last executing test programs: 11.188975002s ago: executing program 4 (id=2036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) shmdt(0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfe1f}, 0x4000855) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) 9.803716436s ago: executing program 1 (id=2041): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r1, 0x0, 0x7fff, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000100)=0xac) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5c, 0x99, 0xb1, 0x20, 0x6cd, 0x102, 0x2139, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x24, 0x40, 0x2, [{{0x9, 0x4, 0xc4, 0x0, 0x0, 0x83, 0x38, 0x4e}}]}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)={0x14, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) geteuid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}}, 0x0) 7.80447511s ago: executing program 3 (id=2047): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 7.483940842s ago: executing program 4 (id=2049): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x81000000}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x8001, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x7}, 0x4) close_range(r3, r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600000000014060100000000000000000000000000000000fe8000000000000000000002000000aa04004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='X'], 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000743ab0008000a40000000000900020073797a31000000000900010073797a300000000008000540000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000340)=0x9, 0x4) close(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r5, &(0x7f0000000380)={0x0, 0x1, 0x3, 0x1, 0x9}, 0x8) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.80272334s ago: executing program 4 (id=2050): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0xdd5d1edde8f904fb) r6 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0x0) pread64(r6, &(0x7f00000000c0)=""/209, 0xd1, 0x578c) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname$packet(r7, 0x0, &(0x7f0000014580)) 5.912122673s ago: executing program 1 (id=2052): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) faccessat2(r2, &(0x7f0000001400)='\x00', 0x0, 0x1100) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000103) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(r4, 0x5420, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000880)=0x3) io_uring_setup(0x15dc, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x505301, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 5.875271134s ago: executing program 3 (id=2053): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffff9c, 0x0, 0xa00f2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'veth1\x00', &(0x7f00000002c0)=@ethtool_dump={0x3f, 0x80000000}}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x400454cc, 0x0) 5.575023886s ago: executing program 4 (id=2055): rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) r1 = epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x4441, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x3) 5.028360525s ago: executing program 2 (id=2056): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x82, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @val={@void, {0x8100, 0x3, 0x1, 0xffe}}, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @private1, {[], {0x4e1a, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0xe00, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 4.381577823s ago: executing program 2 (id=2057): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) faccessat2(r2, &(0x7f0000001400)='\x00', 0x0, 0x1100) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000103) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(r4, 0x5420, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000880)=0x3) io_uring_setup(0x15dc, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x505301, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 4.374270383s ago: executing program 1 (id=2058): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x20, 0xb, 0x82, {0x82, 0xe, "69ffd37efa29b73e6fcf3454ac6f79503aa918f160969a7e399e22296e6687d63ea167bf2146fbf3a569fe969b1cd256fbe1d8f016b88f4bbc2f5319f98ca0cde9bf1fd8729ba55bffe9b7cc8ea5d4e8e98e8fae040c9c6a6a6e2406b4449b17bf24a325ea39857a057141532d32b35c1a574799f9bb72d90292b4e89ca23d1c"}}, &(0x7f00000001c0)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "715d483cfb8b237a3c9bdbd938a6f2c7300e317bb8118b8e3c299978587def2189daea36ce15e0f22257e46a1ff7d7c52f11ca7e8999b8fdeaa80839c4069146931f56f761fb6a4273f79e7ae72dbbc3a201262bf064f5e0575b517c8231b7bb2e23be7b598c47ae1e9cfd2979c724dd366426000a265eede2757c23d1f106359eb0b955138de793bae116f5d8ee7eba7b96842e659c41aef0a1b5bdf4ed7ceb91bd6210ba0d3499e642c85ebe4bc3f02c872bc7e7ceecf6a2b7ed45adbffaa5262aadfb9b7524f8fc4529374497dd28"}}, &(0x7f0000000040)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0xa6, 0x5, 0x9, 0x9, 0x50}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "137a3cb57a6e03b408b243b4a3361eea"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x9, 0x6, "1040f3ef", "dcf45fb4"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0xb, 0x2, 0x8, 0x7, 0x800}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x40, 0x5, 0x52, "5743c0a39d7fe74880ffef3d29ca0df1b06952df222340accdddfde311a958e5abbe6b7a31ec8beba5073ee4b21723fbf8b23c6dc11f51eef227d45502e075d934a1ce1598fbdf376e9828f1fd2ef11d309d"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x160, 0x40, [0xf0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xa326}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xfd}, &(0x7f0000000580)={0x40, 0xb, 0x2, "a358"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ae31"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xef}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x2}}) 4.298991456s ago: executing program 3 (id=2059): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 3.646279073s ago: executing program 3 (id=2060): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x81000000}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x8001, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x7}, 0x4) close_range(r3, r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600000000014060100000000000000000000000000000000fe8000000000000000000002000000aa04004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='X'], 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000743ab0008000a40000000000900020073797a31000000000900010073797a300000000008000540000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000340)=0x9, 0x4) close(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r5, &(0x7f0000000380)={0x0, 0x1, 0x3, 0x1, 0x9}, 0x8) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.608400017s ago: executing program 2 (id=2061): ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000280)={{0xdddd1000, 0x9000, 0xb, 0x2, 0xf7, 0x4, 0x8, 0x4, 0xa, 0x1, 0x1, 0x5}, {0x8000000, 0xa000, 0xa, 0xf, 0x6, 0x81, 0x0, 0x80, 0xb, 0x6, 0x10, 0x2}, {0x1, 0x100000, 0x4, 0x2, 0x47, 0x5, 0xb, 0xf, 0x5, 0x4, 0x25, 0x8}, {0xe000, 0x9000, 0xb, 0x58, 0x0, 0x9, 0x6, 0x6, 0x9, 0xf7, 0x3, 0x10}, {0x50000, 0x4, 0x0, 0xc2, 0x3, 0xfa, 0x4, 0x6, 0xf, 0x0, 0x0, 0x2b}, {0x7000, 0x3332f000, 0xd, 0x3, 0x0, 0x2, 0x7, 0x5, 0x9, 0x5, 0x5, 0xda}, {0xa000, 0x58000, 0xc, 0x5, 0x8, 0x9, 0x7, 0xf, 0x2, 0x0, 0x4, 0x3}, {0x200000, 0x25000, 0xf, 0x1, 0x80, 0x4, 0x4, 0x57, 0x5, 0x8, 0x5, 0xd}, {}, {0xf000, 0x101}, 0x40000001, 0x0, 0x3000, 0x400041, 0x0, 0x0, 0xb000, 0x0, [0x9, 0x6, 0x6, 0xee38]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0xc, 0x43, 0x558}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb3", 0x93}, {0x0}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}], 0x1, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x20004040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_open_dev$vcsa(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000600)={0x1}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.233889795s ago: executing program 3 (id=2062): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000040)}, 0x20000890) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0) syz_open_dev$video(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000380000000ffffff7f0000070000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd26, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x10020) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@remote, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x28, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x3c, r7, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 3.19252263s ago: executing program 4 (id=2063): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 3.016520635s ago: executing program 0 (id=2064): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x1010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x28, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x5, 0x8, 0x800, 0x0, 0x1aa2, 0xc, 0x1}}, {0x6, 0x2, [0x8]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 2.799528806s ago: executing program 2 (id=2065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0xdd5d1edde8f904fb) r6 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0x0) pread64(r6, &(0x7f00000000c0)=""/209, 0xd1, 0x578c) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname$packet(r7, 0x0, &(0x7f0000014580)) 1.944984745s ago: executing program 0 (id=2066): syz_io_uring_submit(0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080), 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) creat(&(0x7f0000000000)='./file0\x00', 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) 1.784076102s ago: executing program 0 (id=2067): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x82, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @val={@void, {0x8100, 0x3, 0x1, 0xffe}}, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @private1, {[], {0x4e1a, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0xe00, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 1.717329712s ago: executing program 4 (id=2068): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x20, 0x4, 0x6}}, 0x14) fgetxattr(r0, &(0x7f00000000c0)=@random={'osx.', '-+\xde\x00'}, &(0x7f0000000100)=""/115, 0x73) socket$nl_audit(0x10, 0x3, 0x9) socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000014c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1866, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x859, 0x3, 0x1, {0x22, 0xc7f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x2, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0xd, 0xd1}}]}}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x200, 0x9, 0x7, 0x11, 0x8, 0x1}, 0x5, &(0x7f0000001540)={0x5, 0xf, 0x5}, 0x7, [{0x81, &(0x7f0000001580)=@string={0x81, 0x3, "5764696b8402cac8c0e682a85dbff447c75b4f0bae78b290aae04a5ff74e8520daa20124fb19e374ceae417d5c6f63dc96e651f370e06220e64903164b584e9c3ec1c9e2e8805cebb28126097854ca6fd4b23337d1b72cc6fb5eea588215a4bf92b50cd5e51d13cb4ad06b95e32506d720c7fdb316e089051fe31c553e544a"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x25, &(0x7f0000001680)=@string={0x25, 0x3, "5c2f3a9511c1edf7aa0e6771597cda9298eee7046f9cb36dcb12c08c6e13ac6a31f84b"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x3409}}, {0x84, &(0x7f0000001780)=@string={0x84, 0x3, "c320f32af77b0eb77e65f2ac45fb3aad603f67d1e1bae08db209f1ee5d08ba30632a79b17c61dd6175a855a65fbad5a7be14af0c3cc4596856c93ef04027742160f5cddad5134686d9221351d5920ee12d662e352bf4fde081c8f05fd3b08450d8be0e6d744f644aeef5567063e6a70f4028a4b9e3abf376e195b7542cd7be1f1e5a"}}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x40000c0) syz_usb_connect(0xd, 0x48b, &(0x7f0000001a80)={{0x12, 0x1, 0x250, 0x1c, 0xee, 0xda, 0xff, 0x3f0, 0x1016, 0xbb6b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x479, 0x2, 0x6, 0x2, 0x30, 0x4, [{{0x9, 0x4, 0x84, 0x3, 0x0, 0x85, 0x85, 0x62, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x1, 0xce, 0x18}}]}}, {{0x9, 0x4, 0xe2, 0x3, 0xd, 0x5f, 0x13, 0xfb, 0xa, [], [{{0x9, 0x5, 0x80, 0x2, 0x10, 0x2, 0x52, 0xca}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x7, 0x92, 0x1}}, {{0x9, 0x5, 0x89, 0x1, 0x400, 0xda, 0x5, 0x43, [@generic={0xae, 0x6, "c416e8d17ea8cd7e96e7e363e5b57b2520de0b08bbcb4ef74c752652c62589290f4c9d38e0c25d9a8d3543a698145b4360c96d457c1901304567de927fd364bfe48d49a13bf4ef3f0f5293012daae253b15603067d613ce0bcfa431d838d0e9e96141db687f2f0b0a2d0e040a083196e1dcda7412a4d29a7276fa08fdea8987988422772408e6a1afa629918287e917ac66386a574d72adca7fafa7fb0c72cfff41e25091e24131a8650b7af"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x0, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xcd, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x6, 0xd0, 0x8, [@generic={0xa9, 0xa, "320ff73b81dc9304d4cf659ba80467b037774c75d783fd8487325bb366c8bbaa8dd25a46bf793ce810268c7bb20db8ee2b9b617d09b880e66a75a7cc1401f510c9d727d6159e1eab152d01c8900369e6c714466052197da598a5b08e6cc551c206a40342b32143f4635637ae6038bc3e379dfe7e17a1f7f40a383eb9a22a7e08db18b02197739c5cc372653b1f283416e383e1b41e5e55dc1bd6646cc926f68f70d82eb1f169ab"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x3, 0xea, 0x4, [@generic={0x69, 0x9, "1a2ab90ce7c1976ac44b9f92fcb69f4caecf5d924ec2329a17384237f742afaa4245aeb0a38e30be3b4c8f689a2d0cfca025abc9c543eb24fdb11a9c172c95503b29d2cef17e6163fb8ef40f8125f5e7c28e037fdf34837d8ae4500115595073ddbe5d6af1a0ee"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x2, 0x0, 0xb4, [@generic={0x3a, 0x11, "777f2edcc780ce9992ef2ed1af6488fc8b660a91e52fcd0e60ce90aa6db81ab61d5c388a4809db707ec0dcb22f2c38b0d15215e68b487521"}, @generic={0x14, 0xe, "f1399fde0cc15f85bfd5a35d6ea86f1d030e"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x4, 0xb, 0x2, [@generic={0xd7, 0x9, "a84ca915f0d91defe36c9eafc3c232942ae809aa52b6ba8d5e50b8742d60d759b149d70fef631edff23c2f5a0971aea5c1b439dc605fa9eeeae5bc283a719931ad0c9452928321f11de3ad69e2e1bec8aec32315f95745c29a52144b566a9de0b6f9e1bcd7f006a55d38b4108f9a36f4785f354186a588eac137f6bfa0f006f1e813899a549fd5222ffc73c36db39c8e75e8316b33bac717e74c74ee2084968dfff71a0e69722b563697e4b0f12ec63b720227551f47cc937edfa731cf6af17873a53ded88795c989aa2df7ce6530af7541f9cf7a9"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x6, 0x6, 0x9}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x4, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x7, 0x401}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xe9, 0x46, 0xfe}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x80, 0x0, 0x32, [@generic={0xd8, 0xb, "3dc425369b82d1ef3fb6f7bed81c6a6ab549dd0d103ab4f0b702b87f379d963ba51bf0d8e4c05f433cec0dcf0f02f19f64cb117c81ff5f6a8785a6a974a20d5c20662aff7ddeafc98c0a399f8804695285de04dc586062d00889d0013c06c3b595e43083d27a2bbd7abe8122a9bc4d5e0489936d689514e49d858c03d986b601b9cfaded516549b41feae13f1a454f8ab90192f21b525c3b0767ef0f0e5e99561a402f0855c6ed751c7ab408470b79adf8b8a8fd6d9e612720b506c538c2735b2ca4fa40e00878d37eb53d90ae1f97ad095cb8f21d2d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd8, 0x7f}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x8, 0x8, 0xf4}}]}}]}}]}}, &(0x7f00000020c0)={0xa, &(0x7f0000001f40)={0xa, 0x6, 0x110, 0x8, 0x8, 0x7, 0x8}, 0x88, &(0x7f0000001f80)={0x5, 0xf, 0x88, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x1, 0x6, 0x1, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x3, 0xdd}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x8, 0xeee2}, @generic={0x67, 0x10, 0x3, "2ca6d0dfa3cbb8d4a109cf8bf4b2a34d6f60cc00ff2e2fe8ebacf127c9478372cd8f4ee3808d822a27032671a896133b0a9691f9eabaaa9907b225a6ae908e648cf94973a6050967c6d673c653bb8dd81db4880c5c029560fc302d786cac919ffca13227"}]}, 0x2, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0xc0ff}}, {0x4, &(0x7f0000002080)=@lang_id={0x4, 0x3, 0x3c0a}}]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002200)={'ip6gre0\x00', &(0x7f0000002180)={'syztnl2\x00', 0x0, 0x4, 0x4, 0xff, 0x8, 0x8, @local, @local, 0x48, 0x8, 0x1, 0x400}}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002400)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0xc, 0x5, &(0x7f0000002100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25a, 0x0, 0x0, 0x0, 0x7fffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x4e}]}, &(0x7f0000002140)='syzkaller\x00', 0xed, 0x0, 0x0, 0x40f00, 0x90, '\x00', r6, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000023c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x7, &(0x7f0000002500)=[r7, 0x1, r8, 0xffffffffffffffff], &(0x7f0000002540)=[{0x4, 0x2, 0xb}, {0x3, 0x2, 0xa, 0x6}, {0x2, 0x2, 0x4, 0x1}, {0x0, 0x2, 0x5, 0x6}, {0x2, 0x3, 0x4, 0x7}, {0x1, 0x4, 0x2, 0x8}, {0x1, 0x5, 0xc, 0x6}], 0x10, 0x9}, 0x94) sendmsg$NFT_BATCH(r9, &(0x7f0000002dc0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d80)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x1e4, 0x6, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x108, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xa509}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xa867}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x60, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x40}]}, @NFT_MSG_DELRULE={0xa8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x77}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2b0, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x138, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x44, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xf8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20}, @NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'wpan1\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x3540}]}}}, {0x6c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6f}]}}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x18}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x100, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x70, 