last executing test programs: 2m48.847821465s ago: executing program 2 (id=613): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x40, 0x10, 0x2}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m47.33506877s ago: executing program 2 (id=619): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x800002}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="400e1300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDENABIO(r1, 0x4b36) close_range(r0, 0xffffffffffffffff, 0x0) 2m45.359824391s ago: executing program 2 (id=628): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x20) 2m44.662558166s ago: executing program 2 (id=632): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d40)="cf", 0x1}], 0x1}}], 0x1, 0x4009811) recvmmsg(r3, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/240, 0xf0}], 0x1}, 0x80}], 0x1, 0x40010043, 0x0) recvmmsg(r1, 0x0, 0x0, 0x22, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%-5lx \x00'}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={&(0x7f0000000000)="c5e25ca0a05457c25b61d5ae8b5c02ae06834469c12a043265e260826348e9", &(0x7f0000000080)=""/245, &(0x7f0000000ac0)="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", &(0x7f0000000180)="b323658c6888d151890b4e139ea2b93a25e901bde3b55d0056d7494c0a4d5303b036daf07c322f92ac52ceb695328f8e89a85f9a5d0a9f5a87c961f642d84794af8cfc51da6c1163cf96add0056df134b2b5fa1cb0415494b6e61133f53a76074c5a5c6c2fae5cc06675478f6e050191e2b5e2ebbeb94da730f4876b395594146b5d8f5ee3f8e81509a152684ea3b1227effde105bcde9e7565694a9be542cbc87ebc2c7cbbc5a731a8121b6058738c5245303714efc9c82fc51c097f89b84d721b29aed29b7c47cd9a9cc308ac8ab2ff452f321f5f1deaf14296a65f1b012e4fc0672424b2b3f", 0x0, r4, 0x4}, 0x38) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000200)={0x6053, 0x0, 0x1}, 0x18, 0x0) r7 = epoll_create1(0x0) r8 = socket$unix(0x1, 0x1, 0x0) close(r8) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0xa0028000}) landlock_restrict_self(r6, 0x0) r9 = syz_pidfd_open(r5, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f00000000c0)={r11, 0x1}, &(0x7f0000000280)=0x8) pidfd_getfd(r9, 0xffffffffffffffff, 0x0) 2m43.899479542s ago: executing program 2 (id=634): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x33, 0x0, 0x4000) 2m43.329443852s ago: executing program 2 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x20044000) (fail_nth: 6) 2m43.003647884s ago: executing program 32 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x20044000) (fail_nth: 6) 34.539547949s ago: executing program 0 (id=1195): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11c0, 0x5506, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffb, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x4, "886c"}]}}, 0x0}, 0x0) 32.652884759s ago: executing program 0 (id=1203): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x4, 0x2, 0x1, 0x3}}, 0x26) syz_emit_ethernet(0x5d, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x20004810) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x16, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001080)=ANY=[], 0xb6) socket(0x1e, 0x5, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x4e, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000e40)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a", 0x23}], 0x1}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000f00)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d78ddc5aa9131162a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face80000a70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e4522988db23b8440047b2d849f7582e803", 0xb8}, {&(0x7f00000003c0)="49f4178141", 0x5}, {&(0x7f0000000780)="f318b45a3d8aed513e90235d54300a6373f775e36a58ca0f53e3ddcd8b8dccb6a2fc05b6d6f9ecba74e748a991ffbf264467e94b4622db20df0382c1ff1ca8dc6a9f6e05a36e6261f8b9e13e1b8753dd636e8f239d1de3b3f326ef84075a654a454e9f764f190397daee88879aafaa6b81a213802075e23b5dae233523677cbb255ff674afad254ed56fead3035b7bfc225c3d6b235d04", 0x97}, {0x0}], 0x4, &(0x7f0000001300)=ANY=[], 0x258}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904d9"], 0x0) 29.050593707s ago: executing program 0 (id=1213): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r4, 0xae80, 0x0) semop(0x0, &(0x7f0000000040)=[{0x1, 0x101}, {0x1}], 0x2) semop(0x0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(0x0, 0x1, 0xe, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 27.19436314s ago: executing program 0 (id=1217): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2004) 27.079766378s ago: executing program 0 (id=1218): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000107}]}) ioctl$TCFLSH(r0, 0x80047437, 0xfffffffffffeffff) io_setup(0x7, &(0x7f00000000c0)=0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x4001, 0x0) io_submit(r4, 0x4, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0xfa, r0, &(0x7f0000000100)="a4fb8a0215090c2c4f46584d3246ebebb183e9d7247c402718f993f67ffab01e249000483947282908bc9b86bdb42f64d4063f12ec23b3bb6e8533a4ef4dbfa0bfaa77930133d0e9b7feca055ec9cce76334815a3f04a5c7a1428a37c247e2bdb558c271292cac84f0f24bee1aac442c22fa2f1e60143c8ea1781d69f07b9780c7e5843871bfb817eac50464664456dd9a59fd5329de74897cc338a3d61d202054dc82b130efcf431fd8b0a70f160828005f927b27b0d202ef10c09f97b6a7c20aad6af422945cd1c333b8c23d2420650fa572f7a8b502c37a15ed", 0xdb, 0x44bd6a13}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xb3, r1, &(0x7f0000000280)="c93cf2feed81d771e18ea16160f59353578fa9eb7cabcaec59dfe0daed41343553f3dd7df377a001a1f3709353debf5d2aeafd9155d8e39c3651b346c65acd3892e7776e972bb9b907def2cdfd206476c9b407411dc20d71f4af0a68a99883a2", 0x60, 0xc}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xba77edc10b7293dc, 0x96f4, r3, &(0x7f0000000340)="75168b9176c4fa6c8c960000193ad55be14587049c46bbf3b4c7", 0x1a, 0x4, 0x0, 0x3, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000400)="e66c2e5fe7994b94160b32d60251136d145ac9dd724ec9ccc4e5ccc4dcbf38384d1af5258b6fd1d30160e33a61e926180007f7b67a722c45de1fb17c2559fcafbc22566ccbdb437e03325e6d948d2577e41a844a811be182a5a3bb504f08c0c36e72f636959c", 0x66, 0x8000000000000001, 0x0, 0x2}]) 26.587029898s ago: executing program 0 (id=1219): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @rthdrdstopts={{0x18}}], 0x40}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$nci(r3, &(0x7f00000001c0)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x2, 0x1}, 0x4) (async) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffecb) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r5, 0x1c, 0x3, 0xfffffffffffffffe}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x48, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x3}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}]}, @NL80211_ATTR_TX_RATES={0x4}, @chandef_params]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x44000) 22.343266478s ago: executing program 4 (id=1238): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xa, 0xd0e0000, 0xe8, 0x100, 0x230, 0x1d8, 0x1d8, 0x230, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x6}}, @common=@unspec=@mac={{0x30}, {@random="16f9a936c886"}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x3b}, 0xffffff00, 0xff000000, 'wlan1\x00', 'veth1_to_bond\x00', {}, {}, 0x33, 0x0, 0x2}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x6, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x6, 0x0, 0x6, 0x0, 0x5], 0x0, 0x2}, {0x1, [0x0, 0x1, 0x2, 0x6, 0x8, 0x4], 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) io_submit(r5, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r6, 0x0, 0x0, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) mkdir(&(0x7f0000000340)='./file0\x00', 0x2) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$setsig(r14, 0xa, 0x12) fcntl$setown(r14, 0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0)="46423f07d10acc25f8cc28bf3cc9fbbf4ce477436c010dbb5535e483d54ff3998800968d9c0594a3496d5255151d5b736d692c73495701d140b83747df410792b884852aa3c966d409dcf59b79bd8b556dc1e5b0e7610633f7c834026aff8ca49f123af9bef9e5cddb06a64490277e9396a655737d4c207d341dd1a242115ac6bb747d454da5d4d97c5f7b830bfd1da153153aab1137c148745e4093ef6f2011ad6e82147e69ec2308659ba258ba27788727e8da9f2227fa59f04a7c3ae0ff82e7a78d97292c577945a7d47ebb739832cca21b4f940a5d7028d9117085982b4b829f", 0xe2, r0}, 0x68) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2085396d0102030109021b00010001000b0904c80201030102030905fbff"], 0x0) sendmsg$nl_route(r12, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r13, @ANYBLOB="8000260b0a0002000180c200000c00000c"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) 20.428325742s ago: executing program 3 (id=1246): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_usb_connect(0x0, 0x43, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200000d240f"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 20.331102713s ago: executing program 1 (id=1247): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x23, 0x0, 0x1) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x100000c, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) openat$incfs(r6, &(0x7f00000002c0)='.log\x00', 0x802, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @dev, 0x5}, 0x0, {[0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x400000]}}, 0x5c) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x36, 0x0, @fd=r1, 0x317, {0x0, r3}, 0x4, 0xa, 0x1, {0x0, r7, r1}}) io_uring_enter(r3, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x189000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000200)={0x48}) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x4000400) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32, @ANYRES8=r10], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r11, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) ioctl$FBIO_WAITFORVSYNC(r10, 0x40044620, 0x0) getpid() syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') 19.912253953s ago: executing program 4 (id=1248): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="246000001a005f0414f9f4100009040080000000010200020002000008001f00fdff0000", 0x24) 19.884132426s ago: executing program 5 (id=1249): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x401c5820, 0xfffffffffffeffff) 19.771132004s ago: executing program 4 (id=1250): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) r3 = io_uring_setup(0x3eaa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a3}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405668, &(0x7f0000000100)={0x0, 0x20, 0x2}) r7 = socket$inet6(0xa, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x91, 0x4) 19.770060418s ago: executing program 5 (id=1251): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'erspan0\x00', 0x0}) 19.728272409s ago: executing program 5 (id=1252): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x158, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x40}}, @common=@ipv6header={{0x28}, {0x10, 0x22}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x41}, [0xffffffff, 0xffffffff, 0xff, 0xff], 0x4e21, 0x4e21, 0x4e20, 0x4e25, 0x1000, 0x100, 0xe0e, 0x1, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth1_vlan\x00', 'team_slave_0\x00', {}, {0xff}, 0x5e, 0x7, 0x5, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0xea, 0x8a, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 19.507510253s ago: executing program 5 (id=1253): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x304f6019}) 19.297182455s ago: executing program 1 (id=1254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) 19.27523781s ago: executing program 5 (id=1255): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@local, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}}, 0x4000) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r5, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x4, 0x3}, {0xffff, 0xfff5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x4}]}, 0x38}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfc}}, 0x0) 19.160460408s ago: executing program 1 (id=1256): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4d", 0x2c}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f00000001c0)=""/153, 0x99}], 0x2}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d2c982000001ea89de2b7fb0000ee0080b8785d9600010400000000000000000000000000000000000000000000dc0600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x80]}}) 18.678375895s ago: executing program 3 (id=1257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) lseek(r3, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES16=r0], 0x38}}, 0x0) 18.60519793s ago: executing program 1 (id=1258): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="34fc00001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) 18.568384334s ago: executing program 3 (id=1259): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580006001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 18.256428732s ago: executing program 3 (id=1260): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x40, 0x10, 0x2}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000640)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000180)={0xc, r6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17.265686411s ago: executing program 1 (id=1261): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x6f4b, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x4}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x47f, 0x0, 0x2}]}) syz_open_procfs(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="680000001200050928bd7000fedbdf2521090b004e224e26fcffffff23090000000000000600000001040000040000000300000002000000", @ANYRES32=0x0, @ANYBLOB="000001000520000006000000040000001900010007141400f8"], 0x68}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x4, 0x0, {0x1c, 0x14, 0x0, 0x3, 0x7f, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e060c"], 0x9) splice(r4, 0x0, r6, 0x0, 0x8001, 0xd) 17.251130948s ago: executing program 4 (id=1262): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x80, 0x78e, 0x7, 0x40484, 0xffffffffffffffff, 0xf6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r4}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x28) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000b00000043000002"], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0xfffffffd, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x21, "cfbc6ac116946cf4a5b2ff7fffff"}}]}, 0x30}}, 0x4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, 0x0, 0x24008004) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xe0, 0x128, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x19a}, {0x1}], 0x1, 0xf87c4be628ed8e41}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) 16.524521634s ago: executing program 3 (id=1263): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) 16.384317815s ago: executing program 3 (id=1264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="13000000010203", 0x7}, {&(0x7f0000000040)="03e25f76d66d41", 0x7}], 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16.376424438s ago: executing program 5 (id=1265): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x304f6019}) 16.047923292s ago: executing program 4 (id=1266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) 16.004122367s ago: executing program 4 (id=1267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x800003fffffffffd}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r3, &(0x7f0000000000)=""/90, 0x5a) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffff92}]}, {0x18, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}]}]}}]}, 0xb0}, 0x1, 0x7a00}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)={0x0, 0x31}, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x10}, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15.884383042s ago: executing program 1 (id=1268): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_usb_connect(0x0, 0x43, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200000d240f"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 11.544383209s ago: executing program 33 (id=1219): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @rthdrdstopts={{0x18}}], 0x40}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$nci(r3, &(0x7f00000001c0)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x2, 0x1}, 0x4) (async) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffecb) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r5, 0x1c, 0x3, 0xfffffffffffffffe}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x48, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x3}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}]}, @NL80211_ATTR_TX_RATES={0x4}, @chandef_params]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x44000) 1.025108768s ago: executing program 34 (id=1265): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x304f6019}) 981.066596ms ago: executing program 35 (id=1264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="13000000010203", 0x7}, {&(0x7f0000000040)="03e25f76d66d41", 0x7}], 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 25.65641ms ago: executing program 36 (id=1268): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_usb_connect(0x0, 0x43, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200000d240f"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 0s ago: executing program 37 (id=1267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x800003fffffffffd}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r3, &(0x7f0000000000)=""/90, 0x5a) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffff92}]}, {0x18, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}]}]}}]}, 0xb0}, 0x1, 0x7a00}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)={0x0, 0x31}, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x10}, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): I: 0000200000000780 RDI: 0000000000000006 [ 