/0x1d0 [ 1138.770477][T15812] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1138.770513][T15812] ? xskq_create+0xfb/0x1d0 [ 1138.770539][T15812] vmalloc_user_noprof+0x9e/0xe0 [ 1138.770564][T15812] ? xskq_create+0xfb/0x1d0 [ 1138.770600][T15812] xskq_create+0xfb/0x1d0 [ 1138.770631][T15812] xsk_setsockopt+0x74e/0x9a0 [ 1138.770660][T15812] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1138.770686][T15812] ? find_held_lock+0x2b/0x80 [ 1138.770717][T15812] ? selinux_socket_setsockopt+0x6a/0x80 [ 1138.770739][T15812] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1138.770766][T15812] do_sock_setsockopt+0xf3/0x1d0 [ 1138.770800][T15812] __sys_setsockopt+0x1a0/0x230 [ 1138.770831][T15812] __x64_sys_setsockopt+0xbd/0x160 [ 1138.770854][T15812] ? syscall_trace_enter+0xee/0x240 [ 1138.770879][T15812] do_syscall_64+0xcd/0xfa0 [ 1138.770901][T15812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.770922][T15812] RIP: 0033:0x7f7bbcd8f749 [ 1138.770940][T15812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.770959][T15812] RSP: 002b:00007f7bbdca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1138.770979][T15812] RAX: ffffffffffffffda RBX: 00007f7bbcfe5fa0 RCX: 00007f7bbcd8f749 [ 1138.770993][T15812] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1138.771005][T15812] RBP: 00007f7bbce13f91 R08: 0000000000000004 R09: 0000000000000000 [ 1138.771017][T15812] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.771030][T15812] R13: 00007f7bbcfe6038 R14: 00007f7bbcfe5fa0 R15: 00007ffe54313ab8 [ 1138.771060][T15812] [ 1138.771206][T15812] Mem-Info: [ 1138.795054][T15813] netlink: 'syz.0.2496': attribute type 10 has an invalid length. [ 1138.795075][T15813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2496'. [ 1138.852988][ T976] usb 2-1: USB disconnect, device number 47 [ 1138.863807][T15812] active_anon:34363 inactive_anon:0 isolated_anon:0 [ 1138.863807][T15812] active_file:23444 inactive_file:40945 isolated_file:0 [ 1138.863807][T15812] unevictable:768 dirty:301 writeback:0 [ 1138.863807][T15812] slab_reclaimable:13348 slab_unreclaimable:101459 [ 1138.863807][T15812] mapped:32434 shmem:25385 pagetables:1372 [ 1138.863807][T15812] sec_pagetables:0 bounce:0 [ 1138.863807][T15812] kernel_misc_reclaimable:0 [ 1138.863807][T15812] free:1258440 free_pcp:17384 free_cma:0 [ 1138.934737][T15816] binder: 15811:15816 ioctl c0306201 200000000080 returned -14 [ 1139.115428][T15812] Node 0 active_anon:137352kB inactive_anon:0kB active_file:93744kB inactive_file:163576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137704kB dirty:1204kB writeback:0kB shmem:100004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12480kB pagetables:5324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1139.148797][T15812] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1139.196392][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 1139.210618][T15812] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1139.211307][T14615] udevd[14615]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1139.260161][T15812] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1139.267619][T15812] Node 0 DMA32 free:1129672kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:136852kB inactive_anon:0kB active_file:93744kB inactive_file:163576kB unevictable:1536kB writepending:1204kB zspages:0kB present:3129332kB managed:2544852kB mlocked:0kB bounce:0kB free_pcp:48908kB local_pcp:28500kB free_cma:0kB [ 1139.302873][T15812] lowmem_reserve[]: 0 0 1 1 1 [ 1139.307731][T15812] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1139.340645][T15812] lowmem_reserve[]: 0 0 0 0 0 [ 1139.349173][T15812] Node 1 Normal free:3889984kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21592kB local_pcp:1640kB free_cma:0kB [ 1139.382780][T15812] lowmem_reserve[]: 0 0 0 0 0 [ 1139.387712][T15812] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1139.400981][T15812] Node 0 DMA32: 1438*4kB (UME) 785*8kB (UME) 675*16kB (UME) 517*32kB (UM) 130*64kB (UME) 122*128kB (UME) 34*256kB (UME) 36*512kB (UM) 13*1024kB (UM) 10*2048kB (UME) 249*4096kB (UM) = 1144144kB [ 1139.439840][T15813] team0: Port device geneve0 added [ 1139.487840][T15812] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1139.502985][T15812] Node 1 Normal: 4*4kB (ME) 7*8kB (UME) 10*16kB (UME) 150*32kB (UME) 84*64kB (UME) 14*128kB (UME) 4*256kB (UME) 2*512kB (UE) 1*1024kB (M) 2*2048kB (ME) 945*4096kB (M) = 3890088kB [ 1139.523151][T15812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1139.535576][T15812] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1139.545296][T15812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1139.690769][T15812] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1139.704927][T15812] 91747 total pagecache pages [ 1139.709730][T15812] 0 pages in swap cache [ 1139.714310][T15812] Free swap = 124996kB [ 1139.718651][T15812] Total swap = 124996kB [ 1139.724723][T15812] 2097051 pages RAM [ 1139.728824][T15812] 0 pages HighMem/MovableOnly [ 1139.734000][T15812] 428748 pages reserved [ 1139.738440][T15812] 0 pages cma reserved [ 1139.808736][T15828] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 