0x16, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0xa05, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6ac}, 0x1, 0x0, 0x0, 0x4800}, 0x24000040) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000002e00)={0x0, 0x0, "b11da5d17de28d02fd8064a7e4c1519c"}) 1.659458283s ago: executing program 2 (id=2069): rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.299715802s ago: executing program 1 (id=2070): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, 0x0) 1.292186437s ago: executing program 0 (id=2071): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) faccessat2(r2, &(0x7f0000001400)='\x00', 0x0, 0x1100) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000103) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(r4, 0x5420, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000880)=0x3) io_uring_setup(0x15dc, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x505301, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.168081635s ago: executing program 1 (id=2072): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000010000000000000000000008000000ff"], 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) dup3(r3, r2, 0x80000) socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 769.136295ms ago: executing program 0 (id=2073): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x81000000}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x8001, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x7}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600000000014060100000000000000000000000000000000fe8000000000000000000002000000aa04004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='X'], 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000743ab0008000a40000000000900020073797a31000000000900010073797a300000000008000540000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000340)=0x9, 0x4) close(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r5, &(0x7f0000000380)={0x0, 0x1, 0x3, 0x1, 0x9}, 0x8) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 607.943082ms ago: executing program 1 (id=2074): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x181000, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00007e5000/0x2000)=nil, 0x2000}, 0x4}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406a0563000000000000010902"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 475.143565ms ago: executing program 3 (id=2075): ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000280)={{0xdddd1000, 0x9000, 0xb, 0x2, 0xf7, 0x4, 0x8, 0x4, 0xa, 0x1, 0x1, 0x5}, {0x8000000, 0xa000, 0xa, 0xf, 0x6, 0x81, 0x0, 0x80, 0xb, 0x6, 0x10, 0x2}, {0x1, 0x100000, 0x4, 0x2, 0x47, 0x5, 0xb, 0xf, 0x5, 0x4, 0x25, 0x8}, {0xe000, 0x9000, 0xb, 0x58, 0x0, 0x9, 0x6, 0x6, 0x9, 0xf7, 0x3, 0x10}, {0x50000, 0x4, 0x0, 0xc2, 0x3, 0xfa, 0x4, 0x6, 0xf, 0x0, 0x0, 0x2b}, {0x7000, 0x3332f000, 0xd, 0x3, 0x0, 0x2, 0x7, 0x5, 0x9, 0x5, 0x5, 0xda}, {0xa000, 0x58000, 0xc, 0x5, 0x8, 0x9, 0x7, 0xf, 0x2, 0x0, 0x4, 0x3}, {0x200000, 0x25000, 0xf, 0x1, 0x80, 0x4, 0x4, 0x57, 0x5, 0x8, 0x5, 0xd}, {}, {0xf000, 0x101}, 0x40000001, 0x0, 0x3000, 0x400041, 0x0, 0x0, 0xb000, 0x0, [0x9, 0x6, 0x6, 0xee38]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0xc, 0x43, 0x558}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb3", 0x93}, {0x0}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x20004040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_open_dev$vcsa(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000600)={0x1}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 337.722901ms ago: executing program 0 (id=2076): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) (fail_nth: 6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) 0s ago: executing program 2 (id=2077): syz_io_uring_submit(0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080), 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) creat(&(0x7f0000000000)='./file0\x00', 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) kernel console output (not intermixed with test programs): ASK> [ 528.948729][T12111] dump_stack_lvl+0x16c/0x1f0 [ 528.948760][T12111] should_fail_ex+0x512/0x640 [ 528.948785][T12111] strncpy_from_user+0x3b/0x2e0 [ 528.948807][T12111] strncpy_from_user_nofault+0x7f/0x180 [ 528.948829][T12111] bpf_bprintf_prepare+0xe90/0x13f0 [ 528.948854][T12111] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 528.948887][T12111] ? bpf_trace_run2+0x3f9/0x5c0 [ 528.948908][T12111] bpf_trace_printk+0xda/0x190 [ 528.948925][T12111] ? __pfx_bpf_trace_printk+0x10/0x10 [ 528.948949][T12111] ? bpf_trace_run2+0x3f9/0x5c0 [ 528.948977][T12111] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 528.948994][T12111] bpf_trace_run2+0x239/0x5c0 [ 528.949015][T12111] ? __pfx_bpf_trace_run2+0x10/0x10 [ 528.949040][T12111] ? __lock_acquire+0x436/0x2890 [ 528.949073][T12111] __bpf_trace_contention_begin+0xc9/0x110 [ 528.949096][T12111] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 528.949121][T12111] ? lock_acquire+0x179/0x330 [ 528.949144][T12111] ? __pfx___might_resched+0x10/0x10 [ 528.949164][T12111] trace_contention_begin+0xc1/0x110 [ 528.949186][T12111] __mutex_lock+0x1b7/0x1ca0 [ 528.949213][T12111] ? __video_do_ioctl+0x43e/0xf00 [ 528.949240][T12111] ? __video_do_ioctl+0x43e/0xf00 [ 528.949266][T12111] ? __pfx___mutex_lock+0x10/0x10 [ 528.949295][T12111] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 528.949324][T12111] ? find_held_lock+0x2b/0x80 [ 528.949353][T12111] ? __video_do_ioctl+0x43e/0xf00 [ 528.949367][T12111] __video_do_ioctl+0x43e/0xf00 [ 528.949383][T12111] ? find_held_lock+0x2b/0x80 [ 528.949399][T12111] ? __might_fault+0xe3/0x190 [ 528.949410][T12111] ? __pfx___video_do_ioctl+0x10/0x10 [ 528.949430][T12111] video_usercopy+0x4d0/0x16c0 [ 528.949447][T12111] ? __pfx___video_do_ioctl+0x10/0x10 [ 528.949461][T12111] ? selinux_kernel_read_file+0xb0/0x120 [ 528.949479][T12111] ? __pfx_video_usercopy+0x10/0x10 [ 528.949503][T12111] v4l2_ioctl+0x1bd/0x250 [ 528.949518][T12111] ? __pfx_v4l2_ioctl+0x10/0x10 [ 528.949533][T12111] __x64_sys_ioctl+0x18e/0x210 [ 528.949547][T12111] do_syscall_64+0xcd/0xf80 [ 528.949565][T12111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.949577][T12111] RIP: 0033:0x7fc121d8f749 [ 528.949587][T12111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.949598][T12111] RSP: 002b:00007fc122c5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.949609][T12111] RAX: ffffffffffffffda RBX: 00007fc121fe5fa0 RCX: 00007fc121d8f749 [ 528.949616][T12111] RDX: 0000200000000000 RSI: 0000000040045612 RDI: 0000000000000003 [ 528.949623][T12111] RBP: 00007fc122c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 528.949629][T12111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.949635][T12111] R13: 00007fc121fe6038 R14: 00007fc121fe5fa0 R15: 00007ffef5419318 [ 528.949650][T12111] [ 528.951369][T12111] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 529.282903][ T10] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 529.352985][ T6012] usb 3-1: Using ep0 maxpacket: 32 [ 529.365422][ T6012] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 529.375620][ T6012] usb 3-1: config 0 has no interface number 0 [ 529.385923][ T6012] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 529.397133][ T6012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.406547][ T6012] usb 3-1: Product: syz [ 529.410735][ T6012] usb 3-1: Manufacturer: syz [ 529.416012][ T6012] usb 3-1: SerialNumber: syz [ 529.425035][ T6012] usb 3-1: config 0 descriptor?? [ 529.433079][ T6012] smsc95xx v2.0.0 [ 529.436748][ T6012] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 529.447757][ T6012] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 529.457828][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 529.470685][ T10] usb 2-1: config 0 has no interface number 0 [ 529.477923][ T10] usb 2-1: config 0 interface 41 has no altsetting 0 [ 529.487372][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 529.498386][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.506558][ T10] usb 2-1: Product: syz [ 529.510867][ T10] usb 2-1: Manufacturer: syz [ 529.513563][ T5929] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 529.515549][ T10] usb 2-1: SerialNumber: syz [ 529.530255][ T10] usb 2-1: config 0 descriptor?? [ 529.672835][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 529.680522][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.692594][ T5929] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 529.778467][ T5929] usb 5-1: config 0 interface 0 has no altsetting 0 [ 529.797804][ T5929] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 529.807769][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.828736][ T5929] usb 5-1: config 0 descriptor?? [ 529.849786][ T5929] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 530.456333][ T30] audit: type=1400 audit(1765123766.989:2851): avc: denied { remount } for pid=12133 comm="syz.0.1662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 530.659015][ T5955] usb 3-1: USB disconnect, device number 54 [ 531.032030][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 531.044444][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 531.058916][ T10] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 531.071453][ T10] usb 2-1: USB disconnect, device number 75 [ 532.246481][T12168] o2cb: This node has not been configured. [ 532.252387][T12168] o2cb: Cluster check failed. Fix errors before retrying. [ 532.259960][T12168] (syz.1.1668,12168,1):user_dlm_register:674 ERROR: status = -22 [ 532.267970][T12168] (syz.1.1668,12168,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 532.669500][ T5889] usb 5-1: USB disconnect, device number 71 [ 532.789676][ T30] audit: type=1400 audit(1765123769.319:2852): avc: denied { execute } for pid=12172 comm="syz.2.1670" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 532.890311][T12180] misc userio: No port type given on /dev/userio [ 532.943590][ T30] audit: type=1400 audit(1765123769.479:2853): avc: denied { write } for pid=12181 comm="syz.2.1675" laddr=172.20.20.44 lport=4 faddr=172.20.20.18 fport=19488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 533.143212][ T5889] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 533.267064][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1675'. [ 533.344608][ T30] audit: type=1400 audit(1765123769.879:2854): avc: denied { getopt } for pid=12181 comm="syz.2.1675" laddr=172.20.20.44 lport=4 faddr=172.20.20.18 fport=19488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 533.372467][T12185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12185 comm=syz.2.1675 [ 533.402846][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 533.484513][ T5889] usb 4-1: config 16 has an invalid interface number: 19 but max is 0 [ 533.494497][ T5889] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 533.524803][ T5889] usb 4-1: config 16 has no interface number 0 [ 533.531148][ T5889] usb 4-1: config 16 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.554657][T12193] xt_hashlimit: size too large, truncated to 1048576 [ 533.582823][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 533.591904][ T5889] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 533.611514][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.631111][ T5889] usb 4-1: Product: syz [ 533.642427][ T10] usb 5-1: config 0 has no interfaces? [ 533.667270][ T5889] usb 4-1: Manufacturer: syz [ 533.671749][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 533.732841][ T5889] usb 4-1: SerialNumber: syz [ 533.739413][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.776606][ T10] usb 5-1: config 0 descriptor?? [ 534.178130][ T5889] usb 4-1: USB disconnect, device number 53 [ 534.259746][ T30] audit: type=1400 audit(1765123770.789:2855): avc: denied { read } for pid=12196 comm="syz.2.1678" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 534.391493][T11145] udevd[11145]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.429304][ T30] audit: type=1400 audit(1765123770.789:2856): avc: denied { open } for pid=12196 comm="syz.2.1678" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 535.203136][ T30] audit: type=1400 audit(1765123771.719:2857): avc: denied { name_connect } for pid=12211 comm="syz.0.1681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 535.323116][T12213] FAULT_INJECTION: forcing a failure. [ 535.323116][T12213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.336347][T12213] CPU: 1 UID: 0 PID: 12213 Comm: syz.0.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.336381][T12213] Tainted: [L]=SOFTLOCKUP [ 535.336388][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 535.336399][T12213] Call Trace: [ 535.336406][T12213] [ 535.336413][T12213] dump_stack_lvl+0x16c/0x1f0 [ 535.336447][T12213] should_fail_ex+0x512/0x640 [ 535.336472][T12213] _copy_from_user+0x2e/0xd0 [ 535.336493][T12213] copy_msghdr_from_user+0x98/0x160 [ 535.336518][T12213] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 535.336547][T12213] ? __lock_acquire+0x436/0x2890 [ 535.336575][T12213] ___sys_recvmsg+0xdb/0x1a0 [ 535.336598][T12213] ? __pfx____sys_recvmsg+0x10/0x10 [ 535.336636][T12213] ? __pfx___might_resched+0x10/0x10 [ 535.336661][T12213] do_recvmmsg+0x2fe/0x750 [ 535.336687][T12213] ? __pfx_do_recvmmsg+0x10/0x10 [ 535.336715][T12213] ? __mutex_unlock_slowpath+0x161/0x790 [ 535.336752][T12213] ? __fget_files+0x20e/0x3c0 [ 535.336785][T12213] __x64_sys_recvmmsg+0x22a/0x280 [ 535.336810][T12213] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 535.336843][T12213] do_syscall_64+0xcd/0xf80 [ 535.336872][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.336891][T12213] RIP: 0033:0x7fc121d8f749 [ 535.336907][T12213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.336924][T12213] RSP: 002b:00007fc122c3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 535.336944][T12213] RAX: ffffffffffffffda RBX: 00007fc121fe6090 RCX: 00007fc121d8f749 [ 535.336956][T12213] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000005 [ 535.336967][T12213] RBP: 00007fc122c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 535.336979][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.336990][T12213] R13: 00007fc121fe6128 R14: 00007fc121fe6090 R15: 00007ffef5419318 [ 535.337017][T12213] [ 536.465677][ T9] usb 5-1: USB disconnect, device number 72 [ 536.718876][ T30] audit: type=1400 audit(1765123773.249:2858): avc: denied { write } for pid=12232 comm="syz.2.1687" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 536.924488][ T10] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 537.035644][T12242] lo speed is unknown, defaulting to 1000 [ 537.041912][T12242] lo speed is unknown, defaulting to 1000 [ 537.058850][T12242] lo speed is unknown, defaulting to 1000 [ 537.091274][T12242] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 537.148127][T12242] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 537.408712][T12242] lo speed is unknown, defaulting to 1000 [ 537.415374][T12242] lo speed is unknown, defaulting to 1000 [ 537.421812][T12242] lo speed is unknown, defaulting to 1000 [ 537.429350][T12242] lo speed is unknown, defaulting to 1000 [ 537.435799][T12242] lo speed is unknown, defaulting to 1000 [ 537.454668][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 537.473904][T12238] trusted_key: encrypted_key: insufficient parameters specified [ 537.494082][T12238] binder: 12232:12238 ioctl c018620c 200000000000 returned -1 [ 537.537086][ T10] usb 2-1: config 0 has no interface number 0 [ 537.544373][ T10] usb 2-1: config 0 interface 41 has no altsetting 0 [ 537.553491][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 537.562945][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.715283][ T10] usb 2-1: Product: syz [ 537.727943][ T10] usb 2-1: Manufacturer: syz [ 537.749734][ T10] usb 2-1: SerialNumber: syz [ 537.769375][ T10] usb 2-1: config 0 descriptor?? [ 538.757730][ T5889] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 539.045830][ T5929] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 539.075734][ T5889] usb 1-1: config 0 has no interfaces? [ 539.081235][ T5889] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 539.123746][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.152672][ T5889] usb 1-1: config 0 descriptor?? [ 539.224430][ T5929] usb 5-1: config 0 has no interfaces? [ 539.229939][ T5929] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 539.245202][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.267249][ T5929] usb 5-1: config 0 descriptor?? [ 539.682142][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 539.693805][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 539.803699][ T10] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 539.969126][ T5889] usb 1-1: USB disconnect, device number 76 [ 539.998116][T12264] FAULT_INJECTION: forcing a failure. [ 539.998116][T12264] name failslab, interval 1, probability 0, space 0, times 0 [ 540.014774][ T5929] usb 5-1: USB disconnect, device number 73 [ 540.038546][T12264] CPU: 1 UID: 0 PID: 12264 Comm: syz.2.1694 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.038579][T12264] Tainted: [L]=SOFTLOCKUP [ 540.038585][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 540.038597][T12264] Call Trace: [ 540.038604][T12264] [ 540.038612][T12264] dump_stack_lvl+0x16c/0x1f0 [ 540.038646][T12264] should_fail_ex+0x512/0x640 [ 540.038668][T12264] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 540.038694][T12264] should_failslab+0xc2/0x120 [ 540.038720][T12264] kmem_cache_alloc_noprof+0x83/0x770 [ 540.038741][T12264] ? skb_clone+0x190/0x3f0 [ 540.038770][T12264] ? skb_clone+0x190/0x3f0 [ 540.038792][T12264] skb_clone+0x190/0x3f0 [ 540.038818][T12264] netlink_deliver_tap+0xabd/0xd30 [ 540.038851][T12264] netlink_unicast+0x64c/0x870 [ 540.038884][T12264] ? __pfx_netlink_unicast+0x10/0x10 [ 540.038922][T12264] netlink_sendmsg+0x8c8/0xdd0 [ 540.038964][T12264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.039000][T12264] ____sys_sendmsg+0xa5d/0xc30 [ 540.039029][T12264] ? copy_msghdr_from_user+0x10a/0x160 [ 540.039051][T12264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.039090][T12264] ___sys_sendmsg+0x134/0x1d0 [ 540.039115][T12264] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.039169][T12264] __sys_sendmsg+0x16d/0x220 [ 540.039193][T12264] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.039232][T12264] do_syscall_64+0xcd/0xf80 [ 540.039261][T12264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.039280][T12264] RIP: 0033:0x7f9c7898f749 [ 540.039297][T12264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.039315][T12264] RSP: 002b:00007f9c76bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.039332][T12264] RAX: ffffffffffffffda RBX: 00007f9c78be5fa0 RCX: 00007f9c7898f749 [ 540.039345][T12264] RDX: 0000000000008080 RSI: 0000200000000080 RDI: 0000000000000003 [ 540.039356][T12264] RBP: 00007f9c76bee090 R08: 0000000000000000 R09: 0000000000000000 [ 540.039365][T12264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.039376][T12264] R13: 00007f9c78be6038 R14: 00007f9c78be5fa0 R15: 00007ffc8f242a78 [ 540.039402][T12264] [ 540.041303][T12264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1694'. [ 540.354433][ T10] usb 2-1: USB disconnect, device number 76 [ 541.054379][ T30] audit: type=1400 audit(1765123777.589:2859): avc: denied { listen } for pid=12283 comm="syz.4.