last executing test programs: 4m7.293197908s ago: executing program 4 (id=928): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r1, 0x400, 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = fsmount(r0, 0x1, 0xe) fchdir(r2) syz_open_dev$media(0x0, 0x7fdffffe, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x12, 0x0, 0x1, 0x0, 0x7d, 0x0, 0xa}]}}, 0x0, 0x2a, 0x0, 0x0, 0x6}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e26}, 0x73) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x7ffffff7) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x3) 4m6.06225935s ago: executing program 4 (id=934): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x2, 0x206, 0xef90, 0xfffff801, 0x74, 0x5, 0xb, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={r3, @in6={{0xa, 0x4e21, 0x7a14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, 0x2, 0x1}, &(0x7f00000005c0)=0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x4, 0x1, 0x0, @adapter={0x34, 0xf644, 0xb, 0x5d, 0x400000}}]}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000280)={0x3ff, 0x6}, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000006c00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) 4m4.412563575s ago: executing program 4 (id=940): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r0, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(r0, r1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) 4m4.249460118s ago: executing program 4 (id=941): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x27, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001a00012bdcbd70000000000002000000594047ba70a4bae39eb03656886e958b5f450e53b0741180ff3ca1c64180a8f03023b4172030978f5089ca3c85586054610f2b8f147ce6253399c2479d1be181f6f314adf63733fc9425c3ca7767005a2066bd2ab420caefb99a8c84cf7b921d7db6782f8130e49e3f6615582e7585b7150d7ea19252f47144140a8c360d606e9e7dda0a6037808e198cf0687db3fb14a9024570d09798e8a9cfb1a15c4b", @ANYRES32=0x0, @ANYBLOB="000000000800020005000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x4840) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x1f, 0x4, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000080)}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23) open_by_handle_at(r10, &(0x7f0000000080)=ANY=[@ANYRES64=r10], 0x800) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x3b20c46, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}]}) chdir(&(0x7f00000001c0)='./bus\x00') socket$l2tp(0x2, 0x2, 0x73) 4m4.222765575s ago: executing program 4 (id=942): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x1d, &(0x7f00000007c0)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x0, 0xa, 0x2, 0xb, 0xffffffffffffffe0}, @generic={0x81, 0x9, 0x5, 0x101, 0x9e}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x748}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}], &(0x7f0000000980)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000780)=0xc) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r2}}]}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) getcwd(0x0, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r6, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4m4.029985626s ago: executing program 4 (id=943): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6fa8b2b03714746d6f64653d30303030303030303034303030302c757365725f69643d000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00']) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='mountinfo\x00') keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) lseek(r1, 0x10001, 0x0) (async) lseek(r1, 0x10001, 0x0) 4m3.969179319s ago: executing program 32 (id=943): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6fa8b2b03714746d6f64653d30303030303030303034303030302c757365725f69643d000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00']) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='mountinfo\x00') keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) lseek(r1, 0x10001, 0x0) (async) lseek(r1, 0x10001, 0x0) 2m33.251006682s ago: executing program 3 (id=1378): ioperm(0x0, 0x1, 0x1) timer_create(0x6, &(0x7f0000000300)={0x0, 0x20, 0x2, @thr={&(0x7f0000000180)="3137b60f336321cdd0b3cb25efc253f5846742bdb2935e47cbdb56369736a197eb1bae0436ba4c360476c227484ef72a74a1e73cd09348b6aca0906850128346895614e43bb1a2bfe8601f451c36829209b3f3d4265588e5adcefa26d29558c64f405488fa8023f7ede4dca23c5a6fa02f68e7dce6a839531b3e4696199009a9d9fe92b15e3c239e782223b0ae00bcb30dd7f17732917aed983feee432715d7869622d9d921441e9ae2f0b0333f630", &(0x7f0000000240)="fd5c3473fe1e7d5ba753b3e299cc294d497e413d31d4d0014bc4a1c38eaa6d81a6f88152575fb5c6ec18ee04d57d7b4ddb7c7875c17ae1af5ee8fb0b52aaa0f05a9c06da9b158f676188ee6fda5217391f832c3b8e147a7130f3ab565da813431ac718bf73ecd0dfb588d4827b2a82f6c460fcf2f29ff49f4f61ea3642cc6687a6f7e1cd56f8dedeb1c7409e7163f159ddd4fe4bafab5a56"}}, &(0x7f0000000340)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 64) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) (async, rerun: 64) syslog(0x2, &(0x7f0000000bc0)=""/27, 0x1b) 2m33.004892325s ago: executing program 3 (id=1382): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_dev$usbmon(0x0, 0x0, 0xc942) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0xfff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m32.205433532s ago: executing program 3 (id=1386): socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open(0x0, 0x701200, 0x136) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x7, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x3, &(0x7f00000000c0)) recvfrom$inet6(r1, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) 2m31.571657752s ago: executing program 3 (id=1390): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000", 0x36}], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x20040005) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002afaf41f500fc0cfa5caaa697006e657464657673696d300000"], 0x34}}, 0x20000080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 2m27.495856386s ago: executing program 3 (id=1406): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xe) fchdir(r1) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x3) 2m27.197674006s ago: executing program 3 (id=1408): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d30303030303030303030303130303030302c757365725f69643d000000000000000000003a6d86a9b5df2331767f4a", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r2}}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r3, &(0x7f00000009c0)='1', 0x20, 0xf, 0x0, 0x0, r3}]) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') socket(0xa, 0x80805, 0x0) sync() sync() sync() sync() openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 2m11.771863607s ago: executing program 33 (id=1408): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d30303030303030303030303130303030302c757365725f69643d000000000000000000003a6d86a9b5df2331767f4a", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r2}}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r3, &(0x7f00000009c0)='1', 0x20, 0xf, 0x0, 0x0, r3}]) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') socket(0xa, 0x80805, 0x0) sync() sync() sync() sync() openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 9.02144457s ago: executing program 2 (id=2012): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3}], 0x4924924924925ec, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x3, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x80001) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$kcm(0x11, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1f7, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x4, 0x6, 0x7ff}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000014) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x34) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 9.014700954s ago: executing program 2 (id=2013): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x800, 0x88c, 0x0) (fail_nth: 7) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x9400000, 0x0, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x2, 0x0, 0x7ffffffe, 0x1fffffffffffe, 0x2, 0xc, {0x1, 0x9, 0x4, 0x1, 0x7, 0x1000, 0x9, 0x523, 0x3, 0x6000, 0x1, 0x0, r2, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r3}, 0x10) 8.558684762s ago: executing program 2 (id=2014): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) setresuid(0x0, 0xee00, 0x0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10000, 0x0, 0x2, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) 8.526436573s ago: executing program 6 (id=2015): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) setresuid(0x0, 0xee00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r3, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xd1, 0x4}}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x33}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x9, 0x193, 0x6, 0x7f, 0x0, 0x4]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x40) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10000, 0x0, 0x2, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) 8.401172277s ago: executing program 2 (id=2017): socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2b, 0x801, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b02010000000009040000018ea44300", @ANYRES32], 0x0) syz_ublk_setup_io_uring(0x150, &(0x7f0000000340)={0x0, 0x33e9, 0x800, 0x0, 0x364}, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f00000005c0)=@ethtool_dump={0x40, 0x6, 0xfffff800}}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aac2aaaaaa"], 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) 8.350480068s ago: executing program 6 (id=2018): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x20040005) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002afaf41f500fc0cfa5caaa697006e657464657673696d300000"], 0x34}}, 0x20000080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 6.237327402s ago: executing program 2 (id=2026): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf0, 0x0, &(0x7f0000000380)="9f449487219195feb14010a486dd9917827e1b880c5c90e2faa02b6c0774139246b3d2c2adf6a4b472a20bf35d4cc9c68812934e65ec7bce00aa7ebd54714e81259badcdb54e06dc7e966f0a9596c6a0284dc75d8a7546b4dd6faa513e6859fa8f44d5cc071562a6614e21706339144a18492ede242b8e67a81d52bac18dcd39f55784e64bd346ac8dfb031fc232f9ad668fcefbdc30e654b75bdc81b0f68977871110575abf37cf65831b8e516e01a64ba7342dce8100f88cdb5b75c3e4e6e04d54a2987f709af6ca3385dfd8a64eb81091a1e04f2e7f97de570ac962ce4bf5b34bb3c2b9de676520490b7600000000", 0x0, 0x203ff, 0x0, 0xb5, 0x87, &(0x7f0000000540)="389cef49510000000000006262d50660d9af31a7f8cd6a6f911beb65d5fe6b54bf21a664737c1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef554098513702fde0b96646d99a790d398b0d2c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9b7dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x0, 0x0, 0xfffffff8}, 0x50) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open_tree(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325240, 0x0, [], [0x2b8], [0x0, 0x1, 0xfffffffe], [0x0, 0x1000000000]}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x400000000010, 0x1, 0x47a) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x0, @val=@perf_event={0x9}}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_connect$uac2(0x3, 0xa3, &(0x7f0000000240)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090291000301053009080b00010107208c0904000000010120000924010040042100070c24030603040102027f00080c2403020703000400070081090401000001022000090401010101022000090501090002030b0408250100004004000904020000010220000904020101010220001024010201000400000008b8000000030905820908004006030825018203f30800fbfdcf7a59f440617011"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) 5.184001855s ago: executing program 6 (id=2029): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x700, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) 5.0694657s ago: executing program 6 (id=2030): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="100200000d0a010300000000000000000a0000010900020073797a31000000000900010073797a3100000000090002"], 0x210}, 0x1, 0x0, 0x0, 0x24040800}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r9 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) socket$kcm(0x29, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f0000000100)={0x101, 0x3}) io_uring_enter(r9, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.820308862s ago: executing program 1 (id=2031): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={&(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, '\x00', 0x3}) 3.680214309s ago: executing program 0 (id=2032): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) close(r3) ioctl$KVM_CAP_SYNC_REGS(r3, 0x4068aea3, &(0x7f00000000c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x185000, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000280)=0x8, 0x4) poll(&(0x7f0000000500)=[{r2, 0x50c0}, {r4, 0x2401}, {r4, 0xdbf183fd3200ac5a}, {r6, 0x2001}, {r5, 0x100}, {0xffffffffffffffff, 0x22}], 0x6, 0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r7, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x1b, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0x2, 0x9, 0x5, 0x6, 0x80000001}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff5d6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x6, &(0x7f0000000380)=""/6, 0xaa968fcae14241f0, 0x4a, '\x00', 0x0, @fallback=0xe, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x6, 0x55}, 0x10, r7, r8, 0x0, 0x0, 0x0, 0x10, 0x72b0}, 0x94) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 3.667809197s ago: executing program 1 (id=2033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.525051495s ago: executing program 0 (id=2034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003cc0)={{0x14, 0x10, 0x1, 0xf5}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14}}, 0x48}}, 0x0) 3.445468352s ago: executing program 6 (id=2035): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() unshare(0x6a040000) syz_usb_connect$uac2(0x0, 0x8e, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0) mq_open(0x0, 0x42, 0x197, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000b00", @ANYRES32=0x0, @ANYBLOB="0500010005000000"], 0x44}, 0x1, 0x0, 0x0, 0x80000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) sendmsg$NFT_BATCH(r5, 0x0, 0x24000000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, 0x0, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0x0) 3.440784286s ago: executing program 0 (id=2036): socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2b, 0x801, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b02010000000009040000018ea44300", @ANYRES32], 0x0) syz_ublk_setup_io_uring(0x150, &(0x7f0000000340)={0x0, 0x33e9, 0x800, 0x0, 0x364}, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f00000005c0)=@ethtool_dump={0x40, 0x6, 0xfffff800}}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aac2aaaaaa"], 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) 2.373443598s ago: executing program 5 (id=2038): socket$netlink(0x10, 0x3, 0xf) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async, rerun: 64) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000340)=0x7) (async) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', 0x0}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r7, 0x8, 0x100, 0xffffffff, {{}, {}, {0x14, 0x19, {0x3, 0x8, 0x1, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x2004c811}, 0x24048890) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="883500002300090004000000ffdbdf25030000002c13e78021121a8004006c800800e3", @ANYRES32=r1, @ANYBLOB="83e153db9c7f837d064096502c21335268bcd7c5b8d404960859311f8c2ca5fa3de75ddf09dab82ebbee9206e533a440e457e9d72934baface853a25f198fcd3442a57ad95d7a6eb79cf7bd0a5826cd95592606771debddced63064d77e1d45704dedabc0779719baa91a2430c4656368f1632ba8385883338472fcc91577393c1628c251fb7310d0283f1886e74e5a0e84233a65ab130a58abb34f1809a60378364cbcef9223df52416f54fc6fc16dcabcd4f86b2469406f1e804003680070084002e2a0000b1d5f7d0f4b1f4cf06b69e4068ab6d53367a9b20427ec828b14738bb6682b25f5a4ea71dcd1ddc7218908228c1733958fd00b2bc53f0544a330c561771aeff05ce91dc894f461d3cd13fa3b4337885cdcfd01e933708d279cfcccb063e19fb1a2aa41c415198053be9567e1a193ac8a6c8e9f0e7747acbd14d55c340b0d5e8347fcda37cb5c1c422a463ef59e7c2392fe4c3c9a953fd0b3ab333623940d3159e920da6dd44f3f1c5f64ae24a82d47f0c7b8bb895d10658ef8eacb995fe3ee1314386868c766b722ec315ae961a0c14b016b0ed2c98d4016b86c944bccba7d86de677be009d001444fbb34372fa2e4724283a33a29d867735137754f4ec02dc4f10894cdbae5ae89ca28abef95d057051dae932fc4d17c40eeb623ac2630134b8baf89912bbdba4aa75265dc586e233587011633c4df6b50ad981183e30741170b53aac9d9b396e2000d0297940d6013e5bb8596c4b2838c1a02eca51059a98d9f1493b711ae57209fe43b7fb50449d9415b652db53d68602b5ca79f54b881cc58c66f8f8d211e3a6ef62e32850f057925b51b958cc7cd5827c858cbc771741a2d3830b2bc728453a486de514f9f57ce5d011ffeec04a306fd4e27ea7c336d3394d6d78f1d2be097c5f176a1736c3a4eef76a34476092ca632577ef63188ef06cf4a60a6fabfc280c510222dd6883193297fccdf238e530e1d55326d7335dba6d43df6b41a4217700a3875cf4dd2f3683a9c1baf2656a8fda1c3deaf57cc2d13e4bfd272721630c13d5e879176d3051bb6b018c9f04a4972a500a380f2c73c94fc7e03aad908e2366b575a3de226c34116823a89fe087c7be0b7a350c2b15cdd2320cac297201c678294b9c1e877f36b91b70116422621e2d6f81f517559eecba613292c5f4e359afc32803d1f34c3ad9197dba422bde67fa179e61e9f6e2cce0e2a26ef6290c1f8ab5f40b598b4836d5dadb5685fb93f34c786168003f9d12bd3669163ad816c84a890fab2570ad26baadc838493f28814a2d34009e97036620a3b92e57ecc381234ae7b11f48dc579ac0f1b14422df5f624d2418c070752af6778bee92e882c87a64a9d33252be15503f49385acf51db0dfee2698e3864b5c2fa1434e8b57a1825f428519a0c2daffed71fff92aeeba7c9df7cc0e6fee544c7ff2a012aa018e893dd947c323e7397f18afb82d83408c336de0a6990e0febb459bb5fe56f9c9246948c97393119b67a8bc6509fa403610b2db640dff20bb38f0b1b582cd3fc70c9353cd467cfa89f75dccc56fe0bbaaee3330db67344504bcf013c51b567c9aff67cb4118a2bff82028983b0eb91e61cdc0b8804610f42421271f164d706b6d9cf28f305db844dc32277388446a105e187d150204f6ad8c72b320a5c00a5a22ce71ad115d518eee96c2725c12fbd3c145fea9d6a329368a7f2b1dcb1d786d671aa7cf333911b5ec5afb087679aedc18f29c5de350976925f862bdb73b0a19d9ce3a2469fa9f51dc52ad2d2e5c947a7fdd3e9de48c6a28fd9aa4a4e28fab8ed6f8f8cc015a286a1717dbc3cc1c3a10d0f9bde7046caf8ff8e0dbd1f53d27f9ab0867be3bff46bf1782640755a763c188a340a632bff056e2dab3a6e38c2b5e4d4ae59a547b7b307176a4f13e558771d7f15d9e8cdd73efc3d8bf3d0672006edf10a4a8d4b989a07a162513bb64fcde43580ae2014d43b88dcb5334456580bbe5daf70c559ecd902bdd3d97307a70d2899a0c738548b3573196945a064d394e690ddca618d4f743e8658b30dbe8ece9c21de50f0ffb53335bce7864e0533c08f34bfaf2b5302f716c5f59067351180c61b49208373378afc7a990641fb051c5a5637cab0808c14490dfa52af6007a329a24fb6f250791a3b8fdf5675c854857fca328254f03d44680975a965627b18aed38461de4c1ca9e950e8e66b25e04bdd94b5e66ba37be6ea4491f2509500d79d4b9064a27c937aa75d97c793c3d5ddedaae9868f8cdcb1e06e0b2d2a5753a16051629625b3a7961753976cef368f59f596bcff11abe1be687b562bac0dea6083216eeae11649a885cc0b1da11125ec502ada1d456945edf203587b83e40a5b7cc97b55b1954bf89c91b8ff21afeba38df1ceed9ba01423c4f8e6359cae609e33d9d3eb80d4c19fcffd878514c326586e82ae82628b1bb4c538367b47399719ed6b3047b39c6255393937f6f54e4bc86a95343c366f07855e1ef1d19a98ac1b0de22787fb0feb54db744004bea015b9d000cd20dcc76967f3a7a6f527957580a9dfa4dffc978395fc5abb526b4cf9419a595087957f676b7f8901604e0603b1db075a841b751a0e4670607d6601369e7470fde6f44c71a14fc2306abd6d0b8ddbc184c7cf562f6c8b8aa8594615004110efee22bbc83a5917850fd42eb2d79c6991652d35eca4d14c7628658f7e8d852109ad429ae5824b10ac1c7078275d4e7684254d49446eb41b9d3db6a44699ef301b23109d7958530006d0dcd47a16f91293cba7ab62df006140ecc69cccb55e8f3e145137297ed941224eb34b64810a8dff30ce9746b6a4817a7b8ac19f4555678cdbf5a1906575031d02bb0e9c5b74521b5c7c80b1948a9ec754a2366e2d92bbdbbc99153a8429db24374dc34d6ea1ebbe61be10820a9f24eb2df4fa5b6604c5698ed0230f8eaa5bf1eb22977cddbf5cd379e3faccfa53e6189f435b53126e0812c21b049789631c40c31fdd7db46040b437e0377d66ad311f18a62301e28b480e53e9c7fcaa876601241dbbb13dbf249541cc7ec87213a9f07b7afa1efea5211f77d0d0b1c39f25de78790a90561ad0c17e4fbf2e602998b873a0445df54ae9600ab4ca15f64f1226ca680e07f80a4092b148c4451f6fa6a763b00363d41c9fcf92ed539d11477bb77c88c4873d488fee29057770d1f4954c4fffd46140d125681c7637ed24b8a7e9f5ff7ecbfab21ed2d29d9aed890206cc0c345aea3fd96620f8f82c94e5597384fcf150a70c516c8fc73d6dd6da441762b95c00e995dd348a40c4393c46dfd75b56753e9165436ff5b1326c9554c7d393e8d070e3453854911fb04302425872e7ea29dc076e10403faabd2afffc54e75c5581cfe33794610de514a790e56a44e814304ba8929c6afcee40815b8296d221638f5aa502d808752cd73bd633