371.155388][ T9560] RBP: 00007f82d1485090 R08: 0000000000000000 R09: 0000000000000000 [ 371.155398][ T9560] R10: 0000000040012100 R11: 0000000000000246 R12: 0000000000000001 [ 371.155408][ T9560] R13: 00007f82d07e6218 R14: 00007f82d07e6180 R15: 00007f82d090fa28 [ 371.155438][ T9560] [ 371.494255][ T5893] usb 1-1: config 8 has no interface number 0 [ 371.500399][ T5893] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 371.512712][ T5893] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 371.522672][ T5893] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 371.532680][ T5893] usb 1-1: config 8 interface 39 has no altsetting 0 [ 371.548015][ T5893] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 371.557088][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.565055][ T5893] usb 1-1: Product: syz [ 371.569250][ T5893] usb 1-1: Manufacturer: syz [ 371.573820][ T5893] usb 1-1: SerialNumber: syz [ 371.597183][ T5837] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 371.649076][ T5837] usb 4-1: device descriptor read/8, error -71 [ 371.887012][ T5837] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 371.908162][ T5837] usb 4-1: device descriptor read/8, error -71 [ 372.000990][ T5893] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 372.010319][ T5893] ipheth 1-1:8.39: probe with driver ipheth failed with error -22 [ 372.028030][ T5837] usb usb4-port1: unable to enumerate USB device [ 372.303474][ T9572] geneve2: entered allmulticast mode [ 372.349471][ T9574] fuse: Unknown parameter 'seclabel' [ 373.379582][ T9584] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 374.031074][ T5906] usb 1-1: USB disconnect, device number 17 [ 374.544695][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 374.603210][ T9593] geneve2: entered allmulticast mode [ 374.718173][ T9592] veth0_macvtap: left promiscuous mode [ 375.831091][ T9602] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.878025][ T9602] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 376.447105][ T9649] veth1_to_bond: entered allmulticast mode [ 376.468357][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 376.642232][ T9649] veth1_to_bond (unregistering): left allmulticast mode [ 376.716409][ T9659] FAULT_INJECTION: forcing a failure. [ 376.716409][ T9659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.811910][ T9659] CPU: 0 UID: 0 PID: 9659 Comm: syz.5.744 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.811937][ T9659] Tainted: [L]=SOFTLOCKUP [ 376.811942][ T9659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.811950][ T9659] Call Trace: [ 376.811957][ T9659] [ 376.811965][ T9659] dump_stack_lvl+0x189/0x250 [ 376.811988][ T9659] ? __pfx____ratelimit+0x10/0x10 [ 376.812006][ T9659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.812025][ T9659] ? __pfx__printk+0x10/0x10 [ 376.812046][ T9659] ? __might_fault+0xb0/0x130 [ 376.812078][ T9659] should_fail_ex+0x414/0x560 [ 376.812099][ T9659] _copy_from_user+0x2d/0xb0 [ 376.812121][ T9659] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 376.812161][ T9659] ? rcu_is_watching+0x15/0xb0 [ 376.812180][ T9659] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 376.812199][ T9659] ? trace_kmalloc+0x1f/0xb0 [ 376.812219][ T9659] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 376.812258][ T9659] ip_generic_getfrag+0x12f/0x2b0 [ 376.812283][ T9659] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 376.812315][ T9659] ? skb_put+0x11b/0x210 [ 376.812340][ T9659] __ip6_append_data+0x3974/0x3f30 [ 376.812387][ T9659] ? __pfx_raw6_getfrag+0x10/0x10 [ 376.812424][ T9659] ? __pfx___ip6_append_data+0x10/0x10 [ 376.812445][ T9659] ? __pfx_ip6_mtu+0x10/0x10 [ 376.812476][ T9659] ip6_append_data+0x1c1/0x380 [ 376.812503][ T9659] ? __pfx_raw6_getfrag+0x10/0x10 [ 376.812523][ T9659] rawv6_sendmsg+0x1286/0x1830 [ 376.812559][ T9659] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 376.812598][ T9659] ? __lock_acquire+0x6b6/0x2cf0 [ 376.812614][ T9659] ? __pfx_aa_sk_perm+0x10/0x10 [ 376.812639][ T9659] ? sock_rps_record_flow+0x19/0x410 [ 376.812658][ T9659] ? inet_sendmsg+0x2f4/0x370 [ 376.812672][ T9659] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.812699][ T9659] __sock_sendmsg+0x19c/0x270 [ 376.812720][ T9659] ____sys_sendmsg+0x505/0x820 [ 376.812749][ T9659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.812780][ T9659] ? import_iovec+0x74/0xa0 [ 376.812805][ T9659] ___sys_sendmsg+0x21f/0x2a0 [ 376.812837][ T9659] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.812866][ T9659] ? rcu_read_lock_any_held+0xb3/0x120 [ 376.812916][ T9659] ? __fget_files+0x2a/0x420 [ 376.812938][ T9659] ? __fget_files+0x3a0/0x420 [ 376.812966][ T9659] __x64_sys_sendmsg+0x19b/0x260 [ 376.812987][ T9659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.813015][ T9659] ? __pfx_ksys_write+0x10/0x10 [ 376.813031][ T9659] ? do_syscall_64+0xbe/0xf80 [ 376.813053][ T9659] do_syscall_64+0xfa/0xf80 [ 376.813069][ T9659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.813083][ T9659] ? clear_bhb_loop+0x60/0xb0 [ 376.813101][ T9659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.813115][ T9659] RIP: 0033:0x7f1c1878f749 [ 376.813129][ T9659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.813143][ T9659] RSP: 002b:00007f1c196d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.813160][ T9659] RAX: ffffffffffffffda RBX: 00007f1c189e6090 RCX: 00007f1c1878f749 [ 376.813171][ T9659] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 376.813181][ T9659] RBP: 00007f1c196d1090 R08: 0000000000000000 R09: 0000000000000000 [ 376.813191][ T9659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.813201][ T9659] R13: 00007f1c189e6128 R14: 00007f1c189e6090 R15: 00007f1c18b0fa28 [ 376.813231][ T9659] [ 376.814154][ T9649] bond0: (slave bond_slave_1): Releasing backup interface [ 377.495719][ T9673] FAULT_INJECTION: forcing a failure. [ 377.495719][ T9673] name failslab, interval 1, probability 0, space 0, times 0 [ 377.517921][ T9673] CPU: 0 UID: 0 PID: 9673 Comm: syz.3.746 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.517947][ T9673] Tainted: [L]=SOFTLOCKUP [ 377.517953][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.517963][ T9673] Call Trace: [ 377.517970][ T9673] [ 377.517977][ T9673] dump_stack_lvl+0x189/0x250 [ 377.518002][ T9673] ? __pfx____ratelimit+0x10/0x10 [ 377.518022][ T9673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.518041][ T9673] ? __pfx__printk+0x10/0x10 [ 377.518066][ T9673] ? __pfx___might_resched+0x10/0x10 [ 377.518087][ T9673] should_fail_ex+0x414/0x560 [ 377.518108][ T9673] should_failslab+0xa8/0x100 [ 377.518129][ T9673] __kmalloc_noprof+0xdf/0x800 [ 377.518152][ T9673] ? kfree+0x4d/0x660 [ 377.518169][ T9673] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 377.518197][ T9673] tomoyo_realpath_from_path+0xe3/0x5d0 [ 377.518234][ T9673] tomoyo_path2_perm+0x288/0x680 [ 377.518254][ T9673] ? tomoyo_path2_perm+0x235/0x680 [ 377.518275][ T9673] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 377.518300][ T9673] ? __asan_memset+0x22/0x50 [ 377.518366][ T9673] tomoyo_path_link+0xb7/0x100 [ 377.518383][ T9673] ? __pfx_tomoyo_path_link+0x10/0x10 [ 377.518403][ T9673] ? __pfx_filename_create+0x10/0x10 [ 377.518429][ T9673] security_path_link+0x159/0x360 [ 377.518453][ T9673] do_linkat+0x227/0x5a0 [ 377.518476][ T9673] ? __pfx_do_linkat+0x10/0x10 [ 377.518497][ T9673] ? getname_flags+0x1e5/0x540 [ 377.518520][ T9673] __x64_sys_linkat+0xd4/0xf0 [ 377.518540][ T9673] do_syscall_64+0xfa/0xf80 [ 377.518560][ T9673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.518576][ T9673] ? clear_bhb_loop+0x60/0xb0 [ 377.518597][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.518613][ T9673] RIP: 0033:0x7fcb9778f749 [ 377.518628][ T9673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.518642][ T9673] RSP: 002b:00007fcb98690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 377.518659][ T9673] RAX: ffffffffffffffda RBX: 00007fcb979e5fa0 RCX: 00007fcb9778f749 [ 377.518672][ T9673] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: 0000000000000003 [ 377.518683][ T9673] RBP: 00007fcb98690090 R08: 0000000000001400 R09: 0000000000000000 [ 377.518693][ T9673] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 377.518703][ T9673] R13: 00007fcb979e6038 R14: 00007fcb979e5fa0 R15: 00007fcb97b0fa28 [ 377.518733][ T9673] [ 377.518749][ T9673] ERROR: Out of memory at tomoyo_realpath_from_path. [ 378.027851][ T9682] syz.3.750 uses obsolete (PF_INET,SOCK_PACKET) [ 378.451558][ T9688] netlink: 32 bytes leftover after parsing attributes in process `syz.4.752'. [ 378.630483][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.639273][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.427535][ T9714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.758'. [ 379.909297][ T5906] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 380.004873][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.024686][ T9724] bridge_slave_0: left allmulticast mode [ 380.039253][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.094063][ T9724] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 380.160023][ T5906] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 380.171332][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.211861][ T5906] usb 2-1: Product: syz [ 380.236870][ T5906] usb 2-1: Manufacturer: syz [ 380.250776][ T5906] usb 2-1: SerialNumber: syz [ 380.278479][ T5906] usb 2-1: config 0 descriptor?? [ 380.554833][ T5906] usb-storage 2-1:0.0: USB Mass Storage device detected [ 380.608452][ T9735] FAULT_INJECTION: forcing a failure. [ 380.608452][ T9735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.646277][ T9735] CPU: 0 UID: 0 PID: 9735 Comm: syz.0.761 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.646305][ T9735] Tainted: [L]=SOFTLOCKUP [ 380.646310][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.646321][ T9735] Call Trace: [ 380.646328][ T9735] [ 380.646336][ T9735] dump_stack_lvl+0x189/0x250 [ 380.646361][ T9735] ? __pfx____ratelimit+0x10/0x10 [ 380.646381][ T9735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.646400][ T9735] ? __pfx__printk+0x10/0x10 [ 380.646433][ T9735] should_fail_ex+0x414/0x560 [ 380.646456][ T9735] _copy_to_user+0x31/0xb0 [ 380.646480][ T9735] simple_read_from_buffer+0xe1/0x170 [ 380.646505][ T9735] proc_fail_nth_read+0x1b3/0x220 [ 380.646525][ T9735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.646545][ T9735] ? rw_verify_area+0x2a6/0x4d0 [ 380.646576][ T9735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.646595][ T9735] vfs_read+0x200/0xa30 [ 380.646626][ T9735] ? __pfx_vfs_read+0x10/0x10 [ 380.646648][ T9735] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 380.646670][ T9735] ? aa_sk_perm+0x7ee/0x920 [ 380.646696][ T9735] ? __pfx_aa_sk_perm+0x10/0x10 [ 380.646714][ T9735] ? do_sys_openat2+0x15a/0x200 [ 380.646733][ T9735] ? do_sock_setsockopt+0x185/0x1b0 [ 380.646761][ T9735] ksys_read+0x145/0x250 [ 380.646779][ T9735] ? __pfx_ksys_read+0x10/0x10 [ 380.646797][ T9735] ? do_syscall_64+0xbe/0xf80 [ 380.646819][ T9735] do_syscall_64+0xfa/0xf80 [ 380.646839][ T9735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.646856][ T9735] ? clear_bhb_loop+0x60/0xb0 [ 380.646878][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.646891][ T9735] RIP: 0033:0x7f8f79f8e15c [ 380.646906][ T9735] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 380.646920][ T9735] RSP: 002b:00007f8f7aed1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.646938][ T9735] RAX: ffffffffffffffda RBX: 00007f8f7a1e5fa0 RCX: 00007f8f79f8e15c [ 380.646951][ T9735] RDX: 000000000000000f RSI: 00007f8f7aed10a0 RDI: 0000000000000004 [ 380.646961][ T9735] RBP: 00007f8f7aed1090 R08: 0000000000000000 R09: 0000000000000000 [ 380.646972][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.646982][ T9735] R13: 00007f8f7a1e6038 R14: 00007f8f7a1e5fa0 R15: 00007f8f7a30fa28 [ 380.647011][ T9735] [ 380.937921][ T5906] usb 2-1: USB disconnect, device number 18 [ 381.056932][ T9748] kvm: apic: phys broadcast and lowest prio [ 381.166999][ T5938] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 381.347375][ T5938] usb 6-1: Using ep0 maxpacket: 8 [ 381.372806][ T5938] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 381.405285][ T5938] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 381.433057][ T9761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.766'. [ 381.454397][ T5938] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 381.480291][ T9761] vim2m vim2m.0: vidioc_s_fmt queue busy [ 381.516973][ T5938] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.565935][ T5938] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.605839][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.697793][ T5837] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 381.843567][ T9769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.857915][ T30] audit: type=1326 audit(1764994878.942:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.0.768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f79f8f749 code=0x0 [ 381.887734][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 381.893426][ T5938] usb 6-1: GET_CAPABILITIES returned 0 [ 381.913610][ T5938] usbtmc 6-1:16.0: can't read capabilities [ 381.924403][ T5837] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 381.947705][ T5837] usb 4-1: config 0 has no interface number 0 [ 381.953845][ T5837] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.003041][ T5837] usb 4-1: config 0 interface 85 has no altsetting 0 [ 382.021569][ T5837] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 382.041004][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.063216][ T5837] usb 4-1: Product: syz [ 382.068084][ T5837] usb 4-1: Manufacturer: syz [ 382.073177][ T5837] usb 4-1: SerialNumber: syz [ 382.090992][ T5938] usb 6-1: USB disconnect, device number 2 [ 382.194263][ T9786] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 382.204183][ T5837] usb 4-1: config 0 descriptor?? [ 383.516818][ T5837] appletouch 4-1:0.85: Geyser mode initialized. [ 383.565315][ T9801] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 383.579014][ T5837] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input15 [ 383.741129][ T9805] netlink: 'syz.5.773': attribute type 6 has an invalid length. [ 383.771287][ T9760] fuse: Unknown parameter '0x0000000000000006' [ 383.792478][ T9806] netlink: 'syz.5.773': attribute type 6 has an invalid length. [ 384.146621][ T9818] FAULT_INJECTION: forcing a failure. [ 384.146621][ T9818] name failslab, interval 1, probability 0, space 0, times 0 [ 384.183601][ T9818] CPU: 1 UID: 0 PID: 9818 Comm: syz.5.776 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.183625][ T9818] Tainted: [L]=SOFTLOCKUP [ 384.183631][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.183639][ T9818] Call Trace: [ 384.183645][ T9818] [ 384.183651][ T9818] dump_stack_lvl+0x189/0x250 [ 384.183673][ T9818] ? __pfx____ratelimit+0x10/0x10 [ 384.183690][ T9818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.183705][ T9818] ? __pfx__printk+0x10/0x10 [ 384.183729][ T9818] ? __pfx___might_resched+0x10/0x10 [ 384.183743][ T9818] ? fs_reclaim_acquire+0x7d/0x100 [ 384.183763][ T9818] should_fail_ex+0x414/0x560 [ 384.183783][ T9818] should_failslab+0xa8/0x100 [ 384.183800][ T9818] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 384.183822][ T9818] ? do_kmem_cache_create+0x357/0x6f0 [ 384.183835][ T9818] ? calculate_sizes+0x13c/0x4d0 [ 384.183853][ T9818] do_kmem_cache_create+0x357/0x6f0 [ 384.183870][ T9818] __kmem_cache_create_args+0x1b1/0x310 [ 384.183892][ T9818] ieee80211_mesh_init_sdata+0x35f/0x610 [ 384.183917][ T9818] ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10 [ 384.183940][ T9818] ? lockdep_hardirqs_on+0x98/0x140 [ 384.183962][ T9818] ? __raw_spin_lock_init+0x45/0x100 [ 384.183983][ T9818] ieee80211_setup_sdata+0x80e/0xb50 [ 384.184007][ T9818] ieee80211_if_change_type+0x146/0x940 [ 384.184029][ T9818] ieee80211_change_iface+0xd5/0x510 [ 384.184056][ T9818] cfg80211_change_iface+0x6ba/0xe30 [ 384.184092][ T9818] nl80211_set_interface+0x764/0xa80 [ 384.184121][ T9818] ? __pfx_nl80211_set_interface+0x10/0x10 [ 384.184144][ T9818] ? nl80211_pre_doit+0x4fb/0x930 [ 384.184169][ T9818] genl_family_rcv_msg_doit+0x215/0x300 [ 384.184194][ T9818] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 384.184223][ T9818] ? bpf_lsm_capable+0x9/0x20 [ 384.184238][ T9818] ? security_capable+0x7e/0x2e0 [ 384.184262][ T9818] genl_rcv_msg+0x60e/0x790 [ 384.184285][ T9818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.184299][ T9818] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 384.184315][ T9818] ? __pfx_nl80211_set_interface+0x10/0x10 [ 384.184332][ T9818] ? __pfx_nl80211_post_doit+0x10/0x10 [ 384.184364][ T9818] netlink_rcv_skb+0x208/0x470 [ 384.184385][ T9818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.184403][ T9818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.184440][ T9818] ? down_read+0x274/0x2e0 [ 384.184456][ T9818] ? genl_rcv+0xd/0x40 [ 384.184473][ T9818] genl_rcv+0x28/0x40 [ 384.184487][ T9818] netlink_unicast+0x82f/0x9e0 [ 384.184514][ T9818] ? __pfx_netlink_unicast+0x10/0x10 [ 384.184535][ T9818] ? netlink_sendmsg+0x642/0xb30 [ 384.184546][ T9818] ? skb_put+0x11b/0x210 [ 384.184568][ T9818] netlink_sendmsg+0x805/0xb30 [ 384.184592][ T9818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.184609][ T9818] ? aa_sock_msg_perm+0xf1/0x1b0 [ 384.184630][ T9818] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.184649][ T9818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.184664][ T9818] __sock_sendmsg+0x21c/0x270 [ 384.184683][ T9818] ____sys_sendmsg+0x505/0x820 [ 384.184709][ T9818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.184737][ T9818] ? import_iovec+0x74/0xa0 [ 384.184760][ T9818] ___sys_sendmsg+0x21f/0x2a0 [ 384.184781][ T9818] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.184808][ T9818] ? rcu_read_lock_any_held+0xb3/0x120 [ 384.184853][ T9818] ? __fget_files+0x2a/0x420 [ 384.184870][ T9818] ? __fget_files+0x3a0/0x420 [ 384.184896][ T9818] __x64_sys_sendmsg+0x19b/0x260 [ 384.184919][ T9818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.184948][ T9818] ? __pfx_ksys_write+0x10/0x10 [ 384.184966][ T9818] ? do_syscall_64+0xbe/0xf80 [ 384.184987][ T9818] do_syscall_64+0xfa/0xf80 [ 384.185005][ T9818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.185020][ T9818] ? clear_bhb_loop+0x60/0xb0 [ 384.185038][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.185051][ T9818] RIP: 0033:0x7f1c1878f749 [ 384.185073][ T9818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.185086][ T9818] RSP: 002b:00007f1c196f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.185102][ T9818] RAX: ffffffffffffffda RBX: 00007f1c189e5fa0 RCX: 00007f1c1878f749 [ 384.185112][ T9818] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 384.185121][ T9818] RBP: 00007f1c196f2090 R08: 0000000000000000 R09: 0000000000000000 [ 384.185130][ T9818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.185138][ T9818] R13: 00007f1c189e6038 R14: 00007f1c189e5fa0 R15: 00007f1c18b0fa28 [ 384.185166][ T9818] [ 384.624933][ T9820] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 384.654303][ T9818] __kmem_cache_create_args(mesh_rmc) failed with error -22 [ 384.681613][ T9818] CPU: 0 UID: 0 PID: 9818 Comm: syz.5.776 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.681639][ T9818] Tainted: [L]=SOFTLOCKUP [ 384.681645][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.681655][ T9818] Call Trace: [ 384.681662][ T9818] [ 384.681669][ T9818] dump_stack_lvl+0x189/0x250 [ 384.681697][ T9818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.681716][ T9818] ? __pfx__printk+0x10/0x10 [ 384.681744][ T9818] ? __kmem_cache_create_args+0x1c7/0x310 [ 384.681770][ T9818] __kmem_cache_create_args+0x2bb/0x310 [ 384.681794][ T9818] ieee80211_mesh_init_sdata+0x35f/0x610 [ 384.681823][ T9818] ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10 [ 384.681847][ T9818] ? lockdep_hardirqs_on+0x98/0x140 [ 384.681870][ T9818] ? __raw_spin_lock_init+0x45/0x100 [ 384.681893][ T9818] ieee80211_setup_sdata+0x80e/0xb50 [ 384.681917][ T9818] ieee80211_if_change_type+0x146/0x940 [ 384.681938][ T9818] ieee80211_change_iface+0xd5/0x510 [ 384.681965][ T9818] cfg80211_change_iface+0x6ba/0xe30 [ 384.681994][ T9818] nl80211_set_interface+0x764/0xa80 [ 384.682023][ T9818] ? __pfx_nl80211_set_interface+0x10/0x10 [ 384.682059][ T9818] ? nl80211_pre_doit+0x4fb/0x930 [ 384.682083][ T9818] genl_family_rcv_msg_doit+0x215/0x300 [ 384.682107][ T9818] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 384.682137][ T9818] ? bpf_lsm_capable+0x9/0x20 [ 384.682154][ T9818] ? security_capable+0x7e/0x2e0 [ 384.682180][ T9818] genl_rcv_msg+0x60e/0x790 [ 384.682204][ T9818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.682222][ T9818] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 384.682239][ T9818] ? __pfx_nl80211_set_interface+0x10/0x10 [ 384.682259][ T9818] ? __pfx_nl80211_post_doit+0x10/0x10 [ 384.682290][ T9818] netlink_rcv_skb+0x208/0x470 [ 384.682314][ T9818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.682334][ T9818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.682373][ T9818] ? down_read+0x274/0x2e0 [ 384.682390][ T9818] ? genl_rcv+0xd/0x40 [ 384.682409][ T9818] genl_rcv+0x28/0x40 [ 384.682424][ T9818] netlink_unicast+0x82f/0x9e0 [ 384.682452][ T9818] ? __pfx_netlink_unicast+0x10/0x10 [ 384.682473][ T9818] ? netlink_sendmsg+0x642/0xb30 [ 384.682486][ T9818] ? skb_put+0x11b/0x210 [ 384.682507][ T9818] netlink_sendmsg+0x805/0xb30 [ 384.682530][ T9818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.682548][ T9818] ? aa_sock_msg_perm+0xf1/0x1b0 [ 384.682572][ T9818] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.682593][ T9818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.682608][ T9818] __sock_sendmsg+0x21c/0x270 [ 384.682628][ T9818] ____sys_sendmsg+0x505/0x820 [ 384.682656][ T9818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.682685][ T9818] ? import_iovec+0x74/0xa0 [ 384.682708][ T9818] ___sys_sendmsg+0x21f/0x2a0 [ 384.682732][ T9818] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.682759][ T9818] ? rcu_read_lock_any_held+0xb3/0x120 [ 384.682806][ T9818] ? __fget_files+0x2a/0x420 [ 384.682824][ T9818] ? __fget_files+0x3a0/0x420 [ 384.682852][ T9818] __x64_sys_sendmsg+0x19b/0x260 [ 384.682875][ T9818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.682906][ T9818] ? __pfx_ksys_write+0x10/0x10 [ 384.682926][ T9818] ? do_syscall_64+0xbe/0xf80 [ 384.682947][ T9818] do_syscall_64+0xfa/0xf80 [ 384.682966][ T9818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.682981][ T9818] ? clear_bhb_loop+0x60/0xb0 [ 384.683000][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.683014][ T9818] RIP: 0033:0x7f1c1878f749 [ 384.683030][ T9818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.683045][ T9818] RSP: 002b:00007f1c196f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.683072][ T9818] RAX: ffffffffffffffda RBX: 00007f1c189e5fa0 RCX: 00007f1c1878f749 [ 384.683083][ T9818] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 384.683093][ T9818] RBP: 00007f1c196f2090 R08: 0000000000000000 R09: 0000000000000000 [ 384.683102][ T9818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.683110][ T9818] R13: 00007f1c189e6038 R14: 00007f1c189e5fa0 R15: 00007f1c18b0fa28 [ 384.683138][ T9818] [ 385.422816][ T9829] fuse: Unknown parameter '0x0000000000000009' [ 385.591180][ T9837] fuse: Bad value for 'fd' [ 385.799844][ T9839] geneve2: entered allmulticast mode [ 385.865760][ T6010] usb 4-1: USB disconnect, device number 22 [ 385.967991][ T6010] appletouch 4-1:0.85: input: appletouch disconnected [ 387.111106][ T9854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.785'. [ 387.440415][ T9856] kernel read not supported for file /rmdF (pid: 9856 comm: syz.0.786) [ 387.458779][ T30] audit: type=1800 audit(1764994884.562:25): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.786" name=726D64461716BCEC dev="mqueue" ino=30294 res=0 errno=0 [ 387.724478][ T9858] netlink: 32 bytes leftover after parsing attributes in process `syz.4.787'. [ 389.567644][ T48] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 389.747582][ T48] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 389.768028][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.811051][ T9897] warning: `syz.3.799' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 389.846927][ T48] usb 1-1: Product: syz [ 389.881759][ T48] usb 1-1: Manufacturer: syz [ 389.904251][ T48] usb 1-1: SerialNumber: syz [ 389.954801][ T48] usb 1-1: config 0 descriptor?? [ 390.024851][ T9905] input: syz0 as /devices/virtual/input/input16 [ 390.254791][ T48] usb-storage 1-1:0.0: USB Mass Storage device detected [ 390.377025][ T5906] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 390.457876][ T10] usb 1-1: USB disconnect, device number 18 [ 390.547183][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 390.599237][ T5906] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 390.616694][ T5906] usb 4-1: config 8 has no interface number 0 [ 390.624800][ T5906] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 390.951139][ T5906] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 390.965334][ T5906] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 390.977601][ T5906] usb 4-1: config 8 interface 39 has no altsetting 0 [ 391.200071][ T5906] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 391.233522][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.327220][ T5906] usb 4-1: Product: syz [ 391.332896][ T5906] usb 4-1: Manufacturer: syz [ 391.478789][ T5906] usb 4-1: SerialNumber: syz [ 391.568516][ T9931] binder: BINDER_SET_CONTEXT_MGR already set [ 391.610088][ T9931] binder: 9929:9931 ioctl 4018620d 200000004a80 returned -16 [ 392.055687][ T5906] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 392.089509][ T5906] ipheth 4-1:8.39: probe with driver ipheth failed with error -22 [ 392.176569][ T9938] netlink: zone id is out of range [ 392.257626][ T9940] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 392.347827][ T9945] fuse: Unknown parameter 'seclabel' [ 392.479309][ T9949] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 392.479309][ T9949] The task syz.0.807 (9949) triggered the difference, watch for misbehavior. [ 393.409276][ T5837] usb 4-1: USB disconnect, device number 23 [ 393.455385][ T9956] netlink: 'syz.4.811': attribute type 12 has an invalid length. [ 394.397020][ T5837] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 394.716985][ T5919] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 394.720963][ T5837] usb 6-1: Using ep0 maxpacket: 16 [ 394.744155][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.757303][ T5837] usb 6-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 394.777263][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.997826][ T5837] usb 6-1: config 0 descriptor?? [ 395.047676][ T5919] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 395.139777][ T5919] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 395.169726][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.209864][ T5919] usb 1-1: Product: syz [ 395.234543][ T5919] usb 1-1: Manufacturer: syz [ 395.251262][ T5919] usb 1-1: SerialNumber: syz [ 395.288819][ T5919] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 395.355605][ T7304] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 395.421765][ T5837] betop 0003:11C0:5506.0007: hidraw0: USB HID vff.fb Device [HID 11c0:5506] on usb-dummy_hcd.5-1/input0 [ 395.454260][ T5837] betop 0003:11C0:5506.0007: no inputs found [ 395.507680][ T9989] netlink: zone id is out of range [ 395.625980][ T5919] usb 6-1: USB disconnect, device number 3 [ 395.663509][ T9987] fido_id[9987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 396.408286][ T9997] fuse: Bad value for 'fd' [ 396.467178][ T7304] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 396.483652][ T7304] ath9k_htc: Failed to initialize the device [ 396.616450][ T7304] usb 1-1: ath9k_htc: USB layer deinitialized [ 396.899242][ T5837] usb 1-1: USB disconnect, device number 19 [ 397.176974][ T6010] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 397.407299][ T6010] usb 6-1: Using ep0 maxpacket: 32 [ 397.514938][ T6010] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 397.524537][ T6010] usb 6-1: config 0 has no interface number 0 [ 397.548533][ T6010] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 397.558029][ T6010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.566032][ T6010] usb 6-1: Product: syz [ 397.570403][ T6010] usb 6-1: Manufacturer: syz [ 397.575048][ T6010] usb 6-1: SerialNumber: syz [ 397.641598][ T6010] usb 6-1: config 0 descriptor?? [ 397.658017][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 397.672524][ T6010] ftdi_sio 6-1:0.217: FTDI USB Serial Device converter detected [ 397.750824][ T6010] usb 6-1: Detected SIO [ 397.811789][ T6010] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 397.921987][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 397.945648][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.967276][ T10] usb 1-1: Product: syz [ 397.994068][ T10] usb 1-1: Manufacturer: syz [ 398.000433][ T10] usb 1-1: SerialNumber: syz [ 398.035229][ T10] usb 1-1: config 0 descriptor?? [ 398.252061][ T10] usb-storage 1-1:0.0: USB Mass Storage device detected [ 398.522359][ T10] usb 1-1: USB disconnect, device number 20 [ 398.910997][T10032] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 398.973333][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.832'. [ 399.068984][T10034] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 399.862237][ T6542] usb 6-1: USB disconnect, device number 4 [ 399.897731][ T6542] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 399.971112][ T6542] ftdi_sio 6-1:0.217: device disconnected [ 399.976974][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 400.004110][T10046] fuse: Unknown parameter '0x0000000000000009' [ 400.186992][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 400.193821][ T10] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 400.202169][ T10] usb 1-1: config 0 has no interface number 0 [ 400.229329][ T10] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 400.249309][ T10] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 400.287244][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 400.307123][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.338127][ T10] usb 1-1: Product: syz [ 400.351885][ T10] usb 1-1: Manufacturer: syz [ 400.377917][ T7304] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 400.391764][ T10] usb 1-1: SerialNumber: syz [ 400.427747][ T10] usb 1-1: config 0 descriptor?? [ 400.502387][T10052] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 400.547058][ T7304] usb 4-1: Using ep0 maxpacket: 16 [ 400.567761][ T7304] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.591666][ T7304] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 400.617613][ T7304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.689535][ T7304] usb 4-1: config 0 descriptor?? [ 400.931512][ T7304] usbhid 4-1:0.0: can't add hid device: -71 [ 400.942882][ T7304] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 400.967081][ T7304] usb 4-1: USB disconnect, device number 24 [ 400.980470][ T10] radio-si470x 1-1:0.35: this is not a si470x device. [ 401.017566][ T10] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 401.557331][ T7304] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 401.697091][ T7304] usb 5-1: device descriptor read/64, error -71 [ 401.715124][T10067] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 401.939739][ T7304] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 402.416978][ T7304] usb 5-1: device descriptor read/64, error -71 [ 402.469615][ T48] usb 1-1: USB disconnect, device number 21 [ 402.547567][ T7304] usb usb5-port1: attempt power cycle [ 402.967033][ T7304] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 402.989237][ T7304] usb 5-1: device descriptor read/8, error -71 [ 403.008406][ T5926] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 403.166979][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 403.174386][ T5926] usb 6-1: config 0 has an invalid interface number: 108 but max is 0 [ 403.183497][ T5926] usb 6-1: config 0 has no interface number 0 [ 403.194751][ T5926] usb 6-1: config 0 interface 108 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 403.207089][ T5926] usb 6-1: config 0 interface 108 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 403.231944][ T5926] usb 6-1: config 0 interface 108 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 403.243521][ T7304] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 403.251470][ T5926] usb 6-1: config 0 interface 108 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 403.274900][ T5926] usb 6-1: New USB device found, idVendor=0707, idProduct=0200, bcdDevice=77.06 [ 403.291268][ T7304] usb 5-1: device descriptor read/8, error -71 [ 403.298803][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.315253][ T5926] usb 6-1: config 0 descriptor?? [ 403.322192][T10077] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 403.408838][ T7304] usb usb5-port1: unable to enumerate USB device [ 403.477253][ T5837] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 403.670566][ T5837] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 403.683373][ T5837] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 403.694083][ T5837] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 403.706289][ T5837] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 403.716465][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.064961][ T5837] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 404.095629][ T5926] usb 6-1: string descriptor 0 read error: -71 [ 404.156331][T10104] kernel read not supported for file /rmdF (pid: 10104 comm: syz.5.852) [ 404.170918][ T30] audit: type=1800 audit(1764994901.272:26): pid=10104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.852" name=726D64461716BCEC dev="mqueue" ino=32223 res=0 errno=0 [ 404.206972][ T6542] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 404.223545][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.253075][ T5837] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 404.270949][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.280284][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.292029][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.301116][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.364537][ T5926] pegasus 6-1:0.108: probe with driver pegasus failed with error -71 [ 404.391866][ T5926] usb 6-1: USB disconnect, device number 5 [ 404.656092][ T6542] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 404.665765][ T6542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.675021][ T6542] usb 2-1: Product: syz [ 404.680526][ T6542] usb 2-1: Manufacturer: syz [ 404.685186][ T6542] usb 2-1: SerialNumber: syz [ 404.720399][ T5837] usb 4-1: USB disconnect, device number 25 [ 404.852358][ T6542] usb 2-1: config 0 descriptor?? [ 405.124068][ T6542] usb-storage 2-1:0.0: USB Mass Storage device detected [ 405.327148][ T6542] usb 2-1: USB disconnect, device number 19 [ 405.859427][ T6542] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 406.047046][ T6542] usb 1-1: Using ep0 maxpacket: 32 [ 