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 541.088057][T12281] bond1: ARP target 5.0.0.0 is already present [ 541.094517][T12281] bond1: option arp_ip_target: invalid value (5) [ 541.102825][ T5929] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 541.133036][T12281] bond1 (unregistering): Released all slaves [ 541.257074][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 541.284381][ T5929] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 541.301027][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.349699][ T5929] pvrusb2: Hardware description: Terratec Grabster AV400 [ 541.372157][ T5929] pvrusb2: ********** [ 541.378221][ T5929] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 541.464165][T12296] o2cb: This node has not been configured. [ 541.470095][T12296] o2cb: Cluster check failed. Fix errors before retrying. [ 541.477651][T12296] (syz.1.1702,12296,0):user_dlm_register:674 ERROR: status = -22 [ 541.485529][T12296] (syz.1.1702,12296,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 541.724397][ T30] audit: type=1400 audit(1765123778.249:2860): avc: denied { read } for pid=12276 comm="syz.2.1699" name="file0" dev="tmpfs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 541.756493][T12277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.774179][ T5929] pvrusb2: Important functionality might not be entirely working. [ 541.784731][ T5929] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 541.796368][ T5929] pvrusb2: ********** [ 541.812197][T12277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.893963][ T2337] pvrusb2: Invalid write control endpoint [ 541.999011][ T2337] pvrusb2: Invalid write control endpoint [ 542.023242][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 542.052012][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 542.199547][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 542.211326][ T2337] pvrusb2: Device being rendered inoperable [ 542.249099][T12277] pvrusb2: Attempted to execute control transfer when device not ok [ 542.257861][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 542.266639][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 542.272816][ T9] usb 3-1: USB disconnect, device number 55 [ 542.279380][ T2337] pvrusb2: Attached sub-driver cx25840 [ 542.288542][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 542.300252][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 542.369178][T12309] o2cb: This node has not been configured. [ 542.375156][T12309] o2cb: Cluster check failed. Fix errors before retrying. [ 542.382393][T12309] (syz.3.1704,12309,1):user_dlm_register:674 ERROR: status = -22 [ 542.390209][T12309] (syz.3.1704,12309,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 543.074912][T12318] xt_hashlimit: size too large, truncated to 1048576 [ 544.862851][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 544.962818][ T9] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 545.002935][ T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 545.174453][ T10] usb 4-1: config 0 has no interfaces? [ 545.180231][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 545.192871][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 545.194535][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.199867][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.219570][ T10] usb 4-1: config 0 descriptor?? [ 545.244943][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 545.252897][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.252954][ T24] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 545.252981][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.264980][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 545.292378][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 545.308325][ T9] usb 5-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 545.314829][ T24] usb 2-1: config 0 descriptor?? [ 545.323506][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.341716][ T9] usb 5-1: Product: ⽜锺섑ສ照籙鋚ӧ鱯涳ዋ賀፮檬 [ 545.350520][ T9] usb 5-1: Manufacturer: Э [ 545.355252][ T9] usb 5-1: SerialNumber: ࠬ [ 545.381862][T12337] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 545.398631][T12337] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 545.812561][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 545.826519][ T5820] usb 4-1: USB disconnect, device number 54 [ 545.862947][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 545.896788][ T9] usb 5-1: USB disconnect, device number 74 [ 546.010322][ T24] corsair 0003:1B1C:1B02.0048: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 546.253142][ T24] corsair 0003:1B1C:1B02.0048: Read invalid backlight brightness: 3e. [ 547.316246][ T10] usb 2-1: USB disconnect, device number 77 [ 547.822944][ T5929] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 547.922109][ T5826] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 547.933205][ T30] audit: type=1400 audit(1765123784.459:2861): avc: denied { create } for pid=12382 comm="syz.2.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 547.956208][ T5820] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 547.994112][ T5929] usb 5-1: config 0 has no interfaces? [ 547.999605][ T5929] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 548.011821][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.029821][ T5929] usb 5-1: config 0 descriptor?? [ 548.136264][ T5820] usb 1-1: config 0 has no interfaces? [ 548.141875][ T5820] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 548.153277][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.169068][ T5820] usb 1-1: config 0 descriptor?? [ 548.718476][ T5820] usb 1-1: USB disconnect, device number 77 [ 548.813547][ T5929] usb 5-1: USB disconnect, device number 75 [ 548.835262][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1726'. [ 550.282274][ T30] audit: type=1400 audit(1765123786.809:2862): avc: denied { lock } for pid=12417 comm="syz.4.1731" path="socket:[43435]" dev="sockfs" ino=43435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 550.835783][T12429] netlink: 'syz.1.1734': attribute type 2 has an invalid length. [ 550.843565][T12429] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1734'. [ 550.866604][ T30] audit: type=1400 audit(1765123787.399:2863): avc: denied { shutdown } for pid=12428 comm="syz.1.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 550.925538][ T24] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 550.945503][T12429] nvme_fabrics: missing parameter 'transport=%s' [ 550.952072][T12429] nvme_fabrics: missing parameter 'nqn=%s' [ 551.651770][ T24] usb 5-1: config 0 has no interfaces? [ 551.660145][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 551.689803][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.758921][ T24] usb 5-1: config 0 descriptor?? [ 552.073322][ T30] audit: type=1400 audit(1765123788.529:2864): avc: denied { bind } for pid=12450 comm="syz.1.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 552.163957][ T5820] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 552.424658][ T24] usb 5-1: USB disconnect, device number 76 [ 552.542678][ T5820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.554180][ T5820] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.564552][ T5820] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 552.582921][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 552.593140][ T5820] usb 4-1: SerialNumber: syz [ 552.840543][ T5820] usb 4-1: 0:2 : does not exist [ 552.919249][ T5820] usb 4-1: unit 5 not found! [ 552.953094][ T5820] usb 4-1: USB disconnect, device number 55 [ 553.471624][T11145] udevd[11145]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.851655][T12474] trusted_key: encrypted_key: insufficient parameters specified [ 554.431262][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 555.152882][ T24] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 555.172613][T12493] block device autoloading is deprecated and will be removed. [ 555.277276][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1749'. [ 555.345262][ T24] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 555.375499][ T24] usb 3-1: config 0 has no interface number 0 [ 555.395900][ T24] usb 3-1: config 0 interface 41 has no altsetting 0 [ 555.424795][ T24] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 555.565797][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.573487][ T9] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 555.574269][ T24] usb 3-1: Product: syz [ 555.586837][ T24] usb 3-1: Manufacturer: syz [ 555.591520][ T24] usb 3-1: SerialNumber: syz [ 555.605753][ T24] usb 3-1: config 0 descriptor?? [ 555.678388][T12501] o2cb: This node has not been configured. [ 555.684416][T12501] o2cb: Cluster check failed. Fix errors before retrying. [ 555.691690][T12501] (syz.3.1750,12501,0):user_dlm_register:674 ERROR: status = -22 [ 555.699802][T12501] (syz.3.1750,12501,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 555.747397][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 555.867333][ T9] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 555.934726][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.958301][ T9] usb 1-1: Product: syz [ 555.962505][ T9] usb 1-1: Manufacturer: syz [ 555.973535][ T9] usb 1-1: SerialNumber: syz [ 555.991607][ T9] usb 1-1: config 0 descriptor?? [ 556.002390][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 556.009114][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 556.024650][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 556.223312][ T5820] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 556.384952][ T5820] usb 2-1: not running at top speed; connect to a high speed hub [ 556.400391][ T5820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 556.420254][ T5820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 556.443785][ T5820] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 556.458935][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.474680][ T5820] usb 2-1: Product: ⽜锺섑ສ照籙鋚ӧ鱯涳ዋ賀፮檬 [ 556.483269][ T5820] usb 2-1: Manufacturer: Э [ 556.488082][ T5820] usb 2-1: SerialNumber: ࠬ [ 556.497976][T12503] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 556.512332][T12503] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 556.754420][ T5820] usbhid 2-1:1.0: can't add hid device: -71 [ 556.772870][ T5820] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 556.793995][ T5820] usb 2-1: USB disconnect, device number 78 [ 557.051169][T12513] overlayfs: missing 'lowerdir' [ 557.114415][ T24] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 557.135980][ T24] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 557.150070][ T24] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 557.171253][ T24] usb 3-1: USB disconnect, device number 56 [ 557.373109][T12520] xt_hashlimit: size too large, truncated to 1048576 [ 558.113872][ T24] usb 1-1: USB disconnect, device number 78 [ 558.472867][ T24] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 558.772818][T12541] lo: entered allmulticast mode [ 558.892154][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 559.468908][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.483480][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1764'. [ 559.488157][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 559.502886][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 559.516774][ T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 559.544408][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.585765][ T24] usb 1-1: config 0 descriptor?? [ 559.598171][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 559.684446][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.726046][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 559.757961][T12535] lo: left allmulticast mode [ 559.761980][T12551] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 559.771098][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 559.771131][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 559.771151][ T9] usb 3-1: SerialNumber: syz [ 560.074179][ T9] usb 3-1: 0:2 : does not exist [ 560.135772][ T9] usb 3-1: unit 5 not found! [ 560.309631][ T9] usb 3-1: USB disconnect, device number 57 [ 560.335092][T11145] udevd[11145]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.578444][T12563] xt_hashlimit: size too large, truncated to 1048576 [ 561.213335][ T5820] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 561.549467][ T5820] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 561.557747][ T5820] usb 3-1: config 0 has no interface number 0 [ 561.567598][ T9] usb 1-1: USB disconnect, device number 79 [ 561.587733][ T5820] usb 3-1: config 0 interface 41 has no altsetting 0 [ 561.622546][ T5820] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 561.719898][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.732851][ T5820] usb 3-1: Product: syz [ 561.740224][ T5820] usb 3-1: Manufacturer: syz [ 561.745390][ T5820] usb 3-1: SerialNumber: syz [ 561.763381][ T5820] usb 3-1: config 0 descriptor?? [ 561.997577][T12593] o2cb: This node has not been configured. [ 562.003599][T12593] o2cb: Cluster check failed. Fix errors before retrying. [ 562.010874][T12593] (syz.1.1777,12593,0):user_dlm_register:674 ERROR: status = -22 [ 562.018759][T12593] (syz.1.1777,12593,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 562.495575][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.685804][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1780'. [ 563.312827][ T5950] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 563.499731][ T5820] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 563.518567][ T5950] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.529310][ T5820] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 563.539948][ T5950] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 563.549521][ T5820] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 563.558026][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 563.568406][ T5950] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 563.580319][ T5820] usb 3-1: USB disconnect, device number 58 [ 563.587257][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 563.601184][ T5950] usb 2-1: SerialNumber: syz [ 563.722896][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 563.729909][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 563.740098][ T9] usb 1-1: config 0 has no interface number 0 [ 563.748336][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 563.758492][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.767639][ T9] usb 1-1: Product: syz [ 563.772098][ T9] usb 1-1: Manufacturer: syz [ 563.777289][ T9] usb 1-1: SerialNumber: syz [ 563.784474][ T9] usb 1-1: config 0 descriptor?? [ 563.791601][ T9] smsc95xx v2.0.0 [ 563.795438][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 563.805780][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 563.834875][ T5950] usb 2-1: 0:2 : does not exist [ 563.839767][ T5950] usb 2-1: unit 5 not found! [ 563.857742][ T5950] usb 2-1: USB disconnect, device number 79 [ 563.878380][T11145] udevd[11145]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.896495][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 564.054565][ T24] usb 4-1: config 0 has no interfaces? [ 564.061961][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 564.086515][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.113527][ T24] usb 4-1: config 0 descriptor?? [ 564.357464][ T24] usb 4-1: USB disconnect, device number 56 [ 564.703338][T12643] FAULT_INJECTION: forcing a failure. [ 564.703338][T12643] name