e1acbb50b970fdd0d9ac8ba39345eac01a0f865bee8a412eca9bcea8729c30dfaffbc923210d4febc11c7e27ca1af98281c9ca70007d1e5908ea2ec56d110e9e26f4b67b9262eb004dbdf4fcd8ca086e5dcda42d0c07420c6e423d30c3eaf9bbf2a0a1ccc81721afc7555aa555ba96914055d590aa4608ab2add31f36016e3409918d798e0ae71e3527d31d8a45b0ba546aa504b89be06058b9f80d0fe66ecb01b766615f4b091e413dc6558e80affd0c84a42e6280473f6dcc03beb52d2d20a67d4e64ee77ccc579743a11d9061d78ce11fd78a2098099a19fbfcc8bff7af19d7891eaa18cf3e951342c2cc0596b2300a4572dd0e9ba1ad57f5e9cd01401ff5ee98cd43fb0c28646fab826927a4362a2a0a4c0ebc1c935bd8ec7ea6b82adf5ddc6ad2a6295c3ea16f7ec3aedfeff2de00cf147f5632ffdb23df6067ffb6b570e892fdd83bc1bacd7dae3bfb443583224817603165a16180215d35d5cd8a9d97843c361d379c5d6cdd2fc08cefe24b2354ab145201260c7c9927501f7f7bb0e5b367103daea23e12ebcd9e7ab7a52652e7308c879c54829e7322002f2c317c4320fe16e91010fb4e9579b896487f38d14567b655ea660163197be8eb80c53fa888a2404254e40f2605bf92d986405bd40123e11aa9d1bc95cdc84ca93a35472100660cc8dad7945af699b33a3696c1e3313a426abaf2550bc99d83970531ed8217659be81baff0e50d5da71c29a6a4d7d98271adc4de4160b8f0bb32ac29f68ead01f465eab37aa3ac18873bc1a827343528b054661c83d3127d63d85670d55d22e8d344cb0ec59c3610bda0e94b495c5319f68d22e0c482c5f2cb13271a6974df037829b263724b3cad00c92bb84ab7a71a88249778bb17f89bc8331910c1fb1f1dde356f5101dd89075f2a2a68fe42bf7de720babd0b36fd1a930b9bc6434d47adac1efa8754c04c781ed8f934afda00c52b12f0621d5990d2aa7c81322b2b71f7348e6d1c15c8b874213e962766800e5e42ea886d9f3a0347a302e06980f4fcd8bcc1c92bb51f030f90e0f435ea8dcb60b19686e0ed2fea876ab1911346ed699750472b4cd678e82ef66ba1f512a5dc6a5bc3fc8fa6ddb54938f9eefba10caccfd1691a8135d8a46a1e5b9473b6d79e749c150de44d94af98d1472360c20ecd53d2c92394a1a715e539697f08a0dfa2a5c5e1d07cbc2d822fddcef0f94127e5205df1895b55243e585be2b76d44837f1b02243645cf5b27bb43b8f3fb06171279b0b180d62a2a96cc4a98231bfec2ba239d34686f3c25ace97f4ed0dfd9d6d5ad4622e2657a88e53905d7311ee89b64b7df11c06c07762d824dec5396dc340646e252af4dcefa79515f9a6edc557fd6964945a47998aee0188390aa570d19f71e9bf19cc6708b0791c26ab806cc7835796059164bba3831133ecd2270891b8be249d1a7722f72a9932db320c9e49c551ffd4aad2cafffe4c11a8730e1adab581caca0b7fbb5ac8d5822bf3a4adfa2208dda7b3ad72703a0f1034890eba4b74dab3d66fca24f442e62d307ddf55403390fbe8dbb88a07b34a98c3eab5c9ac8454e8dd191d151c97b394c0765a5c11aba66ce22cfcabc1e24f98b081cbdebe1956370fce7a0f96b63bee715611b2f4b4fc2de26ce04a93c97fa94a118f87921bb8d7858333dfb72465a9a588a2a2c3ce0dc3a6913a6f8408ba05c3cf1aa93b79edcd1917542a744232e4b6994ae5e735e9e6b89cb6a65c796419478bb20c7749da4cba8a6a64711b64f32adf9a899cc87ee3f46ae980d7da59aad5e210b541415e1886ad06b1c06a05fec27f1d24a99e0a7053a33c4dbc045441faef55be5668389ae6a56c2e56864060fb0aea761abf9aaf7351e4735b8f4305b0328cb4fcc8aed5fa3a6ffe62a0331e2078e8b697027ff31b457d9d229db9914641b14d2bdaa9946d9ca91f188aa3b152e33ce02672291028a6138bf1702b4333af306a27dea8bcfe8a405a3607833452f8bc3858a5621888ed13535990434f61a763319ec9f129c01bb7fbbcf21d15413b9b9d81bc7817f58c4ef6b7da224199b51cb52115d4ecdb3c468db2698e793039a462e12c2a0f107e7449ddeff66e73f649ab560fd1f4fec5ff584fc83e0d9c784b9f381982ae93407d2dbe40b258e138dd37f7f79de0111bc2910e2b6bb71de7d1996b8cbf4f358c6e7d13988fe3c4fcede0640d0c309a48802bf4521a4de8e7b5adbcc0ccccf42d3ef61d570e7a6ba07bbc168ca859c83fb8ed23d5ab69b1319f5337535fb3665ff6128174d31ff04780796f56261d0e936874c7bccf95c452e0fa127dd97d3f4067a81e659b4b2561fd1696a73df41ba7616e53c6f35737d85c2b8d30bc5070abfcb0944518b8be60b308ad33593987521207963fbd74cc40fda3652fc5d90478a5beaf068ae000f7044721d5a5563013a26a8d6b6ee2b7f3122e60c781b719d7e7076f01023efafc18637c386439de8b8d0a0018de67c485a93d60533db361df109222cf72881e2bffddbbf1f10831c61f355124e958e183dba00605ba44714c8b479ac9302e8737900d12595ad96789b7e3bf467d467c0ee1d4154df4c5cd51eedca5586c61d99af42cf7970d87565e92b012814b3959052a1785946f9dc4b2bf90c77c80814cc1e6e195956ce5616c10b67d8772969f0d6c2a177ac67ac04ae024791bfeca841a1137624b17bf22ab6ebd2e5ec596560fd718d53157b045001bbdfd97cba38ac38c59f43b05b68adfa95f50c7633931a6174a0a2d27757e04ef34a550d104b67e8e287d0ec43376ad97bd4852b8ddc33cd72bba4be5cdfc439e93dbb9aea291e85e390c08837f4159311e0ff3365436b7347108de50ed27f1dfe79b44683f0f27b74707517cfdce18dacc853fe5b3c3bac9819a3408e69580bcd7830dfe39fcb6dbf19580b8da3db0284261682b9a723a3c686b57dbd294d3b6b4f03cc6ba38e4e742f38acca93ea5e36608da243a2c467a45a0c7d48c50f0c5d92c72373d220f227481b88644cebb33349d681e5a526e55e5a172d0ea244f0c6a37938ceed004003380000000fb004380153dd93037d1cbeea47e8a20f0fded3e93a9017cd52a17c4ac53ef6c1580f12ad324e75481b12086a0314a3508e679b7f174e595579679a1a6568b0373dd56b522e49edd3ec1526ed3f73f01755eb1f259ce11e57aee13eb6ac858f42b3e09c56328acf5b4eabfe1a56217d83f39f8762659b8357f0ccb1c77cc2b817574d789d30f20e5aac702ea563f8a462f429d9f5bd29ec91bb43be29836debdb1ff1411d2e282bc61cca85e1934d15e85655a4d762246fe0bc1dc1525ce1cadffa3dab5b6a6158619161fb4d835d6282de41ab8e9381ddfbb9bd91d2f47efdbc11b0dbbdf0f3a1fa492adf15205b84e6f909b0400a780040028800008000300", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="e800f6800c008400010000000000000009003a0054495043000000004500a48083498be0d14a67b800a9b190335f59cce7d5e93ed3f8c44f8c44a3f970dab5bb534586ed6a43fc0491ba2dd4d7c73650c71911a05b0f3a460a5302be40df5489f200000004005c003769d56295f30c05dd61ba1357b24f1c454c28db0150fb57e7e60f1793249a2fcdf4475e30f2fb06e5218bdd9634db97e4ab7a3efebda4f4c8e4534a255327b156061c40ce845ec0f59e69a77bb6638da037f1dfde5617b9d17e74fff99f385fe250e673100012002f6465762f766964656f23000c0073800400048004001880100035800c001e00ff7f000000000000c8761df762d401e3ae264aef4b5c2bae6907000000000000000762e55cd5ef9c076e6b441c965a9fc105543bf1b994bce4bcef7153187aec16b2bc45211105570b1929189836f6c189afb70bc361394c53e2a27be3ec260174be461e116939cbd5a97c482ad0d72ccf973cdc05bf11252b9f0cfaf47ad91fa23f5bb2ac5fd0f49585ef616669b65201e7d5f2661cd0d340b224ff7dbcac61d88788c79e380aae11e26784d3ef1b5cfa2e9f2e611a265afb882fa7aa756de86a1703aeb554e388955904ada0239705c0695c34aeee62fb2f1d16e876ad17ec1c80be62e46e29e4677e241509b43175c12c1185a944222f389506038529bd5edc2c8627ea2ed252de3cdfa139df1ac9437e3cb2ce7ecc3d84931e119f48348279f8783d85b20da5e52b9053bc4923e42124957450c20becde61143e71c824926ccf54235a2060f32ceae1b7df3e24771b4c522cf759957010e60fbfac6f6eca3252ddb73635e4f2630e8cd7fa9eeeebeb76878fb76e0334d9f249bc074c96d12b0ff669086290ab4ff45500f61b57e1b4fb51d7ab385eb2216e58ccd76b51a818dd70d0fb8a38eb0bb7744f768b0a550440135ada7d597727def1ebdb7f4b5ff79d606522a53728f2b81903031eaa0dfb35c4a55ee9d9e95833576a8a05b0113dc9a18993f747eee58356a0b81875d3af756e28e9fad24cbff6095ebdfa25baafd7374165f074411c041c50de7693869274394d94dd8bae7181304673eccf758dd4d78a3c29cfc02324de5e3c813803b81f2f152ceb8d2cf64e84f2f41c47f7665e83edd403cc1c9d4c3a6b051d0de5180b791255761cafcff38b4fda267cf7a44c4a60371ad95de62ddd7194ae521cf17d42281461e44ee4921114f8f0cee5f34d5be465a70b0ba34536655261ec57d77f4ae8239d1e74683e66a91971086d94704173e8b19069cb4a87f003cd2cda58d0e9343235d68ccead33573c9c8d7e134a5f25c413492e20a3271cbbb3ab1af7347a652533ca63c8ffb20d7ddc3d4c4d56e771052fdd6e6f4795bdd44058b1f813bb08a564ca87a10a82d45c647a4e5a373c0c61f3a9e42e267bdc4dd95620e94e06985c8c4a6fc94cabc7c64c5ffd9d9523efa177652108762ed16a0af28fdee90885789e24fede390d550c536e54837681138456d0f4ab1b638ea72592082377e42c31f73205b2a450bf95c27be9119f33644027c9fbebaf94c52ff4f0bf76e0fe19df03575ef1053f7db9c830cc156abac7da2106c97975e6cd5e1cd5ef0a89c2aba67094e96db783a82e77f458272ba3a40883904b5e49f545e73ee823b9e79c38cd7e21a050da0a335f72985e2c35871f6917283a9b5a852ef52b8878f49bd91693c84822216a602f695184d62aee9d82c7b5df19571e00a929d4bef2489f2d93a963e1feddc7146d2826e8708e69e3b792de4fd53e155af85f66ba7e8f6e91178aba6bd1c32011565b99394ebd49b4283d93b43c27e350aee5705a5a33613b82d87b61be545fe1b9d71a1c305980739c7dc08d0a8235d9c66e82271dcaf19f6a0e57a28febb47a2188cde041df5ab94a1ca6384f09cef52f3628490e5e4bedc741ccd63b7c1cf507b1fe697e944e6a3a42aec47b82d0637bfff2cce8eb447fe7b3684dfd17fd67daeaa5133b4e8d7697ae738d3136a72389c53b5c0c64a03df91b2433603eea99d06c63368c700447d353a7db08ce2e4c9ee1b28f8adc6f5e9b814d650dccac6f7d1ec4107cc6507f3fbe9fd3eb6757d0b39055a95b5674d6c120e62a4757bec81a1a31415362891316453acdad4864b8173b55004140789e15ed696a1d83726c9695ece5cec8ee93562ad3e98b75ea3ccd0906b4308237afd95b08f67d3bdaf1ce8b23bda7b11ad241b1b6e9d006ea1cb5fa2fcc14431588180047472e140509362be8d0825407fe005eb73bd1b66690c7fadfedc990e5f315d66615029cb496bb7c9626e6a3813a8e3fa7eddfb1abed6012a48e48689dd3e3d966ada2b48f2570cf6d464f5f6d57043d845df8197a8b0f007cae36b333b9a88ee1783fd58767b84c40256eac97047e20e4201e0fd3b0c8c45d23ac6d6e1d27d7ab05cd0d0eab0667127ea4f4963638bd8817de82b27acd9af3b31b0688fc26b0528940a3eb00fe2a84aed087f918df45b03289914d04af580355fb3affc2e09466da1d8752981789d4b42d76c897082c16a3057708a062c21e65da69a205271f73f60af5d51aa61f8eddde1f20ba768f3b214e9c3b841aa249150546deae7ca493b5c7981a5745dbe3a05b7e27cd1bf6501d86436efe699de56660f0e61e89baca89fef1c8bcec61332daa13440e31a98ba23de5ec637b2cd6f05948df031309a065423e9265c47b2ed4e8c8db3951a366702fd78e5593f2f78b1141ffd7655be01448ad939b14dce0be8e916d7dd54ec731810ecab69ee0954e83ba995f464af7209c3a05db61c72edbb7fad8a95fd59b26"], 0x3588}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) 2.347109276s ago: executing program 2 (id=2039): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() unshare(0x6a040000) syz_usb_connect$uac2(0x0, 0x8e, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0) mq_open(0x0, 0x42, 0x197, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000b00", @ANYRES32=0x0, @ANYBLOB="0500010005000000"], 0x44}, 0x1, 0x0, 0x0, 0x80000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) sendmsg$NFT_BATCH(r5, 0x0, 0x24000000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, 0x0, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0x0) 2.338631452s ago: executing program 1 (id=2040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x6, 0x4e, 0x8, 0x7}, {0xa, 0x9, 0x7, 0x10001}, {0x7, 0x5, 0x6, 0x8}, {0x9, 0x8, 0x6, 0x4}, {0xff, 0x0, 0x2, 0x9}]}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x58}}, 0x40010) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000100)=""/68, &(0x7f0000000180)=0x44) 2.289493176s ago: executing program 5 (id=2041): r0 = msgget$private(0x0, 0x1c0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x402) syz_emit_ethernet(0x1a2, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x16c, 0x6, 0xff, @local, @local, {[@srh={0x12, 0x4, 0x4, 0x2, 0x2, 0x30, 0x6, [@loopback, @mcast1]}, @srh={0x0, 0x2, 0x4, 0x1, 0xee, 0x20, 0xdef, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x2f}, @hopopts={0x4, 0x11, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x6, 0x8, [0x4, 0x65d, 0xfaf4, 0x8, 0x0, 0x7, 0x1ff, 0x2, 0x2]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x8, 0x7, [0x3, 0x14dd2fc5, 0x7, 0xffffffffffff8000, 0x5, 0x9]}}]}, @routing={0x0, 0xe, 0x1, 0xc, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private1, @empty, @local]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00001c"], 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 2.039515558s ago: executing program 5 (id=2042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) close(r3) ioctl$KVM_CAP_SYNC_REGS(r3, 0x4068aea3, &(0x7f00000000c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x185000, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) setuid(0xee01) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000280)=0x8, 0x4) poll(&(0x7f0000000500)=[{r2, 0x50c0}, {r4, 0x2401}, {r4, 0xdbf183fd3200ac5a}, {r6, 0x2001}, {r5, 0x100}, {0xffffffffffffffff, 0x22}], 0x6, 0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r7, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x1b, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0x2, 0x9, 0x5, 0x6, 0x80000001}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff5d6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x6, &(0x7f0000000380)=""/6, 0xaa968fcae14241f0, 0x4a, '\x00', 0x0, @fallback=0xe, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x6, 0x55}, 0x10, r7, r8, 0x0, 0x0, 0x0, 0x10, 0x72b0}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) 2.029348598s ago: executing program 1 (id=2043): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={&(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, '\x00', 0x3}) 1.972943165s ago: executing program 5 (id=2044): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) fcntl$lock(r1, 0x5, &(0x7f0000000080)={0x0, 0x1, 0x10001, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, r2, 0x42795000) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10) 1.940235977s ago: executing program 1 (id=2045): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe3"], 0x10b8}, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000000c0)='sync\x00', 0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/111) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r5, 0x0, 0x7}, 0x38) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r7, 0x3, 0x12, &(0x7f0000000840)=""/4096) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x4b564d03, 0x0, 0x7ff}]}) r9 = fsmount(r4, 0x0, 0x86) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) 1.735673818s ago: executing program 5 (id=2046): syz_open_dev$vim2m(&(0x7f0000000080), 0x9e, 0x2) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 1.490920625s ago: executing program 0 (id=2047): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) r0 = timerfd_create(0x0, 0x80000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r3, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.195727641s ago: executing program 0 (id=2048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.00861578s ago: executing program 1 (id=2049): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000640)="b805000000b963ee00000f01d90f01d10f01c866baf80cb8e21e7180ef66bafc0c66ed2edbaa23aa2ab2b805000000b90001c0fe0f01c1f32e0f32b9800000c00f3235000100000f30c4c315494e009a9ac9f200000f01", 0xb5}], 0x1, 0x74, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a008d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733e0e74bedd5dc96e20d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f06"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800)="3d6974fe844057fe813081dab1dce03aba02d45fc8cb9c60f2e3478540e28656f3ea02399e4d5d2d797af868e1bf8482ee9a730d6dd3cb3d718412ad9bea2cd2bf49d6d4a11abce919d35f62b8e7fadd3e73e7cf748b01e231fc8200c5abcb7f3a6cfb42ee8c0fdfe1e8d6d3ed66713d6854392942a057dd8e7997be2575b55f3d803c13640f73e5cb9b11b18a8df7c9d46f39298a2e784978603a12693c62374741457f85a849be15dc3212e10146c2a93c929e47a88736cf939df889f13a2385819b907aedcbd7d656ba1ac0aaa697823ba107541f7464f8c8ca", 0xdb) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000900)={0x74, 0x0, 0x42}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008ecff00b7030000000000838500000071000000959fe8539410f1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffe04) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES64=r6, @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf2501000000000000000b"], 0x30}}, 0x8040) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x1e, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r10 = socket(0x26, 0x5, 0x5) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="2000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="8c0004000000000006e6c5180f24e51605c43c7a4873305e172a48d5f4bd9840ba3dd4e030f5cf01b449078b9100ceb4893478d103d5bf75cc3e429d63e18e9d7fad49634fc7d6c91ecc306c282d7a9607cc7deb277e9aedc844ab0f43acdd8befaec4eaf54ec2d863d72ca026ff87e2e4796bd54fcc7b56d10ea7182fa49e3da6a61bad3554ed6c2d42498ae397d1174e0c91e73be47181ec732b3eed9c13ff902aacde19145c8b4a5b41d58869bf019f25df4851c16d95a7ca4998522175a71e4209b1839ccc51241b62c7dd1f3becafac970b186ec934b50f14a170abdfc20b0f"], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x40804) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newtaction={0x4dc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x4c8, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x41000000, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x2, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0x7, 0x39, 0x0, 0x2, 0x1, 0xb, 0x6, 0x86, 0xf, 0x6, 0x0, 0xb, 0x1, 0xb28, 0x4, 0x4, 0x9, 0x2, 0x3, 0x8001, 0x2, 0x6e, 0x5, 0x9, 0xc9, 0x6, 0xd, 0x8427, 0xffffffff, 0x0, 0x7ff, 0x1358a5, 0x0, 0x5, 0xc, 0x7fffffff, 0xaed, 0xfffffff9, 0x5, 0x4, 0x7, 0x1, 0x655, 0x8aa, 0x0, 0xfffffffa, 0xef, 0x9, 0x35, 0xe, 0x1, 0x5, 0x8, 0x8, 0x9c6, 0x6, 0x5, 0x5, 0x3, 0x5, 0x8, 0x90a6, 0x2800, 0x3, 0x3, 0x1, 0x660f, 0x1, 0x7, 0x3, 0x8, 0x6, 0x3, 0x8100000, 0x2, 0x61bdb470, 0x81, 0xffffeffa, 0x8, 0x5, 0x5c4f, 0x70, 0x8001, 0x4, 0x400, 0x0, 0x1e37, 0x5, 0x80000001, 0x4, 0xf6, 0x0, 0x2, 0x4, 0x8, 0x6, 0x7fffffff, 0x2, 0x0, 0xf02, 0x6, 0x1, 0x42f, 0x9, 0x24f, 0x3ff, 0x7, 0x7, 0xc000000, 0xe767, 0x5, 0x1ef7, 0xff, 0xfffffff9, 0x871e, 0x2, 0xfffffff1, 0x7, 0x5, 0x1, 0x2, 0x800, 0x9, 0x6, 0xdee, 0x7a, 0x7, 0x1, 0x1, 0x10, 0xffff, 0xffc00000, 0xfe5a, 0x5, 0x6, 0x2d, 0x4f, 0x1c20, 0x1, 0x7, 0x1, 0x9, 0x6, 0x7ff, 0x5, 0x5504, 0x5, 0x2, 0x1ff, 0x8, 0x5, 0x35b, 0x1, 0x28f, 0x2, 0x5, 0x800, 0x10000, 0x5, 0x3, 0x6, 0x5, 0x3, 0x1ff, 0x2, 0x7fffffff, 0x6, 0x6, 0x6, 0x1, 0x8, 0xfffffffe, 0x2, 0x80000000, 0x1, 0x8712, 0x4b, 0x10, 0x5, 0x1, 0x0, 0xff, 0x4, 0x3, 0x5, 0x1d9, 0xff, 0x7f9b, 0x4, 0x0, 0x6, 0x3, 0xfffffffa, 0x7, 0x6, 0x9, 0xffffffff, 0x6, 0x516, 0x3, 0x9, 0xb6d, 0x4, 0x7, 0x1, 0x4, 0x5, 0x8, 0x7, 0x1, 0x6, 0x3ff, 0x3, 0x3, 0x800, 0xe, 0x246, 0x2, 0x6, 0xfffffff1, 0xfff, 0x1, 0x3ff, 0x6, 0x0, 0xfda, 0x2, 0x0, 0x0, 0x49800, 0x9, 0x10001, 0x4, 0x9, 0x9ac, 0x8, 0x7f, 0x6, 0x9, 0x0, 0x4, 0x7fff, 0x9, 0x7, 0x8, 0x8, 0x10000, 0x8, 0x9, 0x8, 0x9, 0x80, 0x9, 0x5, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x48, 0xe, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x4dc}}, 0x0) 313.671ms ago: executing program 5 (id=2050): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x2040403) keyctl$KEYCTL_WATCH_KEY(0x6, r0, 0xffffffffffffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats_percpu\x00') r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000400)={0x42, 0x6, 0x3}, 0x10) bind$tipc(r3, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) 183.318906ms ago: executing program 6 (id=2051): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000040)=""/51, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x101041, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000100)=0x5) r8 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r8}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000280)={0x20, 0x6, 0xfe, 0x400, 0x0, 0xff7ffff5, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) ioctl$VHOST_VDPA_SET_GROUP_ASID(r8, 0x4008af7c, &(0x7f0000000080)={0x2, 0xece}) 0s ago: executing program 0 (id=2052): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x20000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_robust_list(&(0x7f0000000400), 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/hibernate_compression_threads', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0xfffffffffffffbff, 0x12) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) gettid() timer_create(0x8, 0x0, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = fanotify_init(0xf00, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x2a0c0, 0x97) fanotify_mark(r8, 0x5, 0x4800003e, r9, 0x0) mkdirat(r3, &(0x7f0000000040)='./bus\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x98) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x200200a, &(0x7f00000005c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@hash}, {@measure}, {@fowner_gt}, {@euid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '}+#'}}]}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r10, 0x8918, 0x0) mmap(&(0x7f0000a95000/0x3000)=nil, 0x3000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, &(0x7f0000000380)) kernel console output (not intermixed with test programs): 5604] usb 1-1: USB disconnect, device number 97 [ 381.783705][T11882] Bluetooth: MGMT ver 1.23 [ 381.789456][ T5703] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 381.804450][ T30] audit: type=1400 audit(1781620105.788:1014): avc: denied { read } for pid=11881 comm="syz.6.