1140.408106][T15821] bond0: (slave bond_slave_1): Releasing backup interface [ 1141.203646][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'. [ 1141.212827][ T979] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1141.272321][T15852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.302113][ T6014] mos7840 1-1:0.0: required endpoints missing [ 1141.349872][ T6014] usb 1-1: USB disconnect, device number 66 [ 1141.383222][ T979] usb 5-1: config 0 has no interfaces? [ 1141.447299][ T979] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 1141.466678][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1141.477476][ T979] usb 5-1: SerialNumber: syz [ 1141.485573][ T979] usb 5-1: config 0 descriptor?? [ 1141.540066][T15852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.699470][T15848] FAULT_INJECTION: forcing a failure. [ 1141.699470][T15848] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.751601][T15848] CPU: 0 UID: 0 PID: 15848 Comm: syz.4.2506 Not tainted syzkaller #0 PREEMPT(full) [ 1141.751627][T15848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1141.751638][T15848] Call Trace: [ 1141.751644][T15848] [ 1141.751651][T15848] dump_stack_lvl+0x16c/0x1f0 [ 1141.751675][T15848] should_fail_ex+0x512/0x640 [ 1141.751696][T15848] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1141.751724][T15848] should_failslab+0xc2/0x120 [ 1141.751746][T15848] __kmalloc_cache_noprof+0x72/0x780 [ 1141.751771][T15848] ? __pfx___page_table_check_zero+0x10/0x10 [ 1141.751789][T15848] ? ctnetlink_alloc_filter+0x9f/0xaf0 [ 1141.751823][T15848] ? ctnetlink_alloc_filter+0x9f/0xaf0 [ 1141.751850][T15848] ctnetlink_alloc_filter+0x9f/0xaf0 [ 1141.751879][T15848] ? __pfx_ctnetlink_alloc_filter+0x10/0x10 [ 1141.751906][T15848] ? __pfx___might_resched+0x10/0x10 [ 1141.751931][T15848] ? rcu_is_watching+0x12/0xc0 [ 1141.751955][T15848] ? trace_contention_end+0xdd/0x130 [ 1141.751980][T15848] ctnetlink_del_conntrack+0x39f/0xa90 [ 1141.752011][T15848] ? __pfx_ctnetlink_del_conntrack+0x10/0x10 [ 1141.752050][T15848] ? find_held_lock+0x2b/0x80 [ 1141.752081][T15848] nfnetlink_rcv_msg+0x9fc/0x1200 [ 1141.752111][T15848] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1141.752135][T15848] ? __lock_acquire+0x622/0x1c90 [ 1141.752177][T15848] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1141.752212][T15848] netlink_rcv_skb+0x158/0x420 [ 1141.752240][T15848] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1141.752264][T15848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1141.752306][T15848] ? ns_capable+0xd7/0x110 [ 1141.752331][T15848] nfnetlink_rcv+0x1b3/0x430 [ 1141.752360][T15848] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1141.752380][T15848] ? netlink_deliver_tap+0x1ae/0xd30 [ 1141.752412][T15848] netlink_unicast+0x5aa/0x870 [ 1141.752443][T15848] ? __pfx_netlink_unicast+0x10/0x10 [ 1141.752482][T15848] netlink_sendmsg+0x8c8/0xdd0 [ 1141.752515][T15848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.752553][T15848] ____sys_sendmsg+0xa98/0xc70 [ 1141.752574][T15848] ? copy_msghdr_from_user+0x10a/0x160 [ 1141.752599][T15848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1141.752637][T15848] ___sys_sendmsg+0x134/0x1d0 [ 1141.752663][T15848] ? __pfx____sys_sendmsg+0x10/0x10 [ 1141.752686][T15848] ? __lock_acquire+0x622/0x1c90 [ 1141.752742][T15848] __sys_sendmsg+0x16d/0x220 [ 1141.752768][T15848] ? __pfx___sys_sendmsg+0x10/0x10 [ 1141.752813][T15848] do_syscall_64+0xcd/0xfa0 [ 1141.752835][T15848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.752855][T15848] RIP: 0033:0x7fe25a58f749 [ 1141.752871][T15848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1141.752889][T15848] RSP: 002b:00007fe25b482038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1141.752908][T15848] RAX: ffffffffffffffda RBX: 00007fe25a7e5fa0 RCX: 00007fe25a58f749 [ 1141.752922][T15848] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1141.752934][T15848] RBP: 00007fe25b482090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.752946][T15848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.752958][T15848] R13: 00007fe25a7e6038 R14: 00007fe25a7e5fa0 R15: 00007ffd8bd6b7b8 [ 1141.752988][T15848] [ 1141.756240][T13170] usb 5-1: USB disconnect, device number 64 [ 1141.935953][ T6014] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1142.543369][ T6014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.681441][T15891] FAULT_INJECTION: forcing a failure. [ 1142.681441][T15891] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.694142][T15891] CPU: 1 UID: 0 PID: 15891 Comm: syz.2.2515 Not tainted syzkaller #0 PREEMPT(full) [ 1142.694169][T15891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1142.694180][T15891] Call Trace: [ 1142.694186][T15891] [ 1142.694194][T15891] dump_stack_lvl+0x16c/0x1f0 [ 1142.694219][T15891] should_fail_ex+0x512/0x640 [ 1142.694242][T15891] ? fs_reclaim_acquire+0xae/0x150 [ 1142.694268][T15891] should_failslab+0xc2/0x120 [ 1142.694291][T15891] __kmalloc_noprof+0xdd/0x880 [ 1142.694324][T15891] ? tomoyo_encode2+0x100/0x3e0 [ 1142.694352][T15891] ? tomoyo_encode2+0x100/0x3e0 [ 1142.694372][T15891] tomoyo_encode2+0x100/0x3e0 [ 1142.694398][T15891] tomoyo_encode+0x29/0x50 [ 1142.694419][T15891] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1142.694451][T15891] tomoyo_path_number_perm+0x245/0x580 [ 1142.694469][T15891] ? tomoyo_path_number_perm+0x237/0x580 [ 1142.694492][T15891] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1142.694514][T15891] ? find_held_lock+0x2b/0x80 [ 1142.694565][T15891] ? find_held_lock+0x2b/0x80 [ 1142.694588][T15891] ? hook_file_ioctl_common+0x145/0x410 [ 1142.694620][T15891] ? __fget_files+0x20e/0x3c0 [ 1142.694646][T15891] security_file_ioctl+0x9b/0x240 [ 1142.694670][T15891] __x64_sys_ioctl+0xb7/0x210 [ 1142.694698][T15891] do_syscall_64+0xcd/0xfa0 [ 1142.694719][T15891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.694739][T15891] RIP: 0033:0x7fef2498f749 [ 1142.694755][T15891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.694774][T15891] RSP: 002b:00007fef22bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1142.694792][T15891] RAX: ffffffffffffffda RBX: 00007fef24be6180 RCX: 00007fef2498f749 [ 1142.694806][T15891] RDX: 0000000000000014 RSI: 000000000000ae01 RDI: 0000000000000005 [ 1142.694818][T15891] RBP: 00007fef22bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.694829][T15891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1142.694841][T15891] R13: 00007fef24be6218 R14: 00007fef24be6180 R15: 00007ffc64a7e908 [ 1142.694870][T15891] [ 1142.700358][T15891] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1143.043658][ T6014] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1143.068663][ T6014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.427088][ T6014] usb 1-1: config 0 descriptor?? [ 1144.197268][T15899] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2517'. [ 1144.203882][ T6014] uclogic 0003:5543:0064.0022: item fetching failed at offset 3/5 [ 1144.479434][ T6014] uclogic 0003:5543:0064.0022: parse failed [ 1144.486154][ T6014] uclogic 0003:5543:0064.0022: probe with driver uclogic failed with error -22 [ 1144.811835][ T6014] usb 1-1: USB disconnect, device number 67 [ 1145.215580][T15918] ubi31: attaching mtd0 [ 1145.219869][T15918] ubi31 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 1147.096206][T15939] FAULT_INJECTION: forcing a failure. [ 1147.096206][T15939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.016335][T15941] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1148.030475][T15941] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1148.049656][T15939] CPU: 1 UID: 0 PID: 15939 Comm: syz.0.2528 Not tainted syzkaller #0 PREEMPT(full) [ 1148.049686][T15939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1148.049697][T15939] Call Trace: [ 1148.049704][T15939] [ 1148.049712][T15939] dump_stack_lvl+0x16c/0x1f0 [ 1148.049736][T15939] should_fail_ex+0x512/0x640 [ 1148.049763][T15939] _copy_from_user+0x2e/0xd0 [ 1148.049787][T15939] copy_msghdr_from_user+0x98/0x160 [ 1148.049812][T15939] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1148.049844][T15939] ? __lock_acquire+0x622/0x1c90 [ 1148.049868][T15939] ___sys_recvmsg+0xdb/0x1a0 [ 1148.049894][T15939] ? __pfx____sys_recvmsg+0x10/0x10 [ 1148.049923][T15939] ? find_held_lock+0x2b/0x80 [ 1148.049965][T15939] do_recvmmsg+0x2fe/0x750 [ 1148.049994][T15939] ? __pfx_do_recvmmsg+0x10/0x10 [ 1148.050026][T15939] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1148.050055][T15939] ? __fget_files+0x20e/0x3c0 [ 1148.050082][T15939] __x64_sys_recvmmsg+0x22a/0x280 [ 1148.050109][T15939] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1148.050145][T15939] do_syscall_64+0xcd/0xfa0 [ 1148.050167][T15939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.050186][T15939] RIP: 0033:0x7fe24a58f749 [ 1148.050202][T15939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1148.050221][T15939] RSP: 002b:00007fe24b4ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1148.050240][T15939] RAX: ffffffffffffffda RBX: 00007fe24a7e5fa0 RCX: 00007fe24a58f749 [ 1148.050254][T15939] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 1148.050265][T15939] RBP: 00007fe24b4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.050277][T15939] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1148.050288][T15939] R13: 00007fe24a7e6038 R14: 00007fe24a7e5fa0 R15: 00007ffe27abbb08 [ 1148.050318][T15939] [ 1148.238257][T15941] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1148.248012][T15941] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1148.258804][T15941] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1148.268512][T15941] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1148.278732][T15941] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1148.288430][T15941] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1148.298191][T15941] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1148.340494][T15942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.333268][T13170] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1151.346043][T15973] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2538'. [ 1151.513590][T13170] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1151.522423][T13170] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1151.543458][T13170] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.576110][T13170] usb 