failslab, interval 1, probability 0, space 0, times 0 [ 564.716055][ T30] audit: type=1400 audit(1765123801.239:2865): avc: denied { write } for pid=12644 comm="syz.4.1792" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 564.737536][T12645] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 564.853379][T12643] CPU: 0 UID: 0 PID: 12643 Comm: syz.1.1791 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.853409][T12643] Tainted: [L]=SOFTLOCKUP [ 564.853415][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.853424][T12643] Call Trace: [ 564.853428][T12643] [ 564.853435][T12643] dump_stack_lvl+0x16c/0x1f0 [ 564.853456][T12643] should_fail_ex+0x512/0x640 [ 564.853468][T12643] ? __kmalloc_noprof+0xca/0x910 [ 564.853487][T12643] should_failslab+0xc2/0x120 [ 564.853502][T12643] __kmalloc_noprof+0xeb/0x910 [ 564.853520][T12643] ? bpf_test_init.isra.0+0x88/0x130 [ 564.853536][T12643] ? bpf_test_init.isra.0+0x88/0x130 [ 564.853549][T12643] bpf_test_init.isra.0+0x88/0x130 [ 564.853565][T12643] bpf_prog_test_run_xdp+0x66c/0x1660 [ 564.853583][T12643] ? __fget_files+0x204/0x3c0 [ 564.853604][T12643] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 564.853620][T12643] ? __might_fault+0x50/0x190 [ 564.853633][T12643] ? fput+0x70/0xf0 [ 564.853650][T12643] ? __bpf_prog_get+0x97/0x2a0 [ 564.853663][T12643] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 564.853678][T12643] __sys_bpf+0x1035/0x4980 [ 564.853696][T12643] ? __pfx___sys_bpf+0x10/0x10 [ 564.853711][T12643] ? find_held_lock+0x2b/0x80 [ 564.853731][T12643] ? find_held_lock+0x2b/0x80 [ 564.853751][T12643] ? __mutex_unlock_slowpath+0x161/0x790 [ 564.853776][T12643] ? fput+0x70/0xf0 [ 564.853792][T12643] ? ksys_write+0x1ac/0x250 [ 564.853805][T12643] ? __pfx_ksys_write+0x10/0x10 [ 564.853821][T12643] __x64_sys_bpf+0x78/0xc0 [ 564.853837][T12643] ? lockdep_hardirqs_on+0x7c/0x110 [ 564.853855][T12643] do_syscall_64+0xcd/0xf80 [ 564.853873][T12643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.853885][T12643] RIP: 0033:0x7f23e7b8f749 [ 564.853895][T12643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.853907][T12643] RSP: 002b:00007f23e8b05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 564.853918][T12643] RAX: ffffffffffffffda RBX: 00007f23e7de5fa0 RCX: 00007f23e7b8f749 [ 564.853925][T12643] RDX: 000000000000001f RSI: 0000200000000b80 RDI: 000000000000000a [ 564.853931][T12643] RBP: 00007f23e8b05090 R08: 0000000000000000 R09: 0000000000000000 [ 564.853938][T12643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.853944][T12643] R13: 00007f23e7de6038 R14: 00007f23e7de5fa0 R15: 00007ffc8d919068 [ 564.853962][T12643] [ 565.308550][T12648] overlayfs: missing 'lowerdir' [ 565.804042][T12661] lo: entered allmulticast mode [ 565.996419][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1795'. [ 566.010812][ T5950] usb 1-1: USB disconnect, device number 80 [ 566.042943][ T5889] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 566.212872][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 566.223397][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.235279][ T5889] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 566.244606][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.277163][ T5889] usb 5-1: config 0 descriptor?? [ 566.424391][T12656] lo: left allmulticast mode [ 566.632849][ T5950] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 567.047691][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 567.052563][ T5889] hkems 0003:2006:0118.0049: unknown main item tag 0x4 [ 567.289352][ T5889] hkems 0003:2006:0118.0049: hidraw0: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.4-1/input0 [ 567.366795][ T5889] hkems 0003:2006:0118.0049: no inputs found [ 567.403809][ T5889] hkems 0003:2006:0118.0049: force feedback init failed [ 567.490530][ T5889] usb 5-1: USB disconnect, device number 77 [ 567.632787][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 567.701016][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 567.771693][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.791419][ T5950] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 567.817539][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.851865][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.865202][T12675] fido_id[12675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 567.879531][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.879560][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 567.879595][ T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 567.879617][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.904243][ T5950] usb 3-1: config 0 descriptor?? [ 567.923727][ T9] usb 4-1: config 0 descriptor?? [ 568.037942][T12682] xt_hashlimit: size too large, truncated to 1048576 [ 568.112823][ T8876] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 568.573532][ T5950] hkems 0003:2006:0118.004A: unknown main item tag 0x4 [ 568.615496][ T9] nzxt-smart2 0003:1E71:2009.004B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 568.679794][ T5950] hkems 0003:2006:0118.004A: hidraw1: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 568.691532][ T5950] hkems 0003:2006:0118.004A: no inputs found [ 568.725009][ T5950] hkems 0003:2006:0118.004A: force feedback init failed [ 568.798954][ T5950] usb 3-1: USB disconnect, device number 59 [ 568.840592][ T8876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.875159][T12692] fido_id[12692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 568.908933][ T8876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.949434][ T8876] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 568.976402][ T8876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 568.992848][ T8876] usb 2-1: SerialNumber: syz [ 569.077096][T12697] overlayfs: missing 'lowerdir' [ 569.158859][T12702] bridge1: entered promiscuous mode [ 569.216602][ T8876] usb 2-1: 0:2 : does not exist [ 569.221499][ T8876] usb 2-1: unit 5 not found! [ 569.237247][ T8876] usb 2-1: USB disconnect, device number 80 [ 569.278360][T11145] udevd[11145]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.407424][ T5950] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 569.922844][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 569.936828][ T5950] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 569.953771][ T10] usb 4-1: reset high-speed USB device number 57 using dummy_hcd [ 569.964059][ T5950] usb 1-1: config 0 has no interface number 0 [ 569.970644][T12676] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 569.981257][ T5950] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 569.990516][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.999104][ T5950] usb 1-1: Product: syz [ 570.006079][ T5950] usb 1-1: Manufacturer: syz [ 570.011045][ T5950] usb 1-1: SerialNumber: syz [ 570.034320][ T5950] usb 1-1: config 0 descriptor?? [ 570.042613][ T5950] smsc95xx v2.0.0 [ 570.047217][ T5950] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 570.058417][ T5950] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 570.322043][T12676] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 570.338827][T12676] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 570.350984][T12676] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 570.367308][T12676] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 570.389388][T12676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.408086][T12676] usb 3-1: Product: syz [ 570.423491][T12676] usb 3-1: Manufacturer: syz [ 570.729722][ T30] audit: type=1400 audit(1765123807.259:2866): avc: denied { ioctl } for pid=12717 comm="syz.4.1811" path="socket:[44714]" dev="sockfs" ino=44714 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 570.751205][T12676] usb 3-1: SerialNumber: syz [ 570.796577][T12676] usb 3-1: config 0 descriptor?? [ 570.879866][T12711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 570.887726][T12711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 570.941396][T12676] usb 3-1: ucan: probing device on interface #0 [ 570.954418][ T9] usb 4-1: USB disconnect, device number 57 [ 570.974012][ T30] audit: type=1400 audit(1765123807.289:2867): avc: denied { bind } for pid=12717 comm="syz.4.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 571.044619][ T5889] usb 1-1: USB disconnect, device number 81 [ 571.122908][ T182] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 571.275284][ T182] usb 2-1: not running at top speed; connect to a high speed hub [ 571.291749][ T182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 571.312793][ T182] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 571.335929][ T182] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 571.345485][ T182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.361469][ T182] usb 2-1: Product: ⽜锺섑ສ照籙鋚ӧ鱯涳ዋ賀፮檬 [ 571.373180][ T182] usb 2-1: Manufacturer: Э [ 571.377751][ T182] usb 2-1: SerialNumber: ࠬ [ 571.386533][T12724] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 571.410600][T12724] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 571.429999][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 571.509095][T12676] ucan 3-1:0.0 can0: registered device [ 571.562835][ T9] usb 4-1: device descriptor read/64, error -71 [ 571.633884][ T182] usbhid 2-1:1.0: can't add hid device: -71 [ 571.650708][T12732] xt_hashlimit: size too large, truncated to 1048576 [ 571.671503][ T182] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 571.684549][ T182] usb 2-1: USB disconnect, device number 81 [ 571.704077][T12676] ucan 3-1:0.0 can0: firmware string: unknown [ 571.842950][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 571.957053][T12740] overlayfs: missing 'lowerdir' [ 571.985993][ T9] usb 4-1: device descriptor read/64, error -71 [ 572.106610][ T9] usb usb4-port1: attempt power cycle [ 572.340035][T12766] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1820'. [ 572.504845][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 572.542994][ T182] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 572.556683][ T9] usb 4-1: device descriptor read/8, error -71 [ 572.740072][ T182] usb 5-1: config 0 has no interfaces? [ 572.762634][ T182] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 572.785985][ T182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.802192][ T182] usb 5-1: config 0 descriptor?? [ 572.882874][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 572.904034][ T9] usb 4-1: device descriptor read/8, error -71 [ 572.936336][ T5481] ucan 3-1:0.0 can0: could not start device, code: -71 [ 572.946478][ T5889] usb 3-1: USB disconnect, device number 60 [ 572.951051][ T5481] ucan 3-1:0.0 can0: could not reset device, code: -19 [ 573.015253][ T9] usb usb4-port1: unable to enumerate USB device [ 573.408879][ T5929] usb 5-1: USB disconnect, device number 78 [ 573.438964][T12772] xt_hashlimit: size too large, truncated to 1048576 [ 574.006605][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 574.073107][ T182] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 574.419364][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.441659][ T182] usb 2-1: config 0 has no interfaces? [ 574.449768][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.459143][ T182] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 574.471555][ T182] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.500708][ T182] usb 2-1: config 0 descriptor?? [ 574.506295][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 574.515623][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 574.535900][ T9] usb 3-1: SerialNumber: syz [ 574.542838][T12676] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 574.785063][T12676] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 574.793753][T12676] usb 5-1: config 0 has no interface number 0 [ 574.834370][T12676] usb 5-1: config 0 interface 41 has no altsetting 0 [ 574.894128][T12814] o2cb: This node has not been configured. [ 574.900017][T12814] o2cb: Cluster check failed. Fix errors before retrying. [ 574.907297][T12814] (syz.3.1826,12814,1):user_dlm_register:674 ERROR: status = -22 [ 574.915074][T12814] (syz.3.1826,12814,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 575.545367][T12676] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 575.563528][T12676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.573443][T12676] usb 5-1: Product: syz [ 575.577663][T12676] usb 5-1: Manufacturer: syz [ 575.598451][T12676] usb 5-1: SerialNumber: syz [ 575.607479][ T9] usb 3-1: 0:2 : does not exist [ 575.612410][ T9] usb 3-1: unit 5 not found! [ 575.638549][T12676] usb 5-1: config 0 descriptor?? [ 575.657289][ T5889] usb 2-1: USB disconnect, device number 82 [ 575.693968][ T9] usb 3-1: USB disconnect, device number 61 [ 575.747294][ T9959] udevd[9959]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.826956][T12818] xt_hashlimit: size too large, truncated to 1048576 [ 576.293472][ T5929] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 576.444337][ T5929] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 576.456675][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 576.468532][ T5929] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 576.480817][ T5929] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 576.490223][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.490727][T12830] FAULT_INJECTION: forcing a failure. [ 576.490727][T12830] name failslab, interval 1, probability 0, space 0, times 0 [ 576.498408][ T5929] usb 4-1: Product: syz [ 576.498427][ T5929] usb 4-1: Manufacturer: syz [ 576.498443][ T5929] usb 4-1: SerialNumber: syz [ 576.503027][ T5929] usb 4-1: config 0 descriptor?? [ 576.512391][T12830] CPU: 0 UID: 0 PID: 12830 Comm: syz.1.1833 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.512417][T12830] Tainted: [L]=SOFTLOCKUP [ 576.512423][T12830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.512432][T12830] Call Trace: [ 576.512438][T12830] [ 576.512444][T12830] dump_stack_lvl+0x16c/0x1f0 [ 576.512474][T12830] should_fail_ex+0x512/0x640 [ 576.512495][T12830] ? fs_reclaim_acquire+0xae/0x150 [ 576.512520][T12830] should_failslab+0xc2/0x120 [ 576.512541][T12830] __kmalloc_noprof+0xeb/0x910 [ 576.512566][T12830] ? tomoyo_encode2+0x100/0x3e0 [ 576.512585][T12830] ? tomoyo_encode2+0x100/0x3e0 [ 576.512599][T12830] tomoyo_encode2+0x100/0x3e0 [ 576.512617][T12830] tomoyo_encode+0x29/0x50 [ 576.512631][T12830] tomoyo_realpath_from_path+0x18f/0x6e0 [ 576.512650][T12830] ? tomoyo_profile+0x47/0x60 [ 576.512670][T12830] tomoyo_path_number_perm+0x245/0x580 [ 576.512692][T12830] ? tomoyo_path_number_perm+0x237/0x580 [ 576.512716][T12830] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 576.512747][T12830] ? find_held_lock+0x2b/0x80 [ 576.512791][T12830] ? find_held_lock+0x2b/0x80 [ 576.512814][T12830] ? hook_file_ioctl_common+0x144/0x410 [ 576.512838][T12830] ? __fget_files+0x20e/0x3c0 [ 576.512865][T12830] security_file_ioctl+0x9b/0x240 [ 576.512892][T12830] __x64_sys_ioctl+0xb7/0x210 [ 576.512913][T12830] do_syscall_64+0xcd/0xf80 [ 576.512939][T12830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.512955][T12830] RIP: 0033:0x7f23e7b8f749 [ 576.512969][T12830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.512985][T12830] RSP: 002b:00007f23e8b05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.513002][T12830] RAX: ffffffffffffffda RBX: 00007f23e7de5fa0 RCX: 00007f23e7b8f749 [ 576.513013][T12830] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 576.513023][T12830] RBP: 00007f23e8b05090 R08: 0000000000000000 R09: 0000000000000000 [ 576.513033][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.513042][T12830] R13: 00007f23e7de6038 R14: 00007f23e7de5fa0 R15: 00007ffc8d919068 [ 576.513064][T12830] [ 576.562905][T12830] ERROR: Out of memory at tomoyo_realpath_from_path. [ 576.576169][ T5889] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 576.602359][T12822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 576.768840][T12822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 576.782302][ T5929] usb 4-1: ucan: probing device on interface #0 [ 576.852835][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 576.859947][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.872474][ T30] audit: type=1400 audit(1765123813.399:2868): avc: denied { connect } for pid=12832 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 576.892427][ T5889] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 576.903152][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.913993][ T5889] usb 3-1: config 0 descriptor?? [ 577.242412][ T9] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 577.786477][T12676] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 577.791867][ T5889] hkems 0003:2006:0118.004C: item fetching failed at offset 4/5 [ 577.807073][T12676] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 577.810077][ T5929] ucan 4-1:0.0 can0: registered device [ 577.816962][T12676] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 577.827051][ T5889] hkems 0003:2006:0118.004C: parse failed [ 577.835123][T12676] usb 5-1: USB disconnect, device number 79 [ 577.842340][ T5889] hkems 0003:2006:0118.004C: probe with driver hkems failed with error -22 [ 577.865170][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 577.880426][ T9] usb 2-1: can't read configurations, error -61 [ 577.977909][ T5929] ucan 4-1:0.0 can0: firmware string: unknown [ 578.033517][ T9] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 578.038641][ T5929] usb 3-1: USB disconnect, device number 62 [ 578.236454][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 578.246602][ T9] usb 