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.839557][ T5703] usb 2-1: device descriptor read/8, error -71 [ 381.884249][ T5742] usb 6-1: Max retries (5) exceeded reading string descriptor 201 [ 381.901501][ T5742] letsketch 0003:6161:4D15.0038: probe with driver letsketch failed with error -71 [ 381.960650][ T5742] usb 6-1: USB disconnect, device number 47 [ 381.979938][ T5604] IPVS: starting estimator thread 0... [ 382.079439][ T5703] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 382.109686][T11886] IPVS: using max 57 ests per chain, 136800 per kthread [ 382.639025][ T5702] uclogic 0003:256C:006D.0039: failed retrieving string descriptor #100: -71 [ 382.769800][ T5702] uclogic 0003:256C:006D.0039: failed retrieving pen parameters: -71 [ 382.777927][ T5702] uclogic 0003:256C:006D.0039: failed probing pen v1 parameters: -71 [ 382.786119][ T5702] uclogic 0003:256C:006D.0039: failed probing parameters: -71 [ 382.793948][ T5702] uclogic 0003:256C:006D.0039: probe with driver uclogic failed with error -71 [ 382.803422][ T5703] usb 2-1: device descriptor read/8, error -71 [ 382.812271][ T5702] usb 3-1: USB disconnect, device number 74 [ 382.843852][T11895] netlink: 'syz.0.1657': attribute type 1 has an invalid length. [ 382.893876][T11895] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.922637][T11895] vlan2: entered allmulticast mode [ 382.927962][ T5703] usb usb2-port1: unable to enumerate USB device [ 382.936564][T11895] bond2: entered allmulticast mode [ 382.956280][T11895] bond2: (slave geneve2): making interface the new active one [ 382.963866][T11895] geneve2: entered allmulticast mode [ 382.970835][T11895] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 383.017380][T11906] netlink: 'syz.0.1662': attribute type 4 has an invalid length. [ 383.689714][T11926] netlink: 'syz.2.1668': attribute type 4 has an invalid length. [ 383.714745][T11926] netlink: 'syz.2.1668': attribute type 4 has an invalid length. [ 383.789146][ T5742] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 383.812092][T11904] FAULT_INJECTION: forcing a failure. [ 383.812092][T11904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.844505][T11904] CPU: 1 UID: 0 PID: 11904 Comm: syz.6.1659 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.844533][T11904] Tainted: [L]=SOFTLOCKUP [ 383.844538][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.844547][T11904] Call Trace: [ 383.844552][T11904] [ 383.844558][T11904] dump_stack_lvl+0x100/0x190 [ 383.844581][T11904] should_fail_ex.cold+0x5/0xa [ 383.844601][T11904] core_sys_select+0x938/0xbb0 [ 383.844620][T11904] ? __pfx_core_sys_select+0x10/0x10 [ 383.844636][T11904] ? get_pid_task+0xfc/0x250 [ 383.844666][T11904] ? __pfx_set_user_sigmask+0x10/0x10 [ 383.844691][T11904] ? __mutex_unlock_slowpath+0x350/0x910 [ 383.844709][T11904] do_pselect.constprop.0+0x238/0x270 [ 383.844723][T11904] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 383.844735][T11904] ? ksys_write+0x1ac/0x250 [ 383.844745][T11904] __x64_sys_pselect6+0x149/0x1c0 [ 383.844756][T11904] do_syscall_64+0x115/0x870 [ 383.844766][T11904] ? clear_bhb_loop+0x40/0x90 [ 383.844778][T11904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.844788][T11904] RIP: 0033:0x7f7681b9ce59 [ 383.844797][T11904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.844807][T11904] RSP: 002b:00007f76829b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 383.844818][T11904] RAX: ffffffffffffffda RBX: 00007f7681e16090 RCX: 00007f7681b9ce59 [ 383.844825][T11904] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 383.844832][T11904] RBP: 00007f76829b5090 R08: 0000000000000000 R09: 0000000000000000 [ 383.844838][T11904] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 383.844845][T11904] R13: 00007f7681e16128 R14: 00007f7681e16090 R15: 00007ffe6c9d9708 [ 383.844857][T11904] [ 384.026947][T11927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11927 comm=syz.2.1668 [ 384.422906][ T5742] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 384.436835][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.468769][ T5742] usb 1-1: Product: syz [ 384.541815][ T5742] usb 1-1: Manufacturer: syz [ 384.559129][ T5703] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 384.562932][ T5742] usb 1-1: SerialNumber: syz [ 384.711345][ T5742] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 384.713926][ T5703] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 384.724892][ T5604] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 384.733605][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.122249][ T5703] usb 3-1: Product: syz [ 385.126481][ T5703] usb 3-1: Manufacturer: syz [ 385.133534][ T5703] usb 3-1: SerialNumber: syz [ 385.141857][ T5703] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 385.155921][ T5702] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 385.489811][ T5742] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 385.650658][ T5742] usb 6-1: not running at top speed; connect to a high speed hub [ 385.658505][ T5742] usb 6-1: no configurations [ 385.663172][ T5742] usb 6-1: can't read configurations, error -22 [ 385.799168][ T5742] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 385.959671][ T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 385.969038][ T5742] usb 6-1: not running at top speed; connect to a high speed hub [ 385.976839][ T5742] usb 6-1: no configurations [ 385.981521][ T5742] usb 6-1: can't read configurations, error -22 [ 385.987944][ T5742] usb usb6-port1: attempt power cycle [ 386.119327][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 386.125969][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 386.134840][ T24] usb 2-1: config 0 has no interface number 0 [ 386.141046][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 386.149567][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 386.158617][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.167228][ T24] usb 2-1: Product: syz [ 386.171464][ T24] usb 2-1: Manufacturer: syz [ 386.176097][ T5604] usb 1-1: Service connection timeout for: 256 [ 386.182322][ T24] usb 2-1: SerialNumber: syz [ 386.186952][ T5604] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 386.196551][ T24] usb 2-1: config 0 descriptor?? [ 386.218034][ T5604] ath9k_htc: Failed to initialize the device [ 386.225975][ T5604] usb 1-1: ath9k_htc: USB layer deinitialized [ 386.329141][ T5742] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 386.352279][ T5742] usb 6-1: not running at top speed; connect to a high speed hub [ 386.365716][ T5694] usb 1-1: USB disconnect, device number 98 [ 386.375362][ T5742] usb 6-1: no configurations [ 386.386129][ T5742] usb 6-1: can't read configurations, error -22 [ 386.429636][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 386.491308][ T5702] usb 3-1: Service connection timeout for: 256 [ 386.500224][ T5702] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 386.519256][ T5742] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 386.524360][ T5702] ath9k_htc: Failed to initialize the device [ 386.662605][ T5742] usb 6-1: not running at top speed; connect to a high speed hub [ 386.673964][ T5742] usb 6-1: no configurations [ 386.687599][ T5742] usb 6-1: can't read configurations, error -22 [ 386.706577][ T5742] usb usb6-port1: unable to enumerate USB device [ 386.778660][ T5702] usb 3-1: ath9k_htc: USB layer deinitialized [ 386.803684][ T5702] usb 3-1: USB disconnect, device number 75 [ 387.292462][ T30] audit: type=1400 audit(1781620111.278:1015): avc: denied { accept } for pid=11965 comm="syz.2.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 387.292628][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1680'. [ 387.323970][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1680'. [ 387.806586][T11977] syzkaller0: entered allmulticast mode [ 388.246955][T11981] veth0: Caught tx_queue_len zero misconfig [ 388.903727][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 388.936754][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 388.971083][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 388.997092][ T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 389.021963][ T24] usb 2-1: USB disconnect, device number 72 [ 389.035579][T11999] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1689'. [ 389.057598][T11999] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1689'. [ 389.339226][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 389.407384][ T30] audit: type=1400 audit(1781620113.388:1016): avc: denied { accept } for pid=11998 comm="syz.6.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 389.428807][T11999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.515086][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.526677][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.537036][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 389.547956][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.569629][ T5742] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 389.581897][ T24] usb 2-1: config 0 descriptor?? [ 389.752836][ T5604] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 389.787859][ T30] audit: type=1400 audit(1781620113.768:1017): avc: denied { name_bind 0x1000000 } for pid=12016 comm="syz.0.1695" path="socket:[42869]" dev="sockfs" ino=42869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 389.909168][ T5604] usb 3-1: Using ep0 maxpacket: 8 [ 389.915894][ T5604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.928986][ T5742] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 389.940686][ T5604] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 389.950017][ T5742] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.966135][ T5604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.974875][ T5742] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.985551][ T5742] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.000691][ T5604] usb 3-1: config 0 descriptor?? [ 390.006414][ T5742] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.017121][ T5742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.027421][ T5742] usb 6-1: config 0 descriptor?? [ 390.118154][T12024] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1697'. [ 390.128922][T12024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1697'. [ 390.200733][ T24] cp2112 0003:10C4:EA90.003A: unknown main item tag 0x0 [ 390.207757][ T24] cp2112 0003:10C4:EA90.003A: unknown main item tag 0x0 [ 390.215116][ T24] cp2112 0003:10C4:EA90.003A: unknown main item tag 0x0 [ 390.223837][ T5604] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 390.234792][ T24] cp2112 0003:10C4:EA90.003A: unknown main item tag 0x0 [ 390.242459][ T24] cp2112 0003:10C4:EA90.003A: unknown main item tag 0x0 [ 390.251025][ T24] cp2112 0003:10C4:EA90.003A: unknown main item tag 0x0 [ 390.258045][ T24] cp2112 0003:10C4:EA90.003A: unknown main item tag 0x0 [ 390.269324][ T24] cp2112 0003:10C4:EA90.003A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 390.419713][ T24] cp2112 0003:10C4:EA90.003A: Part Number: 0x00 Device Version: 0x00 [ 390.807375][ T5694] usb 3-1: USB disconnect, device number 76 [ 390.940182][ T5742] usbhid 6-1:0.0: can't add hid device: -71 [ 390.986528][ T24] cp2112 0003:10C4:EA90.003A: error setting SMBus config [ 391.034942][ T5742] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 391.086494][ T24] cp2112 0003:10C4:EA90.003A: probe with driver cp2112 failed with error -71 [ 391.122175][ T5742] usb 6-1: USB disconnect, device number 52 [ 391.133171][ T24] usb 2-1: USB disconnect, device number 73 [ 391.352895][T12032] tipc: Enabled bearer , priority 0 [ 391.360398][T12032] syzkaller0: entered promiscuous mode [ 391.365857][T12032] syzkaller0: entered allmulticast mode [ 391.374580][T12032] tipc: Resetting bearer [ 391.381668][T12031] tipc: Resetting bearer [ 391.387985][T12031] tipc: Disabling bearer [ 391.409362][ T5703] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 391.545692][T12037] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 391.555027][T12037] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 391.581136][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 391.598353][ T5703] usb 1-1: unable to get BOS descriptor or descriptor too short [ 391.601936][T12040] FAULT_INJECTION: forcing a failure. [ 391.601936][T12040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.688560][ T5703] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 391.697170][T12040] CPU: 1 UID: 0 PID: 12040 Comm: syz.5.1704 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.697198][T12040] Tainted: [L]=SOFTLOCKUP [ 391.697205][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.697216][T12040] Call Trace: [ 391.697222][T12040] [ 391.697229][T12040] dump_stack_lvl+0x100/0x190 [ 391.697252][T12040] should_fail_ex.cold+0x5/0xa [ 391.697273][T12040] _copy_to_user+0x32/0xd0 [ 391.697292][T12040] simple_read_from_buffer+0xcb/0x170 [ 391.697311][T12040] proc_fail_nth_read+0x1af/0x230 [ 391.697339][T12040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 391.697365][T12040] ? security_file_permission+0x76/0x210 [ 391.697389][T12040] ? rw_verify_area+0xce/0x6d0 [ 391.697418][T12040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 391.697445][T12040] vfs_read+0x1e4/0xb40 [ 391.697471][T12040] ? __pfx_vfs_read+0x10/0x10 [ 391.697496][T12040] ? rcu_is_watching+0x12/0xc0 [ 391.697519][T12040] ? __fget_files+0x21f/0x3d0 [ 391.697537][T12040] ksys_read+0x12a/0x250 [ 391.697552][T12040] ? __pfx_ksys_read+0x10/0x10 [ 391.697566][T12040] ? rcu_is_watching+0x12/0xc0 [ 391.697585][T12040] do_syscall_64+0x115/0x870 [ 391.697599][T12040] ? clear_bhb_loop+0x40/0x90 [ 391.697616][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.697631][T12040] RIP: 0033:0x7f198c35d68e [ 391.697645][T12040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 391.697660][T12040] RSP: 002b:00007f198d173fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 391.697675][T12040] RAX: ffffffffffffffda RBX: 00007f198d1746c0 RCX: 00007f198c35d68e [ 391.697685][T12040] RDX: 000000000000000f RSI: 00007f198d1740a0 RDI: 0000000000000004 [ 391.697695][T12040] RBP: 00007f198d174090 R08: 0000000000000000 R09: 0000000000000000 [ 391.697704][T12040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.697713][T12040] R13: 00007f198c616038 R14: 00007f198c615fa0 R15: 00007fff0ec1a5b8 [ 391.697728][T12040] [ 391.856061][T12043] pimreg: entered allmulticast mode [ 391.864175][ T5703] usb 1-1: config 0 has no interface number 0 [ 391.926713][ T5703] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 391.944077][ T5703] usb 1-1: config 0 interface 88 has no altsetting 0 [ 391.956849][ T5703] usb 1-1: string descriptor 0 read error: -22 [ 391.965122][ T5703] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 391.974498][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 392.013366][ T5703] usb 1-1: config 0 descriptor?? [ 392.062583][ T5703] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input76 [ 392.814409][ T5703] usb 1-1: USB disconnect, device number 99 [ 392.814423][ C1] usb_acecad 1-1:0.88: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 393.871372][T12064] overlayfs: missing 'lowerdir' [ 394.053342][T12070] lo speed is unknown, defaulting to 1000 [ 394.106012][T12073] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 394.122302][T12073] bond1 (unregistering): Released all slaves [ 394.161406][ T5791] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 394.332812][ T5791] usb 1-1: Using ep0 maxpacket: 8 [ 394.397110][T12081] FAULT_INJECTION: forcing a failure. [ 394.397110][T12081] name failslab, interval 1, probability 0, space 0, times 0 [ 394.409855][T12081] CPU: 1 UID: 0 PID: 12081 Comm: syz.2.1714 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.409881][T12081] Tainted: [L]=SOFTLOCKUP [ 394.409887][T12081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 394.409898][T12081] Call Trace: [ 394.409905][T12081] [ 394.409911][T12081] dump_stack_lvl+0x100/0x190 [ 394.409935][T12081] should_fail_ex.cold+0x5/0xa [ 394.409955][T12081] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 394.409981][T12081] should_failslab+0xc2/0x120 [ 394.410007][T12081] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 394.410030][T12081] ? copy_pid_ns+0x32b/0x10a0 [ 394.410048][T12081] ? copy_pid_ns+0x9a/0x10a0 [ 394.410067][T12081] copy_pid_ns+0x32b/0x10a0 [ 394.410086][T12081] ? __pfx_copy_pid_ns+0x10/0x10 [ 394.410104][T12081] ? preempt_schedule_common+0x42/0xc0 [ 394.410131][T12081] ? preempt_schedule_thunk+0x16/0x40 [ 394.410160][T12081] ? put_uts_ns+0xc0/0x270 [ 394.410184][T12081] create_new_namespaces+0x2aa/0xac0 [ 394.410207][T12081] unshare_nsproxy_namespaces+0xf2/0x220 [ 394.410228][T12081] ksys_unshare+0x438/0xab0 [ 394.410249][T12081] ? __pfx_ksys_unshare+0x10/0x10 [ 394.410269][T12081] ? exit_to_user_mode_loop+0x166/0x6f0 [ 394.410289][T12081] ? trace_hardirqs_off+0x70/0x170 [ 394.410309][T12081] __x64_sys_unshare+0x31/0x40 [ 394.410329][T12081] do_syscall_64+0x115/0x870 [ 394.410345][T12081] ? clear_bhb_loop+0x40/0x90 [ 394.410364][T12081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.410382][T12081] RIP: 0033:0x7f3fa419ce59 [ 394.410396][T12081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.410413][T12081] RSP: 002b:00007f3fa4fbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 394.410430][T12081] RAX: ffffffffffffffda RBX: 00007f3fa4416180 RCX: 00007f3fa419ce59 [ 394.410442][T12081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 394.410453][T12081] RBP: 00007f3fa4fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 394.410464][T12081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.410475][T12081] R13: 00007f3fa4416218 R14: 00007f3fa4416180 R15: 00007ffe56bf2e38 [ 394.410492][T12081] [ 394.496424][ T5791] usb 1-1: unable to get BOS descriptor or descriptor too short [ 394.831958][ T5791] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 394.850292][ T5791] usb 1-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=7b.bd [ 394.897634][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.906532][ T5791] usb 1-1: Product: syz [ 394.911384][ T5791] usb 1-1: Manufacturer: syz [ 394.916095][ T5791] usb 1-1: SerialNumber: syz [ 394.956285][ T30] audit: type=1400 audit(1781620118.938:1018): avc: denied { ioctl } for pid=12085 comm="syz.5.1715" path="net:[4026533533]" dev="nsfs" ino=4026533533 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 395.139154][ T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 395.155559][T12092] ceph: No mds server is up or the cluster is laggy [ 395.239312][ T5742] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 395.292195][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 395.300765][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.312580][ T24] usb 2-1: New USB device found, idVendor=0499, idProduct=150c, bcdDevice= 0.40 [ 395.321721][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.329771][ T24] usb 2-1: Product: syz [ 395.333922][ T24] usb 2-1: Manufacturer: syz [ 395.338499][ T24] usb 2-1: SerialNumber: syz [ 395.390198][ T5742] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.401632][ T5742] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.411499][ T5742] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 395.420560][ T5742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.430036][ T5742] usb 6-1: config 0 descriptor?? [ 395.449778][ T5703] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 395.611589][ T5703] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.621938][ T5703] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.627828][ T24] usb 2-1: cannot setup if 1: error -71 [ 395.632741][ T5703] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 395.647233][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 395.659140][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 395.662046][ T24] usb 2-1: cannot setup if 1: error -71 [ 395.667520][ T5791] ums-sddr55 1-1:8.0: USB Mass Storage device detected [ 395.681669][ T5703] usb 3-1: SerialNumber: syz [ 395.692179][ T24] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 395.714872][ T24] usb 2-1: cannot setup if 1: error -71 [ 395.766273][ T5791] usb 1-1: USB disconnect, device number 100 [ 395.794782][ T24] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 395.816955][ T24] usb 2-1: USB disconnect, device number 74 [ 395.835832][T10336] udevd[10336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.913350][ T5703] usb 3-1: 0:2 : does not exist [ 395.940616][ T5703] usb 3-1: USB disconnect, device number 77 [ 395.958297][T10336] udevd[10336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.062846][ T5742] usb 6-1: language id specifier not provided by device, defaulting to English [ 396.236079][ T30] audit: type=1400 audit(1781620120.218:1019): avc: denied { shutdown } for pid=12111 comm="syz.1.