406.062662][ T6542] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 406.145663][ T6542] usb 1-1: config 0 has no interface number 0 [ 406.157407][ T6542] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 406.166513][ T6542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.194854][ T6542] usb 1-1: Product: syz [ 406.199545][T10130] Cannot find add_set index 0 as target [ 406.206334][ T6542] usb 1-1: Manufacturer: syz [ 406.212015][T10130] netlink: zone id is out of range [ 406.218095][ T6542] usb 1-1: SerialNumber: syz [ 406.240472][ T6542] usb 1-1: config 0 descriptor?? [ 406.249392][T10128] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 406.283015][ T6542] smsc95xx v2.0.0 [ 406.599724][T10138] input: syz1 as /devices/virtual/input/input18 [ 406.818973][ T6542] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 406.841084][ T6542] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 407.128681][ T5837] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 407.330664][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 407.337975][ T5837] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 407.346191][ T5837] usb 4-1: config 8 has no interface number 0 [ 407.352495][ T5837] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 407.378266][ T5837] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 407.427797][ T5837] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 407.448764][ T5837] usb 4-1: config 8 interface 39 has no altsetting 0 [ 407.463037][ T5837] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 407.477339][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.502941][ T5837] usb 4-1: Product: syz [ 407.517024][ T5837] usb 4-1: Manufacturer: syz [ 407.531444][ T5837] usb 4-1: SerialNumber: syz [ 407.892919][ T6542] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 407.904509][ T6542] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 407.948982][ T6542] usb 1-1: USB disconnect, device number 22 [ 408.016378][ T5837] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 408.055841][ T5837] ipheth 4-1:8.39: probe with driver ipheth failed with error -22 [ 408.276311][T10162] fuse: Unknown parameter 'seclabel' [ 408.416977][ T5919] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 408.460936][T10169] Cannot find add_set index 0 as target [ 408.479716][T10169] netlink: zone id is out of range [ 408.588653][ T5919] usb 2-1: config 0 has an invalid interface number: 190 but max is 0 [ 408.600271][ T5919] usb 2-1: config 0 has no interface number 0 [ 408.634627][ T5919] usb 2-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=71.eb [ 408.663019][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.689911][ T5919] usb 2-1: Product: syz [ 408.712804][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.873'. [ 408.714328][ T5919] usb 2-1: Manufacturer: syz [ 408.743160][ T5919] usb 2-1: SerialNumber: syz [ 408.746292][T10179] kernel read not supported for file /rmdF (pid: 10179 comm: syz.4.875) [ 408.770233][ T30] audit: type=1800 audit(1764994905.872:27): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.875" name=726D64461716BCEC dev="mqueue" ino=32361 res=0 errno=0 [ 408.791047][ T5919] usb 2-1: config 0 descriptor?? [ 408.810902][ T5919] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.190/input/input19 [ 409.013372][ T30] audit: type=1326 audit(1764994906.112:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82d052b829 code=0x7ffc0000 [ 409.028426][T10185] capability: warning: `syz.0.878' uses deprecated v2 capabilities in a way that may be insecure [ 409.065432][ T30] audit: type=1326 audit(1764994906.112:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82d052b829 code=0x7ffc0000 [ 409.127616][ T30] audit: type=1326 audit(1764994906.112:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d058f749 code=0x7ffc0000 [ 409.372060][ T30] audit: type=1326 audit(1764994906.112:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d058f749 code=0x7ffc0000 [ 409.464407][ T30] audit: type=1326 audit(1764994906.112:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82d052b829 code=0x7ffc0000 [ 409.564238][ T30] audit: type=1326 audit(1764994906.112:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82d052b829 code=0x7ffc0000 [ 409.620984][ T30] audit: type=1326 audit(1764994906.112:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82d052b829 code=0x7ffc0000 [ 409.769356][ T30] audit: type=1326 audit(1764994906.112:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82d052b829 code=0x7ffc0000 [ 409.983063][ T5837] usb 4-1: USB disconnect, device number 26 [ 410.042788][ T30] audit: type=1326 audit(1764994906.112:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82d052b829 code=0x7ffc0000 [ 410.127140][ T30] audit: type=1326 audit(1764994906.112:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d058f749 code=0x7ffc0000 [ 410.199187][ T30] audit: type=1326 audit(1764994906.112:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d058f749 code=0x7ffc0000 [ 410.292482][ T30] audit: type=1326 audit(1764994906.112:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82d052b829 code=0x7ffc0000 [ 410.376952][ T30] audit: type=1326 audit(1764994906.112:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.1.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d058f749 code=0x7ffc0000 [ 410.950746][ T5188] bcm5974 2-1:0.190: could not read from device [ 411.022527][ T5919] usb 2-1: USB disconnect, device number 20 [ 411.217257][ T6010] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 411.437141][ T6010] usb 1-1: Using ep0 maxpacket: 16 [ 411.448501][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.496993][ T6010] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 411.567514][ T6010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.617327][ T6010] usb 1-1: config 0 descriptor?? [ 412.052089][ T6010] usbhid 1-1:0.0: can't add hid device: -71 [ 412.069196][ T6010] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 412.097445][ T5837] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 412.107013][ T5919] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 412.113749][ T6010] usb 1-1: USB disconnect, device number 23 [ 412.566977][ T5837] usb 6-1: Using ep0 maxpacket: 8 [ 412.567021][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 412.574531][ T5837] usb 6-1: unable to get BOS descriptor or descriptor too short [ 412.586271][ T5837] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 412.595840][ T5837] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 412.607143][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 412.607249][ T5837] usb 6-1: config 4 has no interface number 0 [ 412.613892][ T5919] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 412.643492][ T5837] usb 6-1: string descriptor 0 read error: -22 [ 412.657110][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.668063][ T5837] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 412.677914][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.680843][ T5919] usb 4-1: config 0 descriptor?? [ 412.696979][ T5926] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 412.699751][ T5837] uvcvideo 6-1:4.147: Found multiple Units with ID 6 [ 412.727108][ T5837] uvcvideo 6-1:4.147: Found UVC 0.02 device (04f2:b746) [ 412.735431][ T5837] uvcvideo 6-1:4.147: No valid video chain found. [ 412.885187][ T5926] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 412.894774][ T5926] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 412.957532][ T5926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 412.966537][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 413.034582][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 413.081274][ T5926] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 413.104741][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 413.130706][T10220] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 413.137028][ T5926] usb 2-1: Product: syz [ 413.147343][ T5926] usb 2-1: Manufacturer: syz [ 413.150778][T10220] team0: Device ipvlan2 is already an upper device of the team interface [ 413.194651][ T5919] wacom 0003:056A:00BA.0008: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 413.263995][ T5919] wacom 0003:056A:00BA.0008: hidraw0: USB HID v0.02 Device [HID 056a:00ba] on usb-dummy_hcd.3-1/input0 [ 413.290617][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 413.305605][ T5919] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BA.0008/input/input20 [ 413.323875][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 413.345331][ T5926] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 413.360611][ T5926] cdc_wdm 2-1:1.0: Unknown control protocol [ 413.559200][ T6010] usb 6-1: USB disconnect, device number 6 [ 413.837952][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 414.056159][T10242] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 414.439929][T10247] FAULT_INJECTION: forcing a failure. [ 414.439929][T10247] name failslab, interval 1, probability 0, space 0, times 0 [ 414.453486][T10247] CPU: 0 UID: 0 PID: 10247 Comm: syz.5.897 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.453514][T10247] Tainted: [L]=SOFTLOCKUP [ 414.453520][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.453530][T10247] Call Trace: [ 414.453538][T10247] [ 414.453546][T10247] dump_stack_lvl+0x189/0x250 [ 414.453571][T10247] ? __pfx____ratelimit+0x10/0x10 [ 414.453590][T10247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.453609][T10247] ? __pfx__printk+0x10/0x10 [ 414.453636][T10247] ? __pfx___might_resched+0x10/0x10 [ 414.453658][T10247] should_fail_ex+0x414/0x560 [ 414.453681][T10247] should_failslab+0xa8/0x100 [ 414.453700][T10247] __kvmalloc_node_noprof+0x175/0x920 [ 414.453720][T10247] ? io_alloc_cache_init+0x42/0x140 [ 414.453744][T10247] io_alloc_cache_init+0x42/0x140 [ 414.453766][T10247] io_ring_ctx_alloc+0x4ce/0xc10 [ 414.453794][T10247] io_uring_create+0x50/0x940 [ 414.453822][T10247] __se_sys_io_uring_setup+0x235/0x240 [ 414.453848][T10247] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 414.453884][T10247] ? __pfx_ksys_write+0x10/0x10 [ 414.453905][T10247] ? do_syscall_64+0xbe/0xf80 [ 414.453928][T10247] do_syscall_64+0xfa/0xf80 [ 414.453949][T10247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.453966][T10247] ? clear_bhb_loop+0x60/0xb0 [ 414.453986][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.454010][T10247] RIP: 0033:0x7f1c1878f749 [ 414.454026][T10247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.454040][T10247] RSP: 002b:00007f1c196f2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 414.454058][T10247] RAX: ffffffffffffffda RBX: 00007f1c189e5fa0 RCX: 00007f1c1878f749 [ 414.454071][T10247] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000003c92 [ 414.454082][T10247] RBP: 00007f1c196f2090 R08: 0000000000000000 R09: 0000000000000000 [ 414.454092][T10247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.454102][T10247] R13: 00007f1c189e6038 R14: 00007f1c189e5fa0 R15: 00007f1c18b0fa28 [ 414.454129][T10247] [ 415.014154][ T6542] usb 4-1: USB disconnect, device number 27 [ 415.944807][ T5926] usb 2-1: USB disconnect, device number 21 [ 416.081823][T10259] fuse: Bad value for 'rootmode' [ 416.466721][T10258] netlink: 'syz.3.898': attribute type 12 has an invalid length. [ 416.754383][T10276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.905'. [ 417.481430][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 417.866974][ T6542] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 418.106953][ T5837] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 418.128557][ T6542] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 418.139600][ T6542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.165308][ T6542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.192652][ T6542] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 418.225695][ T6542] usb 4-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 418.250284][ T6542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.267361][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 418.279414][ T5837] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 418.290761][ T5837] usb 5-1: config 8 has no interface number 0 [ 418.291366][ T6542] usb 4-1: config 0 descriptor?? [ 418.306091][ T5837] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 418.336345][ T5837] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 418.347250][ T5837] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 418.357903][ T5837] usb 5-1: config 8 interface 39 has no altsetting 0 [ 418.372583][ T5837] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 418.385717][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.395711][ T5837] usb 5-1: Product: syz [ 418.485463][ T5837] usb 5-1: Manufacturer: syz [ 418.493762][ T5837] usb 5-1: SerialNumber: syz [ 418.764205][ T6542] wacom 0003:056A:0015.0009: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 418.787214][ T6542] wacom 0003:056A:0015.0009: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.3-1/input0 [ 418.817803][ T6542] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0015.0009/input/input23 [ 418.927880][ T5837] ipheth 5-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 418.937568][ T5837] ipheth 5-1:8.39: probe with driver ipheth failed with error -22 [ 419.059156][ T10] usb 4-1: USB disconnect, device number 28 [ 419.202273][T10296] fido_id[10296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 419.338236][ T5837] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 419.501233][ T5837] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 419.519400][T10305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.914'. [ 419.530278][T10305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.914'. [ 419.580148][ T5837] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 419.647986][ T5837] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 419.683060][ T5837] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 419.712021][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.751699][ T5837] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 419.925114][ T5838] udevd[5838]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 419.975109][ T5838] udevd[5838]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 419.993545][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.010004][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.023529][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.033789][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.072069][ T5837] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 420.211015][T10318] loop2: detected capacity change from 0 to 7 [ 420.224652][ T8790] Dev loop2: unable to read RDB block 7 [ 420.231161][ T8790] loop2: AHDI p1 p2 p3 [ 420.235763][ T8790] loop2: partition table partially beyond EOD, truncated [ 420.273063][ T8790] loop2: p1 start 1601398130 is beyond EOD, truncated [ 420.283213][ T8790] loop2: p2 start 1702059890 is beyond EOD, truncated [ 420.297143][T10318] Dev loop2: unable to read RDB block 7 [ 420.302849][T10318] loop2: AHDI p1 p2 p3 [ 420.307560][T10318] loop2: partition table partially beyond EOD, truncated [ 420.326923][T10318] loop2: p1 start 1601398130 is beyond EOD, truncated [ 420.338146][T10318] loop2: p2 start 1702059890 is beyond EOD, truncated [ 420.354228][T10321] Cannot find add_set index 0 as target [ 420.370758][T10321] netlink: zone id is out of range [ 420.509263][T10323] netlink: 32 bytes leftover after parsing attributes in process `syz.5.921'. [ 420.540032][T10323] netlink: 32 bytes leftover after parsing attributes in process `syz.5.921'. [ 420.763380][T10327] fuse: Bad value for 'fd' [ 420.921554][ T5837] usb 5-1: USB disconnect, device number 28 [ 422.419355][ T10] usb 1-1: USB disconnect, device number 24 [ 422.718565][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 422.764074][T10357] Cannot find add_set index 0 as target [ 422.781318][T10357] netlink: zone id is out of range [ 422.800322][T10359] fuse: Unknown parameter 'f' [ 422.870493][T10362] loop2: detected capacity change from 0 to 7 [ 422.878989][ T5838] Dev loop2: unable to read RDB block 7 [ 422.884604][ T5838] loop2: unable to read partition table [ 422.897196][ T5838] loop2: partition table beyond EOD, truncated [ 422.930977][T10362] Dev loop2: unable to read RDB block 7 [ 422.937370][T10362] loop2: unable to read partition table [ 423.012857][T10362] loop2: partition table beyond EOD, truncated [ 423.043960][T10362] loop_reread_partitions: partition scan of loop2 (被x, ) failed (rc=-5) [ 423.065002][ T5203] Dev loop2: unable to read RDB block 7 [ 423.071559][ T5203] loop2: unable to read partition table [ 423.099892][ T5203] loop2: partition table beyond EOD, truncated [ 423.267004][ T7304] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 423.325034][T10371] binder: BINDER_SET_CONTEXT_MGR already set [ 423.331182][T10371] binder: 10370:10371 ioctl 4018620d 200000004a80 returned -16 [ 423.428007][ T7304] usb 1-1: Using ep0 maxpacket: 16 [ 423.439608][ T7304] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 423.453430][ T7304] usb 1-1: config 8 has no interface number 0 [ 423.466974][ T7304] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 423.511092][ T7304] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 423.544243][ T7304] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 423.554663][T10371] binder: 10370:10371 ioctl c0306201 200000000180 returned -14 [ 423.579124][ T7304] usb 1-1: config 8 interface 39 has no altsetting 0 [ 423.588919][ T5837] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 423.612678][ T7304] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 423.621785][ T7304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.646965][ T7304] usb 1-1: Product: syz [ 423.651176][ T7304] usb 1-1: Manufacturer: syz [ 423.655746][ T7304] usb 1-1: SerialNumber: syz [ 423.763030][ T5837] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 47, changing to 4 [ 423.777999][ T5837] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 42203, setting to 1023 [ 423.805412][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 423.897281][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 423.913548][ T5837] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 423.935275][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 423.977778][ T5837] usb 4-1: Product: syz [ 424.023631][T10385] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 424.037180][ T5837] usb 4-1: Manufacturer: syz [ 424.159405][ T5837] usb 4-1: SerialNumber: syz [ 424.166575][ T5837] usb 4-1: config 0 descriptor?? [ 424.176465][ T7304] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 424.181171][ T5837] usb 4-1: selecting invalid altsetting 0 [ 424.255822][ T7304] ipheth 1-1:8.39: probe with driver ipheth failed with error -22 [ 424.259600][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 424.321951][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 424.377369][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 424.613613][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 424.643502][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.692337][ T48] usb 4-1: USB disconnect, device number 29 [ 424.693879][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 424.881816][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.892394][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.907167][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.917793][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.937949][T10373] usb 4-1: cannot submit urb 0, error -19: no device [ 425.222490][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 425.241439][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 425.702654][ T48] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 425.790130][ T10] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 425.856979][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 425.872312][ T48] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 425.881732][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.915508][ T48] usb 4-1: Product: syz [ 425.923177][ T48] usb 4-1: Manufacturer: syz [ 425.931753][ T48] usb 4-1: SerialNumber: syz [ 425.948581][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 425.959595][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 425.975855][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.976364][ T48] usb 4-1: config 0 descriptor?? [ 426.041216][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 426.070055][ T5837] usb 1-1: USB disconnect, device number 25 [ 426.099557][ T10] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 426.166398][ T48] gspca_main: sq930x-2.14.0 probing 2770:930c [ 426.209416][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.288123][ T10] usb 6-1: config 0 descriptor?? [ 426.536632][ T5837] usb 2-1: USB disconnect, device number 22 [ 426.903659][T10416] Failed to get privilege flags for destination (handle=0x2:0x0) [ 427.410435][ T48] gspca_sq930x: ucbus_write failed -110 [ 427.862959][ T48] gspca_sq930x: Sensor ov9630 not yet treated [ 427.869601][ T48] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 427.890322][ T48] usb 4-1: USB disconnect, device number 30 [ 428.053269][T10429] input: syz1 as /devices/virtual/input/input26 [ 428.917932][ T48] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 429.186266][ T48] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 429.217103][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.254780][ T48] usb 4-1: Product: syz [ 429.422658][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 429.434454][ T48] usb 4-1: Manufacturer: syz [ 429.434531][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 429.447985][ T48] usb 4-1: SerialNumber: syz [ 429.458973][ T48] usb 4-1: config 0 descriptor?? [ 429.559491][ T10] usb 6-1: USB disconnect, device number 7 [ 429.666445][ T48] usb-storage 4-1:0.0: USB Mass Storage device detected [ 429.892652][ T48] usb 4-1: USB disconnect, device number 31 [ 429.937266][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 429.982289][T10448] nftables ruleset with unbound chain [ 430.107014][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 430.114359][ T10] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 430.147525][ T10] usb 6-1: config 8 has no interface number 0 [ 430.178452][ T10] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 430.199554][ T10] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 430.217228][ T10] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 430.228040][ T10] usb 6-1: config 8 interface 39 has no altsetting 0 [ 430.247514][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 430.256977][ T48] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 430.257125][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.279667][ T10] usb 6-1: Product: syz [ 430.283891][ T10] usb 6-1: Manufacturer: syz [ 430.288745][ T10] usb 6-1: SerialNumber: syz [ 430.488721][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 430.501757][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.526623][ T48] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 430.535965][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.567559][ T48] usb 5-1: config 0 descriptor?? [ 430.607257][ T5906] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 430.700419][ T10] ipheth 6-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 430.722232][ T10] ipheth 6-1:8.39: probe with driver ipheth failed with error -22 [ 430.770771][ T5906] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.794468][ T5906] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 430.815316][ T5906] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 430.838102][ T5906] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.856678][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.891737][ T5906] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 430.998105][ T48] betop 0003:11C0:5506.000A: hidraw0: USB HID vff.fb Device [HID 11c0:5506] on usb-dummy_hcd.4-1/input0 [ 431.022113][ T48] betop 0003:11C0:5506.000A: no inputs found [ 431.085716][ T5906] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 431.107494][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.238889][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.295257][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.304138][ T5906] usb 5-1: USB disconnect, device number 29 [ 431.314397][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.664968][ T5906] usb 6-1: USB disconnect, device number 8 [ 434.099218][ T48] usb 1-1: USB disconnect, device number 26 [ 434.137421][T10501] netlink: 'syz.5.966': attribute type 12 has an invalid length. [ 434.317248][T10505] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:21 [ 434.867188][ T6010] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 435.027225][ T6010] usb 5-1: Using ep0 maxpacket: 32 [ 435.052356][ T6010] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 435.070032][ T6010] usb 5-1: config 0 has no interface number 0 [ 435.130377][ T6010] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 435.158298][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.166321][ T6010] usb 5-1: Product: syz [ 435.214701][ T6010] usb 5-1: Manufacturer: syz [ 435.226283][ T6010] usb 5-1: SerialNumber: syz [ 435.244317][ T6010] usb 5-1: config 0 descriptor?? [ 435.383809][ T6010] ftdi_sio 5-1:0.217: FTDI USB Serial Device converter detected [ 435.393607][ T6010] usb 5-1: Detected SIO [ 435.402913][ T6010] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 436.079728][T10538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.978'. [ 436.097301][T10538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.978'. [ 436.246301][ T48] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 436.547313][ T6010] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 436.548735][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.864065][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.907373][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 436.920685][ T48] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.944446][ T6010] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 436.965988][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.004238][ T48] usb 2-1: config 0 descriptor?? [ 437.042019][ T6010] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 437.077947][ T6010] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 437.111078][ T6010] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 437.145231][ T6010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.216541][ T6010] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.364919][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.407721][ T6010] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 437.450295][T10542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.465191][T10542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.478022][T10542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.488372][T10542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.510228][ T48] usbhid 2-1:0.0: can't add hid device: -71 [ 437.521796][ T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 437.543894][ T48] usb 2-1: USB disconnect, device number 23 [ 437.794822][ T48] usb 5-1: USB disconnect, device number 30 [ 437.802730][ T48] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 437.833029][ T48] ftdi_sio 5-1:0.217: device disconnected [ 439.542172][ T5919] usb 4-1: USB disconnect, device number 32 [ 439.988523][T10586] fuse: Bad value for 'fd' [ 440.127400][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.145309][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.176970][ T5919] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 441.337248][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 441.356603][ T5919] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 441.357071][ T5906] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 441.372426][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 441.394069][ T5919] usb 6-1: Product: syz [ 441.412678][ T5919] usb 6-1: Manufacturer: syz [ 441.459843][ T5919] usb 6-1: SerialNumber: syz [ 441.505718][ T5919] usb 6-1: config 0 descriptor?? [ 441.563341][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 441.581996][ T5906] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 441.594226][ T5906] usb 1-1: config 0 has no interface number 0 [ 441.660305][ T5906] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 441.670493][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.683036][T10616] fuse: Bad value for 'fd' [ 441.687629][ T5837] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 441.716926][ T5906] usb 1-1: Product: syz [ 441.746435][ T5906] usb 1-1: Manufacturer: syz [ 441.749054][ T5919] usb 6-1: USB disconnect, device number 9 [ 441.754221][ T5906] usb 1-1: SerialNumber: syz [ 441.781521][ T5906] usb 1-1: config 0 descriptor?? [ 441.825122][ T5906] ftdi_sio 1-1:0.217: FTDI USB Serial Device converter detected [ 441.843934][ T5837] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 441.853282][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.861917][ T5906] usb 1-1: Detected SIO [ 441.867141][ T5837] usb 4-1: Product: syz [ 441.872538][ T5837] usb 4-1: Manufacturer: syz [ 442.042871][ T5906] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 442.144594][ T5837] usb 4-1: SerialNumber: syz [ 442.172817][ T5837] usb 4-1: config 0 descriptor?? [ 442.467216][ T5837] usb-storage 4-1:0.0: USB Mass Storage device detected [ 442.774541][T10627] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 443.437531][ T5837] usb 4-1: USB disconnect, device number 33 [ 443.721986][T10634] Cannot find add_set index 0 as target [ 443.728765][T10634] netlink: zone id is out of range [ 444.058528][T10640] netlink: 'syz.5.1008': attribute type 23 has an invalid length. [ 444.198400][ T5837] usb 1-1: USB disconnect, device number 27 [ 444.212377][ T5837] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 444.248211][ T5837] ftdi_sio 1-1:0.217: device disconnected [ 444.343707][T10649] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 444.445629][T10655] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1016'. [ 444.464561][T10655] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1016'. [ 444.515603][T10657] Cannot find del_set index 286 as target [ 444.554495][T10657] netlink: zone id is out of range [ 444.657150][ T5837] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 445.031366][ T5837] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 445.087103][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.149433][T10679] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 445.333811][ T5837] usb 4-1: Product: syz [ 445.350371][ T5837] usb 4-1: Manufacturer: syz [ 445.386067][ T5837] usb 4-1: SerialNumber: syz [ 445.463344][ T5837] usb 4-1: config 0 descriptor?? [ 445.607261][ T5906] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 445.678258][ T5837] usb-storage 4-1:0.0: USB Mass Storage device detected [ 445.759382][ T5906] usb 2-1: device descriptor read/64, error -71 [ 445.883594][ T5837] usb 4-1: USB disconnect, device number 34 [ 446.017082][ T5906] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 446.157135][ T5906] usb 2-1: device descriptor read/64, error -71 [ 446.177119][ T6542] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 446.267538][ T5906] usb usb2-port1: attempt power cycle [ 446.356698][ T6542] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 446.371971][ T6542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.388214][ T6542] usb 5-1: Product: syz [ 446.392526][ T6542] usb 5-1: Manufacturer: syz [ 446.398958][ T6542] usb 5-1: SerialNumber: syz [ 446.405524][T10711] loop2: detected capacity change from 0 to 7 [ 446.414308][ T8790] Dev loop2: unable to read RDB block 7 [ 446.421304][ T8790] loop2: unable to read partition table [ 446.422161][ T6542] usb 5-1: config 0 descriptor?? [ 446.427371][ T8790] loop2: partition table beyond EOD, truncated [ 446.449696][T10711] Dev loop2: unable to read RDB block 7 [ 446.461904][T10711] loop2: unable to read partition table [ 446.499123][T10715] fuse: Bad value for 'fd' [ 446.642364][T10711] loop2: partition table beyond EOD, truncated [ 446.655319][T10711] loop_reread_partitions: partition scan of loop2 (被x, ) failed (rc=-5) [ 446.714355][ T6542] usb-storage 5-1:0.0: USB Mass Storage device detected [ 446.717056][ T5906] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 446.788494][ T5906] usb 2-1: device descriptor read/8, error -71 [ 447.081754][ T6542] usb 5-1: USB disconnect, device number 31 [ 447.137446][ T5906] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 447.167417][ T5906] usb 2-1: device descriptor read/8, error -71 [ 447.278398][ T5906] usb usb2-port1: unable to enumerate USB device [ 447.517725][T10734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.590436][ T30] kauditd_printk_skb: 815 callbacks suppressed [ 447.590454][ T30] audit: type=1326 audit(1764994944.692:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.5.1044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c1878f749 code=0x0 [ 447.907006][ T5906] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 448.058627][ T5906] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 448.071268][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 448.083642][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.093990][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 448.108109][ T5906] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 448.117303][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.163244][ T5906] usb 5-1: config 0 descriptor?? [ 448.207064][ T5837] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 448.318711][T10749] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠rXY (pid: 10749 comm: syz.1.1050) [ 448.372868][ T5837] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 448.390374][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.400323][ T30] audit: type=1800 audit(1764994945.482:857): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1050" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0727F185805599819 dev="mqueue" ino=35580 res=0 errno=0 [ 448.433911][ T5837] usb 1-1: Product: syz [ 448.438333][ T5837] usb 1-1: Manufacturer: syz [ 448.443019][ T5837] usb 1-1: SerialNumber: syz [ 448.449561][ T5837] usb 1-1: config 0 descriptor?? [ 448.508533][T10749] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 448.658662][ T5837] usb-storage 1-1:0.0: USB Mass Storage device detected [ 448.887881][T10756] netlink: 'syz.3.1049': attribute type 12 has an invalid length. [ 448.907604][ T5837] usb 1-1: USB disconnect, device number 28 [ 449.012586][T10758] Failed to get privilege flags for destination (handle=0x2:0x0) [ 449.847671][T10776] fuse: Bad value for 'fd' [ 449.941107][T10780] vivid-000: disconnect [ 449.948664][T10780] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1054'. [ 449.978985][T10773] vivid-000: reconnect [ 450.113530][T10785] netlink: 'syz.1.1057': attribute type 12 has an invalid length. [ 450.983389][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 450.997158][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 451.048867][ T5906] usb 5-1: USB disconnect, device number 32 [ 451.654336][T10800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.667106][ T30] audit: type=1326 audit(1764994948.742:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10799 comm="syz.5.1061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c1878f749 code=0x0 [ 452.231042][T10814] FAULT_INJECTION: forcing a failure. [ 452.231042][T10814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.345171][T10814] CPU: 0 UID: 0 PID: 10814 Comm: syz.1.1064 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.345191][T10814] Tainted: [L]=SOFTLOCKUP [ 452.345194][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 452.345201][T10814] Call Trace: [ 452.345206][T10814] [ 452.345211][T10814] dump_stack_lvl+0x189/0x250 [ 452.345228][T10814] ? __pfx____ratelimit+0x10/0x10 [ 452.345241][T10814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.345252][T10814] ? __pfx__printk+0x10/0x10 [ 452.345267][T10814] ? fs_reclaim_acquire+0x7d/0x100 [ 452.345281][T10814] should_fail_ex+0x414/0x560 [ 452.345295][T10814] prepare_alloc_pages+0x22b/0x650 [ 452.345309][T10814] __alloc_frozen_pages_noprof+0x123/0x370 [ 452.345322][T10814] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 452.345345][T10814] alloc_pages_mpol+0x232/0x4a0 [ 452.345363][T10814] alloc_pages_noprof+0xa9/0x190 [ 452.345375][T10814] __pmd_alloc+0x3a/0x5d0 [ 452.345392][T10814] handle_mm_fault+0xe51/0x32b0 [ 452.345404][T10814] ? mt_find+0x15c/0x5e0 [ 452.345429][T10814] ? handle_mm_fault+0xdb/0x32b0 [ 452.345446][T10814] ? __pfx_handle_mm_fault+0x10/0x10 [ 452.345466][T10814] ? __pfx_find_vma+0x10/0x10 [ 452.345479][T10814] ? vma_is_secretmem+0xd/0x50 [ 452.345492][T10814] __get_user_pages+0x1650/0x29f0 [ 452.345521][T10814] populate_vma_page_range+0x29f/0x3a0 [ 452.345534][T10814] ? __pfx_populate_vma_page_range+0x10/0x10 [ 452.345547][T10814] ? down_read+0x274/0x2e0 [ 452.345559][T10814] ? __mm_populate+0x160/0x380 [ 452.345571][T10814] __mm_populate+0x24c/0x380 [ 452.345583][T10814] ? __pfx___mm_populate+0x10/0x10 [ 452.345600][T10814] vm_mmap_pgoff+0x387/0x4d0 [ 452.345615][T10814] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 452.345624][T10814] ? ksys_write+0x22a/0x250 [ 452.345634][T10814] ? __pfx_ksys_write+0x10/0x10 [ 452.345643][T10814] ? ksys_mmap_pgoff+0xf4/0x760 [ 452.345656][T10814] ? __x64_sys_mmap+0x7f/0x140 [ 452.345668][T10814] do_syscall_64+0xfa/0xf80 [ 452.345680][T10814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.345689][T10814] ? clear_bhb_loop+0x60/0xb0 [ 452.345700][T10814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.345709][T10814] RIP: 0033:0x7f82d058f749 [ 452.345719][T10814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.345727][T10814] RSP: 002b:00007f82d14c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 452.345742][T10814] RAX: ffffffffffffffda RBX: 00007f82d07e5fa0 RCX: 00007f82d058f749 [ 452.345749][T10814] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 452.345756][T10814] RBP: 00007f82d14c7090 R08: ffffffffffffffff R09: 0000000000000000 [ 452.345762][T10814] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 452.345767][T10814] R13: 00007f82d07e6038 R14: 00007f82d07e5fa0 R15: 00007f82d090fa28 [ 452.345784][T10814] [ 453.283914][T10832] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 453.397264][ T6542] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 453.547357][ T5919] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 453.568671][ T6542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.582372][ T6542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.643101][ T6542] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 453.660181][ T6542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.693309][ T6542] usb 6-1: config 0 descriptor?? [ 453.708979][ T5919] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 453.721378][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 453.750979][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.771967][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 453.855991][ T5919] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 453.953625][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.018446][ T5919] usb 5-1: config 0 descriptor?? [ 454.295128][ T6542] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 454.345610][ T6542] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 454.413848][T10846] loop2: detected capacity change from 0 to 7 [ 454.457719][T10846] Dev loop2: unable to read RDB block 7 [ 454.484029][T10846] loop2: unable to read partition table [ 454.494141][ T6542] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00 [ 454.536803][T10846] loop2: partition table beyond EOD, truncated [ 454.587942][T10846] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 454.687324][ T5203] Dev loop2: unable to read RDB block 7 [ 454.707229][T10849] Failed to get privilege flags for destination (handle=0x2:0x0) [ 454.736437][ T5203] loop2: unable to read partition table [ 454.742343][ T5203] loop2: partition table beyond EOD, truncated [ 455.100324][T10824] cp2112 0003:10C4:EA90.000B: Multi-message I2C transactions not supported [ 455.145349][ T6542] cp2112 0003:10C4:EA90.000B: error reading lock byte: -71 [ 455.260900][ T6542] usb 6-1: USB disconnect, device number 10 [ 456.192707][T10865] Cannot find del_set index 286 as target [ 456.207425][T10865] netlink: zone id is out of range [ 456.369688][T10868] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1081'. [ 456.513435][T10868] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1081'. [ 456.640359][ T5919] usbhid 5-1:0.0: can't add hid device: -71 [ 456.666716][ T5919] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 456.749938][ T5919] usb 5-1: USB disconnect, device number 33 [ 457.406984][ T48] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 457.951773][ T48] usb 1-1: device descriptor read/64, error -71 [ 458.151006][T10890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1089'. [ 458.161072][T10884] fuse: Bad value for 'fd' [ 458.169618][T10890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1089'. [ 458.277277][ T48] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 458.486928][ T48] usb 1-1: device descriptor read/64, error -71 [ 458.647367][ T48] usb usb1-port1: attempt power cycle [ 458.788746][T10903] geneve2: entered allmulticast mode [ 459.003763][ T48] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 459.077806][ T48] usb 1-1: device descriptor read/8, error -71 [ 459.357517][ T48] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 459.386998][ T5919] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 459.417577][ T48] usb 1-1: device descriptor read/8, error -71 [ 459.547482][ T48] usb usb1-port1: unable to enumerate USB device [ 459.597058][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 459.634617][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.665708][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 459.707021][ T48] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 459.743630][ T5919] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 459.793528][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.863243][ T5919] usb 6-1: config 0 descriptor?? [ 459.871568][ T48] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 459.912904][ T5919] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 459.957523][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 460.006964][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.110069][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 460.169192][ T48] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 460.191160][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.258204][T10923] geneve2: entered allmulticast mode [ 460.275553][ T48] usb 5-1: config 0 descriptor?? [ 460.387292][ T5906] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 460.547267][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 460.554092][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.567504][ T5906] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 460.579544][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.594239][ T5906] usb 1-1: config 0 descriptor?? [ 460.832113][T10933] Failed to get privilege flags for destination (handle=0x2:0x0) [ 461.038095][ T5906] usbhid 1-1:0.0: can't add hid device: -71 [ 461.044129][ T5906] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 461.092958][ T5906] usb 1-1: USB disconnect, device number 33 [ 461.802159][ T5906] usb 6-1: USB disconnect, device number 11 [ 462.402161][ T5906] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 462.578840][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 462.590014][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 462.970768][ T5906] usb 2-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7 [ 462.989853][ T48] usbhid 5-1:0.0: can't add hid device: -71 [ 463.058355][T10958] fuse: Bad value for 'fd' [ 463.147373][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.147662][ T48] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 463.212824][ T5906] usb 2-1: config 0 descriptor?? [ 463.227350][T10948] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 463.512214][ T48] usb 5-1: USB disconnect, device number 34 [ 463.683543][T10964] x_tables: duplicate underflow at hook 2 [ 463.720435][ T5926] usb 2-1: USB disconnect, device number 28 [ 463.764860][ T8790] udevd[8790]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.462525][T10975] tipc: Started in network mode [ 464.475071][T10975] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 464.485742][T10975] tipc: Enabled bearer , priority 0 [ 464.500411][T10975] loop3: detected capacity change from 0 to 7 [ 464.510457][ T8790] Dev loop3: unable to read RDB block 7 [ 464.516060][ T8790] loop3: unable to read partition table [ 464.521929][ T5926] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 464.532311][ T8790] loop3: partition table beyond EOD, truncated [ 464.542228][T10975] Dev loop3: unable to read RDB block 7 [ 464.554689][T10975] loop3: unable to read partition table [ 464.562420][T10975] loop3: partition table beyond EOD, truncated [ 464.576938][T10975] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 464.677308][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 464.684831][ T5926] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.698660][ T5926] usb 1-1: config 0 interface 0 has no altsetting 0 [ 464.705297][ T5926] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 464.729183][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.741327][ T5926] usb 1-1: config 0 descriptor?? [ 464.777289][ T5837] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 464.928522][ T5837] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 464.939952][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 464.951287][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.961092][ T5837] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 464.974166][ T5837] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 464.983733][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.994091][ T5837] usb 5-1: config 0 descriptor?? [ 464.999338][ T5923] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 465.157317][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 465.157738][ T5926] hid-u2fzero 0003:20A0:4287.000C: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.0-1/input0 [ 465.172896][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.178060][ T5926] hid-u2fzero 0003:20A0:4287.000C: NitroKey U2F LED initialised [ 465.191798][ T5926] hid-u2fzero 0003:20A0:4287.000C: NitroKey U2F RNG initialised [ 465.201202][ T5923] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 465.214243][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.237129][ T5923] usb 4-1: config 0 descriptor?? [ 465.379784][T10971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.389401][T10971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.413679][ T5926] usb 1-1: USB disconnect, device number 34 [ 465.499531][T10996] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1124'. [ 465.637934][T10998] Failed to get privilege flags for destination (handle=0x2:0x0) [ 465.698521][ T5923] usbhid 4-1:0.0: can't add hid device: -71 [ 465.712584][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 465.727729][ T5923] usb 4-1: USB disconnect, device number 35 [ 465.753729][ T48] tipc: Node number set to 11578026 [ 465.854446][T11005] fuse: Bad value for 'fd' [ 468.075895][ T5837] usbhid 5-1:0.0: can't add hid device: -71 [ 468.111628][ T5837] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 468.148968][ T5837] usb 5-1: USB disconnect, device number 35 [ 469.057523][ T5837] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 469.217139][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 469.223715][ T5837] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 469.244187][ T5837] usb 2-1: config 8 has no interface number 0 [ 469.257101][ T5837] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 469.274725][ T5837] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 469.296782][ T5837] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 469.378447][ T5837] usb 2-1: config 8 interface 39 has no altsetting 0 [ 469.539280][ T5837] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 469.550460][T11053] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 469.583237][T11057] geneve2: entered allmulticast mode [ 469.692112][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.732018][ T5837] usb 2-1: Product: syz [ 469.744580][ T5837] usb 2-1: Manufacturer: syz [ 469.952726][T11068] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 469.967792][ T5837] usb 2-1: SerialNumber: syz [ 470.522803][ T5837] ipheth 2-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 470.535812][ T5837] ipheth 2-1:8.39: probe with driver ipheth failed with error -22 [ 470.793845][T11074] fuse: Unknown parameter 'seclabel' [ 471.113994][T11085] geneve2: entered allmulticast mode [ 471.417153][ T5906] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 471.747030][ T5893] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 471.758629][ T5906] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 471.769709][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 471.781462][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.849165][ T5923] usb 2-1: USB disconnect, device number 29 [ 471.867763][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 471.908073][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 471.918372][ T5906] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 471.930681][ T5893] usb 5-1: config 0 has no interfaces? [ 471.941708][ T5893] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 471.955566][ T5893] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 471.967082][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.979958][ T5893] usb 5-1: Manufacturer: syz [ 472.038956][ T5893] usb 5-1: config 0 descriptor?? [ 472.068878][ T5906] usb 1-1: config 0 descriptor?? [ 472.342457][T11102] loop2: detected capacity change from 0 to 7 [ 472.469859][ T8790] Dev loop2: unable to read RDB block 7 [ 472.742991][ T8790] loop2: unable to read partition table [ 472.752546][ T8790] loop2: partition table beyond EOD, truncated [ 472.771619][T11102] Dev loop2: unable to read RDB block 7 [ 472.777917][T11102] loop2: unable to read partition table [ 472.784615][T11102] loop2: partition table beyond EOD, truncated [ 472.800351][T11102] loop_reread_partitions: partition scan of loop2 (被x, ) failed (rc=-5) [ 472.892571][T11107] Failed to get privilege flags for destination (handle=0x2:0x0) [ 473.301246][T11113] fuse: Bad value for 'fd' [ 473.843865][T11119] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 474.789407][ T5926] usb 5-1: USB disconnect, device number 36 [ 475.336059][ T5906] usbhid 1-1:0.0: can't add hid device: -71 [ 475.344087][ T5906] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 475.425344][ T5906] usb 1-1: USB disconnect, device number 35 [ 476.022949][T11154] x_tables: duplicate underflow at hook 2 [ 476.177889][T11162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1167'. [ 476.206817][T11160] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 476.215745][T11162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1167'. [ 477.187166][ T5837] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 477.347910][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 477.368446][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 477.396936][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 477.448869][ T5837] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 477.479466][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.527245][ T5837] usb 1-1: Product: syz [ 477.531442][ T5837] usb 1-1: Manufacturer: syz [ 477.551729][ T5837] usb 1-1: SerialNumber: syz [ 477.583528][ T5837] usb 1-1: config 0 descriptor?? [ 477.665529][ T5837] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 477.983954][T11201] x_tables: duplicate underflow at hook 2 [ 478.038986][ T3591] usb 1-1: Failed to submit usb control message: -71 [ 478.039235][ T5837] usb 1-1: USB disconnect, device number 36 [ 478.057017][ T3591] usb 1-1: unable to send the bmi data to the device: -71 [ 478.085663][ T3591] usb 1-1: unable to get target info from device [ 478.107659][ T3591] usb 1-1: could not get target info (-71) [ 478.125054][ T3591] usb 1-1: could not probe fw (-71) [ 478.370296][ T5893] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 478.518284][T11207] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 478.547644][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 478.563433][ T5893] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 478.593218][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.621837][ T5893] usb 4-1: Product: syz [ 478.641722][ T5893] usb 4-1: Manufacturer: syz [ 478.666010][ T5893] usb 4-1: SerialNumber: syz [ 478.720781][ T5893] usb 4-1: config 0 descriptor?? [ 478.741160][ T5893] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 478.755635][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 478.794813][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 478.810346][ T5893] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 478.820318][ T5893] usb 4-1: media controller created [ 478.859313][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.922952][ T5893] usb 4-1: selecting invalid altsetting 7 [ 478.929681][ T5893] cxusb: set interface failed [ 478.934627][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 478.963894][T11204] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20003 [ 478.973625][T11204] cxusb: i2c wr: len=79 is too big! [ 478.973625][T11204] [ 479.007278][ T5837] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 479.068723][ T5893] DVB: Unable to find symbol lgdt330x_attach() [ 479.077710][ T5893] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 479.159212][ T5837] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 479.170640][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.198947][ T5893] rc_core: IR keymap rc-dvico-portable not found [ 479.206206][ T5893] Registered IR keymap rc-empty [ 479.212285][ T5837] usb 5-1: config 0 descriptor?? [ 479.230129][ T5893] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 479.251225][ T5893] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input29 [ 479.267689][ T5893] dvb-usb: schedule remote query interval to 100 msecs. [ 479.286030][ T5893] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 479.325072][ T5893] usb 4-1: USB disconnect, device number 36 [ 479.422477][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.474801][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.512145][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.542148][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.575415][ T5893] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 479.592635][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.613718][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.642499][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.715021][T11227] fuse: Bad value for 'fd' [ 479.836620][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.978359][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.062683][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.102149][ T5837] kaweth 5-1:0.0: Firmware present in device. [ 480.172189][T11238] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 480.417782][ T5837] kaweth 5-1:0.0: Error reading configuration (-32), no net device created [ 480.476649][ T5837] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 480.826937][ T5919] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 480.986930][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 481.002066][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.072465][ T5919] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 481.090344][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.121707][ T5919] usb 6-1: config 0 descriptor?? [ 481.148268][ T5919] usb 6-1: bad CDC descriptors [ 481.163507][ T5919] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 481.181622][ T5919] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 481.198362][ T5919] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 481.345841][T11242] syzkaller0: entered promiscuous mode [ 481.372532][T11242] syzkaller0: entered allmulticast mode [ 481.442439][T11253] FAULT_INJECTION: forcing a failure. [ 481.442439][T11253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.460982][T11242] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 481.492857][T11253] CPU: 0 UID: 0 PID: 11253 Comm: syz.0.1194 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.492887][T11253] Tainted: [L]=SOFTLOCKUP [ 481.492893][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 481.492903][T11253] Call Trace: [ 481.492910][T11253] [ 481.492918][T11253] dump_stack_lvl+0x189/0x250 [ 481.492942][T11253] ? __pfx____ratelimit+0x10/0x10 [ 481.492963][T11253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.492982][T11253] ? __pfx__printk+0x10/0x10 [ 481.493018][T11253] should_fail_ex+0x414/0x560 [ 481.493041][T11253] _copy_to_user+0x31/0xb0 [ 481.493066][T11253] simple_read_from_buffer+0xe1/0x170 [ 481.493090][T11253] proc_fail_nth_read+0x1b3/0x220 [ 481.493112][T11253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.493132][T11253] ? rw_verify_area+0x2a6/0x4d0 [ 481.493155][T11253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.493173][T11253] vfs_read+0x200/0xa30 [ 481.493196][T11253] ? fdget_pos+0x247/0x320 [ 481.493219][T11253] ? __pfx___mutex_lock+0x10/0x10 [ 481.493239][T11253] ? __pfx_vfs_read+0x10/0x10 [ 481.493263][T11253] ? __fget_files+0x2a/0x420 [ 481.493286][T11253] ? __fget_files+0x3a0/0x420 [ 481.493304][T11253] ? __fget_files+0x2a/0x420 [ 481.493332][T11253] ksys_read+0x145/0x250 [ 481.493350][T11253] ? __pfx_ksys_read+0x10/0x10 [ 481.493370][T11253] ? do_syscall_64+0xbe/0xf80 [ 481.493393][T11253] do_syscall_64+0xfa/0xf80 [ 481.493425][T11253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.493442][T11253] ? clear_bhb_loop+0x60/0xb0 [ 481.493461][T11253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.493477][T11253] RIP: 0033:0x7f8f79f8e15c [ 481.493493][T11253] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 481.493509][T11253] RSP: 002b:00007f8f7aed1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 481.493527][T11253] RAX: ffffffffffffffda RBX: 00007f8f7a1e5fa0 RCX: 00007f8f79f8e15c [ 481.493540][T11253] RDX: 000000000000000f RSI: 00007f8f7aed10a0 RDI: 0000000000000004 [ 481.493550][T11253] RBP: 00007f8f7aed1090 R08: 0000000000000000 R09: 0000000000000000 [ 481.493561][T11253] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 481.493571][T11253] R13: 00007f8f7a1e6038 R14: 00007f8f7a1e5fa0 R15: 00007f8f7a30fa28 [ 481.493601][T11253] [ 481.498852][T11242] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 481.835900][ T5893] usb 5-1: USB disconnect, device number 37 [ 481.836050][ T6542] usb 6-1: USB disconnect, device number 12 [ 481.846988][ T5837] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 482.047738][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 482.068674][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.090162][ T5837] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 482.102284][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.121487][ T5837] usb 1-1: config 0 descriptor?? [ 482.524055][T11273] netlink: 'syz.3.1198': attribute type 12 has an invalid length. [ 482.743106][ T5837] usbhid 1-1:0.0: can't add hid device: -71 [ 482.770437][ T5837] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 482.832685][ T5837] usb 1-1: USB disconnect, device number 37 [ 484.207708][ T5919] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 484.324802][T11303] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 484.457064][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 484.472979][ T5919] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 484.481970][ T5919] usb 1-1: config 0 has no interface number 0 [ 484.526976][ T5919] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 484.992485][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.046174][ T5919] usb 1-1: Product: syz [ 485.107150][ T5919] usb 1-1: Manufacturer: syz [ 485.111856][ T5919] usb 1-1: SerialNumber: syz [ 485.289326][ T5919] usb 1-1: config 0 descriptor?? [ 485.370613][ T5919] ftdi_sio 1-1:0.217: FTDI USB Serial Device converter detected [ 485.442464][ T5919] usb 1-1: Detected SIO [ 485.479941][ T5919] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 486.097000][ T5837] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 486.306996][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 486.315147][ T5837] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 486.324073][ T5837] usb 2-1: config 0 has no interface number 0 [ 486.330464][ T5837] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 486.346055][ T5837] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 486.356351][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.368035][ T5837] usb 2-1: Product: syz [ 486.404872][ T5837] usb 2-1: Manufacturer: syz [ 486.425231][ T5837] usb 2-1: SerialNumber: syz [ 486.451079][T11317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.457931][ T30] audit: type=1326 audit(1764994983.552:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.3.1210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb9778f749 code=0x0 [ 486.480806][ T5837] usb 2-1: config 0 descriptor?? [ 486.488770][T11311] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 486.711104][T11311] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 487.010791][ T5926] usb 1-1: USB disconnect, device number 38 [ 487.019676][ T5926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 487.034109][ T5926] ftdi_sio 1-1:0.217: device disconnected [ 487.088028][ T5893] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 487.270572][T11331] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 487.278570][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 487.293482][ T5893] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 487.303342][ T5893] usb 6-1: config 8 has no interface number 0 [ 487.317284][ T5893] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 487.359713][ T5893] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 487.370246][ T5893] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 487.458784][ T5893] usb 6-1: config 8 interface 39 has no altsetting 0 [ 487.509728][ T5893] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 487.540065][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.559353][ T5893] usb 6-1: Product: syz [ 487.563575][ T5893] usb 6-1: Manufacturer: syz [ 487.568192][ T5893] usb 6-1: SerialNumber: syz [ 488.477139][ T5906] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 488.557084][ T5893] ipheth 6-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 488.569759][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 488.609435][ T5893] ipheth 6-1:8.39: probe with driver ipheth failed with error -22 [ 488.777147][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 488.788640][ T5906] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 488.798055][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.817791][ T5906] usb 5-1: Product: syz [ 488.831138][ T5906] usb 5-1: Manufacturer: syz [ 488.850544][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 488.864748][ T5906] usb 5-1: SerialNumber: syz [ 488.871345][T11348] fuse: Unknown parameter 'seclabel' [ 488.878305][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 488.894695][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 488.907767][ T5906] usb 5-1: config 0 descriptor?? [ 488.931989][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 488.953302][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.016272][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.103828][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.144814][ T10] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 489.260189][T11343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.272334][T11343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.296670][T11343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.306501][T11343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.346742][ T5906] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 489.346750][ T5926] usb 4-1: USB disconnect, device number 37 [ 489.364737][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 489.375238][ T5906] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 489.383719][ T5906] usb 5-1: media controller created [ 489.410762][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.558982][ T5906] zl10353_read_register: readreg error (reg=127, ret==0) [ 489.578768][ T5906] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 489.591690][ T5906] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 489.638955][ T5906] usb 5-1: USB disconnect, device number 38 [ 489.759270][ T5906] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 489.963103][ T5906] usb 6-1: USB disconnect, device number 13 [ 490.063537][T11361] netlink: 'syz.5.1220': attribute type 23 has an invalid length. [ 490.334719][ T5837] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 490.345176][ T5837] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 490.375895][ T5837] asix 2-1:0.188: probe with driver asix failed with error -71 [ 490.428357][T11363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 490.446732][T11369] fuse: Bad value for 'fd' [ 490.676414][ T5837] usb 2-1: USB disconnect, device number 30 [ 491.248094][T11374] fuse: Bad value for 'fd' [ 491.996951][ T6542] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 492.085894][T11386] FAULT_INJECTION: forcing a failure. [ 492.085894][T11386] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 492.153267][T11386] CPU: 1 UID: 0 PID: 11386 Comm: syz.1.1226 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.153295][T11386] Tainted: [L]=SOFTLOCKUP [ 492.153301][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.153312][T11386] Call Trace: [ 492.153319][T11386] [ 492.153326][T11386] dump_stack_lvl+0x189/0x250 [ 492.153351][T11386] ? __pfx____ratelimit+0x10/0x10 [ 492.153372][T11386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.153391][T11386] ? __pfx__printk+0x10/0x10 [ 492.153415][T11386] ? fs_reclaim_acquire+0x7d/0x100 [ 492.153442][T11386] should_fail_ex+0x414/0x560 [ 492.153465][T11386] prepare_alloc_pages+0x22b/0x650 [ 492.153491][T11386] __alloc_frozen_pages_noprof+0x123/0x370 [ 492.153514][T11386] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 492.153540][T11386] ? policy_nodemask+0x27c/0x720 [ 492.153556][T11386] ? __lock_acquire+0x6b6/0x2cf0 [ 492.153578][T11386] alloc_pages_mpol+0x232/0x4a0 [ 492.153602][T11386] alloc_pages_noprof+0xa9/0x190 [ 492.153623][T11386] __pud_alloc+0x3a/0x470 [ 492.153652][T11386] handle_mm_fault+0x1f7a/0x32b0 [ 492.153680][T11386] ? mt_find+0x15c/0x5e0 [ 492.153699][T11386] ? __pfx_mt_find+0x10/0x10 [ 492.153719][T11386] ? handle_mm_fault+0xdb/0x32b0 [ 492.153749][T11386] ? __pfx_handle_mm_fault+0x10/0x10 [ 492.153798][T11386] ? lock_mm_and_find_vma+0x9c/0x300 [ 492.153823][T11386] do_user_addr_fault+0x764/0x1380 [ 492.153857][T11386] exc_page_fault+0x82/0x100 [ 492.153879][T11386] asm_exc_page_fault+0x26/0x30 [ 492.153896][T11386] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 492.153919][T11386] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 49 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 492.153934][T11386] RSP: 0018:ffffc90003fff8f8 EFLAGS: 00050202 [ 492.153950][T11386] RAX: 00007ffffffff001 RBX: 0000000000000018 RCX: 0000000000000018 [ 492.153962][T11386] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffc90003fffe00 [ 492.153973][T11386] RBP: ffffc90003fffe98 R08: ffffc90003fffe17 R09: 1ffff920007fffc2 [ 492.153985][T11386] R10: dffffc0000000000 R11: fffff520007fffc3 R12: 00000000c018aa3f [ 492.153998][T11386] R13: dffffc0000000000 R14: ffffc90003fffe00 R15: 0000200000000180 [ 492.154027][T11386] _copy_from_user+0x7a/0xb0 [ 492.154050][T11386] userfaultfd_ioctl+0x17b/0x4c80 [ 492.154072][T11386] ? kasan_save_track+0x4f/0x80 [ 492.154086][T11386] ? kasan_save_track+0x3e/0x80 [ 492.154099][T11386] ? kasan_save_free_info+0x46/0x50 [ 492.154119][T11386] ? __kasan_slab_free+0x5c/0x80 [ 492.154133][T11386] ? kfree+0x1c0/0x660 [ 492.154152][T11386] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 492.154170][T11386] ? security_file_ioctl+0xcb/0x2d0 [ 492.154186][T11386] ? __se_sys_ioctl+0x47/0x170 [ 492.154207][T11386] ? do_syscall_64+0xfa/0xf80 [ 492.154224][T11386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.154246][T11386] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 492.154298][T11386] ? kasan_quarantine_put+0xdd/0x220 [ 492.154321][T11386] ? lockdep_hardirqs_on+0x98/0x140 [ 492.154348][T11386] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 492.154373][T11386] ? do_vfs_ioctl+0xbe8/0x1430 [ 492.154394][T11386] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 492.154415][T11386] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 492.154454][T11386] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 492.154494][T11386] ? __fget_files+0x2a/0x420 [ 492.154518][T11386] ? __fget_files+0x3a0/0x420 [ 492.154535][T11386] ? __fget_files+0x2a/0x420 [ 492.154557][T11386] ? bpf_lsm_file_ioctl+0x9/0x20 [ 492.154575][T11386] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 492.154596][T11386] __se_sys_ioctl+0xfc/0x170 [ 492.154621][T11386] do_syscall_64+0xfa/0xf80 [ 492.154641][T11386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.154657][T11386] ? clear_bhb_loop+0x60/0xb0 [ 492.154677][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.154693][T11386] RIP: 0033:0x7f82d058f749 [ 492.154707][T11386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.154720][T11386] RSP: 002b:00007f82d14c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.154736][T11386] RAX: ffffffffffffffda RBX: 00007f82d07e5fa0 RCX: 00007f82d058f749 [ 492.154748][T11386] RDX: 0000200000000180 RSI: 00000000c018aa3f RDI: 0000000000000003 [ 492.154758][T11386] RBP: 00007f82d14c7090 R08: 0000000000000000 R09: 0000000000000000 [ 492.154774][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.154783][T11386] R13: 00007f82d07e6038 R14: 00007f82d07e5fa0 R15: 00007f82d090fa28 [ 492.154813][T11386] [ 492.644847][ T6542] usb 4-1: Using ep0 maxpacket: 16 [ 492.651582][ T6542] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.661931][ T6542] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 492.675155][ T6542] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 492.684931][ T6542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.697573][ T6542] usb 4-1: config 0 descriptor?? [ 492.839833][ T6542] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 492.859015][T11388] fuse: Bad value for 'fd' [ 493.221777][T11409] fuse: Bad value for 'fd' [ 493.800252][T11424] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 493.853008][T11424] netlink: 'syz.4.1238': attribute type 1 has an invalid length. [ 494.225744][T11426] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 494.264917][T11426] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 494.556950][ T5837] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 495.002647][ T5906] usb 4-1: USB disconnect, device number 38 [ 495.038503][ T5837] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 495.050781][ T5837] usb 5-1: config 0 has no interface number 0 [ 495.064435][ T5837] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 495.083864][ T5837] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 495.110597][ T5837] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0 [ 495.138198][ T5837] usb 5-1: config 0 interface 200 has no altsetting 0 [ 495.148477][ T5837] usb 5-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 495.216951][T11437] geneve2: entered allmulticast mode [ 495.278586][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.304101][ T5837] usb 5-1: Product: syz [ 495.314154][ T5837] usb 5-1: Manufacturer: syz [ 495.320824][ T5837] usb 5-1: SerialNumber: syz [ 495.329982][ T5837] usb 5-1: config 0 descriptor?? [ 495.563469][ T5837] usb 5-1: USB disconnect, device number 39 [ 495.976966][ T6542] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 496.136993][ T6542] usb 4-1: Using ep0 maxpacket: 8 [ 496.150340][ T6542] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.175032][ T6542] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 496.191908][ T6542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.210919][ T6542] usb 4-1: config 0 descriptor?? [ 496.229115][ T6542] usb 4-1: bad CDC descriptors [ 496.241471][ T6542] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 496.253197][ T6542] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 496.261136][ T6542] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 496.533759][T11454] syzkaller0: entered promiscuous mode [ 496.549255][T11454] syzkaller0: entered allmulticast mode [ 496.566327][T11454] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 496.587334][ T5837] usb 4-1: USB disconnect, device number 39 [ 496.965876][T11481] loop2: detected capacity change from 0 to 7 [ 497.039591][T11481] Dev loop2: unable to read RDB block 7 [ 497.045734][T11481] loop2: unable to read partition table [ 497.052274][T11481] loop2: partition table beyond EOD, truncated [ 497.132301][T11483] geneve2: entered allmulticast mode [ 497.226982][T11481] loop_reread_partitions: partition scan of loop2 (被x, ) failed (rc=-5) [ 497.382427][ T5203] Dev loop2: unable to read RDB block 7 [ 497.389859][ T5203] loop2: unable to read partition table [ 497.395707][ T5203] loop2: partition table beyond EOD, truncated [ 499.808985][T11510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 501.519238][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.525918][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.949925][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.956357][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.390159][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.396576][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.749641][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 639.757471][ T31] Tainted: G L syzkaller #0 [ 639.764017][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 639.772954][ T31] task:kworker/0:1 state:D stack:19848 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 639.785084][ T31] Workqueue: events rfkill_sync_work [ 639.790732][ T31] Call Trace: [ 639.794062][ T31] [ 639.797147][ T31] __schedule+0x14bc/0x5000 [ 639.801890][ T31] ? irqentry_exit+0x5dd/0x660 [ 639.806672][ T31] ? trace_irq_disable+0x37/0x100 [ 639.811799][ T31] ? __pfx___schedule+0x10/0x10 [ 639.816678][ T31] ? schedule+0x91/0x360 [ 639.821247][ T31] schedule+0x165/0x360 [ 639.825432][ T31] schedule_preempt_disabled+0x13/0x30 [ 639.831048][ T31] __mutex_lock+0x7e6/0x1350 [ 639.835663][ T31] ? __mutex_lock+0x5bb/0x1350 [ 639.840505][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 639.845845][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 639.851821][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 639.857110][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 639.863119][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 639.869557][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 639.875321][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 639.880967][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 639.886707][ T31] rfkill_set_block+0x1d2/0x440 [ 639.891674][ T31] rfkill_sync_work+0x114/0x200 [ 639.896658][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 639.902467][ T31] process_scheduled_works+0xad1/0x1770 [ 639.908265][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 639.914268][ T31] worker_thread+0x8a0/0xda0 [ 639.918934][ T31] kthread+0x711/0x8a0 [ 639.923008][ T31] ? __pfx_worker_thread+0x10/0x10 [ 639.928193][ T31] ? __pfx_kthread+0x10/0x10 [ 639.932789][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 639.938239][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 639.943449][ T31] ? __pfx_kthread+0x10/0x10 [ 639.948094][ T31] ret_from_fork+0x599/0xb30 [ 639.952688][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 639.957852][ T31] ? __switch_to_asm+0x39/0x70 [ 639.962647][ T31] ? __switch_to_asm+0x33/0x70 [ 639.967662][ T31] ? __pfx_kthread+0x10/0x10 [ 639.972249][ T31] ret_from_fork_asm+0x1a/0x30 [ 639.977266][ T31] [ 639.980394][ T31] INFO: task kworker/0:5:5893 blocked for more than 143 seconds. [ 639.988619][ T31] Tainted: G L syzkaller #0 [ 639.995306][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 640.004246][ T31] task:kworker/0:5 state:D stack:20976 pid:5893 tgid:5893 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 640.016345][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 640.023097][ T31] Call Trace: [ 640.026371][ T31] [ 640.029620][ T31] __schedule+0x14bc/0x5000 [ 640.034147][ T31] ? __pfx___schedule+0x10/0x10 [ 640.039060][ T31] ? schedule+0x91/0x360 [ 640.043393][ T31] schedule+0x165/0x360 [ 640.047615][ T31] schedule_preempt_disabled+0x13/0x30 [ 640.053091][ T31] __mutex_lock+0x7e6/0x1350 [ 640.058067][ T31] ? __mutex_lock+0x5bb/0x1350 [ 640.062932][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 640.069456][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 640.074589][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 640.080541][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 640.086489][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 640.092972][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 640.098988][ T31] process_scheduled_works+0xad1/0x1770 [ 640.104564][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 640.110643][ T31] worker_thread+0x8a0/0xda0 [ 640.115254][ T31] kthread+0x711/0x8a0 [ 640.119677][ T31] ? __pfx_worker_thread+0x10/0x10 [ 640.124800][ T31] ? __pfx_kthread+0x10/0x10 [ 640.129461][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.134659][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 640.139998][ T31] ? __pfx_kthread+0x10/0x10 [ 640.144651][ T31] ret_from_fork+0x599/0xb30 [ 640.152787][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 640.157980][ T31] ? __switch_to_asm+0x39/0x70 [ 640.162775][ T31] ? __switch_to_asm+0x33/0x70 [ 640.167603][ T31] ? __pfx_kthread+0x10/0x10 [ 640.172198][ T31] ret_from_fork_asm+0x1a/0x30 [ 640.177286][ T31] [ 640.180325][ T31] INFO: task syz.0.1219:11353 blocked for more than 143 seconds. [ 640.188248][ T31] Tainted: G L syzkaller #0 [ 640.194776][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 640.203707][ T31] task:syz.0.1219 state:D stack:25336 pid:11353 tgid:11353 ppid:5856 task_flags:0x400040 flags:0x00080002 [ 640.216026][ T31] Call Trace: [ 640.219462][ T31] [ 640.222405][ T31] __schedule+0x14bc/0x5000 [ 640.226993][ T31] ? __pfx___schedule+0x10/0x10 [ 640.231854][ T31] ? schedule+0x91/0x360 [ 640.236083][ T31] schedule+0x165/0x360 [ 640.240504][ T31] schedule_timeout+0x9a/0x270 [ 640.245307][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 640.250755][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.255954][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 640.261233][ T31] ? wait_for_completion+0x267/0x5d0 [ 640.266612][ T31] wait_for_completion+0x2bf/0x5d0 [ 640.272457][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 640.278233][ T31] ? __flush_work+0xd2/0xbc0 [ 640.282849][ T31] ? __flush_work+0xd2/0xbc0 [ 640.287491][ T31] __flush_work+0x9b9/0xbc0 [ 640.292167][ T31] ? __flush_work+0xd2/0xbc0 [ 640.297048][ T31] ? __pfx___flush_work+0x10/0x10 [ 640.302082][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 640.307433][ T31] ? __pfx___cancel_work+0x10/0x10 [ 640.312586][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 640.318489][ T31] ? __cancel_work_sync+0x5c/0x110 [ 640.323616][ T31] __cancel_work_sync+0xbe/0x110 [ 640.328892][ T31] rfkill_unregister+0x92/0x220 [ 640.333742][ T31] nfc_unregister_device+0x96/0x2a0 [ 640.338999][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 640.344748][ T31] virtual_ncidev_close+0x56/0x90 [ 640.349826][ T31] __fput+0x44c/0xa70 [ 640.353820][ T31] task_work_run+0x1d4/0x260 [ 640.358741][ T31] ? __pfx_task_work_run+0x10/0x10 [ 640.364007][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 640.369426][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 640.374890][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 640.380242][ T31] ? rcu_is_watching+0x15/0xb0 [ 640.385040][ T31] do_syscall_64+0x2e3/0xf80 [ 640.389971][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.396082][ T31] ? clear_bhb_loop+0x60/0xb0 [ 640.400939][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.406924][ T31] RIP: 0033:0x7f8f79f8f749 [ 640.411389][ T31] RSP: 002b:00007f8f7a30fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 640.420097][ T31] RAX: 0000000000000000 RBX: 00007f8f7a1e7da0 RCX: 00007f8f79f8f749 [ 640.428271][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 640.436234][ T31] RBP: 00007f8f7a1e7da0 R08: 0000000000000000 R09: 0000000f7a30fe7f [ 640.444280][ T31] R10: 000000000003fd54 R11: 0000000000000246 R12: 0000000000077b35 [ 640.452444][ T31] R13: 00007f8f7a1e6090 R14: ffffffffffffffff R15: 00007f8f7a30fca0 [ 640.460504][ T31] [ 640.463536][ T31] [ 640.463536][ T31] Showing all locks held in the system: [ 640.471600][ T31] 4 locks held by kworker/0:1/10: [ 640.476651][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 640.487970][ T31] #1: ffffc900000f7b80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 640.500440][ T31] #2: ffffffff8f5eff68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 640.510925][ T31] #3: ffff88807d8e0100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 640.520841][ T31] 1 lock held by khungtaskd/31: [ 640.525717][ T31] #0: ffffffff8df41c80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 640.535789][ T31] 5 locks held by kworker/u8:4/60: [ 640.541193][ T31] #0: ffff8880b883a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 640.551402][ T31] #1: ffff8880b8924588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 640.560349][ T31] #2: ffff8880b89260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 640.569400][ T31] #3: ffffffff99a83588 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x87/0x540 [ 640.579900][ T31] #4: ffffffff8df41c80 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 640.589662][ T31] 2 locks held by getty/5592: [ 640.594340][ T31] #0: ffff88814d5130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 640.604129][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 640.614435][ T31] 3 locks held by kworker/0:5/5893: [ 640.619675][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 640.630752][ T31] #1: ffffc9000452fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 640.644495][ T31] #2: ffffffff8f5eff68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 640.656092][ T31] 1 lock held by syz.0.1219/11353: [ 640.661251][ T31] #0: ffff88807d8e0100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 640.671333][ T31] 1 lock held by syz.3.1264/11510: [ 640.676478][ T31] #0: ffffffff8e792e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 640.684985][ T31] 2 locks held by syz.3.1264/11512: [ 640.690239][ T31] #0: ffffffff8e792e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 640.699029][ T31] #1: ffffffff8f5eff68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 640.709105][ T31] 1 lock held by syz.5.1265/11515: [ 640.714354][ T31] #0: ffffffff8e792e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 640.722831][ T31] 1 lock held by syz.4.1267/11522: [ 640.728123][ T31] #0: ffffffff8e792e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 640.736556][ T31] 1 lock held by syz.4.1267/11523: [ 640.741691][ T31] #0: ffffffff8e792e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 640.750206][ T31] 1 lock held by syz.1.1268/11525: [ 640.755382][ T31] #0: ffffffff8e792e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 640.764313][ T31] 1 lock held by syz.1.1268/11527: [ 640.769494][ T31] #0: ffffffff8e792e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 640.778016][ T31] 1 lock held by syz-executor/11528: [ 640.783281][ T31] #0: ffffffff8e792e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 640.791985][ T31] 1 lock held by syz-executor/11529: [ 640.797327][ T31] #0: ffffffff8e792e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 640.805801][ T31] 1 lock held by syz-executor/11530: [ 640.811188][ T31] #0: ffffffff8e792e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 640.819841][ T31] 1 lock held by syz-executor/11531: [ 640.825108][ T31] #0: ffffffff8e792e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 640.833660][ T31] 1 lock held by syz-executor/11532: [ 640.838996][ T31] #0: ffffffff8e792e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 640.847708][ T31] [ 640.850034][ T31] ============================================= [ 640.850034][ T31] [ 640.858470][ T31] NMI backtrace for cpu 0 [ 640.858487][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 640.858508][ T31] Tainted: [L]=SOFTLOCKUP [ 640.858513][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 640.858522][ T31] Call Trace: [ 640.858529][ T31] [ 640.858536][ T31] dump_stack_lvl+0x189/0x250 [ 640.858561][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.858579][ T31] ? __pfx__printk+0x10/0x10 [ 640.858621][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 640.858645][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 640.858671][ T31] ? __pfx__printk+0x10/0x10 [ 640.858696][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 640.858722][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 640.858747][ T31] watchdog+0xf3c/0xf80 [ 640.858773][ T31] ? watchdog+0x1e2/0xf80 [ 640.858797][ T31] kthread+0x711/0x8a0 [ 640.858820][ T31] ? __pfx_watchdog+0x10/0x10 [ 640.858839][ T31] ? __pfx_kthread+0x10/0x10 [ 640.858859][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.858874][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 640.858892][ T31] ? __pfx_kthread+0x10/0x10 [ 640.858913][ T31] ret_from_fork+0x599/0xb30 [ 640.858932][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 640.858959][ T31] ? __switch_to_asm+0x39/0x70 [ 640.858978][ T31] ? __switch_to_asm+0x33/0x70 [ 640.858997][ T31] ? __pfx_kthread+0x10/0x10 [ 640.859018][ T31] ret_from_fork_asm+0x1a/0x30 [ 640.859053][ T31] [ 640.859059][ T31] Sending NMI from CPU 0 to CPUs 1: [ 641.011481][ C1] NMI backtrace for cpu 1 [ 641.011501][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.011524][ C1] Tainted: [L]=SOFTLOCKUP [ 641.011530][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.011541][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 641.011565][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 bd 19 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 641.011581][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 641.011595][ C1] RAX: 7387294511c35000 RBX: ffffffff81974b4a RCX: 7387294511c35000 [ 641.011608][ C1] RDX: 0000000000000001 RSI: ffffffff8d782324 RDI: ffffffff8bc00ae0 [ 641.011620][ C1] RBP: ffffc90000197f10 R08: ffff8880b89336db R09: 1ffff110171266db [ 641.011632][ C1] R10: dffffc0000000000 R11: ffffed10171266dc R12: ffffffff8f814670 [ 641.011644][ C1] R13: 1ffff110039d8b70 R14: 0000000000000001 R15: 0000000000000001 [ 641.011655][ C1] FS: 0000000000000000(0000) GS:ffff888126187000(0000) knlGS:0000000000000000 [ 641.011669][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.011680][ C1] CR2: 0000559e83286660 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 641.011695][ C1] Call Trace: [ 641.011702][ C1] [ 641.011708][ C1] default_idle+0x13/0x20 [ 641.011729][ C1] default_idle_call+0x73/0xb0 [ 641.011751][ C1] do_idle+0x1ea/0x520 [ 641.011769][ C1] ? irqentry_exit+0x5ba/0x660 [ 641.011789][ C1] ? __pfx_do_idle+0x10/0x10 [ 641.011814][ C1] cpu_startup_entry+0x44/0x60 [ 641.011831][ C1] start_secondary+0x101/0x110 [ 641.011860][ C1] common_startup_64+0x13e/0x147 [ 641.011888][ C1]