2-1: can't read configurations, error -61 [ 578.254452][ T9] usb usb2-port1: attempt power cycle [ 578.343291][T12676] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 578.483331][T12676] usb 1-1: device descriptor read/64, error -71 [ 578.606441][ T9] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 578.682213][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 578.732365][ T9] usb 2-1: can't read configurations, error -61 [ 578.752974][T12676] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 578.903092][ T9] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 578.922849][T12676] usb 1-1: device descriptor read/64, error -71 [ 578.959787][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 578.968514][ T9] usb 2-1: can't read configurations, error -61 [ 579.192407][T12676] usb usb1-port1: attempt power cycle [ 579.277543][ T5481] ucan 4-1:0.0 can0: could not start device, code: -71 [ 579.286754][ T5889] usb 4-1: USB disconnect, device number 62 [ 579.286992][ T9] usb usb2-port1: unable to enumerate USB device [ 579.294256][ T5481] ucan 4-1:0.0 can0: could not reset device, code: -19 [ 579.512892][T12866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.629665][T12860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.735007][T12676] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 579.987467][T12676] usb 1-1: device descriptor read/8, error -71 [ 580.121720][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'. [ 580.232869][T12676] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 580.262823][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 580.393836][T12676] usb 1-1: device descriptor read/8, error -71 [ 580.466738][T12892] o2cb: This node has not been configured. [ 580.472608][T12892] o2cb: Cluster check failed. Fix errors before retrying. [ 580.479996][T12892] (syz.1.1843,12892,0):user_dlm_register:674 ERROR: status = -22 [ 580.488064][T12892] (syz.1.1843,12892,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 580.504667][T12676] usb usb1-port1: unable to enumerate USB device [ 580.904551][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.945184][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.963532][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 580.986083][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 581.006524][ T9] usb 5-1: SerialNumber: syz [ 581.278281][T12907] o2cb: This node has not been configured. [ 581.284333][T12907] o2cb: Cluster check failed. Fix errors before retrying. [ 581.291634][T12907] (syz.2.1844,12907,0):user_dlm_register:674 ERROR: status = -22 [ 581.299525][T12907] (syz.2.1844,12907,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 581.383060][T12676] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 581.595559][ T9] usb 5-1: 0:2 : does not exist [ 581.617526][ T9] usb 5-1: unit 5 not found! [ 581.623406][T12676] usb 4-1: Using ep0 maxpacket: 32 [ 581.635342][T12676] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 581.659153][T12676] usb 4-1: config 0 has no interface number 0 [ 581.673151][ T9] usb 5-1: USB disconnect, device number 80 [ 581.688190][T12676] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 581.717600][T12676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.737152][T11145] udevd[11145]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.753335][T12676] usb 4-1: Product: syz [ 581.757504][T12676] usb 4-1: Manufacturer: syz [ 581.762101][T12676] usb 4-1: SerialNumber: syz [ 581.782464][T12676] usb 4-1: config 0 descriptor?? [ 581.806065][T12676] smsc95xx v2.0.0 [ 581.824363][T12676] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 581.836038][T12676] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 582.263012][ T6012] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 582.460652][ T6012] usb 3-1: config 0 has no interfaces? [ 582.493218][ T6012] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 584.138083][ T6012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.177527][ T30] audit: type=1326 audit(1765123819.569:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12925 comm="syz.4.1851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd10a58f749 code=0x80000000 [ 584.191517][ T6012] usb 3-1: config 0 descriptor?? [ 584.209691][ T30] audit: type=1400 audit(1765123820.159:2870): avc: denied { read } for pid=12922 comm="syz.0.1850" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 584.273270][ T5889] usb 4-1: USB disconnect, device number 63 [ 584.394769][ T30] audit: type=1400 audit(1765123820.929:2871): avc: denied { listen } for pid=12931 comm="syz.1.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 585.108564][ T5889] usb 3-1: USB disconnect, device number 63 [ 585.121053][T12943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1854'. [ 585.228667][ T30] audit: type=1400 audit(1765123821.759:2872): avc: denied { ioctl } for pid=12945 comm="syz.0.1857" path="socket:[45804]" dev="sockfs" ino=45804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 585.282903][ T6012] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 585.465486][ T6012] usb 2-1: not running at top speed; connect to a high speed hub [ 585.474395][ T6012] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 585.488400][ T6012] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 585.789665][ T6012] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 585.803168][ T6012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.811357][ T6012] usb 2-1: Product: ⽜锺섑ສ照籙鋚ӧ鱯涳ዋ賀፮檬 [ 585.831782][ T6012] usb 2-1: Manufacturer: Э [ 585.935411][ T6012] usb 2-1: SerialNumber: ࠬ [ 585.958476][T12942] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 585.977333][T12942] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 586.418838][T12965] o2cb: This node has not been configured. [ 586.424721][T12965] o2cb: Cluster check failed. Fix errors before retrying. [ 586.432000][T12965] (syz.4.1859,12965,0):user_dlm_register:674 ERROR: status = -22 [ 586.439792][T12965] (syz.4.1859,12965,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 586.781861][ T5929] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 586.968051][ T5929] usb 3-1: config 16 has an invalid interface number: 19 but max is 0 [ 586.995570][ T5929] usb 3-1: config 16 has no interface number 0 [ 587.017368][ T6012] usbhid 2-1:1.0: can't add hid device: -71 [ 587.032914][ T5929] usb 3-1: config 16 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 587.046375][ T6012] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 587.057973][ T5929] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 587.076831][ T6012] usb 2-1: USB disconnect, device number 87 [ 587.092924][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.111157][ T5929] usb 3-1: Product: syz [ 587.121294][ T5929] usb 3-1: Manufacturer: syz [ 587.131443][ T5929] usb 3-1: SerialNumber: syz [ 587.209647][T12971] xt_hashlimit: size too large, truncated to 1048576 [ 587.578659][ T30] audit: type=1400 audit(1765123824.109:2873): avc: denied { ioctl } for pid=12972 comm="syz.0.1864" path="socket:[45842]" dev="sockfs" ino=45842 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 587.708269][ T5929] usb 3-1: USB disconnect, device number 64 [ 587.731891][T11145] udevd[11145]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.994538][ T5820] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 588.736567][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 588.770861][ T5820] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.812163][ T5820] usb 2-1: config 0 interface 0 has no altsetting 0 [ 588.883139][ T5929] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 588.979279][ T5820] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 589.155918][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.167313][ T5820] usb 2-1: config 0 descriptor?? [ 589.173053][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 589.195137][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.222842][ T5929] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 589.252291][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.281845][ T5929] usb 4-1: config 0 descriptor?? [ 589.318400][ T30] audit: type=1400 audit(1765123825.849:2874): avc: denied { bind } for pid=12992 comm="syz.4.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 589.940896][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 589.962936][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 589.997321][ T5929] usb 4-1: USB disconnect, device number 64 [ 590.214523][ T5820] usbhid 2-1:0.0: can't add hid device: -71 [ 590.220863][ T5820] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 590.230977][ T5820] usb 2-1: USB disconnect, device number 88 [ 590.312970][ T6012] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 590.330791][T13020] o2cb: This node has not been configured. [ 590.336757][T13020] o2cb: Cluster check failed. Fix errors before retrying. [ 590.344046][T13020] (syz.2.1873,13020,1):user_dlm_register:674 ERROR: status = -22 [ 590.351918][T13020] (syz.2.1873,13020,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 590.422927][ T5929] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 590.512835][ T6012] usb 1-1: Using ep0 maxpacket: 32 [ 590.543067][ T6012] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 590.581022][ T6012] usb 1-1: config 0 has no interface number 0 [ 590.610667][ T5929] usb 5-1: not running at top speed; connect to a high speed hub [ 590.620869][ T6012] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 590.630681][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 590.641861][ T6012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.649974][ T6012] usb 1-1: Product: syz [ 590.654560][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 590.665679][ T6012] usb 1-1: Manufacturer: syz [ 590.670399][ T6012] usb 1-1: SerialNumber: syz [ 590.684878][ T5929] usb 5-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 590.697631][ T6012] usb 1-1: config 0 descriptor?? [ 590.707546][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.721050][ T6012] smsc95xx v2.0.0 [ 590.728816][ T6012] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 590.739204][ T5929] usb 5-1: Product: ⽜锺섑ສ照籙鋚ӧ鱯涳ዋ賀፮檬 [ 590.748070][ T5929] usb 5-1: Manufacturer: Э [ 590.753049][ T6012] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 590.761387][ T5929] usb 5-1: SerialNumber: ࠬ [ 590.770426][T13018] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 590.778135][T13018] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 590.892999][ T5820] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 591.074373][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 591.159197][ T5820] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.169914][ T5929] usbhid 5-1:1.0: can't add hid device: -71 [ 591.176828][ T5820] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.190819][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 591.198320][ T5929] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 591.218328][ T5820] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 591.224878][ T5929] usb 5-1: USB disconnect, device number 81 [ 591.261854][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.344376][T12676] usb 1-1: USB disconnect, device number 86 [ 591.367229][ T5820] usb 4-1: config 0 descriptor?? [ 591.473792][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 591.640719][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1880'. [ 591.796398][ T5820] nzxt-smart2 0003:1E71:2009.004D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 592.602843][ T5820] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 593.047150][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 593.057172][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.100496][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.119116][ T5820] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 593.129183][T13056] FAULT_INJECTION: forcing a failure. [ 593.129183][T13056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.131267][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.157257][ T5820] usb 2-1: config 0 descriptor?? [ 593.182997][ T10] usb 4-1: reset high-speed USB device number 65 using dummy_hcd [ 593.215428][T13056] CPU: 1 UID: 0 PID: 13056 Comm: syz.0.1886 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.215461][T13056] Tainted: [L]=SOFTLOCKUP [ 593.215467][T13056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 593.215477][T13056] Call Trace: [ 593.215483][T13056] [ 593.215490][T13056] dump_stack_lvl+0x16c/0x1f0 [ 593.215521][T13056] should_fail_ex+0x512/0x640 [ 593.215544][T13056] _copy_from_user+0x2e/0xd0 [ 593.215563][T13056] move_addr_to_kernel+0x65/0x170 [ 593.215593][T13056] __sys_bind+0x11b/0x260 [ 593.215609][T13056] ? __pfx___sys_bind+0x10/0x10 [ 593.215624][T13056] ? __fget_files+0x20e/0x3c0 [ 593.215657][T13056] ? __pfx_ksys_write+0x10/0x10 [ 593.215683][T13056] __x64_sys_bind+0x72/0xb0 [ 593.215700][T13056] ? lockdep_hardirqs_on+0x7c/0x110 [ 593.215726][T13056] do_syscall_64+0xcd/0xf80 [ 593.215752][T13056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.215771][T13056] RIP: 0033:0x7fc121d8f749 [ 593.215787][T13056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.215805][T13056] RSP: 002b:00007fc122c5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 593.215823][T13056] RAX: ffffffffffffffda RBX: 00007fc121fe5fa0 RCX: 00007fc121d8f749 [ 593.215836][T13056] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 593.215847][T13056] RBP: 00007fc122c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 593.215857][T13056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.215868][T13056] R13: 00007fc121fe6038 R14: 00007fc121fe5fa0 R15: 00007ffef5419318 [ 593.215892][T13056] [ 593.601964][ T5820] corsair 0003:1B1C:1B02.004E: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 593.655215][ T5929] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 593.779485][T13070] o2cb: This node has not been configured. [ 593.785443][T13070] o2cb: Cluster check failed. Fix errors before retrying. [ 593.792952][T13070] (syz.0.1889,13070,0):user_dlm_register:674 ERROR: status = -22 [ 593.800861][T13070] (syz.0.1889,13070,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 594.242912][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 594.265239][ T5929] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.413795][ T5820] corsair 0003:1B1C:1B02.004E: Read invalid backlight brightness: 3e. [ 594.452861][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 594.479896][ T5929] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 594.504049][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.543208][ T5929] usb 3-1: config 0 descriptor?? [ 594.607710][T13074] FAULT_INJECTION: forcing a failure. [ 594.607710][T13074] name failslab, interval 1, probability 0, space 0, times 0 [ 594.636861][T13074] CPU: 0 UID: 0 PID: 13074 Comm: syz.0.1892 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.636893][T13074] Tainted: [L]=SOFTLOCKUP [ 594.636900][T13074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.636911][T13074] Call Trace: [ 594.636918][T13074] [ 594.636926][T13074] dump_stack_lvl+0x16c/0x1f0 [ 594.636960][T13074] should_fail_ex+0x512/0x640 [ 594.636979][T13074] ? fs_reclaim_acquire+0xae/0x150 [ 594.637007][T13074] should_failslab+0xc2/0x120 [ 594.637031][T13074] __kmalloc_noprof+0xeb/0x910 [ 594.637060][T13074] ? tomoyo_encode2+0x100/0x3e0 [ 594.637081][T13074] ? tomoyo_encode2+0x100/0x3e0 [ 594.637098][T13074] tomoyo_encode2+0x100/0x3e0 [ 594.637117][T13074] tomoyo_encode+0x29/0x50 [ 594.637134][T13074] tomoyo_realpath_from_path+0x18f/0x6e0 [ 594.637159][T13074] tomoyo_path_number_perm+0x245/0x580 [ 594.637185][T13074] ? tomoyo_path_number_perm+0x237/0x580 [ 594.637214][T13074] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 594.637241][T13074] ? find_held_lock+0x2b/0x80 [ 594.637292][T13074] ? find_held_lock+0x2b/0x80 [ 594.637325][T13074] ? hook_file_ioctl_common+0x144/0x410 [ 594.637353][T13074] ? __fget_files+0x20e/0x3c0 [ 594.637382][T13074] security_file_ioctl+0x9b/0x240 [ 594.637412][T13074] __x64_sys_ioctl+0xb7/0x210 [ 594.637436][T13074] do_syscall_64+0xcd/0xf80 [ 594.637466][T13074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.637485][T13074] RIP: 0033:0x7fc121d8f749 [ 594.637501][T13074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.637518][T13074] RSP: 002b:00007fc122c5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.637537][T13074] RAX: ffffffffffffffda RBX: 00007fc121fe5fa0 RCX: 00007fc121d8f749 [ 594.637549][T13074] RDX: 0000200000000000 RSI: 0000000000004b49 RDI: 0000000000000003 [ 594.637560][T13074] RBP: 00007fc122c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 594.637570][T13074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.637581][T13074] R13: 00007fc121fe6038 R14: 00007fc121fe5fa0 R15: 00007ffef5419318 [ 594.637608][T13074] [ 594.637628][T13074] ERROR: Out of memory at tomoyo_realpath_from_path. [ 594.892270][ T5820] usb 2-1: USB disconnect, device number 89 [ 595.002828][ T8876] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 595.093843][ T182] usb 4-1: USB disconnect, device number 65 [ 595.155055][ T8876] usb 5-1: config 0 interface 0 has no altsetting 0 [ 595.161731][ T8876] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 595.188277][ T8876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.223957][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 595.263441][ T8876] usb 5-1: config 0 descriptor?? [ 595.287714][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 595.441599][ T5929] usb 3-1: USB disconnect, device number 65 [ 595.651349][ T30] audit: type=1400 audit(1765123832.179:2875): avc: denied { getopt } for pid=13086 comm="syz.3.