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.395446][T12119] macvtap1: entered promiscuous mode [ 396.402168][T12119] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 396.410348][T12119] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 396.514736][T12120] PKCS8: Unsupported PKCS#8 version [ 396.532023][T12120] CIFS: VFS: UNC: missing share name [ 396.537469][T12120] CIFS: VFS: Malformed UNC in devname [ 397.001562][ T5742] uclogic 0003:256C:006D.003B: failed retrieving string descriptor #100: -71 [ 397.024408][ T5742] uclogic 0003:256C:006D.003B: failed retrieving pen parameters: -71 [ 397.026127][T12122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.033090][ T5742] uclogic 0003:256C:006D.003B: failed probing pen v1 parameters: -71 [ 397.064768][T12125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.089849][ T5742] uclogic 0003:256C:006D.003B: failed probing parameters: -71 [ 397.177073][ T5742] uclogic 0003:256C:006D.003B: probe with driver uclogic failed with error -71 [ 397.202686][ T5742] usb 6-1: USB disconnect, device number 53 [ 397.371098][T12132] xt_hashlimit: size too large, truncated to 1048576 [ 397.540577][T12141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.617297][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 397.729121][ T5791] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 397.911842][ T5791] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 397.921199][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 397.929226][ T5791] usb 3-1: Product: syz [ 397.933460][ T5791] usb 3-1: SerialNumber: syz [ 397.938723][ T5791] usb 3-1: config 0 descriptor?? [ 397.959438][ T5703] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 398.110877][ T5703] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.122111][ T5703] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 398.131958][ T5703] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 398.141316][ T5702] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 398.150583][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.158745][ T5791] hso 3-1:0.0: Failed to find BULK eps [ 398.169719][T12150] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 398.186069][ T5703] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.320573][ T5702] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 398.329280][ T5702] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 398.340186][ T5702] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 398.349479][ T5702] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.363558][ T5702] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 398.372719][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 398.381195][ T5702] usb 6-1: Product: syz [ 398.420580][ T5702] usb 6-1: Manufacturer: syz [ 398.437690][ T5702] cdc_wdm 6-1:1.0: skipping garbage [ 398.512049][ T5702] cdc_wdm 6-1:1.0: skipping garbage [ 398.595793][ T5702] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 398.698393][T12159] FAULT_INJECTION: forcing a failure. [ 398.698393][T12159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.712321][T12159] CPU: 1 UID: 0 PID: 12159 Comm: syz.5.1735 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.712350][T12159] Tainted: [L]=SOFTLOCKUP [ 398.712358][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.712369][T12159] Call Trace: [ 398.712375][T12159] [ 398.712381][T12159] dump_stack_lvl+0x100/0x190 [ 398.712406][T12159] should_fail_ex.cold+0x5/0xa [ 398.712429][T12159] _copy_from_iter+0x1f4/0x1690 [ 398.712451][T12159] ? __asan_memset+0x23/0x50 [ 398.712474][T12159] ? __pfx__copy_from_iter+0x10/0x10 [ 398.712493][T12159] ? __pfx___alloc_skb+0x10/0x10 [ 398.712514][T12159] ? netlink_autobind.isra.0+0x160/0x370 [ 398.712537][T12159] netlink_sendmsg+0x808/0xda0 [ 398.712557][T12159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.712578][T12159] ____sys_sendmsg+0x9e1/0xb70 [ 398.712596][T12159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.712615][T12159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.712633][T12159] ? kstrtouint_from_user+0x13c/0x1d0 [ 398.712660][T12159] ___sys_sendmsg+0x190/0x1e0 [ 398.712678][T12159] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.712695][T12159] ? get_pid_task+0x106/0x250 [ 398.712722][T12159] ? rcu_is_watching+0x12/0xc0 [ 398.712751][T12159] __sys_sendmsg+0x160/0x210 [ 398.712774][T12159] ? __pfx___sys_sendmsg+0x10/0x10 [ 398.712800][T12159] ? rcu_is_watching+0x12/0xc0 [ 398.712822][T12159] do_syscall_64+0x115/0x870 [ 398.712840][T12159] ? clear_bhb_loop+0x40/0x90 [ 398.712860][T12159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.712878][T12159] RIP: 0033:0x7f198c39ce59 [ 398.712893][T12159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.712910][T12159] RSP: 002b:00007f198a5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.712928][T12159] RAX: ffffffffffffffda RBX: 00007f198c616090 RCX: 00007f198c39ce59 [ 398.712941][T12159] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 398.712952][T12159] RBP: 00007f198a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 398.712963][T12159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.712973][T12159] R13: 00007f198c616128 R14: 00007f198c616090 R15: 00007fff0ec1a5b8 [ 398.712991][T12159] [ 399.551443][ T5742] usb 6-1: USB disconnect, device number 54 [ 399.562837][ T5694] usb 2-1: USB disconnect, device number 75 [ 400.223593][ T5702] usb 3-1: USB disconnect, device number 78 [ 400.445761][T12171] lo speed is unknown, defaulting to 1000 [ 400.467833][ T30] audit: type=1400 audit(1781620124.448:1020): avc: denied { create } for pid=12168 comm="syz.2.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 400.781443][T12181] lo speed is unknown, defaulting to 1000 [ 401.008163][ T5702] kernel write not supported for file /vbi7 (pid: 5702 comm: kworker/0:3) [ 401.574184][T12196] bond3: ARP target 9.0.0.0 is already present [ 401.580485][T12196] bond3: option arp_ip_target: invalid value (9) [ 401.587463][T12196] bond3 (unregistering): Released all slaves [ 401.900891][T11567] block nbd0: Possible stuck request ffff88802809e000: control (read@0,1024B). Runtime 300 seconds [ 401.914585][T11567] block nbd0: Possible stuck request ffff88802809e1c0: control (read@1024,1024B). Runtime 300 seconds [ 401.932497][T11567] block nbd0: Possible stuck request ffff88802809e380: control (read@2048,1024B). Runtime 300 seconds [ 401.971320][T11567] block nbd0: Possible stuck request ffff88802809e540: control (read@3072,1024B). Runtime 300 seconds [ 402.467218][T12219] netlink: 'syz.0.1752': attribute type 4 has an invalid length. [ 403.093575][T12223] netlink: 'syz.5.1754': attribute type 21 has an invalid length. [ 403.110310][T12223] netlink: 'syz.5.1754': attribute type 5 has an invalid length. [ 403.132980][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1754'. [ 403.379729][ T5702] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 403.488114][ T5742] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 403.549112][ T5702] usb 2-1: Using ep0 maxpacket: 16 [ 403.561959][ T5702] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 403.580569][ T5702] usb 2-1: config 0 has no interface number 0 [ 403.599105][ T5702] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 403.616049][ T5702] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 403.633922][ T5702] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 403.646696][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.659792][ T5702] usb 2-1: Product: syz [ 403.663634][ T5742] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 403.663994][ T5702] usb 2-1: Manufacturer: syz [ 403.678486][ T5702] usb 2-1: SerialNumber: syz [ 403.680977][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.684738][ T5702] usb 2-1: config 0 descriptor?? [ 403.697411][T12228] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 403.699279][ T5742] usb 1-1: Product: syz [ 403.705031][T12228] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 403.708885][ T5742] usb 1-1: Manufacturer: syz [ 403.721607][ T5742] usb 1-1: SerialNumber: syz [ 403.735467][ T5742] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 403.744854][ T30] audit: type=1400 audit(1781620127.718:1021): avc: denied { setattr } for pid=12235 comm="syz.2.1760" name="PACKET" dev="sockfs" ino=44002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 403.747934][T12236] gretap1: entered promiscuous mode [ 403.792406][ T5694] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 403.923319][T12228] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 403.930638][T12228] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 404.340367][ T30] audit: type=1400 audit(1781620128.328:1022): avc: denied { allowed } for pid=12227 comm="syz.1.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 404.515494][ T5702] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 404.538532][ T5702] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 404.559413][ T5702] asix 2-1:0.34: probe with driver asix failed with error -71 [ 404.582866][ T5702] usb 2-1: USB disconnect, device number 76 [ 404.696788][T12248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12248 comm=syz.6.1763 [ 404.869591][ T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 405.069102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 405.078524][ T5694] usb 1-1: Service connection timeout for: 256 [ 405.087441][ T5694] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 405.099139][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 405.121153][ T5694] ath9k_htc: Failed to initialize the device [ 405.127201][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 405.145120][ T5694] usb 1-1: ath9k_htc: USB layer deinitialized [ 405.154663][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7 [ 405.167932][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 405.184358][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 406.198771][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.214310][ T24] usb 3-1: Product: syz [ 406.219579][ T24] usb 3-1: Manufacturer: syz [ 406.224295][ T24] usb 3-1: SerialNumber: syz [ 406.311675][ T5604] usb 1-1: USB disconnect, device number 101 [ 406.389011][T12266] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1769'. [ 406.389011][T12269] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1769'. [ 406.408253][T12269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1769'. [ 406.491950][ T24] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 406.507803][ T24] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 406.536148][ T24] usb 3-1: USB disconnect, device number 79 [ 406.595542][T12275] random: crng reseeded on system resumption [ 406.999137][ T5742] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 407.150282][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.161636][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.171496][ T5742] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 407.180720][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.190203][ T5742] usb 1-1: config 0 descriptor?? [ 407.952273][ T5742] usb 1-1: language id specifier not provided by device, defaulting to English [ 408.403607][ T5742] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.003C/input/input77 [ 408.430540][T12289] lo speed is unknown, defaulting to 1000 [ 408.511695][ T5742] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.003C/input/input78 [ 408.561498][ T5742] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.003C/input/input79 [ 408.624495][ T5742] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.003C/input/input80 [ 408.688688][ T5742] uclogic 0003:256C:006D.003C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 408.742213][ T5742] usb 1-1: USB disconnect, device number 102 [ 409.126437][T12306] netlink: 'syz.2.1781': attribute type 4 has an invalid length. [ 409.155190][ T30] audit: type=1400 audit(1781620133.138:1023): avc: denied { map } for pid=12308 comm="syz.1.1782" path="/proc/sys/net/ipv4/vs/amemthresh" dev="proc" ino=45297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 409.208100][T12311] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1783'. [ 409.212476][ T30] audit: type=1400 audit(1781620133.138:1024): avc: denied { execute } for pid=12308 comm="syz.1.1782" path="/proc/sys/net/ipv4/vs/amemthresh" dev="proc" ino=45297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 409.431298][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1783'. [ 410.029126][ T5742] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 410.039142][ T5791] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 410.224003][ T5791] usb 6-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 410.251239][ T5791] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 410.262257][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.271857][ T5791] usb 6-1: Product: syz [ 410.276125][ T5791] usb 6-1: Manufacturer: syz [ 410.282376][ T5791] usb 6-1: SerialNumber: syz [ 410.298545][ T5742] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 410.298981][ T5791] usb 6-1: config 0 descriptor?? [ 410.361373][ T5791] ims_pcu 6-1:0.0: Missing CDC union descriptor [ 410.368108][ T5791] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 410.982518][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.990997][ T5742] usb 3-1: Product: syz [ 410.995312][ T5742] usb 3-1: Manufacturer: syz [ 410.999981][ T5742] usb 3-1: SerialNumber: syz [ 411.011609][ T5742] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 411.021455][ T5791] usb 6-1: USB disconnect, device number 55 [ 411.040275][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 411.424324][ T5742] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 411.644602][T12355] netlink: 'syz.5.1796': attribute type 4 has an invalid length. [ 411.658532][T12355] netlink: 'syz.5.1796': attribute type 4 has an invalid length. [ 411.699105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 411.729107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 411.795395][T12356] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1796'. [ 412.310307][ T5742] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 412.318568][ T5742] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 412.328969][ T5742] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.342795][ T24] usb 3-1: Service connection timeout for: 256 [ 412.348996][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 412.358995][ T5742] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 412.368189][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.376908][ T5742] usb 2-1: Product: syz [ 412.381745][ T5742] usb 2-1: Manufacturer: syz [ 412.386733][ T5742] usb 2-1: SerialNumber: syz [ 412.394980][ T5742] usb 2-1: config 0 descriptor?? [ 412.401030][ T5694] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 412.412249][ T5742] hub 2-1:0.0: bad descriptor, ignoring hub [ 412.418864][ T5742] hub 2-1:0.0: probe with driver hub failed with error -5 [ 412.433566][ T24] ath9k_htc: Failed to initialize the device [ 412.441588][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 412.538658][ T5742] usb 3-1: USB disconnect, device number 80 [ 412.561719][ T5694] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 412.576985][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.585981][ T5694] usb 6-1: Product: syz [ 412.592089][ T5694] usb 6-1: Manufacturer: syz [ 412.599946][ T5694] usb 6-1: SerialNumber: syz [ 412.610566][ T5694] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 412.626420][ T24] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 413.350378][ T5694] usb 2-1: USB disconnect, device number 77 [ 413.386504][T12375] overlayfs: missing 'lowerdir' [ 413.419544][ T5742] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 413.580851][ T5742] usb 3-1: config index 0 descriptor too short (expected 65284, got 45) [ 413.591287][ T5742] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 413.601064][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.609424][ T5742] usb 3-1: Product: syz [ 413.613720][ T5742] usb 3-1: Manufacturer: syz [ 413.618434][ T5742] usb 3-1: SerialNumber: syz [ 414.209282][ T5694] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 414.240343][ T5742] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 414.256205][ T24] usb 6-1: Service connection timeout for: 256 [ 414.276100][ T24] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 414.284556][ T5742] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 414.295772][ T5742] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 414.298223][T12390] lo speed is unknown, defaulting to 1000 [ 414.318004][ T24] ath9k_htc: Failed to initialize the device [ 414.328113][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 414.335335][ T5742] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 414.347049][ T5742] usb 3-1: USB disconnect, device number 81 [ 414.369228][ T5694] usb 2-1: Using ep0 maxpacket: 16 [ 414.403211][T12382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.442362][T12382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.470961][ T5694] usb 2-1: unable to get BOS descriptor or descriptor too short [ 414.480341][ T5694] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 414.488099][ T5694] usb 2-1: can't read configurations, error -71 [ 414.662441][ T24] usb 6-1: USB disconnect, device number 56 [ 414.763090][T12406] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1814'. [ 414.903619][ T5742] libceph: connect (1)[c::]:6789 error -101 [ 414.911355][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 414.953243][T12404] ceph: No mds server is up or the cluster is laggy [ 415.067180][T12419] tipc: Enabled bearer , priority 0 [ 415.090221][T12419] syzkaller0: entered promiscuous mode [ 415.096029][T12419] syzkaller0: entered allmulticast mode [ 415.108467][T12419] tipc: Resetting bearer [ 415.115332][T12418] tipc: Resetting bearer [ 415.125715][T12418] tipc: Disabling bearer [ 415.189908][ T24] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 415.224433][T12424] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1820'. [ 415.591562][ T30] audit: type=1400 audit(1781620139.278:1025): avc: denied { mounton } for pid=12420 comm="syz.2.1819" path="/382/file0" dev="configfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 415.704670][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 415.854548][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 415.905269][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 415.923707][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 415.941390][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.951033][ T24] usb 6-1: config 0 descriptor?? [ 415.971159][ T24] hdpvr 6-1:0.0: Could not find bulk-in endpoint [ 415.981902][ T24] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 416.023642][ T30] audit: type=1400 audit(1781620140.008:1026): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 416.128702][T12435] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 416.144773][T12435] lo speed is unknown, defaulting to 1000 [ 416.229143][ T5695] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 416.248378][ T24] usb 6-1: USB disconnect, device number 57 [ 416.400874][ T5695] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 416.424072][ T5695] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 416.438581][ T5695] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.521242][T12446] lo speed is unknown, defaulting to 1000 [ 416.550071][ T5695] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 416.559276][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.567399][ T5695] usb 1-1: Product: syz [ 416.571657][ T5695] usb 1-1: Manufacturer: syz [ 416.576253][ T5695] usb 1-1: SerialNumber: syz [ 416.586506][ T5695] usb 1-1: config 0 descriptor?? [ 416.593341][ T5695] hub 1-1:0.0: bad descriptor, ignoring hub [ 416.599317][ T5695] hub 1-1:0.0: probe with driver hub failed with error -5 [ 417.569734][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1827'. [ 417.578925][T12454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1827'. [ 418.179215][ T24] usb 1-1: USB disconnect, device number 103 [ 418.195655][T12460] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 418.221188][T12460] bond1 (unregistering): Released all slaves [ 418.343506][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1829'. [ 