last executing test programs: 7m14.40954394s ago: executing program 2 (id=163): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x5e2}], 0x1}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x7, &(0x7f0000000400)=[@cstype0={0x4, 0x6}], 0x1) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) 7m14.33190226s ago: executing program 2 (id=164): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06"], 0x9) 7m14.18918393s ago: executing program 2 (id=165): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'S'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) sendto$inet6(r2, 0x0, 0x0, 0x8810, &(0x7f0000001500)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff7}, 0x1c) madvise(&(0x7f00002e4000/0x2000)=nil, 0x2000, 0x17) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x40000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0x85, 0x10, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r7, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e26, 0xfffffffe, @mcast2, 0x7f2a}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x5}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f8, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5f85}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x345}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc712}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x287}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffb9}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5f2b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbd68}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x94}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6b5}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, 0x0, 0xffffffdb) 7m13.973684281s ago: executing program 2 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 7m13.911860985s ago: executing program 2 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) (fail_nth: 1) 7m12.543370416s ago: executing program 2 (id=176): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x800000100000002) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) 7m12.086832356s ago: executing program 32 (id=176): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x800000100000002) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) 5m47.80519544s ago: executing program 1 (id=524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, 0x0, 0x0) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500"], 0x4a) 5m46.470360456s ago: executing program 1 (id=530): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000240)={0x0, &(0x7f0000000080)}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000580080008"], 0x4a) 5m45.729056026s ago: executing program 1 (id=536): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000006c0)={0x20, 0x18}, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 5m42.563211222s ago: executing program 1 (id=545): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xd0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x40}}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f00000006c0)=""/81, 0x51}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/251, 0xfb}, {&(0x7f00000005c0)=""/13, 0xd}, {&(0x7f0000000600)=""/192, 0xc0}, {0x0}], 0x4) write(r1, &(0x7f0000000300)='lzo-rle', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1', 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000b00)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004084) r7 = openat(r1, &(0x7f0000000080)='sys_mnt/block/zram0/disksize\x00', 0x2, 0x185) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r8) ptrace$poke(0x5, r8, &(0x7f0000000200), 0xfffffffd) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="d6001b7e1597a5d363fd5f124e67724cc207a3a864f7113d2d2b7dacbad912b1bab7dd8f984d5a82dc63e48b26ca2d5ebc2c8faab5", @ANYRES16=r10, @ANYBLOB="010028bd7040020000000f00000008000300", @ANYRES32=r11, @ANYBLOB="0800340004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x18) write(r7, &(0x7f0000000480)="001122334455", 0x6) close(r7) 5m42.192494576s ago: executing program 1 (id=546): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0x40305839, &(0x7f0000001040)=ANY=[]) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) 5m41.284130318s ago: executing program 1 (id=548): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) eventfd2(0x4, 0x800) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5m40.962451945s ago: executing program 33 (id=548): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) eventfd2(0x4, 0x800) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4m19.938686904s ago: executing program 0 (id=982): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4m18.706593583s ago: executing program 0 (id=987): mkdir(&(0x7f0000013cc0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000013d40)='./mnt\x00', &(0x7f0000013d80)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000013dc0)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="abe7", 0x2) 4m18.052858262s ago: executing program 0 (id=988): r0 = socket$kcm(0xa, 0x3, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001200)={'veth0_to_team\x00', &(0x7f0000001140)=@ethtool_cmd={0x27, 0x8, 0x1, 0x1, 0x5, 0x10, 0x3, 0xa, 0x0, 0x0, 0x9, 0x9, 0xa, 0x4, 0xd, 0x9, [0x1, 0x2]}}) 4m17.069216291s ago: executing program 0 (id=993): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 4m16.834695687s ago: executing program 0 (id=995): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffff", 0xa) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x2d1, 0xed, 0x1}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0x8, 0x5, 0x40365f42, 0x0, 0xb, [{0x0, 0xfaf7}, {0xed400036, 0x5cc0}, {0x6, 0x7}, {0x5, 0x1}, {0x88, 0x1}, {0x8, 0xc}, {0x9, 0x101}, {0xffffffff, 0x9}], 0x8, 0x1, 0x4, 0x0, 0x1}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x5422, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) mkdir(&(0x7f0000008b40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000008bc0)='./config\x00', &(0x7f0000008c00)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000008c40)='./config/cluster/mycluster\x00', 0x1ff) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) chdir(&(0x7f00000003c0)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r5, r5) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x800, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x1, 0x2, 0x1000, 0x4, 0x6, 0xa7, 0x0, 0x40, 0x4, 0x7fffffff, 0x2, 0x6, 0x4, 0x7, 0x10000, 0x8001], 0x58000, 0x100900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m12.899497317s ago: executing program 0 (id=1008): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x6, 0x9, 0x843, 0xff7d, 0xb2, "202b98eb007f4300cd68f3c01f2d6afe00", 0x6, 0x800000d}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 4m12.056969116s ago: executing program 34 (id=1008): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x6, 0x9, 0x843, 0xff7d, 0xb2, "202b98eb007f4300cd68f3c01f2d6afe00", 0x6, 0x800000d}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 6.099790946s ago: executing program 6 (id=2175): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)="d04aa3c7d74ec99dbd301cd5cb5f4971a9d875cf965079116cb95bce4c", 0x1d, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x104, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_USERDATA={0x0, 0xc, "6d14116770a7806caf8439f5d87147d4d3b748c58bffaffafc4d9afe4b4e980b6293e65a4a7bfac93a34c524002a80029a7e2992caabbb818390db52112c89e1c2e381e7318cb38642342adb9ef434cf8e2bbb9cb7573c338845bbbf2651415e875c4d388f2fc14c78551d1c541c758ddbd13651f314b4446d8f55fe65e5f06a89270aeafa55233727f33cdf7c61f4131e3f3d7ece6ec156f50afb1a1e1f960b238175d6658e0aafb4e41e93d7a17f8241f76977a1c241a34c9f9ae1de825d1e692dae6087602c4e6f8d811b032954f53c1908d200d0a9574038b70d55905bd27b9d985881722566ee4e8f4b44"}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0xdc3b}]}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0xfffffffffffffff3}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0xe39f}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x0, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x0, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x26150b6c}]}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_FLAGS={0x0, 