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 595.817187][ T8876] prodikeys 0003:041E:2801.004F: unknown main item tag 0x0 [ 595.831476][ T8876] prodikeys 0003:041E:2801.004F: unknown main item tag 0x0 [ 596.033187][ T8876] prodikeys 0003:041E:2801.004F: unknown main item tag 0x0 [ 596.094101][ T8876] prodikeys 0003:041E:2801.004F: unknown main item tag 0x0 [ 596.119806][ T30] audit: type=1400 audit(1765123832.209:2876): avc: denied { load_policy } for pid=13086 comm="syz.3.1895" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 596.171471][ T8876] prodikeys 0003:041E:2801.004F: unknown main item tag 0x0 [ 596.243732][ T8876] prodikeys 0003:041E:2801.004F: unknown main item tag 0x0 [ 596.309704][ T8876] prodikeys 0003:041E:2801.004F: unknown main item tag 0x0 [ 596.326816][ T8876] prodikeys 0003:041E:2801.004F: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 596.348589][ T8876] usb 5-1: USB disconnect, device number 82 [ 596.391879][T13101] fido_id[13101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 597.001780][T13088] SELinux: failed to load policy [ 597.120935][ T30] audit: type=1400 audit(1765123833.649:2877): avc: denied { connect } for pid=13107 comm="syz.2.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 597.340393][ T30] audit: type=1400 audit(1765123833.859:2878): avc: denied { append } for pid=13105 comm="syz.4.1899" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 598.162475][T13130] : entered allmulticast mode [ 598.228556][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 598.512901][ T5820] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 598.602832][ T8876] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 598.646932][T13116] : left allmulticast mode [ 598.683050][ T5820] usb 3-1: Using ep0 maxpacket: 16 [ 598.693431][ T5820] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.710781][ T5820] usb 3-1: config 0 interface 0 has no altsetting 0 [ 598.724846][ T5820] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 598.738172][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.760303][ T5820] usb 3-1: config 0 descriptor?? [ 598.781132][ T8876] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 598.811116][ T8876] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 598.834760][ T8876] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 598.866042][ T8876] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 598.875282][ T8876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.884080][ T8876] usb 4-1: Product: syz [ 598.888370][ T8876] usb 4-1: Manufacturer: syz [ 598.917058][ T8876] usb 4-1: SerialNumber: syz [ 598.924904][ T8876] usb 4-1: config 0 descriptor?? [ 598.930386][T13136] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 598.937691][T13136] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 598.956064][ T8876] usb 4-1: ucan: probing device on interface #0 [ 599.074712][T13151] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 599.103330][T13151] kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 599.122442][T13151] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 599.142237][T13151] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 599.169167][T13151] kvm: requested 197790 ns i8254 timer period limited to 200000 ns [ 599.309735][T13151] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 599.345147][T13151] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 599.387290][T13151] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 599.416260][T13151] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 599.442535][T13151] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 599.522954][ T5820] usbhid 3-1:0.0: can't add hid device: -71 [ 599.538424][ T5820] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 599.565196][ T5820] usb 3-1: USB disconnect, device number 66 [ 599.582503][ T8876] ucan 4-1:0.0 can0: registered device [ 599.760089][ T8876] ucan 4-1:0.0 can0: firmware string: unknown [ 599.838877][ T30] audit: type=1400 audit(1765123836.369:2879): avc: denied { accept } for pid=13154 comm="syz.4.1911" laddr=fe80::aa lport=60773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 599.973284][ T182] usb 4-1: USB disconnect, device number 66 [ 600.042959][ T5820] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 600.212869][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 600.221817][ T5820] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.242803][ T5820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 600.249576][ T5820] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 600.269782][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.292076][ T5820] usb 1-1: config 0 descriptor?? [ 600.302856][ T8876] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 600.343081][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 600.502890][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 600.512883][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.532827][ T10] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 600.544527][ T8876] usb 2-1: not running at top speed; connect to a high speed hub [ 600.557674][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.566975][ T8876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 600.585308][ T8876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 600.588240][ T10] usb 3-1: config 0 descriptor?? [ 600.626751][ T8876] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 600.638059][ T8876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.649603][ T8876] usb 2-1: Product: ⽜锺섑ສ照籙鋚ӧ鱯涳ዋ賀፮檬 [ 600.666679][ T8876] usb 2-1: Manufacturer: Э [ 600.698099][ T8876] usb 2-1: SerialNumber: ࠬ [ 600.967397][ T5820] usbhid 1-1:0.0: can't add hid device: -71 [ 600.980099][ T30] audit: type=1400 audit(1765123837.509:2880): avc: denied { ioctl } for pid=13185 comm="syz.4.1916" path="socket:[47487]" dev="sockfs" ino=47487 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 601.006645][T13168] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 601.058982][ T5820] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 601.099760][ T5820] usb 1-1: USB disconnect, device number 87 [ 601.106089][T13168] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 601.195324][ T10] hkems 0003:2006:0118.0050: item fetching failed at offset 4/5 [ 601.209069][T13198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.218721][T13198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.223965][ T10] hkems 0003:2006:0118.0050: parse failed [ 601.235627][T13198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.238702][ T10] hkems 0003:2006:0118.0050: probe with driver hkems failed with error -22 [ 601.251854][T13198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.363444][ T30] audit: type=1400 audit(1765123837.829:2881): avc: denied { getopt } for pid=13197 comm="syz.3.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 601.657102][ T8876] usbhid 2-1:1.0: can't add hid device: -71 [ 601.669776][ T8876] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 601.698620][ T24] usb 3-1: USB disconnect, device number 67 [ 601.709797][ T8876] usb 2-1: USB disconnect, device number 90 [ 602.538904][ T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 602.694360][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 602.713941][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 602.732538][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 602.744921][ T10] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 602.756264][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.765241][ T10] usb 1-1: Product: syz [ 602.770275][ T10] usb 1-1: Manufacturer: syz [ 602.777898][ T10] usb 1-1: SerialNumber: syz [ 602.833602][T13217] xt_hashlimit: size too large, truncated to 1048576 [ 602.883211][ T10] usb 1-1: config 0 descriptor?? [ 602.907703][T13204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 602.915026][T13204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 602.923745][ T10] usb 1-1: ucan: probing device on interface #0 [ 603.531642][ T10] ucan 1-1:0.0 can0: registered device [ 603.729223][ T10] ucan 1-1:0.0 can0: firmware string: unknown [ 603.882901][ T5820] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 603.917973][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 603.948287][ T5929] usb 1-1: USB disconnect, device number 88 [ 604.056933][ T5820] usb 4-1: config 0 has no interfaces? [ 604.067469][ T5820] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 604.083716][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 604.111998][ T10] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.155675][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.168921][ T30] audit: type=1400 audit(1765123840.699:2882): avc: denied { ioctl } for pid=13235 comm="syz.4.1927" path="socket:[47621]" dev="sockfs" ino=47621 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 604.466833][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 604.476491][ T5820] usb 4-1: config 0 descriptor?? [ 604.481709][ T10] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 604.491683][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.503801][ T10] usb 3-1: config 0 descriptor?? [ 604.782638][T13243] block nbd0: shutting down sockets [ 604.810897][T13243] No source specified [ 605.166864][ T5820] usb 4-1: USB disconnect, device number 67 [ 605.983558][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 605.989567][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 605.999464][ T10] usb 3-1: USB disconnect, device number 68 [ 606.831553][T13269] FAULT_INJECTION: forcing a failure. [ 606.831553][T13269] name failslab, interval 1, probability 0, space 0, times 0 [ 606.844449][T13269] CPU: 0 UID: 0 PID: 13269 Comm: syz.2.1935 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.844478][T13269] Tainted: [L]=SOFTLOCKUP [ 606.844484][T13269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.844493][T13269] Call Trace: [ 606.844499][T13269] [ 606.844505][T13269] dump_stack_lvl+0x16c/0x1f0 [ 606.844536][T13269] should_fail_ex+0x512/0x640 [ 606.844555][T13269] ? __kmalloc_noprof+0xca/0x910 [ 606.844582][T13269] should_failslab+0xc2/0x120 [ 606.844605][T13269] __kmalloc_noprof+0xeb/0x910 [ 606.844631][T13269] ? bpf_test_init.isra.0+0x88/0x130 [ 606.844656][T13269] ? bpf_test_init.isra.0+0x88/0x130 [ 606.844675][T13269] bpf_test_init.isra.0+0x88/0x130 [ 606.844698][T13269] bpf_prog_test_run_skb+0x489/0x31a0 [ 606.844725][T13269] ? find_held_lock+0x2b/0x80 [ 606.844758][T13269] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 606.844783][T13269] ? fput+0x70/0xf0 [ 606.844811][T13269] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 606.844834][T13269] __sys_bpf+0x1035/0x4980 [ 606.844861][T13269] ? __pfx___sys_bpf+0x10/0x10 [ 606.844884][T13269] ? find_held_lock+0x2b/0x80 [ 606.844913][T13269] ? find_held_lock+0x2b/0x80 [ 606.844944][T13269] ? __mutex_unlock_slowpath+0x161/0x790 [ 606.844984][T13269] ? fput+0x70/0xf0 [ 606.845009][T13269] ? ksys_write+0x1ac/0x250 [ 606.845029][T13269] ? __pfx_ksys_write+0x10/0x10 [ 606.845055][T13269] __x64_sys_bpf+0x78/0xc0 [ 606.845079][T13269] ? lockdep_hardirqs_on+0x7c/0x110 [ 606.845104][T13269] do_syscall_64+0xcd/0xf80 [ 606.845128][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.845145][T13269] RIP: 0033:0x7f9c7898f749 [ 606.845158][T13269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.845172][T13269] RSP: 002b:00007f9c76bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.845188][T13269] RAX: ffffffffffffffda RBX: 00007f9c78be5fa0 RCX: 00007f9c7898f749 [ 606.845198][T13269] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 606.845207][T13269] RBP: 00007f9c76bee090 R08: 0000000000000000 R09: 0000000000000000 [ 606.845216][T13269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.845225][T13269] R13: 00007f9c78be6038 R14: 00007f9c78be5fa0 R15: 00007ffc8f242a78 [ 606.845246][T13269] [ 607.082028][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'. [ 607.442870][ T5936] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 607.450575][ T5929] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 607.572843][ T5820] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 607.602858][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 607.609713][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.621176][ T5929] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 607.629423][ T5936] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 607.639262][ T5929] usb 3-1: config 0 has no interface number 0 [ 607.645500][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.653622][ T5929] usb 3-1: config 0 interface 41 has no altsetting 0 [ 607.663227][ T5929] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 607.672303][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.681366][ T5936] usb 4-1: config 0 descriptor?? [ 607.702346][ T5929] usb 3-1: Product: syz [ 607.706823][ T5929] usb 3-1: Manufacturer: syz [ 607.711447][ T5929] usb 3-1: SerialNumber: syz [ 607.730833][ T5929] usb 3-1: config 0 descriptor?? [ 607.742964][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 607.752320][ T5820] usb 5-1: config 0 has no interfaces? [ 607.757946][ T5820] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 607.771435][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.785902][ T5820] usb 5-1: config 0 descriptor?? [ 607.914831][ T10] usb 1-1: config 0 has no interfaces? [ 607.920349][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 607.929577][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.942638][ T10] usb 1-1: config 0 descriptor?? [ 608.013633][ T10] usb 5-1: USB disconnect, device number 83 [ 608.099469][ T5936] hkems 0003:2006:0118.0051: item fetching failed at offset 4/5 [ 608.107671][ T5936] hkems 0003:2006:0118.0051: parse failed [ 608.114786][ T5936] hkems 0003:2006:0118.0051: probe with driver hkems failed with error -22 [ 608.424867][ T10] usb 4-1: USB disconnect, device number 68 [ 608.513702][ T5820] usb 1-1: USB disconnect, device number 89 [ 608.802888][ T5936] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 608.962806][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 608.969399][ T5936] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.980717][ T5936] usb 2-1: config 0 interface 0 has no altsetting 0 [ 608.987397][ T5936] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 609.002840][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.024514][ T5936] usb 2-1: config 0 descriptor?? [ 609.595068][ T5929] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 609.613283][ T5929] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 609.623575][ T5929] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 609.640703][ T5929] usb 3-1: USB disconnect, device number 69 [ 609.985128][T13315] FAULT_INJECTION: forcing a failure. [ 609.985128][T13315] name failslab, interval 1, probability 0, space 0, times 0 [ 609.997858][T13315] CPU: 1 UID: 0 PID: 13315 Comm: syz.4.1948 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.997887][T13315] Tainted: [L]=SOFTLOCKUP [ 609.997894][T13315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.997905][T13315] Call Trace: [ 609.997912][T13315] [ 609.997920][T13315] dump_stack_lvl+0x16c/0x1f0 [ 609.997956][T13315] should_fail_ex+0x512/0x640 [ 609.997978][T13315] ? __kmalloc_cache_noprof+0x5f/0x800 [ 609.998010][T13315] should_failslab+0xc2/0x120 [ 609.998034][T13315] __kmalloc_cache_noprof+0x80/0x800 [ 609.998063][T13315] ? copy_mount_options+0x55/0x190 [ 609.998087][T13315] ? copy_mount_options+0x55/0x190 [ 609.998106][T13315] copy_mount_options+0x55/0x190 [ 609.998127][T13315] __x64_sys_mount+0x1ab/0x310 [ 609.998147][T13315] ? __pfx___x64_sys_mount+0x10/0x10 [ 609.998172][T13315] do_syscall_64+0xcd/0xf80 [ 609.998202][T13315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.998221][T13315] RIP: 0033:0x7fd10a58f749 [ 609.998236][T13315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.998255][T13315] RSP: 002b:00007fd10b448038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 609.998273][T13315] RAX: ffffffffffffffda RBX: 00007fd10a7e6180 RCX: 00007fd10a58f749 [ 609.998285][T13315] RDX: 00002000000003c0 RSI: 0000200000000040 RDI: 0000200000002440 [ 609.998297][T13315] RBP: 00007fd10b448090 R08: 0000200000000bc0 R09: 0000000000000000 [ 609.998308][T13315] R10: 000000000200840d R11: 0000000000000246 R12: 0000000000000001 [ 609.998319][T13315] R13: 00007fd10a7e6218 R14: 00007fd10a7e6180 R15: 00007ffd9bd14308 [ 609.998345][T13315] [ 610.170820][ T5936] usbhid 2-1:0.0: can't add hid device: -71 [ 610.177073][ T5936] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 610.186940][ T5936] usb 2-1: USB disconnect, device number 91 [ 610.281059][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1949'. [ 611.248221][ T5820] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 611.334265][T13337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.384768][T13337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.808635][ T5820] usb 2-1: config 0 has no interfaces? [ 611.814232][ T5820] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 611.825962][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.841837][ T5820] usb 2-1: config 0 descriptor?? [ 612.224973][ T24] usb 2-1: USB disconnect, device number 92 [ 612.262991][ T10] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 612.441176][ T5929] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 612.454351][ T10] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 612.462638][ T10] usb 4-1: config 0 has no interface number 0 [ 612.468834][ T10] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 612.478974][ T10] usb 4-1: config 0 interface 41 has no altsetting 0 [ 612.488392][ T10] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 613.045211][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.053666][ T10] usb 4-1: Product: syz [ 613.057850][ T10] usb 4-1: Manufacturer: syz [ 613.062492][ T10] usb 4-1: SerialNumber: syz [ 613.121876][ T10] usb 4-1: config 0 descriptor?? [ 613.130079][ T10] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 613.144594][ T5929] usb 5-1: config 0 has no interfaces? [ 613.167604][ T5929] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 613.240096][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.254022][ T5929] usb 5-1: config 0 descriptor?? [ 614.380538][ T5820] usb 5-1: USB disconnect, device number 84 [ 614.587559][ T30] audit: type=1400 audit(1765123851.059:2883): avc: denied { firmware_load } for pid=13370 comm="syz.1.1963" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 614.691524][T13378] syz.1.1963 (13378) used greatest stack depth: 19688 bytes left [ 615.119819][ T8876] usb 4-1: USB disconnect, device number 69 [ 615.416153][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'. [ 615.642855][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 615.795519][ T10] usb 2-1: config 0 has no interfaces? [ 615.805421][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 615.820296][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.868828][ T10] usb 2-1: config 0 descriptor?? [ 616.232908][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 616.669226][T12676] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 616.679132][ T10] usb 3-1: device descriptor read/64, error -71 [ 616.899418][ T9] usb 2-1: USB disconnect, device number 93 [ 616.953967][T12676] usb 1-1: config 0 has no interfaces? [ 616.960187][T12676] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 616.970664][T12676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.982659][T12676] usb 1-1: config 0 descriptor?? [ 616.992831][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 617.185508][ T10] usb 3-1: device descriptor read/64, error -71 [ 617.196654][T12676] usb 1-1: USB disconnect, device number 90 [ 617.333654][T13431] o2cb: This node has not been configured. [ 617.339528][T13431] o2cb: Cluster check failed. Fix errors before retrying. [ 617.346847][T13431] (syz.4.1974,13431,1):user_dlm_register:674 ERROR: status = -22 [ 617.354696][T13431] (syz.4.1974,13431,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 617.371826][ T5929] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 617.642767][ T10] usb usb3-port1: attempt power cycle [ 617.853014][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 617.860483][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.871766][ T5929] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 617.885034][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.905272][ T5929] usb 4-1: config 0 descriptor?? [ 617.975621][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 617.983377][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 618.017256][ T10] usb 3-1: device descriptor read/8, error -71 [ 618.263012][T13420] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 618.270952][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 618.303628][ T10] usb 3-1: device descriptor read/8, error -71 [ 618.320939][T13460] xt_hashlimit: size too large, truncated to 1048576 [ 618.345060][ T5929] hkems 0003:2006:0118.0052: item fetching failed at offset 4/5 [ 618.368911][ T5929] hkems 0003:2006:0118.0052: parse failed [ 618.383234][ T5929] hkems 0003:2006:0118.0052: probe with driver hkems failed with error -22 [ 618.464910][ T10] usb usb3-port1: unable to enumerate USB device [ 618.485190][T13420] usb 2-1: config 0 has no interfaces? [ 618.490685][T13420] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 618.510249][T13420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.527188][T13420] usb 2-1: config 0 descriptor?? [ 618.572250][ T5929] usb 4-1: USB disconnect, device number 70 [ 619.418558][ T30] audit: type=1400 audit(1765123855.929:2884): avc: denied { create } for pid=13412 comm="syz.2.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 619.585818][T13420] usb 2-1: USB disconnect, device number 94 [ 619.627404][ T30] audit: type=1400 audit(1765123856.159:2885): avc: denied { write } for pid=13412 comm="syz.2.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 619.852821][ T5929] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 619.962976][T13420] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 620.134586][T13420] usb 5-1: Using ep0 maxpacket: 8 [ 620.148535][T13420] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 620.161377][T13420] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 620.179003][T13420] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 620.191149][T13420] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.209100][T13420] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 620.227246][T13420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.590099][T13420] usb 5-1: GET_CAPABILITIES returned 0 [ 620.598615][T13420] usbtmc 5-1:16.0: can't read capabilities [ 620.635996][T13486] lo: entered allmulticast mode [ 620.708315][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 620.735249][T13485] lo: left allmulticast mode [ 620.743889][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 620.755147][ T5929] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 620.767045][ T5929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 620.778454][ T5929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 620.789076][ T5929] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.793918][T13481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.808144][ T5929] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 620.830489][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.853310][T13481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.865054][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.871278][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.871331][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.871371][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.871423][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.871628][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.871669][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.871710][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.871749][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.871789][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.872022][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.872062][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.872102][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.872140][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.872180][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.872370][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.874489][ T6012] usb 5-1: USB disconnect, device number 85 [ 621.228690][ T5929] usb 4-1: GET_CAPABILITIES returned 0 [ 621.228888][ T5929] usbtmc 4-1:16.0: can't read capabilities [ 622.063153][ T5929] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 622.425498][ T5929] usb 1-1: config 0 has no interfaces? [ 622.513035][ T5929] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 622.522551][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.585920][ T5929] usb 1-1: config 0 descriptor?? [ 622.641297][ T24] IPVS: starting estimator thread 0... [ 622.743478][T13526] IPVS: using max 49 ests per chain, 117600 per kthread [ 623.301016][T12676] usb 1-1: USB disconnect, device number 91 [ 623.593259][ T24] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 623.697526][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2001'. [ 623.754489][ T24] usb 2-1: config 0 has no interfaces? [ 623.760127][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 623.771362][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.792551][ T24] usb 2-1: config 0 descriptor?? [ 623.842850][ T5929] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 623.935632][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.013059][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 624.130083][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.567861][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.571790][T12676] usb 2-1: USB disconnect, device number 95 [ 624.618426][ T5929] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 624.630113][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.693548][ T5929] usb 3-1: config 0 descriptor?? [ 625.117731][ T5929] corsair 0003:1B1C:1B02.0053: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 625.309619][ T5929] corsair 0003:1B1C:1B02.0053: Read invalid backlight brightness: 3e. [ 625.368792][T13564] tmpfs: Bad value for 'mpol' [ 625.525410][ T5929] usb 3-1: USB disconnect, device number 74 [ 626.183773][ T5929] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 626.326235][ T30] audit: type=1400 audit(1765123862.859:2886): avc: denied { lock } for pid=13588 comm="syz.0.2017" path="socket:[49566]" dev="sockfs" ino=49566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 626.356122][ T5929] usb 5-1: config 0 has no interfaces? [ 626.362643][ T5929] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 626.372845][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.394629][ T5929] usb 5-1: config 0 descriptor?? [ 626.496330][T13479] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 626.518867][ T5929] usb 4-1: USB disconnect, device number 71 [ 626.881023][ T24] usb 5-1: USB disconnect, device number 86 [ 627.162879][ T5929] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 627.213060][ T6012] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 627.322920][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 627.329427][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.340517][ T5929] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 627.349926][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.360951][ T5929] usb 3-1: config 0 descriptor?? [ 627.374490][ T6012] usb 4-1: config 0 has no interfaces? [ 627.379997][ T6012] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 627.389470][ T6012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.399566][ T6012] usb 4-1: config 0 descriptor?? [ 627.404652][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 627.512897][T12676] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 627.685054][ T24] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 627.695275][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.776475][ T24] usb 1-1: config 0 descriptor?? [ 627.842388][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 627.991165][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 628.067691][ T8876] usb 4-1: USB disconnect, device number 72 [ 628.208752][ T5929] usb 3-1: USB disconnect, device number 75 [ 628.404245][T12676] usb 2-1: Using ep0 maxpacket: 16 [ 628.992861][ T24] usb 1-1: Cannot set autoneg [ 628.999039][ T24] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 629.296658][ T8876] usb 1-1: USB disconnect, device number 92 [ 629.598452][T12676] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.069613][T12676] usb 2-1: config 0 interface 0 has no altsetting 0 [ 630.076390][T12676] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 630.092787][T12676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.104072][T12676] usb 2-1: config 0 descriptor?? [ 630.517857][T12676] usbhid 2-1:0.0: can't add hid device: -71 [ 630.547643][T12676] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 630.607215][T12676] usb 2-1: USB disconnect, device number 96 [ 631.414729][T12676] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 631.892196][T12676] usb 2-1: not running at top speed; connect to a high speed hub [ 632.003243][T12676] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 632.092246][T12676] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 632.274028][T12676] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 632.336655][T12676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.398367][T12676] usb 2-1: Product: ⽜锺섑ສ照籙鋚ӧ鱯涳ዋ賀፮檬 [ 632.471867][T12676] usb 2-1: Manufacturer: Э [ 632.504271][T12676] usb 2-1: SerialNumber: ࠬ [ 632.592948][T13630] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 632.677702][T13630] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 632.997021][T12676] usbhid 2-1:1.0: can't add hid device: -71 [ 633.003236][T12676] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 633.234148][T12676] usb 2-1: USB disconnect, device number 97 [ 633.382820][ T8876] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 633.536809][ T8876] usb 3-1: config 0 has no interfaces? [ 633.542348][ T8876] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 633.556981][T13658] FAULT_INJECTION: forcing a failure. [ 633.556981][T13658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.570269][ T5889] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 633.571809][T13658] CPU: 0 UID: 0 PID: 13658 Comm: syz.1.2037 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.571834][T13658] Tainted: [L]=SOFTLOCKUP [ 633.571840][T13658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.571850][T13658] Call Trace: [ 633.571857][T13658] [ 633.571863][T13658] dump_stack_lvl+0x16c/0x1f0 [ 633.571892][T13658] should_fail_ex+0x512/0x640 [ 633.571913][T13658] _copy_from_user+0x2e/0xd0 [ 633.571932][T13658] memdup_user+0x6b/0xe0 [ 633.571950][T13658] strndup_user+0x78/0xe0 [ 633.571967][T13658] __x64_sys_mount+0x136/0x310 [ 633.571984][T13658] ? __pfx___x64_sys_mount+0x10/0x10 [ 633.572005][T13658] do_syscall_64+0xcd/0xf80 [ 633.572069][T13658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.572087][T13658] RIP: 0033:0x7f23e7b8f749 [ 633.572111][T13658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.572128][T13658] RSP: 002b:00007f23e8b05038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 633.572144][T13658] RAX: ffffffffffffffda RBX: 00007f23e7de5fa0 RCX: 00007f23e7b8f749 [ 633.572155][T13658] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 633.572165][T13658] RBP: 00007f23e8b05090 R08: 00002000000001c0 R09: 0000000000000000 [ 633.572176][T13658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.572186][T13658] R13: 00007f23e7de6038 R14: 00007f23e7de5fa0 R15: 00007ffc8d919068 [ 633.572213][T13658] [ 633.731054][ T8876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.741496][ T8876] usb 3-1: config 0 descriptor?? [ 633.949082][ T5889] usb 4-1: config 0 has no interfaces? [ 634.329470][ T5889] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 634.687405][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.696143][ T8876] usb 3-1: USB disconnect, device number 76 [ 634.746401][ T5889] usb 4-1: config 0 descriptor?? [ 635.267299][T12676] usb 4-1: USB disconnect, device number 73 [ 635.362845][ T8876] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 635.526473][ T8876] usb 2-1: Using ep0 maxpacket: 32 [ 635.537324][ T8876] usb 2-1: config 4 has an invalid interface number: 196 but max is 0 [ 635.562659][ T8876] usb 2-1: config 4 has no interface number 0 [ 635.584645][ T8876] usb 2-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=21.39 [ 635.604162][ T8876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.289368][T13693] syzkaller1: entered promiscuous mode [ 636.312157][T13693] syzkaller1: entered allmulticast mode [ 636.402936][T12676] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 636.864587][T12676] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 636.885549][T12676] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 636.913960][T12676] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 636.940939][T12676] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 636.956092][T12676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.964383][T12676] usb 1-1: Product: syz [ 636.973161][T12676] usb 1-1: Manufacturer: syz [ 636.978772][T12676] usb 1-1: SerialNumber: syz [ 636.988038][T12676] usb 1-1: config 0 descriptor?? [ 637.026505][T13686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 637.034002][T13686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 637.042349][T12676] usb 1-1: ucan: probing device on interface #0 [ 637.726376][T12676] ucan 1-1:0.0 can0: registered device [ 637.895342][T12676] ucan 1-1:0.0 can0: firmware string: unknown [ 638.150773][T12676] usb 1-1: USB disconnect, device number 93 [ 638.745015][ T8876] usb 2-1: string descriptor 0 read error: -71 [ 638.756437][ T8876] keyspan 2-1:4.196: Keyspan - (without firmware) converter detected [ 638.798693][ T8876] usb 2-1: USB disconnect, device number 98 [ 638.807735][ T8876] keyspan 2-1:4.196: device disconnected [ 639.852976][ T8876] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 639.917838][T13737] o2cb: This node has not been configured. [ 639.923735][T13737] o2cb: Cluster check failed. Fix errors before retrying. [ 639.930882][T13737] (syz.4.2055,13737,1):user_dlm_register:674 ERROR: status = -22 [ 639.939456][T13737] (syz.4.2055,13737,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 640.048167][ T8876] usb 1-1: config 0 has no interfaces? [ 640.069918][ T8876] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 640.282766][ T8876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.320195][ T8876] usb 1-1: config 0 descriptor?? [ 641.065919][ T8876] usb 1-1: USB disconnect, device number 94 [ 641.264259][ T5929] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 641.479506][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 641.497681][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.518554][ T5929] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 641.529948][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.553606][ T5929] usb 2-1: config 0 descriptor?? [ 641.776904][T12676] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 642.091647][ T5929] hkems 0003:2006:0118.0054: item fetching failed at offset 3/5 [ 642.092894][T12676] usb 4-1: Using ep0 maxpacket: 32 [ 642.122442][ T5929] hkems 0003:2006:0118.0054: parse failed [ 642.218355][ T5929] hkems 0003:2006:0118.0054: probe with driver hkems failed with error -22 [ 642.237840][T12676] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 642.257672][T12676] usb 4-1: config 0 has no interface number 0 [ 642.268880][T13420] usb 2-1: USB disconnect, device number 99 [ 642.307681][T12676] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 642.731176][T12676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.749095][T12676] usb 4-1: Product: syz [ 642.756042][T12676] usb 4-1: Manufacturer: syz [ 642.768480][T12676] usb 4-1: SerialNumber: syz [ 642.781096][T12676] usb 4-1: config 0 descriptor?? [ 642.790378][T12676] smsc95xx v2.0.0 [ 642.794259][T12676] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 642.802437][T13772] : entered allmulticast mode [ 642.804809][T12676] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 642.866735][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2066'. [ 642.888174][T13771] : left allmulticast mode [ 643.378908][ T5929] usb 4-1: USB disconnect, device number 74 [ 643.438714][ T30] audit: type=1400 audit(1765123879.969:2887): avc: denied { create } for pid=13786 comm="syz.1.