420.208078][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1836'. [ 420.242198][T12495] NILFS (nullb0): couldn't find nilfs on the device [ 420.423979][ T5791] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 420.463319][T12474] lo speed is unknown, defaulting to 1000 [ 420.469297][T12474] lo speed is unknown, defaulting to 1000 [ 420.475186][T12474] lo speed is unknown, defaulting to 1000 [ 420.481149][T12474] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 420.495344][T12474] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 420.512400][T12474] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 420.525879][T12474] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 420.537932][T12474] lo speed is unknown, defaulting to 1000 [ 420.544253][T12474] lo speed is unknown, defaulting to 1000 [ 420.550618][T12474] lo speed is unknown, defaulting to 1000 [ 420.556674][T12474] lo speed is unknown, defaulting to 1000 [ 420.562754][T12474] lo speed is unknown, defaulting to 1000 [ 420.568783][T12474] lo speed is unknown, defaulting to 1000 [ 420.575042][T12474] lo speed is unknown, defaulting to 1000 [ 420.611413][ T5791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 420.619396][ T5791] usb 3-1: too many configurations: 56, using maximum allowed: 8 [ 420.628388][ T5791] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 420.645727][ T5791] usb 3-1: can't read configurations, error -61 [ 420.789129][ T5791] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 420.965439][ T5791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 420.980972][ T5791] usb 3-1: too many configurations: 56, using maximum allowed: 8 [ 420.990504][ T5791] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 420.998153][ T5791] usb 3-1: can't read configurations, error -61 [ 421.007346][ T5791] usb usb3-port1: attempt power cycle [ 421.067494][T12505] netlink: 'syz.0.1842': attribute type 4 has an invalid length. [ 421.080558][T12505] netlink: 'syz.0.1842': attribute type 4 has an invalid length. [ 421.140121][ T5703] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 421.198743][T12509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1842'. [ 421.529864][ T5791] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 421.542819][T12510] FAULT_INJECTION: forcing a failure. [ 421.542819][T12510] name failslab, interval 1, probability 0, space 0, times 0 [ 421.555566][T12510] CPU: 0 UID: 0 PID: 12510 Comm: syz.1.1843 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.555589][T12510] Tainted: [L]=SOFTLOCKUP [ 421.555594][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.555600][T12510] Call Trace: [ 421.555604][T12510] [ 421.555608][T12510] dump_stack_lvl+0x100/0x190 [ 421.555623][T12510] should_fail_ex.cold+0x5/0xa [ 421.555637][T12510] should_failslab+0xc2/0x120 [ 421.555653][T12510] __kmalloc_cache_noprof+0x7a/0x6e0 [ 421.555667][T12510] ? inet6_dump_fib+0x9b2/0x11b0 [ 421.555683][T12510] ? inet_dump_fib+0x536/0x990 [ 421.555694][T12510] ? rcu_is_watching+0x12/0xc0 [ 421.555708][T12510] inet6_dump_fib+0x9b2/0x11b0 [ 421.555724][T12510] ? __pfx_inet6_dump_fib+0x10/0x10 [ 421.555742][T12510] ? __pfx_inet6_dump_fib+0x10/0x10 [ 421.555758][T12510] rtnl_dump_all+0x285/0x5d0 [ 421.555771][T12510] ? __pfx_rtnl_dump_all+0x10/0x10 [ 421.555784][T12510] rtnl_dumpit+0x19b/0x1f0 [ 421.555795][T12510] netlink_dump+0x532/0xd00 [ 421.555811][T12510] ? __pfx_netlink_dump+0x10/0x10 [ 421.555828][T12510] ? lock_release+0x24d/0x310 [ 421.555840][T12510] __netlink_dump_start+0x6d6/0x990 [ 421.555856][T12510] ? __pfx_rtnl_dump_all+0x10/0x10 [ 421.555867][T12510] rtnetlink_rcv_msg+0xb3e/0xe90 [ 421.555881][T12510] ? __pfx_rtnl_dump_all+0x10/0x10 [ 421.555893][T12510] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 421.555907][T12510] ? __pfx_rtnl_dumpit+0x10/0x10 [ 421.555917][T12510] ? __pfx_rtnl_dump_all+0x10/0x10 [ 421.555929][T12510] ? ref_tracker_free+0x37e/0x6c0 [ 421.555942][T12510] netlink_rcv_skb+0x159/0x420 [ 421.555952][T12510] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 421.555967][T12510] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.555979][T12510] ? netlink_deliver_tap+0x1ae/0xcc0 [ 421.555996][T12510] netlink_unicast+0x585/0x850 [ 421.556007][T12510] ? __pfx_netlink_unicast+0x10/0x10 [ 421.556018][T12510] netlink_sendmsg+0x8b0/0xda0 [ 421.556029][T12510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.556042][T12510] sock_write_iter+0x505/0x580 [ 421.556053][T12510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.556063][T12510] ? __pfx_sock_write_iter+0x10/0x10 [ 421.556074][T12510] ? bpf_lsm_file_permission+0x9/0x10 [ 421.556088][T12510] ? security_file_permission+0x76/0x210 [ 421.556104][T12510] ? rw_verify_area+0xce/0x6d0 [ 421.556119][T12510] vfs_write+0x6ac/0x1050 [ 421.556128][T12510] ? __pfx_sock_write_iter+0x10/0x10 [ 421.556138][T12510] ? __pfx_vfs_write+0x10/0x10 [ 421.556147][T12510] ? lock_release+0x24d/0x310 [ 421.556159][T12510] ksys_write+0x1f8/0x250 [ 421.556168][T12510] ? __pfx_ksys_write+0x10/0x10 [ 421.556178][T12510] ? rcu_is_watching+0x12/0xc0 [ 421.556191][T12510] do_syscall_64+0x115/0x870 [ 421.556203][T12510] ? clear_bhb_loop+0x40/0x90 [ 421.556221][T12510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.556238][T12510] RIP: 0033:0x7f422ab9ce59 [ 421.556249][T12510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.556259][T12510] RSP: 002b:00007f422b9a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.556270][T12510] RAX: ffffffffffffffda RBX: 00007f422ae16090 RCX: 00007f422ab9ce59 [ 421.556277][T12510] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000008 [ 421.556283][T12510] RBP: 00007f422b9a4090 R08: 0000000000000000 R09: 0000000000000000 [ 421.556290][T12510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.556296][T12510] R13: 00007f422ae16128 R14: 00007f422ae16090 R15: 00007ffd0ecb6718 [ 421.556306][T12510] [ 421.925161][ T5791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 421.933806][ T5791] usb 3-1: too many configurations: 56, using maximum allowed: 8 [ 421.945778][ T5791] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 421.953440][ T5791] usb 3-1: can't read configurations, error -61 [ 422.045084][ T5695] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 422.056293][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.069562][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.083552][ T5703] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 422.136156][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.148123][ T5703] usb 6-1: config 0 descriptor?? [ 422.199304][ T5791] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 422.221283][ T5791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 422.228947][ T5791] usb 3-1: too many configurations: 56, using maximum allowed: 8 [ 422.237983][ T5791] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 422.245621][ T5791] usb 3-1: can't read configurations, error -61 [ 422.252236][ T5791] usb usb3-port1: unable to enumerate USB device [ 422.295618][ T5695] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 422.335885][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.375799][ T5695] usb 1-1: Product: syz [ 422.396942][ T5695] usb 1-1: Manufacturer: syz [ 422.411961][ T5695] usb 1-1: SerialNumber: syz [ 422.425759][ T5695] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 422.444469][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 422.760316][ T5703] usb 6-1: language id specifier not provided by device, defaulting to English [ 422.826793][T12519] pimreg: entered allmulticast mode [ 423.091736][ T30] audit: type=1400 audit(1781620147.078:1027): avc: denied { map } for pid=12527 comm="syz.1.1848" path="/dev/bus/usb/004/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 423.167267][ T5703] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003D/input/input81 [ 423.459610][ T5791] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 423.482843][ T5703] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003D/input/input82 [ 423.535141][ T5703] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003D/input/input83 [ 423.581464][ T5703] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003D/input/input84 [ 423.618324][ T5703] uclogic 0003:256C:006D.003D: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 423.649716][ T5791] usb 2-1: Using ep0 maxpacket: 8 [ 423.672744][ T5791] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 423.690649][ T24] usb 1-1: Service connection timeout for: 256 [ 423.691866][ T5703] usb 6-1: USB disconnect, device number 58 [ 423.701115][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 423.705833][ T5791] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.743006][ T5791] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 423.761071][ T5791] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.764054][ T24] ath9k_htc: Failed to initialize the device [ 423.786458][ T5791] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.804667][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 423.811288][ T5791] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 423.811313][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.033989][ T5791] usb 2-1: GET_CAPABILITIES returned 0 [ 424.050181][ T5791] usbtmc 2-1:16.0: can't read capabilities [ 424.116623][ T5694] usb 1-1: USB disconnect, device number 104 [ 424.245584][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.254689][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.263745][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.341163][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.350283][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.359316][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.368428][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.379085][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.388155][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.397218][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.406282][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.478697][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.491744][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.500825][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.509860][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.698233][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.715857][ T5791] usb 2-1: USB disconnect, device number 80 [ 424.736657][ T30] audit: type=1400 audit(1781620148.678:1028): avc: denied { accept } for pid=12555 comm="syz.0.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 424.927429][ T30] audit: type=1400 audit(1781620148.698:1029): avc: denied { setopt } for pid=12555 comm="syz.0.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 425.635005][ T5791] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 425.642863][ T5703] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 425.918785][T12575] IPVS: ip_vs_add_dest(): server weight less than zero [ 426.065753][ T5702] IPVS: starting estimator thread 0... [ 426.073015][ T5791] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 426.083209][ T5703] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 426.092339][ T5791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.100523][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.108840][ T5703] usb 1-1: Product: syz [ 426.113659][ T5791] usb 6-1: config 0 descriptor?? [ 426.118984][ T5703] usb 1-1: Manufacturer: syz [ 426.123735][ T5703] usb 1-1: SerialNumber: syz [ 426.130130][ T5791] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 426.136620][ T5703] usb 1-1: config 0 descriptor?? [ 426.144078][ T5703] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 426.159820][T12577] IPVS: using max 72 ests per chain, 172800 per kthread [ 426.354252][T12565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.363977][T12565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.579391][ T5703] sonixb 1-1:0.0: Error writing register 01: -71 [ 426.586494][ T5703] sonixb 1-1:0.0: probe with driver sonixb failed with error -71 [ 426.596314][ T5703] usb 1-1: USB disconnect, device number 105 [ 426.765020][T12608] netlink: 'syz.6.1868': attribute type 4 has an invalid length. [ 426.849249][ T5702] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 426.979442][ T5702] usb 3-1: device descriptor read/64, error -71 [ 427.134685][ T5791] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 427.165305][ T30] audit: type=1400 audit(1781620151.148:1030): avc: denied { checkpoint_restore } for pid=12614 comm="syz.0.1870" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 427.239423][ T5702] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 427.369533][ T5702] usb 3-1: device descriptor read/64, error -71 [ 427.479239][ T5702] usb usb3-port1: attempt power cycle [ 427.489156][ T5694] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 427.601487][ T5791] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 427.611683][ T5791] usb 6-1: USB disconnect, device number 59 [ 427.641584][ T5694] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 427.651521][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.659539][ T5694] usb 1-1: Product: syz [ 427.663685][ T5694] usb 1-1: Manufacturer: syz [ 427.668249][ T5694] usb 1-1: SerialNumber: syz [ 427.673665][ T5694] usb 1-1: config 0 descriptor?? [ 427.679919][ T5694] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 106 [ 427.820536][ T5702] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 427.842056][T12618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1871'. [ 427.852613][ T5702] usb 3-1: device descriptor read/8, error -71 [ 427.881830][ T5694] (null): error -EIO: failure setting delay to 10us [ 427.891964][ T5694] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 427.910441][ T5694] usb 1-1: USB disconnect, device number 106 [ 427.914247][T12619] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1871'. [ 427.950738][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1871'. [ 428.087713][T12619] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 428.119630][ T5702] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 428.159873][ T5702] usb 3-1: device descriptor read/8, error -71 [ 428.279304][ T5702] usb usb3-port1: unable to enumerate USB device [ 428.309121][ T5791] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 428.459152][ T5791] usb 2-1: Using ep0 maxpacket: 32 [ 428.465472][ T5791] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.473700][ T5791] usb 2-1: config 0 has no interface number 0 [ 428.482901][ T5791] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 428.492742][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.501425][ T5791] usb 2-1: Product: syz [ 428.505723][ T5791] usb 2-1: Manufacturer: syz [ 428.510701][ T5791] usb 2-1: SerialNumber: syz [ 428.516776][ T5791] usb 2-1: config 0 descriptor?? [ 428.523242][ T5791] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 428.532143][ T5791] usb 2-1: selecting invalid altsetting 1 [ 428.537861][ T5791] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 428.546333][ T5791] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 428.556897][ T5791] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 428.565279][ T5791] usb 2-1: media controller created [ 428.576385][ T5791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.598032][T12633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.742903][ T5791] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 428.752807][ T5791] zl10353_read_register: readreg error (reg=127, ret==-71) [ 428.760357][ T5791] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 428.776633][ T5791] usb 2-1: USB disconnect, device number 81 [ 428.929620][ T5694] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 429.080585][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.092496][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.102325][ T5694] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 429.111763][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.122237][ T5694] usb 1-1: config 0 descriptor?? [ 429.333584][ T5694] usbhid 1-1:0.0: can't add hid device: -71 [ 429.339887][ T5694] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 429.355753][ T5694] usb 1-1: USB disconnect, device number 107 [ 429.829810][ T5703] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 429.860291][ T5791] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 429.989634][ T5703] usb 2-1: Using ep0 maxpacket: 16 [ 429.996110][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.007298][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.017153][ T5703] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.017718][T12653] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1884'. [ 430.045489][ T5703] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 430.057748][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.066000][ T5791] usb 1-1: Using ep0 maxpacket: 8 [ 430.074599][ T5791] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 430.083637][ T5791] usb 1-1: config 0 has no interface number 0 [ 430.100694][ T5703] usb 2-1: config 0 descriptor?? [ 430.132690][ T5791] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.320037][ T5791] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.332423][ T5703] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input85 [ 430.352452][ T4957] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 430.370362][ T5791] usb 1-1: config 0 interface 52 has no altsetting 0 [ 430.379764][ T5791] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 430.400887][ T6206] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 430.409602][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.422079][ T4957] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 430.424636][ T5791] usb 1-1: config 0 descriptor?? [ 430.456016][ T4957] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 430.473887][ T4957] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 430.482191][ T4957] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 430.492599][ T4957] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 430.560650][T12647] lo speed is unknown, defaulting to 1000 [ 430.567088][T12647] lo speed is unknown, defaulting to 1000 [ 430.633954][T12647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1881'. [ 430.983287][ T30] audit: type=1400 audit(1781620154.698:1031): avc: denied { ioctl } for pid=12663 comm="syz.5.1887" path="socket:[47453]" dev="sockfs" ino=47453 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 431.119152][ T5791] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input86 [ 431.162327][ T4957] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 431.179963][T12671] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 431.251644][ T4957] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 431.287459][ T6206] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 431.471148][ T30] audit: type=1400 audit(1781620155.408:1032): avc: denied { write } for pid=12634 comm="syz.0.1877" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 431.519280][ T4957] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 431.551237][T12635] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 431.629283][ T4957] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 431.647826][ T4957] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 431.675805][ T4957] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 431.713294][ T24] usb 1-1: USB disconnect, device number 108 [ 431.771425][ T5694] usb 2-1: USB disconnect, device number 82 [ 431.842246][ T30] audit: type=1400 audit(1781620155.828:1033): avc: denied { sqpoll } for pid=12675 comm="syz.5.