2-1: config 220 has no interface number 2 [ 1151.583257][T13170] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1151.604096][T13170] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1151.610993][T13170] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1151.619370][T13170] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1151.733086][T13170] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1151.745843][T13170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.755576][T13170] usb 2-1: Product: syz [ 1151.759765][T13170] usb 2-1: Manufacturer: syz [ 1151.840504][T15990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2542'. [ 1152.204328][T13170] usb 2-1: SerialNumber: syz [ 1152.427059][T13170] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1152.477092][T13170] uvcvideo 2-1:220.0: No valid video chain found. [ 1152.524766][T13170] usb 2-1: selecting invalid altsetting 0 [ 1152.580520][T13170] usb 2-1: selecting invalid altsetting 0 [ 1152.590817][T13170] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1152.676643][T15999] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2545'. [ 1153.163273][ T6014] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1153.187329][T13170] usb 2-1: USB disconnect, device number 48 [ 1153.351472][ T6014] usb 3-1: Using ep0 maxpacket: 16 [ 1153.427921][ T6014] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.461493][ T6014] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1153.476159][ T6014] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1153.504086][T16004] veth0_to_team: entered promiscuous mode [ 1153.510501][ T6014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.544275][ T6014] usb 3-1: config 0 descriptor?? [ 1154.104354][ T6014] nzxt-smart2 0003:1E71:2009.0023: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1155.060227][ T6014] usb 3-1: USB disconnect, device number 51 [ 1156.071102][T16040] ubi31: attaching mtd0 [ 1156.186003][T16040] ubi31 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 1157.207166][T16037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2556'. [ 1157.324176][T16046] netlink: 'syz.1.2559': attribute type 10 has an invalid length. [ 1157.335601][T16046] team0: Port device dummy0 added [ 1157.352001][ T30] audit: type=1400 audit(1764016226.008:1080): avc: denied { audit_read } for pid=16045 comm="syz.1.2559" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1157.415708][T16046] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2559'. [ 1157.463043][T16052] netlink: 'syz.2.2558': attribute type 4 has an invalid length. [ 1158.085942][T16066] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2561'. [ 1158.095837][T16066] ksmbd: Unknown IPC event: 3, ignore. [ 1158.881157][T16063] bridge7: entered allmulticast mode [ 1161.450884][ T30] audit: type=1400 audit(1764016230.128:1081): avc: denied { ioctl } for pid=16094 comm="syz.4.2572" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1161.561752][T16100] bridge6: entered allmulticast mode [ 1161.625448][T16100] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2571'. [ 1161.635042][T16100] ksmbd: Unknown IPC event: 3, ignore. [ 1161.755297][T16101] overlayfs: failed to resolve './file0/file0': -2 [ 1162.357511][T16107] binder: BINDER_SET_CONTEXT_MGR already set [ 1162.363729][T16107] binder: 16104:16107 ioctl 4018620d 200000000040 returned -16 [ 1164.507463][ T30] audit: type=1400 audit(1764016233.178:1082): avc: denied { unmount } for pid=5858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1165.391558][ T30] audit: type=1400 audit(1764016234.058:1083): avc: denied { map } for pid=16113 comm="syz.5.2576" path="socket:[56274]" dev="sockfs" ino=56274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1165.954006][T16137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2581'. [ 1166.285610][ T30] audit: type=1400 audit(1764016234.958:1084): avc: denied { mount } for pid=16140 comm="syz.2.2583" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1166.383972][ T30] audit: type=1400 audit(1764016235.008:1086): avc: denied { search } for pid=16140 comm="syz.2.2583" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1166.431437][ T30] audit: type=1400 audit(1764016235.008:1085): avc: denied { search } for pid=16140 comm="syz.2.2583" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1166.500366][ T30] audit: type=1400 audit(1764016235.008:1087): avc: denied { search } for pid=16140 comm="syz.2.2583" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1166.524877][ T30] audit: type=1400 audit(1764016235.028:1088): avc: denied { read open } for pid=16140 comm="syz.2.2583" path="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1166.705751][T16153] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1166.904378][ T979] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1167.072707][ T979] usb 6-1: Using ep0 maxpacket: 16 [ 1167.094316][ T979] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.107214][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1167.150020][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1167.162197][ T979] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1167.172992][ T979] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1167.187921][ T979] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1167.485146][ T6014] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1167.498311][ T979] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1167.580213][ T979] usb 6-1: Manufacturer: syz [ 1167.607283][ T979] usb 6-1: config 0 descriptor?? [ 1167.665727][ T6014] usb 1-1: Using ep0 maxpacket: 32 [ 1167.690409][ T6014] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.711034][ T6014] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 1167.730540][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.821970][T16179] netlink: 'syz.4.2592': attribute type 4 has an invalid length. [ 1167.834641][ T6014] usb 1-1: Product: syz [ 1168.140203][ T6014] usb 1-1: Manufacturer: syz [ 1168.170615][ T6014] usb 1-1: SerialNumber: syz [ 1168.288676][ T6014] usb 1-1: config 0 descriptor?? [ 1168.402160][ T979] rc_core: IR keymap rc-hauppauge not found [ 1168.408287][ T979] Registered IR keymap rc-empty [ 1168.413986][ T979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1168.441515][ T979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1168.462346][ T979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1168.479858][ T979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input33 [ 1168.655487][ T979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1168.681558][ T979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1168.711525][ T979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1168.741491][ T979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1168.771679][ T979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1168.791582][ T979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1168.822066][ T979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1168.851673][ T6014] usb 1-1: probing VID:PID(0424:012C) [ 1168.868561][ T6014] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 1168.883734][ T6014] vub300 1-1:0.0: probe with driver vub300 failed with error -22 [ 1168.900510][ T6014] usb 1-1: USB disconnect, device number 68 [ 1168.906807][ T979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1168.931564][ T979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1169.024432][ T979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1169.072938][ T979] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1169.521987][ T979] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1169.550501][ T979] usb 6-1: USB disconnect, device number 19 [ 1170.191968][T16203] FAULT_INJECTION: forcing a failure. [ 1170.191968][T16203] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1170.206316][T16203] CPU: 0 UID: 0 PID: 16203 Comm: syz.0.2596 Not tainted syzkaller #0 PREEMPT(full) [ 1170.206338][T16203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1170.206348][T16203] Call Trace: [ 1170.206354][T16203] [ 1170.206360][T16203] dump_stack_lvl+0x16c/0x1f0 [ 1170.206383][T16203] should_fail_ex+0x512/0x640 [ 1170.206409][T16203] should_fail_futex+0x4c/0x60 [ 1170.206437][T16203] __x64_sys_futex+0x25e/0x4c0 [ 1170.206461][T16203] ? __pfx___x64_sys_futex+0x10/0x10 [ 1170.206491][T16203] do_syscall_64+0xcd/0xfa0 [ 1170.206512][T16203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.206533][T16203] RIP: 0033:0x7fe24a58f749 [ 1170.206550][T16203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1170.206567][T16203] RSP: 002b:00007fe24b499038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1170.206584][T16203] RAX: ffffffffffffffda RBX: 00007fe24a7e6090 RCX: 00007fe24a58f749 [ 1170.206597][T16203] RDX: 0000000000000002 RSI: 000000000000000b RDI: 00002000000002c0 [ 1170.206608][T16203] RBP: 00007fe24b499090 R08: 00002000000004c0 R09: 0000000000000002 [ 1170.206619][T16203] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1170.206630][T16203] R13: 00007fe24a7e6128 R14: 00007fe24a7e6090 R15: 00007ffe27abbb08 [ 1170.206653][T16203] [ 1172.481421][ T30] audit: type=1400 audit(1764016240.838:1089): avc: denied { ioctl } for pid=16225 comm="syz.4.2602" path="socket:[57018]" dev="sockfs" ino=57018 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1173.748448][T16242] netlink: 'syz.1.2607': attribute type 10 has an invalid length. [ 1173.784512][T16242] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1173.931465][T13170] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1173.959201][T16251] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1174.031619][ T979] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1174.093616][T13170] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1174.096854][ T6014] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1174.102231][T13170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.194695][ T979] usb 1-1: Using ep0 maxpacket: 8 [ 1174.212216][ T979] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1174.242950][ T979] usb 1-1: config index 0 descriptor too short (expected 51, got 18) [ 1174.259717][ T979] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.281526][ T6014] usb 3-1: Using ep0 maxpacket: 32 [ 1174.319435][ T6014] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.398304][ T979] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1174.430472][ T6014] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1174.518925][ T979] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1174.543704][ T6014] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.39 [ 1174.604478][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.649526][ T6014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.941416][ T979] usb 1-1: Product: syz [ 1174.945608][ T979] usb 1-1: Manufacturer: syz [ 1174.963235][ T6014] usb 3-1: config 0 descriptor?? [ 1174.978533][ T979] usb 1-1: SerialNumber: syz [ 1175.069448][T13170] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1175.078632][T13170] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1175.087148][T13170] usb 6-1: Manufacturer: syz [ 1175.094783][T13170] usb 6-1: config 0 descriptor?? [ 1175.216329][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'. [ 1175.461131][ T979] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1175.463129][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2605'. [ 1175.512894][T13170] rc_core: IR keymap rc-hauppauge not found [ 1175.519067][T13170] Registered IR keymap rc-empty [ 1175.608738][T13170] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1175.620718][T13170] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input34 [ 1175.681884][ T979] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1175.709806][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 1175.739604][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.759389][T13170] usb 1-1: USB disconnect, device number 69 [ 1175.806354][ T979] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1175.835163][ T979] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1175.988241][ T979] usb 2-1: Manufacturer: syz [ 1176.004870][ T979] usb 2-1: config 0 descriptor?? [ 1176.050100][T11991] usb 6-1: USB disconnect, device number 20 [ 1176.124136][ T979] rc_core: IR keymap rc-hauppauge not found [ 1176.137842][ T979] Registered IR keymap rc-empty [ 1176.149907][ T979] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1176.211918][ T979] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input36 [ 1176.267529][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 1176.292954][ T979] usb 2-1: USB disconnect, device number 49 [ 1176.303645][ T6014] usb 3-1: string descriptor 0 read error: -71 [ 1176.332535][ T6014] usb 3-1: USB disconnect, device number 52 [ 1177.457986][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.065296][T16300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1178.348120][T16306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2618'. [ 1179.731722][T16312] bridge2: entered allmulticast mode [ 1179.794583][T16312] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2620'. [ 1179.804478][T16312] ksmbd: Unknown IPC event: 3, ignore. [ 1180.672713][T16325] wg1 speed is unknown, defaulting to 1000 [ 1180.776781][T13170] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1180.933556][T13170] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1180.942114][T13170] usb 5-1: config 0 has no interface number 0 [ 1180.948396][T13170] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1180.960774][T13170] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1181.016430][T13170] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1181.060132][T13170] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1181.081548][T13170] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1181.461429][T13170] usb 5-1: Product: syz [ 1181.465627][T13170] usb 5-1: SerialNumber: syz [ 1181.582396][T13170] usb 5-1: config 0 descriptor?? [ 1181.595159][T13170] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1181.636976][T13170] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input37 [ 1181.806459][T13170] ------------[ cut here ]------------ [ 1181.806553][T13170] URB ffff888029a33b00 submitted while active [ 1181.807192][T13170] WARNING: CPU: 0 PID: 13170 at drivers/usb/core/urb.c:380 usb_submit_urb+0x16f5/0x1990 [ 1181.807237][T13170] Modules linked in: [ 1181.807314][T13170] CPU: 0 UID: 0 PID: 13170 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 1181.807343][T13170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1181.807361][T13170] Workqueue: usb_hub_wq hub_event [ 1181.807390][T13170] RIP: 0010:usb_submit_urb+0x16f5/0x1990 [ 1181.807417][T13170] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 23 0b b5 fa c6 05 7a c7 62 09 01 90 48 c7 c7 40 16 50 8c 48 89 de e8 6c 3e 73 fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24 [ 1181.807459][T13170] RSP: 0018:ffffc90003006e90 EFLAGS: 00010282 [ 1181.807479][T13170] RAX: 0000000000000000 RBX: ffff888029a33b00 RCX: ffffc90018ad0000 [ 1181.807496][T13170] RDX: 0000000000100000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 1181.807512][T13170] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1181.807527][T13170] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888077c388a0 [ 1181.807542][T13170] R13: ffff888077c38810 R14: ffff888077c3889f R15: ffff888077c38850 [ 1181.807559][T13170] FS: 