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 643.476750][ T30] audit: type=1400 audit(1765123879.999:2888): avc: denied { setopt } for pid=13786 comm="syz.1.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 643.622960][ T8876] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 643.875810][T13795] netlink: 'syz.1.2072': attribute type 10 has an invalid length. [ 643.887946][T13795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2072'. [ 643.916151][ T8876] usb 5-1: not running at top speed; connect to a high speed hub [ 643.925129][ T8876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 643.950972][T13795] team0: Failed to send options change via netlink (err -105) [ 643.974778][ T8876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 643.993754][T13795] team0: Port device geneve0 added [ 644.011416][ T8876] usb 5-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 644.034733][ T8876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.057742][T13798] xt_hashlimit: size too large, truncated to 1048576 [ 644.083662][ T8876] usb 5-1: Product: ⽜锺섑ສ照籙鋚ӧ鱯涳ዋ賀፮檬 [ 644.102794][ T8876] usb 5-1: Manufacturer: Э [ 644.115262][ T8876] usb 5-1: SerialNumber: ࠬ [ 644.200730][T13781] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 644.210649][T13781] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 644.448515][T13812] netlink: 'syz.0.2076': attribute type 1 has an invalid length. [ 644.474291][T13812] FAULT_INJECTION: forcing a failure. [ 644.474291][T13812] name failslab, interval 1, probability 0, space 0, times 0 [ 644.478783][ T8876] usbhid 5-1:1.0: can't add hid device: -71 [ 644.493405][T13812] CPU: 0 UID: 0 PID: 13812 Comm: syz.0.2076 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.493439][T13812] Tainted: [L]=SOFTLOCKUP [ 644.493446][T13812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 644.493458][T13812] Call Trace: [ 644.493465][T13812] [ 644.493473][T13812] dump_stack_lvl+0x16c/0x1f0 [ 644.493507][T13812] should_fail_ex+0x512/0x640 [ 644.493528][T13812] ? __kmalloc_cache_noprof+0x5f/0x800 [ 644.493561][T13812] should_failslab+0xc2/0x120 [ 644.493586][T13812] __kmalloc_cache_noprof+0x80/0x800 [ 644.493616][T13812] ? qfq_change_class+0xcf8/0x1da0 [ 644.493652][T13812] ? qfq_change_class+0xcf8/0x1da0 [ 644.493683][T13812] qfq_change_class+0xcf8/0x1da0 [ 644.493721][T13812] ? __pfx_qfq_change_class+0x10/0x10 [ 644.493767][T13812] ? qdisc_match_from_root+0x16f/0x260 [ 644.493801][T13812] ? __pfx_qfq_change_class+0x10/0x10 [ 644.493832][T13812] tc_ctl_tclass+0x59d/0x16c0 [ 644.493860][T13812] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 644.493880][T13812] ? __mutex_lock+0x27b/0x1ca0 [ 644.493917][T13812] ? rtnetlink_rcv_msg+0x371/0xe90 [ 644.493947][T13812] ? __lock_acquire+0x436/0x2890 [ 644.493995][T13812] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 644.494018][T13812] rtnetlink_rcv_msg+0x3c9/0xe90 [ 644.494049][T13812] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 644.494087][T13812] ? ref_tracker_free+0x37c/0x830 [ 644.494115][T13812] netlink_rcv_skb+0x158/0x420 [ 644.494147][T13812] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 644.494177][T13812] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 644.494215][T13812] ? netlink_deliver_tap+0x1ae/0xd30 [ 644.494247][T13812] netlink_unicast+0x5aa/0x870 [ 644.494282][T13812] ? __pfx_netlink_unicast+0x10/0x10 [ 644.494326][T13812] netlink_sendmsg+0x8c8/0xdd0 [ 644.494362][T13812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.494406][T13812] ____sys_sendmsg+0xa5d/0xc30 [ 644.494440][T13812] ? copy_msghdr_from_user+0x10a/0x160 [ 644.494468][T13812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.494516][T13812] ___sys_sendmsg+0x134/0x1d0 [ 644.494544][T13812] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.494608][T13812] __sys_sendmsg+0x16d/0x220 [ 644.494636][T13812] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.494682][T13812] do_syscall_64+0xcd/0xf80 [ 644.494718][T13812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.494748][T13812] RIP: 0033:0x7fc121d8f749 [ 644.494769][T13812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.494791][T13812] RSP: 002b:00007fc122c5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.494814][T13812] RAX: ffffffffffffffda RBX: 00007fc121fe5fa0 RCX: 00007fc121d8f749 [ 644.494828][T13812] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 644.494844][T13812] RBP: 00007fc122c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 644.494856][T13812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.494870][T13812] R13: 00007fc121fe6038 R14: 00007fc121fe5fa0 R15: 00007ffef5419318 [ 644.494901][T13812] [ 644.513613][ T8876] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 644.566252][T13420] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 644.584694][ T8876] usb 5-1: USB disconnect, device number 87 [ 644.783947][T13420] usb 2-1: config 0 has no interfaces? [ 644.827271][T13811] ================================================================== [ 644.829598][T13420] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 644.836846][T13811] BUG: KASAN: slab-use-after-free in qfq_reset_qdisc+0x323/0x420 [ 644.836883][T13811] Read of size 8 at addr ffff888036715250 by task syz.0.2076/13811 [ 644.836898][T13811] [ 644.836910][T13811] CPU: 1 UID: 0 PID: 13811 Comm: syz.0.2076 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.836939][T13811] Tainted: [L]=SOFTLOCKUP [ 644.836945][T13811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 644.836955][T13811] Call Trace: [ 644.836967][T13811] [ 644.836975][T13811] dump_stack_lvl+0x116/0x1f0 [ 644.837006][T13811] print_report+0xcd/0x630 [ 644.837026][T13811] ? __virt_addr_valid+0x81/0x610 [ 644.837042][T13811] ? __phys_addr+0xe8/0x180 [ 644.837057][T13811] ? qfq_reset_qdisc+0x323/0x420 [ 644.837077][T13811] kasan_report+0xe0/0x110 [ 644.837097][T13811] ? qfq_reset_qdisc+0x323/0x420 [ 644.837121][T13811] qfq_reset_qdisc+0x323/0x420 [ 644.837144][T13811] ? synchronize_rcu_expedited+0x3b9/0x460 [ 644.837166][T13811] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 644.837188][T13811] qdisc_reset+0xe0/0x630 [ 644.837208][T13811] __qdisc_destroy+0xd3/0x4a0 [ 644.837226][T13811] qdisc_put+0xab/0xe0 [ 644.837243][T13811] dev_shutdown+0x1d0/0x430 [ 644.837264][T13811] unregister_netdevice_many_notify+0xb37/0x2590 [ 644.837292][T13811] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 644.837320][T13811] unregister_netdevice_queue+0x305/0x3c0 [ 644.837342][T13811] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 644.837364][T13811] ? linkwatch_schedule_work+0x181/0x1c0 [ 644.837389][T13811] ? linkwatch_fire_event+0x6f/0x270 [ 644.837415][T13811] __tun_detach+0x119c/0x1490 [ 644.837442][T13811] ? __pfx_tun_chr_close+0x10/0x10 [ 644.837466][T13811] tun_chr_close+0xc2/0x230 [ 644.837490][T13811] __fput+0x402/0xb70 [ 644.837516][T13811] task_work_run+0x150/0x240 [ 644.837537][T13811] ? __pfx_task_work_run+0x10/0x10 [ 644.837556][T13811] ? __do_sys_close_range+0x278/0x730 [ 644.837582][T13811] exit_to_user_mode_loop+0xfb/0x540 [ 644.837606][T13811] do_syscall_64+0x4ee/0xf80 [ 644.837631][T13811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.837648][T13811] RIP: 0033:0x7fc121d8f749 [ 644.837663][T13811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.837678][T13811] RSP: 002b:00007ffef5419478 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 644.837695][T13811] RAX: 0000000000000000 RBX: 00007fc121fe7da0 RCX: 00007fc121d8f749 [ 644.837705][T13811] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 644.837715][T13811] RBP: 00007fc121fe7da0 R08: 0000000000000000 R09: 0000000ff541976f [ 644.837726][T13811] R10: 000000000003fd5c R11: 0000000000000246 R12: 000000000009d866 [ 644.837736][T13811] R13: 00007fc121fe6090 R14: ffffffffffffffff R15: 00007ffef5419590 [ 644.837752][T13811] [ 644.837758][T13811] [ 644.845964][T13420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.853625][T13811] Allocated by task 13812: [ 644.853643][T13811] kasan_save_stack+0x33/0x60 [ 644.853666][T13811] kasan_save_track+0x14/0x30 [ 644.877112][T13420] usb 2-1: config 0 descriptor?? [ 644.879062][T13811] __kasan_kmalloc+0xaa/0xb0 [ 645.154391][T13811] qfq_change_class+0x2ba/0x1da0 [ 645.159322][T13811] tc_ctl_tclass+0x59d/0x16c0 [ 645.163999][T13811] rtnetlink_rcv_msg+0x3c9/0xe90 [ 645.168930][T13811] netlink_rcv_skb+0x158/0x420 [ 645.173711][T13811] netlink_unicast+0x5aa/0x870 [ 645.178459][T13811] netlink_sendmsg+0x8c8/0xdd0 [ 645.183208][T13811] ____sys_sendmsg+0xa5d/0xc30 [ 645.187968][T13811] ___sys_sendmsg+0x134/0x1d0 [ 645.192649][T13811] __sys_sendmsg+0x16d/0x220 [ 645.197229][T13811] do_syscall_64+0xcd/0xf80 [ 645.201737][T13811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.207610][T13811] [ 645.209914][T13811] Freed by task 13812: [ 645.213969][T13811] kasan_save_stack+0x33/0x60 [ 645.218629][T13811] kasan_save_track+0x14/0x30 [ 645.223286][T13811] kasan_save_free_info+0x3b/0x60 [ 645.228302][T13811] __kasan_slab_free+0x5f/0x80 [ 645.233049][T13811] kfree+0x2f8/0x6e0 [ 645.236941][T13811] qfq_change_class+0x1576/0x1da0 [ 645.241975][T13811] tc_ctl_tclass+0x59d/0x16c0 [ 645.246630][T13811] rtnetlink_rcv_msg+0x3c9/0xe90 [ 645.251554][T13811] netlink_rcv_skb+0x158/0x420 [ 645.256319][T13811] netlink_unicast+0x5aa/0x870 [ 645.261072][T13811] netlink_sendmsg+0x8c8/0xdd0 [ 645.265882][T13811] ____sys_sendmsg+0xa5d/0xc30 [ 645.270633][T13811] ___sys_sendmsg+0x134/0x1d0 [ 645.275294][T13811] __sys_sendmsg+0x16d/0x220 [ 645.279868][T13811] do_syscall_64+0xcd/0xf80 [ 645.284366][T13811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.290245][T13811] [ 645.292549][T13811] The buggy address belongs to the object at ffff888036715200 [ 645.292549][T13811] which belongs to the cache kmalloc-128 of size 128 [ 645.306581][T13811] The buggy address is located 80 bytes inside of [ 645.306581][T13811] freed 128-byte region [ffff888036715200, ffff888036715280) [ 645.320270][T13811] [ 645.322577][T13811] The buggy address belongs to the physical page: [ 645.328968][T13811] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888036715000 pfn:0x36715 [ 645.339009][T13811] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 645.347050][T13811] page_type: f5(slab) [ 645.351019][T13811] raw: 00fff00000000200 ffff88813ff26a00 ffffea0001efc510 ffffea0001563550 [ 645.359581][T13811] raw: ffff888036715000 000000000010000e 00000000f5000000 0000000000000000 [ 645.368141][T13811] page dumped because: kasan: bad access detected [ 645.374530][T13811] page_owner tracks the page as allocated [ 645.380221][T13811] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5189, tgid 5189 (udevd), ts 36404644860, free_ts 36374984199 [ 645.398865][T13811] post_alloc_hook+0x1af/0x220 [ 645.403618][T13811] get_page_from_freelist+0xd0b/0x31a0 [ 645.409058][T13811] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 645.414934][T13811] alloc_pages_mpol+0x1fb/0x550 [ 645.419771][T13811] new_slab+0x2c3/0x430 [ 645.423912][T13811] ___slab_alloc+0xe18/0x1c90 [ 645.428572][T13811] __slab_alloc.constprop.0+0x63/0x110 [ 645.434017][T13811] __kmalloc_cache_noprof+0x485/0x800 [ 645.439381][T13811] kernfs_fop_open+0xa3a/0xda0 [ 645.444134][T13811] do_dentry_open+0x748/0x1590 [ 645.448881][T13811] vfs_open+0x82/0x3f0 [ 645.452936][T13811] path_openat+0x2078/0x3140 [ 645.457514][T13811] do_filp_open+0x20b/0x470 [ 645.462000][T13811] do_sys_openat2+0x11f/0x280 [ 645.466651][T13811] __x64_sys_openat+0x174/0x210 [ 645.471478][T13811] do_syscall_64+0xcd/0xf80 [ 645.475969][T13811] page last free pid 15 tgid 15 stack trace: [ 645.481925][T13811] __free_frozen_pages+0x7df/0x1170 [ 645.487128][T13811] rcu_core+0x79c/0x15f0 [ 645.491375][T13811] handle_softirqs+0x219/0x950 [ 645.496125][T13811] run_ksoftirqd+0x3a/0x60 [ 645.500524][T13811] smpboot_thread_fn+0x3f7/0xae0 [ 645.505443][T13811] kthread+0x3c5/0x780 [ 645.509494][T13811] ret_from_fork+0x983/0xb10 [ 645.514063][T13811] ret_from_fork_asm+0x1a/0x30 [ 645.518814][T13811] [ 645.521117][T13811] Memory state around the buggy address: [ 645.526725][T13811] ffff888036715100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 645.534787][T13811] ffff888036715180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 645.542832][T13811] >ffff888036715200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 645.550872][T13811] ^ [ 645.557519][T13811] ffff888036715280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 645.565574][T13811] ffff888036715300: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 645.573625][T13811] ================================================================== [ 645.587583][ T30] audit: type=1400 audit(1765123882.119:2889): avc: denied { read } for pid=5168 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 645.599448][T13811] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 645.599470][T13811] CPU: 0 UID: 0 PID: 13811 Comm: syz.0.2076 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.599503][T13811] Tainted: [L]=SOFTLOCKUP [ 645.599511][T13811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 645.599522][T13811] Call Trace: [ 645.599529][T13811] [ 645.599536][T13811] dump_stack_lvl+0x3d/0x1f0 [ 645.599572][T13811] vpanic+0x640/0x6f0 [ 645.599593][T13811] panic+0xca/0xd0 [ 645.599610][T13811] ? __pfx_panic+0x10/0x10 [ 645.599629][T13811] ? qfq_reset_qdisc+0x323/0x420 [ 645.599654][T13811] ? preempt_schedule_common+0x44/0xc0 [ 645.599679][T13811] ? preempt_schedule_thunk+0x16/0x30 [ 645.599697][T13811] ? check_panic_on_warn+0x1f/0xb0 [ 645.599718][T13811] check_panic_on_warn+0xab/0xb0 [ 645.599738][T13811] end_report+0x107/0x160 [ 645.599761][T13811] kasan_report+0xee/0x110 [ 645.599783][T13811] ? qfq_reset_qdisc+0x323/0x420 [ 645.599809][T13811] qfq_reset_qdisc+0x323/0x420 [ 645.599834][T13811] ? synchronize_rcu_expedited+0x3b9/0x460 [ 645.599857][T13811] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 645.599879][T13811] qdisc_reset+0xe0/0x630 [ 645.599901][T13811] __qdisc_destroy+0xd3/0x4a0 [ 645.599921][T13811] qdisc_put+0xab/0xe0 [ 645.599941][T13811] dev_shutdown+0x1d0/0x430 [ 645.599964][T13811] unregister_netdevice_many_notify+0xb37/0x2590 [ 645.599994][T13811] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 645.600030][T13811] unregister_netdevice_queue+0x305/0x3c0 [ 645.600056][T13811] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 645.600080][T13811] ? linkwatch_schedule_work+0x181/0x1c0 [ 645.600108][T13811] ? linkwatch_fire_event+0x6f/0x270 [ 645.600137][T13811] __tun_detach+0x119c/0x1490 [ 645.600166][T13811] ? __pfx_tun_chr_close+0x10/0x10 [ 645.600192][T13811] tun_chr_close+0xc2/0x230 [ 645.600218][T13811] __fput+0x402/0xb70 [ 645.600247][T13811] task_work_run+0x150/0x240 [ 645.600269][T13811] ? __pfx_task_work_run+0x10/0x10 [ 645.600290][T13811] ? __do_sys_close_range+0x278/0x730 [ 645.600319][T13811] exit_to_user_mode_loop+0xfb/0x540 [ 645.600346][T13811] do_syscall_64+0x4ee/0xf80 [ 645.600372][T13811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.600389][T13811] RIP: 0033:0x7fc121d8f749 [ 645.600404][T13811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.600421][T13811] RSP: 002b:00007ffef5419478 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 645.600440][T13811] RAX: 0000000000000000 RBX: 00007fc121fe7da0 RCX: 00007fc121d8f749 [ 645.600451][T13811] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 645.600463][T13811] RBP: 00007fc121fe7da0 R08: 0000000000000000 R09: 0000000ff541976f [ 645.600475][T13811] R10: 000000000003fd5c R11: 0000000000000246 R12: 000000000009d866 [ 645.600486][T13811] R13: 00007fc121fe6090 R14: ffffffffffffffff R15: 00007ffef5419590 [ 645.600504][T13811] [ 645.610041][T13811] Kernel Offset: disabled