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 431.864471][T12676] binder: 12675:12676 ioctl c0306201 200000000040 returned -11 [ 431.939670][ T5841] block nbd0: Possible stuck request ffff88802809e000: control (read@0,1024B). Runtime 330 seconds [ 431.950386][ T5841] block nbd0: Possible stuck request ffff88802809e1c0: control (read@1024,1024B). Runtime 330 seconds [ 431.990108][ T5841] block nbd0: Possible stuck request ffff88802809e380: control (read@2048,1024B). Runtime 330 seconds [ 432.027435][ T5841] block nbd0: Possible stuck request ffff88802809e540: control (read@3072,1024B). Runtime 330 seconds [ 432.975472][T12693] netlink: 'syz.1.1892': attribute type 4 has an invalid length. [ 432.989039][T12692] tmpfs: Unknown parameter '0x0000000000000000' [ 433.199113][ T24] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 433.226096][T12698] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1896'. [ 433.269713][ T5694] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 433.349111][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 433.356554][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.367992][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 433.383310][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 433.395411][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 433.407581][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 433.418514][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.432092][ T5694] usb 3-1: Using ep0 maxpacket: 16 [ 433.438545][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.450070][ T24] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 433.460024][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.461732][ T5791] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 433.468075][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.486792][ T24] usb 1-1: Product: syz [ 433.492048][ T24] usb 1-1: Manufacturer: syz [ 433.496818][ T24] usb 1-1: SerialNumber: syz [ 433.501577][ T5694] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 433.515194][ T5694] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 433.524964][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.535538][ T24] usb 1-1: config 0 descriptor?? [ 433.543782][T12689] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 433.552630][ T24] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 433.561597][ T5694] usb 3-1: config 0 descriptor?? [ 433.619134][ T5695] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 433.652566][ T5791] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 433.662019][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.670075][ T5791] usb 2-1: Product: syz [ 433.674300][ T5791] usb 2-1: Manufacturer: syz [ 433.678901][ T5791] usb 2-1: SerialNumber: syz [ 433.687338][ T5791] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 433.696501][T12710] vivid-002: ================= START STATUS ================= [ 433.700833][ T5703] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 433.704751][T12710] vivid-002: Radio HW Seek Mode: Bounded [ 433.722380][T12710] vivid-002: Radio Programmable HW Seek: false [ 433.728642][T12710] vivid-002: RDS Rx I/O Mode: Block I/O [ 433.734835][T12710] vivid-002: Generate RBDS Instead of RDS: false [ 433.741340][T12710] vivid-002: RDS Reception: true [ 433.746303][T12710] vivid-002: RDS Program Type: 0 inactive [ 433.752188][T12710] vivid-002: RDS PS Name: inactive [ 433.757624][T12710] vivid-002: RDS Radio Text: inactive [ 433.763949][T12710] vivid-002: RDS Traffic Announcement: false inactive [ 433.771009][ T5695] usb 6-1: Using ep0 maxpacket: 32 [ 433.776396][T12710] vivid-002: RDS Traffic Program: false inactive [ 433.785052][T12710] vivid-002: RDS Music: false inactive [ 433.791336][T12710] vivid-002: ================== END STATUS ================== [ 433.800424][ T5695] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 433.810514][ T5695] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 433.820927][ T5695] usb 6-1: config 0 interface 0 has no altsetting 0 [ 433.829506][ T5695] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 433.838668][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.846783][ T5695] usb 6-1: Product: syz [ 433.851923][ T5695] usb 6-1: Manufacturer: syz [ 433.856588][ T5695] usb 6-1: SerialNumber: syz [ 433.867773][T12689] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000007rootmode' [ 433.876352][ T30] audit: type=1400 audit(1781620157.848:1034): avc: denied { mounton } for pid=12688 comm="syz.0.1893" path="/346/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 433.901449][ T5695] usb 6-1: config 0 descriptor?? [ 433.983323][ T5694] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.003E/input/input87 [ 433.996859][ T5694] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 434.114838][ T30] audit: type=1400 audit(1781620158.098:1035): avc: denied { setopt } for pid=12703 comm="syz.5.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 434.136983][ T5695] gs_usb 6-1:0.0: Couldn't send data format (err=-71) [ 434.144400][ T5695] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 434.155374][ T5695] usb 6-1: USB disconnect, device number 60 [ 434.190020][ T5791] usb 3-1: USB disconnect, device number 90 [ 434.489992][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.497857][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.504668][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 434.664988][ T30] audit: type=1400 audit(1781620158.648:1036): avc: denied { bind } for pid=12720 comm="syz.5.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 434.685856][ T30] audit: type=1400 audit(1781620158.668:1037): avc: denied { write } for pid=12720 comm="syz.5.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 434.764286][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1901'. [ 434.979253][ T5702] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 434.986925][ T5703] usb 2-1: Service connection timeout for: 256 [ 434.993962][ T5703] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 435.014747][ T5703] ath9k_htc: Failed to initialize the device [ 435.021899][ T5703] usb 2-1: ath9k_htc: USB layer deinitialized [ 435.030046][ T5695] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 435.160442][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.171453][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.181245][ T5702] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 435.182400][ T5695] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 435.190791][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.200042][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.210963][ T5702] usb 3-1: config 0 descriptor?? [ 435.220521][ T5695] usb 6-1: Product: syz [ 435.224913][ T5695] usb 6-1: Manufacturer: syz [ 435.229657][ T5695] usb 6-1: SerialNumber: syz [ 435.235226][ T5695] usb 6-1: config 0 descriptor?? [ 435.245235][ T5695] mvusb_mdio 6-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 435.471786][ T5791] usb 6-1: USB disconnect, device number 61 [ 435.828999][ T5702] usb 3-1: language id specifier not provided by device, defaulting to English [ 435.968605][ T5695] usb 1-1: USB disconnect, device number 109 [ 436.006674][ T5791] usb 2-1: USB disconnect, device number 83 [ 436.274797][ T5702] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003F/input/input88 [ 436.302594][ T5702] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003F/input/input89 [ 436.345976][ T5702] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003F/input/input90 [ 436.397554][ T5702] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003F/input/input91 [ 436.454338][T12737] hugetlbfs: Unknown parameter 'sizep6J_`_!$o9Zj' [ 436.474390][ T30] audit: type=1400 audit(1781620160.438:1038): avc: denied { mount } for pid=12734 comm="syz.1.1906" name="/" dev="hugetlbfs" ino=47596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 436.562459][ T5702] uclogic 0003:256C:006D.003F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 436.616145][ T30] audit: type=1400 audit(1781620160.438:1039): avc: denied { remount } for pid=12734 comm="syz.1.1906" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 436.658055][ T5702] usb 3-1: USB disconnect, device number 91 [ 437.070501][T12749] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 437.271234][T12749] syz_tun: entered allmulticast mode [ 437.480071][T12739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1907'. [ 438.022561][T12749] pimreg: entered allmulticast mode [ 438.197852][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1911'. [ 438.263483][T12747] syz_tun: left allmulticast mode [ 438.601935][T12773] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 438.963580][ T30] audit: type=1400 audit(1781620162.948:1040): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 439.011890][T12773] pimreg: entered allmulticast mode [ 439.043325][T12777] loop5: detected capacity change from 0 to 7 [ 439.068874][T10336] buffer_io_error: 11 callbacks suppressed [ 439.068884][T10336] Buffer I/O error on dev loop5, logical block 0, async page read [ 439.116953][ T30] audit: type=1400 audit(1781620163.098:1041): avc: denied { listen } for pid=12776 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.139830][T10336] Buffer I/O error on dev loop5, logical block 0, async page read [ 439.155403][T12777] Buffer I/O error on dev loop5, logical block 0, async page read [ 439.269971][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1910'. [ 439.286177][T10336] Buffer I/O error on dev loop5, logical block 0, async page read [ 439.604846][T10336] Buffer I/O error on dev loop5, logical block 0, async page read [ 439.634241][T10336] Buffer I/O error on dev loop5, logical block 0, async page read [ 439.695497][ T30] audit: type=1400 audit(1781620163.428:1042): avc: denied { accept } for pid=12776 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.732248][T12769] loop2: detected capacity change from 0 to 7 [ 439.740574][T12777] Buffer I/O error on dev loop5, logical block 0, async page read [ 439.764741][T12769] Dev loop2: unable to read RDB block 7 [ 439.769851][T12777] Buffer I/O error on dev loop5, logical block 0, async page read [ 439.781931][T12785] netlink: 'syz.0.1916': attribute type 4 has an invalid length. [ 439.790613][T12777] Buffer I/O error on dev loop5, logical block 0, async page read [ 439.798796][T12769] loop2: AHDI p1 p2 p3 [ 439.828173][T12769] loop2: partition table partially beyond EOD, truncated [ 439.837422][T12777] Buffer I/O error on dev loop5, logical block 0, async page read [ 439.845732][T12769] loop2: p1 start 1601398130 is beyond EOD, truncated [ 439.855695][T12769] loop2: p2 start 1702059890 is beyond EOD, truncated [ 439.871073][T12777] ldm_validate_partition_table(): Disk read failed. [ 439.886139][T12777] Dev loop5: unable to read RDB block 0 [ 439.906814][T12777] loop5: unable to read partition table [ 439.932014][T12777] loop5: partition table beyond EOD, truncated [ 439.966172][T12777] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 440.148414][ T30] audit: type=1400 audit(1781620164.128:1043): avc: denied { write } for pid=12788 comm="syz.2.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 440.540547][T12802] FAULT_INJECTION: forcing a failure. [ 440.540547][T12802] name failslab, interval 1, probability 0, space 0, times 0 [ 440.567814][T12802] CPU: 1 UID: 0 PID: 12802 Comm: syz.2.1922 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.567843][T12802] Tainted: [L]=SOFTLOCKUP [ 440.567851][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 440.567861][T12802] Call Trace: [ 440.567867][T12802] [ 440.567875][T12802] dump_stack_lvl+0x100/0x190 [ 440.567899][T12802] should_fail_ex.cold+0x5/0xa [ 440.567925][T12802] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 440.567952][T12802] should_failslab+0xc2/0x120 [ 440.567980][T12802] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 440.568003][T12802] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 440.568031][T12802] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 440.568058][T12802] idr_get_free+0x52e/0xa00 [ 440.568087][T12802] idr_alloc_u32+0x1ac/0x320 [ 440.568106][T12802] ? __pfx_idr_alloc_u32+0x10/0x10 [ 440.568124][T12802] ? __pfx___debug_object_init+0x10/0x10 [ 440.568154][T12802] idr_alloc+0xc0/0x130 [ 440.568172][T12802] ? __pfx_idr_alloc+0x10/0x10 [ 440.568189][T12802] ? lockdep_init_map_type+0x5c/0x250 [ 440.568210][T12802] loop_add+0x1fe/0xb60 [ 440.568238][T12802] ? __pfx_loop_add+0x10/0x10 [ 440.568269][T12802] ? rcu_is_watching+0x12/0xc0 [ 440.568294][T12802] loop_control_ioctl+0xae/0x620 [ 440.568310][T12802] ? __pfx_loop_control_ioctl+0x10/0x10 [ 440.568327][T12802] ? selinux_file_ioctl+0x13b/0x290 [ 440.568352][T12802] ? selinux_file_ioctl+0xb6/0x290 [ 440.568376][T12802] ? __pfx_loop_control_ioctl+0x10/0x10 [ 440.568394][T12802] __x64_sys_ioctl+0x18e/0x210 [ 440.568420][T12802] do_syscall_64+0x115/0x870 [ 440.568437][T12802] ? clear_bhb_loop+0x40/0x90 [ 440.568456][T12802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.568472][T12802] RIP: 0033:0x7f3fa419ce59 [ 440.568487][T12802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.568504][T12802] RSP: 002b:00007f3fa4ffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.568523][T12802] RAX: ffffffffffffffda RBX: 00007f3fa4415fa0 RCX: 00007f3fa419ce59 [ 440.568535][T12802] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 440.568546][T12802] RBP: 00007f3fa4ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 440.568557][T12802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.568568][T12802] R13: 00007f3fa4416038 R14: 00007f3fa4415fa0 R15: 00007ffe56bf2e38 [ 440.568586][T12802] [ 440.879390][ T5703] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 441.066021][ T5703] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 441.075183][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.097556][ T5703] usb 1-1: Product: syz [ 441.111985][ T5703] usb 1-1: Manufacturer: syz [ 441.126612][ T5703] usb 1-1: SerialNumber: syz [ 441.152439][ T5703] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 441.171331][ T5791] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 441.583396][T12819] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 441.750550][T12828] kAFS: unable to lookup cell '' [ 441.979302][T12828] netlink: 'syz.1.1928': attribute type 10 has an invalid length. [ 442.027294][T12828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.040813][T12830] netlink: 'syz.1.1928': attribute type 10 has an invalid length. [ 442.097598][T12828] team0: Port device netdevsim1 added [ 442.192615][T12830] team0: Port device netdevsim1 removed [ 442.203794][T12830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.215405][T12830] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 442.409131][ T5791] usb 1-1: Service connection timeout for: 256 [ 442.418539][ T5791] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 442.448631][ T5791] ath9k_htc: Failed to initialize the device [ 442.460392][ T5791] usb 1-1: ath9k_htc: USB layer deinitialized [ 442.615335][T12835] ceph: No mds server is up or the cluster is laggy [ 442.622163][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 442.641760][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'. [ 442.644728][T12841] lo speed is unknown, defaulting to 1000 [ 442.651330][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 442.658324][T12841] lo speed is unknown, defaulting to 1000 [ 442.666804][T12835] netlink: 'syz.2.1930': attribute type 14 has an invalid length. [ 442.688300][ T30] audit: type=1400 audit(1781620166.668:1044): avc: denied { ioctl } for pid=12834 comm="syz.2.1930" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 442.769516][ T24] usb 6-1: device descriptor read/64, error -71 [ 442.775909][ T5694] usb 1-1: USB disconnect, device number 110 [ 442.951401][T12852] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 443.019293][ T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 443.026020][T12847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1932'. [ 443.517601][T12861] hsr0: entered promiscuous mode [ 443.550057][ T24] usb 6-1: device descriptor read/64, error -71 [ 443.669609][ T24] usb usb6-port1: attempt power cycle [ 443.809190][ T5694] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 443.849673][ T5703] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 443.960321][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 443.971734][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.981717][ T5694] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 443.990858][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.000497][ T5694] usb 2-1: config 0 descriptor?? [ 444.007060][ T5694] xbox_remote_probe: endpoint_in message size==0? [ 444.013603][ T24] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 444.029951][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 444.036797][ T5703] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 444.047321][ T24] usb 6-1: device descriptor read/8, error -71 [ 444.049018][ T5703] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 444.063004][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 444.071330][ T5703] usb 3-1: Product: syz [ 444.075515][ T5703] usb 3-1: Manufacturer: syz [ 444.080153][ T5703] usb 3-1: SerialNumber: syz [ 444.085754][ T5703] usb 3-1: config 0 descriptor?? [ 444.093688][T12865] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 444.101695][ T5703] hub 3-1:0.0: bad descriptor, ignoring hub [ 444.107624][ T5703] hub 3-1:0.0: probe with driver hub failed with error -5 [ 444.210268][ T5694] usbhid 2-1:0.0: can't add hid device: -71 [ 444.216220][ T5694] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 444.231305][ T5694] usb 2-1: USB disconnect, device number 84 [ 444.289104][ T24] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 444.309473][ T24] usb 6-1: device descriptor read/8, error -71 [ 444.429223][ T24] usb usb6-port1: unable to enumerate USB device [ 444.474249][T12868] lo speed is unknown, defaulting to 1000 [ 444.481812][T12868] lo speed is unknown, defaulting to 1000 [ 444.579440][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 444.590440][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 444.849315][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 444.856545][T12877] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 444.874137][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 445.256396][T12866] set match dimension is over the limit! [ 445.389309][ T5702] libceph: connect (1)[c::]:6789 error -101 [ 445.395316][ T5702] libceph: mon0 (1)[c::]:6789 connect error [ 445.977212][ T5694] libceph: connect (1)[c::]:6789 error -101 [ 445.984109][ T5694] libceph: mon0 (1)[c::]:6789 connect error [ 446.324185][ T5695] libceph: connect (1)[c::]:6789 error -101 [ 446.333375][ T5695] libceph: mon0 (1)[c::]:6789 connect error [ 446.370563][T12897] netlink: 'syz.5.1944': attribute type 4 has an invalid length. [ 446.499750][ T5791] libceph: connect (1)[c::]:6789 error -101 [ 446.505787][ T5791] libceph: mon0 (1)[c::]:6789 connect error [ 446.819677][ T5791] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 446.849694][ T5694] libceph: connect (1)[c::]:6789 error -101 [ 446.855735][ T5694] libceph: mon0 (1)[c::]:6789 connect error [ 446.982290][ T5791] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 446.991659][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.999725][ T5791] usb 6-1: Product: syz [ 447.003988][ T5791] usb 6-1: Manufacturer: syz [ 447.008599][ T5791] usb 6-1: SerialNumber: syz [ 447.016527][ T5791] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 447.031350][ T5703] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 447.427172][T12907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1947'. [ 447.450161][ T5791] libceph: connect (1)[c::]:6789 error -101 [ 447.456223][ T5791] libceph: mon0 (1)[c::]:6789 connect error [ 447.467366][T12870] ceph: No mds server is up or the cluster is laggy [ 447.515672][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1948'. [ 447.525396][T12912] veth0_macvtap: left promiscuous mode [ 447.605321][ T30] audit: type=1400 audit(1781620171.588:1045): avc: denied { remount } for pid=12915 comm="syz.0.1949" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 447.697924][T12922] xt_hashlimit: size too large, truncated to 1048576 [ 447.888204][T12926] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1949'. [ 448.249223][ T5703] usb 6-1: Service connection timeout for: 256 [ 448.255433][ T5703] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 448.276714][ T5703] ath9k_htc: Failed to initialize the device [ 448.284705][ T5703] usb 6-1: ath9k_htc: USB layer deinitialized [ 448.409806][ T5695] libceph: connect (1)[c::]:6789 error -101 [ 448.415896][ T5695] libceph: mon0 (1)[c::]:6789 connect error [ 448.559509][T12930] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 448.644160][T12934] syz_tun: entered allmulticast mode [ 448.731624][T12888] ceph: No mds server is up or the cluster is laggy [ 448.760923][ T24] usb 3-1: USB disconnect, device number 92 [ 449.317100][T12928] syz_tun: left allmulticast mode [ 449.432921][ T24] usb 6-1: USB disconnect, device number 66 [ 449.655563][T12958] devpts: Bad value for 'max' [ 449.706829][T12953] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1959'. [ 450.968046][T12971] random: crng reseeded on system resumption [ 451.241923][ T30] audit: type=1400 audit(1781620175.228:1046): avc: denied { read } for pid=12974 comm="syz.0.1965" path="socket:[48685]" dev="sockfs" ino=48685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 451.307097][T12987] netlink: 'syz.0.1965': attribute type 1 has an invalid length. [ 451.854306][T12987] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 452.095066][T12998] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 452.123318][ T30] audit: type=1400 audit(1781620176.108:1047): avc: denied { create } for pid=12993 comm="syz.1.