0000000000000000(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 1181.807599][T13170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1181.807615][T13170] CR2: 0000200000003120 CR3: 000000004afcd000 CR4: 00000000003526f0 [ 1181.807631][T13170] Call Trace: [ 1181.807641][T13170] [ 1181.807654][T13170] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1181.807690][T13170] ? __pm_runtime_resume+0xc3/0x170 [ 1181.807740][T13170] cm109_input_open+0x27a/0x490 [ 1181.807775][T13170] ? __pfx_cm109_input_open+0x10/0x10 [ 1181.807809][T13170] input_open_device+0x24c/0x3d0 [ 1181.807844][T13170] kbd_connect+0x103/0x160 [ 1181.807902][T13170] input_attach_handler.isra.0+0x176/0x250 [ 1181.807940][T13170] input_register_device+0xab9/0x1180 [ 1181.807977][T13170] cm109_usb_probe+0x122f/0x17c0 [ 1181.808040][T13170] usb_probe_interface+0x303/0xa40 [ 1181.808078][T13170] ? __pfx_usb_probe_interface+0x10/0x10 [ 1181.808110][T13170] really_probe+0x241/0xa90 [ 1181.808138][T13170] __driver_probe_device+0x1de/0x440 [ 1181.808185][T13170] driver_probe_device+0x4c/0x1b0 [ 1181.808211][T13170] __device_attach_driver+0x1df/0x310 [ 1181.808238][T13170] ? __pfx___device_attach_driver+0x10/0x10 [ 1181.808262][T13170] bus_for_each_drv+0x159/0x1e0 [ 1181.808294][T13170] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1181.808345][T13170] ? lockdep_hardirqs_on+0x7c/0x110 [ 1181.808367][T13170] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1181.808403][T13170] __device_attach+0x1e4/0x4b0 [ 1181.808429][T13170] ? __pfx___device_attach+0x10/0x10 [ 1181.808455][T13170] ? do_raw_spin_unlock+0x172/0x230 [ 1181.808506][T13170] bus_probe_device+0x17f/0x1c0 [ 1181.808542][T13170] device_add+0x1148/0x1aa0 [ 1181.808573][T13170] ? __pfx_device_add+0x10/0x10 [ 1181.808597][T13170] ? preempt_schedule_thunk+0x16/0x30 [ 1181.808663][T13170] usb_set_configuration+0x1187/0x1e20 [ 1181.808716][T13170] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1181.808741][T13170] usb_generic_driver_probe+0xb1/0x110 [ 1181.808786][T13170] usb_probe_device+0xef/0x3e0 [ 1181.808815][T13170] ? __pfx_usb_probe_device+0x10/0x10 [ 1181.808846][T13170] really_probe+0x241/0xa90 [ 1181.808879][T13170] __driver_probe_device+0x1de/0x440 [ 1181.808922][T13170] ? usb_driver_applicable+0x1c7/0x220 [ 1181.808960][T13170] driver_probe_device+0x4c/0x1b0 [ 1181.808986][T13170] __device_attach_driver+0x1df/0x310 [ 1181.809013][T13170] ? __pfx___device_attach_driver+0x10/0x10 [ 1181.809037][T13170] bus_for_each_drv+0x159/0x1e0 [ 1181.809085][T13170] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1181.809115][T13170] ? lockdep_hardirqs_on+0x7c/0x110 [ 1181.809138][T13170] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1181.809174][T13170] __device_attach+0x1e4/0x4b0 [ 1181.809216][T13170] ? __pfx___device_attach+0x10/0x10 [ 1181.809242][T13170] ? do_raw_spin_unlock+0x172/0x230 [ 1181.809275][T13170] bus_probe_device+0x17f/0x1c0 [ 1181.809312][T13170] device_add+0x1148/0x1aa0 [ 1181.809361][T13170] ? __pfx_device_add+0x10/0x10 [ 1181.809388][T13170] ? add_device_randomness+0xb7/0xf0 [ 1181.809414][T13170] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1181.809453][T13170] usb_new_device+0xd07/0x1a60 [ 1181.809505][T13170] ? do_raw_spin_lock+0x12c/0x2b0 [ 1181.809530][T13170] ? __pfx_usb_new_device+0x10/0x10 [ 1181.809560][T13170] ? mark_held_locks+0x49/0x80 [ 1181.809587][T13170] hub_event+0x2f34/0x4fe0 [ 1181.809666][T13170] ? __pfx_hub_event+0x10/0x10 [ 1181.809693][T13170] ? rcu_is_watching+0x12/0xc0 [ 1181.809720][T13170] ? irqentry_exit+0x3b/0x90 [ 1181.809770][T13170] ? preempt_schedule_thunk+0x16/0x30 [ 1181.809812][T13170] process_one_work+0x9cf/0x1b70 [ 1181.809849][T13170] ? __pfx_hcd_resume_work+0x10/0x10 [ 1181.809907][T13170] ? __pfx_process_one_work+0x10/0x10 [ 1181.809944][T13170] ? assign_work+0x1a0/0x250 [ 1181.809974][T13170] worker_thread+0x6c8/0xf10 [ 1181.810010][T13170] ? __kthread_parkme+0x19e/0x250 [ 1181.810062][T13170] ? __pfx_worker_thread+0x10/0x10 [ 1181.810087][T13170] kthread+0x3c5/0x780 [ 1181.810111][T13170] ? __pfx_kthread+0x10/0x10 [ 1181.810136][T13170] ? rcu_is_watching+0x12/0xc0 [ 1181.810164][T13170] ? __pfx_kthread+0x10/0x10 [ 1181.810207][T13170] ret_from_fork+0x675/0x7d0 [ 1181.810227][T13170] ? __pfx_kthread+0x10/0x10 [ 1181.810251][T13170] ret_from_fork_asm+0x1a/0x30 [ 1181.810299][T13170] [ 1181.810312][T13170] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1181.810330][T13170] CPU: 0 UID: 0 PID: 13170 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 1181.810357][T13170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1181.810373][T13170] Workqueue: usb_hub_wq hub_event [ 1181.810400][T13170] Call Trace: [ 1181.810409][T13170] [ 1181.810418][T13170] dump_stack_lvl+0x3d/0x1f0 [ 1181.810441][T13170] vpanic+0x640/0x6f0 [ 1181.810477][T13170] ? usb_submit_urb+0x16f5/0x1990 [ 1181.810500][T13170] panic+0xca/0xd0 [ 1181.810533][T13170] ? __pfx_panic+0x10/0x10 [ 1181.810581][T13170] check_panic_on_warn+0xab/0xb0 [ 1181.810604][T13170] __warn+0xf6/0x3c0 [ 1181.810622][T13170] ? __pfx_vprintk_emit+0x10/0x10 [ 1181.810648][T13170] ? usb_submit_urb+0x16f5/0x1990 [ 