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 452.271514][T13009] syz_tun: entered allmulticast mode [ 452.349618][T13002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1971'. [ 452.490299][T13016] netlink: 'syz.1.1973': attribute type 4 has an invalid length. [ 452.501006][T13016] netlink: 'syz.1.1973': attribute type 4 has an invalid length. [ 452.755052][T12976] syz_tun: left allmulticast mode [ 452.859723][ T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 452.869131][ T5791] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 452.963059][T13027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1976'. [ 453.012268][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 453.022086][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.030183][ T24] usb 2-1: Product: syz [ 453.034383][ T24] usb 2-1: Manufacturer: syz [ 453.038962][ T24] usb 2-1: SerialNumber: syz [ 453.040207][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.055580][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.058491][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 453.065656][ T5791] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 453.079880][ T5694] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 453.083615][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.100922][ T5791] usb 1-1: config 0 descriptor?? [ 453.229749][T13031] vivid-007: ================= START STATUS ================= [ 453.237509][T13031] vivid-007: Enable Output Cropping: true [ 453.244622][T13031] vivid-007: Enable Output Composing: true [ 453.251466][T13031] vivid-007: Enable Output Scaler: true [ 453.257038][T13031] vivid-007: Tx RGB Quantization Range: Automatic [ 453.263618][T13031] vivid-007: Transmit Mode: HDMI [ 453.272065][T13031] vivid-007: Hotplug Present: 0x00000000 [ 453.277778][T13031] vivid-007: RxSense Present: 0x00000000 [ 453.289380][T13031] vivid-007: EDID Present: 0x00000000 [ 453.300792][T13031] vivid-007: ================== END STATUS ================== [ 453.310538][T13034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.320380][T13034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.328893][T13035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.349042][T13035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.380107][ T5791] usbhid 1-1:0.0: can't add hid device: -71 [ 453.389739][ T5791] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 453.405281][ T5791] usb 1-1: USB disconnect, device number 111 [ 454.030743][ T30] audit: type=1326 audit(1781620177.998:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13050 comm="syz.2.1982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fa419ce59 code=0x0 [ 454.199357][ T5791] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 454.329681][ T5694] usb 2-1: Service connection timeout for: 256 [ 454.384130][ T5791] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 454.427870][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.477325][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.558350][ T5791] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 454.625366][ T5791] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 454.646067][ T5791] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 454.685657][ T5791] usb 1-1: Manufacturer: syz [ 454.737503][ T5791] usb 1-1: config 0 descriptor?? [ 454.867632][ T5694] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 454.890773][ T5694] ath9k_htc: Failed to initialize the device [ 454.898151][ T5694] usb 2-1: ath9k_htc: USB layer deinitialized [ 455.174295][ T5791] appleir 0003:05AC:8243.0040: unknown main item tag 0x0 [ 455.184447][ T5791] appleir 0003:05AC:8243.0040: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 455.516384][ T5791] usb 2-1: USB disconnect, device number 85 [ 455.799132][ T30] audit: type=1326 audit(1781620179.698:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13053 comm="syz.0.1983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a659ce59 code=0x7ffc0000 [ 455.878167][T13073] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 455.897236][ T30] audit: type=1326 audit(1781620179.698:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13053 comm="syz.0.1983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a659ce59 code=0x7ffc0000 [ 455.924700][ T30] audit: type=1326 audit(1781620179.708:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13053 comm="syz.0.1983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f03a659ce59 code=0x7ffc0000 [ 455.952383][ T30] audit: type=1326 audit(1781620179.708:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13053 comm="syz.0.1983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a659ce59 code=0x7ffc0000 [ 455.984107][ T30] audit: type=1326 audit(1781620179.708:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13053 comm="syz.0.1983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a659ce59 code=0x7ffc0000 [ 456.012987][ T30] audit: type=1326 audit(1781620179.708:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13053 comm="syz.0.1983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03a655d68e code=0x7ffc0000 [ 456.041557][ T30] audit: type=1326 audit(1781620179.708:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13053 comm="syz.0.1983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a659ce59 code=0x7ffc0000 [ 456.124671][T13077] netlink: 'syz.5.1987': attribute type 1 has an invalid length. [ 456.133564][T13077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.262185][T13079] tipc: Enabled bearer , priority 0 [ 456.619168][ T5694] usb 1-1: reset high-speed USB device number 112 using dummy_hcd [ 456.719412][ T5791] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 456.749179][ T5694] usb 1-1: device descriptor read/64, error -32 [ 456.880737][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.892064][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.901869][ T5791] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 456.911020][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.919991][ T5791] usb 2-1: config 0 descriptor?? [ 456.933825][T13076] tipc: Disabling bearer [ 456.990316][ T5694] usb 1-1: reset high-speed USB device number 112 using dummy_hcd [ 457.179874][ T5694] usb 1-1: device descriptor read/64, error -32 [ 457.459377][ T5694] usb 1-1: reset high-speed USB device number 112 using dummy_hcd [ 457.530596][ T5694] usb 1-1: device descriptor read/8, error -71 [ 457.651621][T13096] FAULT_INJECTION: forcing a failure. [ 457.651621][T13096] name failslab, interval 1, probability 0, space 0, times 0 [ 457.666762][T13096] CPU: 1 UID: 0 PID: 13096 Comm: syz.0.1993 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.666791][T13096] Tainted: [L]=SOFTLOCKUP [ 457.666797][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.666807][T13096] Call Trace: [ 457.666813][T13096] [ 457.666820][T13096] dump_stack_lvl+0x100/0x190 [ 457.666842][T13096] should_fail_ex.cold+0x5/0xa [ 457.666862][T13096] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 457.666883][T13096] should_failslab+0xc2/0x120 [ 457.666912][T13096] __kmalloc_cache_noprof+0x7a/0x6e0 [ 457.666931][T13096] ? vhost_task_create+0xee/0x370 [ 457.666956][T13096] ? trace_contention_end+0x126/0x160 [ 457.666974][T13096] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 457.667001][T13096] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 457.667019][T13096] vhost_task_create+0xee/0x370 [ 457.667044][T13096] ? __pfx_vhost_task_create+0x10/0x10 [ 457.667068][T13096] ? rcu_is_watching+0x12/0xc0 [ 457.667091][T13096] ? __pfx_vhost_task_fn+0x10/0x10 [ 457.667118][T13096] ? __pfx___mutex_lock+0x10/0x10 [ 457.667134][T13096] ? trace_irq_enable.constprop.0+0x122/0x160 [ 457.667156][T13096] kvm_mmu_post_init_vm+0x1b3/0x360 [ 457.667179][T13096] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 457.667204][T13096] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 457.667219][T13096] ? lock_release+0x24d/0x310 [ 457.667237][T13096] kvm_vcpu_ioctl+0x730/0x1700 [ 457.667255][T13096] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 457.667272][T13096] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.667298][T13096] ? do_vfs_ioctl+0x226/0x13e0 [ 457.667323][T13096] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 457.667347][T13096] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 457.667374][T13096] ? rcu_is_watching+0x12/0xc0 [ 457.667395][T13096] ? hook_file_ioctl_common+0x149/0x410 [ 457.667415][T13096] ? selinux_file_ioctl+0x13b/0x290 [ 457.667438][T13096] ? selinux_file_ioctl+0xb6/0x290 [ 457.667462][T13096] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 457.667479][T13096] __x64_sys_ioctl+0x18e/0x210 [ 457.667503][T13096] do_syscall_64+0x115/0x870 [ 457.667518][T13096] ? clear_bhb_loop+0x40/0x90 [ 457.667536][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.667552][T13096] RIP: 0033:0x7f03a659ce59 [ 457.667564][T13096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.667580][T13096] RSP: 002b:00007f03a743b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.667597][T13096] RAX: ffffffffffffffda RBX: 00007f03a6816090 RCX: 00007f03a659ce59 [ 457.667609][T13096] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 457.667619][T13096] RBP: 00007f03a743b090 R08: 0000000000000000 R09: 0000000000000000 [ 457.667629][T13096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.667638][T13096] R13: 00007f03a6816128 R14: 00007f03a6816090 R15: 00007ffe4e0de098 [ 457.667655][T13096] [ 457.959618][ T5791] usb 2-1: language id specifier not provided by device, defaulting to English [ 458.016894][T13101] netlink: 'syz.6.1995': attribute type 29 has an invalid length. [ 458.025620][T13101] netlink: 'syz.6.1995': attribute type 29 has an invalid length. [ 458.035423][T13101] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1995'. [ 458.377973][ T5791] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0041/input/input92 [ 458.470330][ T5791] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0041/input/input93 [ 458.507595][ T5791] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0041/input/input94 [ 458.524084][T13118] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 458.547156][ T5791] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0041/input/input95 [ 458.844140][ T5791] uclogic 0003:256C:006D.0041: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 458.865950][ T5695] usb 1-1: USB disconnect, device number 112 [ 458.929707][ T5791] usb 2-1: USB disconnect, device number 86 [ 458.957348][T13124] syz_tun: entered allmulticast mode [ 459.119579][ T5694] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 459.279196][ T5694] usb 6-1: Using ep0 maxpacket: 8 [ 459.286869][ T5694] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 459.314148][ T5694] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.324806][ T5694] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 459.470260][ T5694] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 459.491828][ T5694] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.627029][ T5694] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 459.646992][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.415627][T13142] Bluetooth: MGMT ver 1.23 [ 460.669743][ T5703] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 460.839384][ T5703] usb 2-1: Using ep0 maxpacket: 8 [ 460.907685][ T5703] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 460.923806][ T5703] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 460.933836][ T5703] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 460.943604][ T5703] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.953964][ T5703] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.967297][ T5703] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 461.274062][T13148] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 461.285982][T13148] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 461.297711][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.462946][T13114] syz_tun: left allmulticast mode [ 461.640336][ T5703] usb 2-1: usb_control_msg returned -32 [ 461.652679][ T5703] usbtmc 2-1:16.0: can't read capabilities [ 461.757462][T13162] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 461.794736][T13167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62428 sclass=netlink_route_socket pid=13167 comm=syz.0.2010 [ 461.816253][T13162] bond2 (unregistering): Released all slaves [ 461.868543][T13166] SELinux: failed to load policy [ 461.876815][T13166] netlink: 'syz.2.2011': attribute type 4 has an invalid length. [ 462.012490][ T5841] block nbd0: Possible stuck request ffff88802809e000: control (read@0,1024B). Runtime 360 seconds [ 462.023353][ T5841] block nbd0: Possible stuck request ffff88802809e1c0: control (read@1024,1024B). Runtime 360 seconds [ 462.034354][ T5841] block nbd0: Possible stuck request ffff88802809e380: control (read@2048,1024B). Runtime 360 seconds [ 462.038717][T13175] FAULT_INJECTION: forcing a failure. [ 462.038717][T13175] name failslab, interval 1, probability 0, space 0, times 0 [ 462.060354][ T5841] block nbd0: Possible stuck request ffff88802809e540: control (read@3072,1024B). Runtime 360 seconds [ 462.081061][T13175] CPU: 1 UID: 0 PID: 13175 Comm: syz.2.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.081087][T13175] Tainted: [L]=SOFTLOCKUP [ 462.081093][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.081104][T13175] Call Trace: [ 462.081109][T13175] [ 462.081115][T13175] dump_stack_lvl+0x100/0x190 [ 462.081132][T13175] should_fail_ex.cold+0x5/0xa [ 462.081150][T13175] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 462.081167][T13175] ? __pfx_fuse_inode_eq+0x10/0x10 [ 462.081180][T13175] should_failslab+0xc2/0x120 [ 462.081197][T13175] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 462.081211][T13175] ? fuse_alloc_inode+0x2c/0x1e0 [ 462.081226][T13175] ? __pfx_fuse_inode_eq+0x10/0x10 [ 462.081239][T13175] ? __pfx_fuse_inode_set+0x10/0x10 [ 462.081252][T13175] fuse_alloc_inode+0x2c/0x1e0 [ 462.081266][T13175] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 462.081280][T13175] alloc_inode+0x68/0x250 [ 462.081295][T13175] iget5_locked+0x5f/0xa0 [ 462.081310][T13175] fuse_iget+0x200/0x930 [ 462.081326][T13175] ? __pfx_fuse_iget+0x10/0x10 [ 462.081341][T13175] ? __fuse_simple_request+0x58e/0xf00 [ 462.081354][T13175] ? __asan_memset+0x23/0x50 [ 462.081368][T13175] fuse_lookup_name+0x481/0x760 [ 462.081384][T13175] ? __pfx_fuse_lookup_name+0x10/0x10 [ 462.081408][T13175] ? rcu_is_watching+0x12/0xc0 [ 462.081432][T13175] fuse_lookup+0x209/0x550 [ 462.081453][T13175] ? __pfx_fuse_lookup+0x10/0x10 [ 462.081471][T13175] ? down_read+0x13b/0x4c0 [ 462.081483][T13175] ? __pfx_down_read+0x10/0x10 [ 462.081494][T13175] __lookup_slow+0x155/0x320 [ 462.081509][T13175] lookup_slow+0x50/0x70 [ 462.081522][T13175] path_lookupat+0x5e8/0xc40 [ 462.081538][T13175] ? _kstrtoull+0x13c/0x1f0 [ 462.081553][T13175] filename_lookup+0x202/0x590 [ 462.081563][T13175] ? __pfx_filename_lookup+0x10/0x10 [ 462.081577][T13175] ? __x64_sys_statx+0x1a3/0x1e0 [ 462.081590][T13175] ? do_syscall_64+0x115/0x870 [ 462.081600][T13175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.081612][T13175] vfs_statx+0xff/0x3f0 [ 462.081625][T13175] ? __pfx_vfs_statx+0x10/0x10 [ 462.081639][T13175] do_statx+0xf1/0x170 [ 462.081658][T13175] ? __pfx_do_statx+0x10/0x10 [ 462.081677][T13175] ? strncpy_from_user+0x19d/0x2d0 [ 462.081689][T13175] ? do_getname+0x191/0x390 [ 462.081703][T13175] __x64_sys_statx+0x136/0x1e0 [ 462.081717][T13175] do_syscall_64+0x115/0x870 [ 462.081729][T13175] ? clear_bhb_loop+0x40/0x90 [ 462.081740][T13175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.081754][T13175] RIP: 0033:0x7f3fa419ce59 [ 462.081767][T13175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.081783][T13175] RSP: 002b:00007f3fa4ffd028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 462.081800][T13175] RAX: ffffffffffffffda RBX: 00007f3fa4415fa0 RCX: 00007f3fa419ce59 [ 462.081811][T13175] RDX: 0000000000000800 RSI: 00002000000021c0 RDI: ffffffffffffff9c [ 462.081819][T13175] RBP: 00007f3fa4ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 462.081825][T13175] R10: 000000000000088c R11: 0000000000000246 R12: 0000000000000001 [ 462.081831][T13175] R13: 00007f3fa4416038 R14: 00007f3fa4415fa0 R15: 00007ffe56bf2e38 [ 462.081841][T13175] [ 462.482964][T13179] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 462.521333][ T5702] usb 6-1: USB disconnect, device number 67 [ 462.631117][T13165] [U]  [ 462.657905][T13185] netlink: 'syz.6.2018': attribute type 4 has an invalid length. [ 462.950002][ T5703] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 463.161964][ T5703] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 463.170354][ T5703] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 463.213223][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 463.360557][ T5703] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 463.370304][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.389385][ T5703] usb 3-1: Product: syz [ 463.397825][ T5703] usb 3-1: Manufacturer: syz [ 463.470822][ T5703] usb 3-1: SerialNumber: syz [ 463.479639][ T5694] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 463.482174][ T5703] usb 3-1: config 0 descriptor?? [ 463.500947][ T5703] hub 3-1:0.0: bad descriptor, ignoring hub [ 463.506881][ T5703] hub 3-1:0.0: probe with driver hub failed with error -5 [ 463.579827][ T24] usb 2-1: USB disconnect, device number 87 [ 463.639668][ T5694] usb 1-1: Using ep0 maxpacket: 16 [ 463.648927][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.671221][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.712122][ T5694] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.754687][ T5694] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 463.835848][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.990578][ T5694] usb 1-1: config 0 descriptor?? [ 464.024628][ T5694] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input96 [ 464.198633][ T6206] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 464.239118][ T24] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 464.257085][T13200] lo speed is unknown, defaulting to 1000 [ 464.270501][ T4957] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 464.313369][ T4957] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 464.331089][T13200] lo speed is unknown, defaulting to 1000 [ 464.347476][ T4957] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 464.367960][T13213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2022'. [ 464.381551][ T4957] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 464.399666][ T5703] usb 3-1: USB disconnect, device number 93 [ 464.413956][ T4957] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 464.462381][ T24] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 464.496385][ T4957] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 464.540399][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 464.616282][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 464.766748][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.799209][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.837826][ T24] usbtmc 2-1:16.0: bulk endpoints not found [ 464.884406][T13200] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 465.051171][ T5791] usb 1-1: USB disconnect, device number 113 [ 465.229151][ T5703] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 465.404534][ T5703] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 