1181.810673][T13170] report_bug+0x3c3/0x580 [ 1181.810703][T13170] ? usb_submit_urb+0x16f5/0x1990 [ 1181.810728][T13170] handle_bug+0x184/0x210 [ 1181.810752][T13170] exc_invalid_op+0x17/0x50 [ 1181.810776][T13170] asm_exc_invalid_op+0x1a/0x20 [ 1181.810797][T13170] RIP: 0010:usb_submit_urb+0x16f5/0x1990 [ 1181.810821][T13170] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 23 0b b5 fa c6 05 7a c7 62 09 01 90 48 c7 c7 40 16 50 8c 48 89 de e8 6c 3e 73 fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24 [ 1181.810841][T13170] RSP: 0018:ffffc90003006e90 EFLAGS: 00010282 [ 1181.810864][T13170] RAX: 0000000000000000 RBX: ffff888029a33b00 RCX: ffffc90018ad0000 [ 1181.810880][T13170] RDX: 0000000000100000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 1181.810896][T13170] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1181.810910][T13170] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888077c388a0 [ 1181.810925][T13170] R13: ffff888077c38810 R14: ffff888077c3889f R15: ffff888077c38850 [ 1181.810952][T13170] ? __warn_printk+0x1a5/0x350 [ 1181.810988][T13170] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1181.811020][T13170] ? __pm_runtime_resume+0xc3/0x170 [ 1181.811050][T13170] cm109_input_open+0x27a/0x490 [ 1181.811081][T13170] ? __pfx_cm109_input_open+0x10/0x10 [ 1181.811110][T13170] input_open_device+0x24c/0x3d0 [ 1181.811145][T13170] kbd_connect+0x103/0x160 [ 1181.811176][T13170] input_attach_handler.isra.0+0x176/0x250 [ 1181.811210][T13170] input_register_device+0xab9/0x1180 [ 1181.811247][T13170] cm109_usb_probe+0x122f/0x17c0 [ 1181.811288][T13170] usb_probe_interface+0x303/0xa40 [ 1181.811322][T13170] ? __pfx_usb_probe_interface+0x10/0x10 [ 1181.811346][T13170] really_probe+0x241/0xa90 [ 1181.811369][T13170] __driver_probe_device+0x1de/0x440 [ 1181.811388][T13170] driver_probe_device+0x4c/0x1b0 [ 1181.811407][T13170] __device_attach_driver+0x1df/0x310 [ 1181.811428][T13170] ? __pfx___device_attach_driver+0x10/0x10 [ 1181.811447][T13170] bus_for_each_drv+0x159/0x1e0 [ 1181.811476][T13170] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1181.811507][T13170] ? lockdep_hardirqs_on+0x7c/0x110 [ 1181.811528][T13170] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1181.811562][T13170] __device_attach+0x1e4/0x4b0 [ 1181.811586][T13170] ? __pfx___device_attach+0x10/0x10 [ 1181.811611][T13170] ? do_raw_spin_unlock+0x172/0x230 [ 1181.811642][T13170] bus_probe_device+0x17f/0x1c0 [ 1181.811677][T13170] device_add+0x1148/0x1aa0 [ 1181.811705][T13170] ? __pfx_device_add+0x10/0x10 [ 1181.811727][T13170] ? preempt_schedule_thunk+0x16/0x30 [ 1181.811770][T13170] usb_set_configuration+0x1187/0x1e20 [ 1181.811819][T13170] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1181.811844][T13170] usb_generic_driver_probe+0xb1/0x110 [ 1181.811880][T13170] usb_probe_device+0xef/0x3e0 [ 1181.811908][T13170] ? __pfx_usb_probe_device+0x10/0x10 [ 1181.811940][T13170] really_probe+0x241/0xa90 [ 1181.811968][T13170] __driver_probe_device+0x1de/0x440 [ 1181.811990][T13170] ? usb_driver_applicable+0x1c7/0x220 [ 1181.812023][T13170] driver_probe_device+0x4c/0x1b0 [ 1181.812048][T13170] __device_attach_driver+0x1df/0x310 [ 1181.812074][T13170] ? __pfx___device_attach_driver+0x10/0x10 [ 1181.812096][T13170] bus_for_each_drv+0x159/0x1e0 [ 1181.812126][T13170] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1181.812156][T13170] ? lockdep_hardirqs_on+0x7c/0x110 [ 1181.812177][T13170] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1181.812212][T13170] __device_attach+0x1e4/0x4b0 [ 1181.812236][T13170] ? __pfx___device_attach+0x10/0x10 [ 1181.812260][T13170] ? do_raw_spin_unlock+0x172/0x230 [ 1181.812290][T13170] bus_probe_device+0x17f/0x1c0 [ 1181.812324][T13170] device_add+0x1148/0x1aa0 [ 1181.812352][T13170] ? __pfx_device_add+0x10/0x10 [ 1181.812378][T13170] ? add_device_randomness+0xb7/0xf0 [ 1181.812404][T13170] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1181.812440][T13170] usb_new_device+0xd07/0x1a60 [ 1181.812473][T13170] ? do_raw_spin_lock+0x12c/0x2b0 [ 1181.812497][T13170] ? __pfx_usb_new_device+0x10/0x10 [ 1181.812526][T13170] ? mark_held_locks+0x49/0x80 [ 1181.812550][T13170] hub_event+0x2f34/0x4fe0 [ 1181.812607][T13170] ? __pfx_hub_event+0x10/0x10 [ 1181.812633][T13170] ? rcu_is_watching+0x12/0xc0 [ 1181.812659][T13170] ? irqentry_exit+0x3b/0x90 [ 1181.812691][T13170] ? preempt_schedule_thunk+0x16/0x30 [ 1181.812730][T13170] process_one_work+0x9cf/0x1b70 [ 1181.812765][T13170] ? __pfx_hcd_resume_work+0x10/0x10 [ 1181.812795][T13170] ? __pfx_process_one_work+0x10/0x10 [ 1181.812828][T13170] ? assign_work+0x1a0/0x250 [ 1181.812853][T13170] worker_thread+0x6c8/0xf10 [ 1181.812894][T13170] ? __kthread_parkme+0x19e/0x250 [ 1181.812926][T13170] ? __pfx_worker_thread+0x10/0x10 [ 1181.812951][T13170] kthread+0x3c5/0x780 [ 1181.812974][T13170] ? __pfx_kthread+0x10/0x10 [ 1181.812998][T13170] ? rcu_is_watching+0x12/0xc0 [ 1181.813023][T13170] ? __pfx_kthread+0x10/0x10 [ 1181.813046][T13170] ret_from_fork+0x675/0x7d0 [ 1181.813066][T13170] ? __pfx_kthread+0x10/0x10 [ 1181.813088][T13170] ret_from_fork_asm+0x1a/0x30 [ 1181.813134][T13170] [ 1181.813442][T13170] Kernel Offset: disabled