465.417007][ T5703] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 465.429651][ T5703] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 465.441422][ T5702] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 465.512795][ T5703] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 465.668572][ T5703] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 465.700276][ T5703] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.709998][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 465.720310][ T5703] usb 6-1: SerialNumber: syz [ 465.731334][T13217] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 465.741802][T13217] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 465.750805][ T5703] rndis_host 6-1:1.0: missing RNDIS status endpoint [ 465.860935][ T5702] usb 3-1: unable to get BOS descriptor or descriptor too short [ 465.874155][ T5702] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 465.877624][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2030'. [ 465.887784][ T5702] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 467.026597][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.050573][ T5702] usb 3-1: Product: syz [ 467.057827][ T5702] usb 3-1: Manufacturer: syz [ 467.063519][ T5702] usb 3-1: SerialNumber: syz [ 467.143010][ T5694] usb 2-1: USB disconnect, device number 88 [ 467.178712][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2027'. [ 467.179534][T13232] netlink: 472 bytes leftover after parsing attributes in process `syz.6.2030'. [ 467.199478][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 467.199495][ T30] audit: type=1800 audit(1781620191.178:1069): pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2027" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 467.912472][ T5702] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 467.920564][ T5702] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 467.940484][ T5791] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 468.113392][ T5791] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 468.145879][ T5791] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 468.194613][ T5791] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.245866][ T5702] usb 3-1: USB disconnect, device number 94 [ 468.262316][ T5791] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 468.310228][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.379192][ T5791] usb 1-1: Product: syz [ 468.400913][ T5791] usb 1-1: Manufacturer: syz [ 468.421421][ T5791] usb 1-1: SerialNumber: syz [ 468.423928][T10336] udevd[10336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.447061][ T5791] usb 1-1: config 0 descriptor?? [ 468.463349][ T5791] hub 1-1:0.0: bad descriptor, ignoring hub [ 468.471703][ T5791] hub 1-1:0.0: probe with driver hub failed with error -5 [ 468.505739][ T24] usb 6-1: USB disconnect, device number 68 [ 468.687121][T13262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2040'. [ 469.209178][ T30] audit: type=1400 audit(1781620193.158:1070): avc: denied { lock } for pid=13273 comm="syz.5.2044" path="socket:[50482]" dev="sockfs" ino=50482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 469.349237][ T5702] usb 1-1: USB disconnect, device number 114 [ 469.389577][ T5791] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 469.559468][ T5791] usb 3-1: Using ep0 maxpacket: 16 [ 469.568607][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.591419][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.611634][ T5791] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.629618][ T5791] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 469.633238][T13284] fuse: Bad value for 'fd' [ 469.638709][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.652994][ T5791] usb 3-1: config 0 descriptor?? [ 469.668449][ T5791] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input97 [ 469.699333][ T4957] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 469.733468][ T6206] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 469.777512][ T4957] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 469.796775][ T4957] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 469.810948][ T4957] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 469.819892][ T4957] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 469.827682][ T4957] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 469.876870][T13260] lo speed is unknown, defaulting to 1000 [ 469.883230][T13260] lo speed is unknown, defaulting to 1000 [ 469.922716][T13289] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2039'. [ 470.751665][ T5702] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 470.841774][T13260] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 470.926271][ T24] usb 3-1: USB disconnect, device number 95 [ 471.267625][ T5702] usb 2-1: Using ep0 maxpacket: 16 [ 471.290850][ T31] INFO: task syz.3.1408:11018 blocked for more than 143 seconds. [ 471.301813][ T31] Tainted: G L syzkaller #0 [ 471.308368][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.321209][ T5702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.338739][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 471.350256][ T31] task:syz.3.1408 state:D stack:26472 pid:11018 tgid:11011 ppid:5612 task_flags:0x400140 flags:0x00080006 [ 471.362420][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 471.372652][ T5702] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 471.382697][ T31] Call Trace: [ 471.386234][ T31] [ 471.389339][ T31] __schedule+0x125c/0x6730 [ 471.393924][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.406888][ T31] ? tick_program_event+0xb0/0x140 [ 471.412653][ T31] ? do_raw_spin_lock+0x128/0x260 [ 471.417774][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 471.423565][ T31] ? __pfx___schedule+0x10/0x10 [ 471.428618][ T31] ? rcu_is_watching+0x12/0xc0 [ 471.433581][ T5702] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 471.443295][ T5702] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 471.451441][ T31] ? schedule+0x2bf/0x390 [ 471.456047][ T31] ? lock_release+0x24d/0x310 [ 471.460932][ T5702] usb 2-1: Manufacturer: syz [ 471.465560][ T31] schedule+0xdd/0x390 [ 471.477235][ T5702] usb 2-1: config 0 descriptor?? [ 471.482411][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.488025][ T31] __mutex_lock+0xccc/0x1bd0 [ 471.496028][ T31] ? sync_bdevs+0x153/0x480 [ 471.500870][ T31] ? rcu_is_watching+0x12/0xc0 [ 471.505667][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.510836][ T31] ? __pfx___schedule+0x10/0x10 [ 471.515720][ T31] ? iput.part.0+0x1a0/0x1050 [ 471.520443][ T31] ? in_gate_area_no_mm+0x7/0x80 [ 471.525505][ T31] ? sync_bdevs+0x153/0x480 [ 471.530337][ T31] sync_bdevs+0x153/0x480 [ 471.534676][ T31] ksys_sync+0xb0/0xf0 [ 471.538743][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 471.543537][ T31] ? rcu_is_watching+0x12/0xc0 [ 471.548379][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 471.554549][ T31] __do_sys_sync+0xe/0x20 [ 471.558887][ T31] do_syscall_64+0x115/0x870 [ 471.563748][ T31] ? clear_bhb_loop+0x40/0x90 [ 471.568434][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.574484][ T31] RIP: 0033:0x7f8bd0d9ce59 [ 471.578924][ T31] RSP: 002b:00007f8bceff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 471.587364][ T31] RAX: ffffffffffffffda RBX: 00007f8bd1016180 RCX: 00007f8bd0d9ce59 [ 471.595742][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.603760][ T31] RBP: 00007f8bd1016180 R08: 0000000000000000 R09: 0000000000000000 [ 471.612280][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.620634][ T31] R13: 00007f8bd1016218 R14: 00007f8bd1016180 R15: 00007ffc4bf201c8 [ 471.628680][ T31] [ 471.631800][ T31] INFO: task syz.3.1408:11021 blocked for more than 144 seconds. [ 471.640680][ T31] Tainted: G L syzkaller #0 [ 471.647249][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.682457][ T31] task:syz.3.1408 state:D stack:28648 pid:11021 tgid:11011 ppid:5612 task_flags:0x400040 flags:0x00080002 [ 471.694776][ T31] Call Trace: [ 471.698079][ T31] [ 471.701054][ T31] __schedule+0x125c/0x6730 [ 471.705623][ T31] ? do_raw_spin_lock+0x128/0x260 [ 471.710795][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 471.716214][ T31] ? __pfx___schedule+0x10/0x10 [ 471.721439][ T31] ? rcu_is_watching+0x12/0xc0 [ 471.726229][ T31] ? schedule+0x2bf/0x390 [ 471.730879][ T31] ? lock_release+0x24d/0x310 [ 471.735778][ T31] schedule+0xdd/0x390 [ 471.739887][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.745447][ T31] __mutex_lock+0xccc/0x1bd0 [ 471.750412][ T31] ? sync_bdevs+0x153/0x480 [ 471.754955][ T31] ? rcu_is_watching+0x12/0xc0 [ 471.760451][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.765821][ T31] ? __mutex_unlock_slowpath+0x350/0x910 [ 471.771876][ T31] ? iput.part.0+0x1a0/0x1050 [ 471.776598][ T31] ? sync_bdevs+0x53/0x480 [ 471.781450][ T31] ? lock_release+0x211/0x310 [ 471.786129][ T31] ? sync_bdevs+0x153/0x480 [ 471.789303][ T5702] rc_core: IR keymap rc-hauppauge not found [ 471.790921][ T31] sync_bdevs+0x153/0x480 [ 471.796911][ T5702] Registered IR keymap rc-empty [ 471.801077][ T31] ksys_sync+0xb0/0xf0 [ 471.810693][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 471.815491][ T31] ? kcov_ioctl+0x16a/0x720 [ 471.820050][ T31] ? rcu_is_watching+0x12/0xc0 [ 471.824839][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 471.826210][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.831013][ T31] __do_sys_sync+0xe/0x20 [ 471.846760][ T31] do_syscall_64+0x115/0x870 [ 471.856080][ T31] ? clear_bhb_loop+0x40/0x90 [ 471.865275][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.874608][ T31] RIP: 0033:0x7f8bd0d9ce59 [ 471.879450][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.887086][ T31] RSP: 002b:00007f8bcebd3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 471.895589][ T31] RAX: ffffffffffffffda RBX: 00007f8bd1016270 RCX: 00007f8bd0d9ce59 [ 471.909843][ T5702] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 471.911352][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.923140][ T5702] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input98 [ 471.930995][ T31] RBP: 00007f8bd1016270 R08: 0000000000000000 R09: 0000000000000000 [ 471.953509][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.953611][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.968893][ T31] R13: 00007f8bd1016308 R14: 00007f8bd1016270 R15: 00007ffc4bf201c8 [ 471.976945][ T31] [ 471.980034][ T31] INFO: task syz.3.1408:11026 blocked for more than 144 seconds. [ 471.987766][ T31] Tainted: G L syzkaller #0 [ 471.989197][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.996297][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.010136][ T31] task:syz.3.1408 state:D stack:28216 pid:11026 tgid:11011 ppid:5612 task_flags:0x400040 flags:0x00080002 [ 472.022666][ T31] Call Trace: [ 472.025937][ T31] [ 472.028868][ T31] __schedule+0x125c/0x6730 [ 472.029143][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.033767][ T31] ? sched_clock_cpu+0x6c/0x570 [ 472.045505][ T31] ? sched_clock+0x38/0x60 [ 472.050439][ T31] ? do_raw_spin_lock+0x128/0x260 [ 472.055468][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 472.060895][ T31] ? __pfx___schedule+0x10/0x10 [ 472.065748][ T31] ? rcu_is_watching+0x12/0xc0 [ 472.069148][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.077629][ T31] ? schedule+0x2bf/0x390 [ 472.077655][ T31] ? lock_release+0x24d/0x310 [ 472.087360][ T31] schedule+0xdd/0x390 [ 472.091634][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.097104][ T31] __mutex_lock+0xccc/0x1bd0 [ 472.101696][ T31] ? sync_bdevs+0x153/0x480 [ 472.106209][ T31] ? rcu_is_watching+0x12/0xc0 [ 472.109126][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.111462][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.123091][ T31] ? __mutex_unlock_slowpath+0x350/0x910 [ 472.128713][ T31] ? iput.part.0+0x1a0/0x1050 [ 472.133428][ T31] ? sync_bdevs+0x53/0x480 [ 472.137831][ T31] ? lock_release+0x211/0x310 [ 472.139161][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.142989][ T31] ? sync_bdevs+0x153/0x480 [ 472.154200][ T31] sync_bdevs+0x153/0x480 [ 472.158535][ T31] ksys_sync+0xb0/0xf0 [ 472.162627][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 472.167384][ T31] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 472.174370][ T31] ? rcu_is_watching+0x12/0xc0 [ 472.179178][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 472.180197][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.185332][ T31] __do_sys_sync+0xe/0x20 [ 472.185357][ T31] do_syscall_64+0x115/0x870 [ 472.201916][ T31] ? clear_bhb_loop+0x40/0x90 [ 472.206589][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.213084][ T31] RIP: 0033:0x7f8bd0d9ce59 [ 472.217620][ T31] RSP: 002b:00007f8bce7b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 472.226144][ T31] RAX: ffffffffffffffda RBX: 00007f8bd1016360 RCX: 00007f8bd0d9ce59 [ 472.234812][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.235891][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.242902][ T31] RBP: 00007f8bd1016360 R08: 0000000000000000 R09: 0000000000000000 [ 472.242916][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.242927][ T31] R13: 00007f8bd10163f8 R14: 00007f8bd1016360 R15: 00007ffc4bf201c8 [ 472.242946][ T31] [ 472.243003][ T31] INFO: task syz.3.1408:11029 blocked for more than 144 seconds. [ 472.243019][ T31] Tainted: G L syzkaller #0 [ 472.243029][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.243036][ T31] task:syz.3.1408 state:D stack:28360 pid:11029 tgid:11011 ppid:5612 task_flags:0x400040 flags:0x00080002 [ 472.243095][ T31] Call Trace: [ 472.243101][ T31] [ 472.243109][ T31] __schedule+0x125c/0x6730 [ 472.279353][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.285900][ T31] ? __pfx___schedule+0x10/0x10 [ 472.324824][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.349744][ T31] ? rcu_is_watching+0x12/0xc0 [ 472.350430][ T5702] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 472.354531][ T31] ? schedule+0x2bf/0x390 [ 472.364394][ T5702] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 472.367949][ T31] ? lock_release+0x24d/0x310 [ 472.367973][ T31] schedule+0xdd/0x390 [ 472.387448][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.393096][ T31] __mutex_lock+0xccc/0x1bd0 [ 472.397708][ T31] ? sync_bdevs+0x153/0x480 [ 472.402243][ T31] ? rcu_is_watching+0x12/0xc0 [ 472.407013][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.413016][ T31] ? __mutex_unlock_slowpath+0x350/0x910 [ 472.418646][ T31] ? iput.part.0+0x1a0/0x1050 [ 472.423366][ T31] ? sync_bdevs+0x53/0x480 [ 472.427777][ T31] ? lock_release+0x211/0x310 [ 472.432493][ T31] ? sync_bdevs+0x153/0x480 [ 472.436992][ T31] sync_bdevs+0x153/0x480 [ 472.441861][ T31] ksys_sync+0xb0/0xf0 [ 472.445927][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 472.450723][ T31] ? kcov_ioctl+0x16a/0x720 [ 472.455243][ T31] ? rcu_is_watching+0x12/0xc0 [ 472.460049][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 472.466109][ T31] __do_sys_sync+0xe/0x20 [ 472.470932][ T31] do_syscall_64+0x115/0x870 [ 472.475533][ T31] ? clear_bhb_loop+0x40/0x90 [ 472.480243][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.486122][ T31] RIP: 0033:0x7f8bd0d9ce59 [ 472.490595][ T31] RSP: 002b:00007f8bce38d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 472.498996][ T31] RAX: ffffffffffffffda RBX: 00007f8bd1016450 RCX: 00007f8bd0d9ce59 [ 472.507575][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.515589][ T31] RBP: 00007f8bd1016450 R08: 0000000000000000 R09: 0000000000000000 [ 472.523586][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.532025][ T31] R13: 00007f8bd10164e8 R14: 00007f8bd1016450 R15: 00007ffc4bf201c8 [ 472.540027][ T31] [ 472.543416][ T31] INFO: lockdep is turned off. [ 472.548180][ T31] NMI backtrace for cpu 1 [ 472.548196][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 472.548220][ T31] Tainted: [L]=SOFTLOCKUP [ 472.548231][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 472.548241][ T31] Call Trace: [ 472.548246][ T31] [ 472.548253][ T31] dump_stack_lvl+0x100/0x190 [ 472.548276][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 472.548297][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 472.548319][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 472.548345][ T31] sys_info+0x141/0x190 [ 472.548364][ T31] watchdog+0xcb1/0x1030 [ 472.548381][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 472.548401][ T31] ? __pfx_watchdog+0x10/0x10 [ 472.548417][ T31] ? __kthread_parkme+0x18c/0x230 [ 472.548438][ T31] ? kthread+0x13a/0x450 [ 472.548460][ T31] ? __pfx_watchdog+0x10/0x10 [ 472.548475][ T31] kthread+0x370/0x450 [ 472.548497][ T31] ? __pfx_kthread+0x10/0x10 [ 472.548520][ T31] ret_from_fork+0x72b/0xd50 [ 472.548540][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 472.548561][ T31] ? __switch_to+0x800/0x10f0 [ 472.548586][ T31] ? __pfx_kthread+0x10/0x10 [ 472.548610][ T31] ret_from_fork_asm+0x1a/0x30 [ 472.548637][ T31] [ 472.548644][ T31] Sending NMI from CPU 1 to CPUs 0: [ 472.682420][ C0] NMI backtrace for cpu 0 [ 472.682438][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.682457][ C0] Tainted: [L]=SOFTLOCKUP [ 472.682462][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 472.682471][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 472.682496][ C0] Code: e6 90 02 e9 c3 48 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 d6 1f 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 472.682509][ C0] RSP: 0018:ffffffff8e407e10 EFLAGS: 00000246 [ 472.682522][ C0] RAX: 0000000002eec714 RBX: ffffffff8e495480 RCX: ffffffff8b8bc2b5 [ 472.682531][ C0] RDX: 0000000000000001 RSI: ffffffff8c1c9c00 RDI: ffffffff81de6ea7 [ 472.682540][ C0] RBP: fffffbfff1c92a90 R08: 0000000000000000 R09: ffffed101708678d [ 472.682549][ C0] R10: ffff8880b8433c6b R11: ffffffff81d5452c R12: 0000000000000000 [ 472.682557][ C0] R13: 0000000000000000 R14: 1ffffffff1c80fc6 R15: dffffc0000000000 [ 472.682566][ C0] FS: 0000000000000000(0000) GS:ffff888124375000(0000) knlGS:0000000000000000 [ 472.682580][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.682589][ C0] CR2: 00007f422b9a4d58 CR3: 0000000096c70000 CR4: 00000000003526f0 [ 472.682598][ C0] Call Trace: [ 472.682603][ C0] [ 472.682608][ C0] default_idle+0x9/0x10 [ 472.682622][ C0] default_idle_call+0x6c/0xb0 [ 472.682636][ C0] do_idle+0x3a7/0x5b0 [ 472.682652][ C0] ? __pfx_do_idle+0x10/0x10 [ 472.682669][ C0] cpu_startup_entry+0x4f/0x60 [ 472.682685][ C0] rest_init+0x251/0x260 [ 472.682699][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 472.682714][ C0] start_kernel+0x484/0x490 [ 472.682739][ C0] x86_64_start_reservations+0x24/0x30 [ 472.682758][ C0] x86_64_start_kernel+0x12b/0x130 [ 472.682778][ C0] common_startup_64+0x13e/0x158 [ 472.682799][ C0] [ 472.871874][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 472.878711][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 472.889365][ T31] Tainted: [L]=SOFTLOCKUP [ 472.893666][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 472.903701][ T31] Call Trace: [ 472.906961][ T31] [ 472.909888][ T31] dump_stack_lvl+0x100/0x190 [ 472.914549][ T31] vpanic+0x552/0x970 [ 472.918517][ T31] ? __pfx_vpanic+0x10/0x10 [ 472.922998][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 472.929145][ T31] panic+0xd1/0xe0 [ 472.932850][ T31] ? __pfx_panic+0x10/0x10 [ 472.937245][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 472.943382][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 472.949520][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 472.955656][ T31] ? watchdog.cold+0x1ec/0x234 [ 472.960399][ T31] ? watchdog+0xcc1/0x1030 [ 472.964794][ T31] watchdog.cold+0x1fd/0x234 [ 472.969365][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 472.975415][ T31] ? __pfx_watchdog+0x10/0x10 [ 472.980084][ T31] ? __kthread_parkme+0x18c/0x230 [ 472.985102][ T31] ? kthread+0x13a/0x450 [ 472.989329][ T31] ? __pfx_watchdog+0x10/0x10 [ 472.993984][ T31] kthread+0x370/0x450 [ 472.998054][ T31] ? __pfx_kthread+0x10/0x10 [ 473.002628][ T31] ret_from_fork+0x72b/0xd50 [ 473.007202][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 473.012305][ T31] ? __switch_to+0x800/0x10f0 [ 473.016968][ T31] ? __pfx_kthread+0x10/0x10 [ 473.021541][ T31] ret_from_fork_asm+0x1a/0x30 [ 473.026294][ T31] [ 473.029480][ T31] Kernel Offset: disabled [ 473.033790][ T31] Rebooting in 86400 seconds..