0x5, 0x1, 0x0, 0x1}]}}}]}], {0xffffffffffffff7c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x1, 0x1, 0x4}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)="b32bbe6a6f99888b3df705dc1d", 0xd}, {&(0x7f0000000240)="64805c0be3c8249bb2e84d2a431e137036d5a821107adf939f5751eca4fea3859f460d3d3d526fe96495c0d16f6292c3e097dc01c90c0728eaa51f82b499623bc3149ea8d30d393e9634d3405dba50ae695c81580fbcfaaebd2ce6463b4a72decfff1635e705aabeeba5144db26fd43d63e141e2b62e8c4cdb6ca29f8033c7a1e7966f82dcccce3d0c47479476bc528a52e2b31046c5f5e0c95f5aa12f25b558838491cfbc1eb6330d9b8264dd1c7938ec8dc0a6fbad92fb911b1f29a4962c27a82e69b0addb3a8f7d67d5285a95e0546e", 0xd1}, {&(0x7f0000000340)="3dbd88f528e589822b3fdcbb69fc3e9b3f8d29f7e42b2ce9da0492627dfba875a8c749f30cd29595cbd11f1cf851786f10dada4657f954745cd1f8d9464dffec0783ce84ba347a9a7b3c633383813909ce14f9fc9e9309288f775655f6b5d2ad14bb81912412e67433ef2bba732a219c7b959464b02fa2b03eaac75b102a54e63f09976736a5d8753821f3cee859b3e13493f5deedb7", 0x96}, {&(0x7f0000000400)="248d8d59ca7ee7c41d5ab7cfca85b88531aa9500cd9a03b149e5b6211b16be31d67b55e15f28ff6dbc069346ed879004f2db2bbd5a7c340b94b906e16cc4bbfd3d3d29fa20c4da52bb51131e46c8d5ad05d2791f655ed636e1a5904d87dd55a962a0c6ccd07e8d75b618e1e72e8647d0aa", 0x71}, {&(0x7f0000000480)="2c2817b1cc844e2a7ae863b9f416cd83385cdb4205d6a627d843f54a124b57635c67692545221ee75e531e92986bed6d1768fd0b62596e3c40c996cab59b285fbde96507ab457c6d096303056539f9e47d6dbe0accc1be4ef857fd5f29fe99f96dea5e0628bc80d5d8b06c46f8fddfe5319491360321d15cb50cc0421a7b2bdb6d3637af63a4495084d01c944b922aa4907bc35c142694353ea3406f15a92dd36708bb393306be4c909bf41b17f58b2dddce6310b872cf5c409d", 0xba}, {&(0x7f0000000540)="113f6a7f08fc0ca6fb9cc81a2de44a55a045883fb28bf106427733c7b200056f1c0c291056abdffc793db933937b458242355a61481405c32e81fdf0265d897004885c3b525a5944f325292fc2fd0323344f7d6d3c6edca7ac4dad841b17896e4c9a51140719f9f939e341a93d2112c44a37e424026217b840b33a0788f7b4bfc0141cd7c816d845f1d7d51269232baa0a0af358", 0x94}, {&(0x7f0000000c80)="8fa06d61f78c8e42e221a3f62218ac4c33c3a5ea7ae23101f28b7b94a1e29325501bc8c816a4ac6673ab68b41176ffe435e655405f93ca549e", 0x39}], 0x7}}, {{&(0x7f00000006c0)=@generic={0x23, "a46b104a78cbb12969923af4c179db593dbb7de85f7dca1e4b58f87f16acdd9a49d85510c5273f6733b7c66aa0e2a6141d76bac52bd13305cee446d268b64e7949f9a41d22fffff1db741fef2169be664705a40e3142a19066063e24899e3b20e71fe6e5302ece38242493fc75d7a7f71ac93ab449073fec19adf0174302"}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000740)="7a4f9c14af583304c6e5e7853bbf1760d83a13b0c0c7efdf4ff2a9f9a2480396ad8db972401855c69846ba15ef59d44b0d572a0a7feb26e43d6a9c43fb3944bc488d3b175d315a54868ce49a643dccf126d9065c593acd2845c4371b6f06f3a7ddcbe8495b468258afa5db53fe5bb222daeb7e2d702d444c4aefd8fc0b08d8476f0327a6890114aa53820d995cad06c57f87b99447f31e2d63537f634160e800f95669e0ce24b092f16393199ca41599145fbe7f3cc75cb65f630ecc041b45333a9a04829f4cc7e225b89a4ae0b04c1a7679d70bbf33f5f04bcb8ea0f615aba9ed5fb612bd24b29968c9", 0xea}, {&(0x7f0000000840)="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", 0xff}, {&(0x7f0000000940)="93096b2ad45d151c32af14a6b363d7d20c0ba35ad705c66ea46ea475f1fcdaeb13fbcb34df72184f030a31939a1a5119cef2b9d581155325dc66adefcb3786ec74443f42e5a89c494119c3135144a47a34773caf8e9197d985e7aa6a4e2b8a090a97900577d733b584ac1d8d2fdeb7eb77c2da5a2dbaa8ea6844c46703f60c1f5bfa2b00c98f493cadf421bdd5bc8de15b2e", 0x92}, {&(0x7f0000000a00)="1cb7ab4d15ad17a93c40436243302615a775682ff921720f15a4dff8924760a209be137c2619d2a3b1f25d859ae3ee6f711ada7e0ccd5455a5a93cf26ab677103b8407770bb2c5bd2c4bcdf58a03d70af111f93870db6423348f751288055ee5f072e8f611401e4bd671f4947fd13d3027e749c6b18ce9724cf8f80ea80e96432e43587871e66cc92396000000000000", 0x90}, {&(0x7f0000000ac0)="ce087c71790d420d25aeff4dd32b39fb75bba47c734a676c8f48cac595b50b4371a7f44de6e0e230d9d3fa52ff095b36b20a33dd13ce3feaf64fe70fbe36ca659b54c489cd7f7a5a020b7134397f07d530c9cdeee6a48f87a54d52133834a7ec2f98aab4e94b5d1f1cfc4f6c96d4acda6185267e42680bd4ef3c831a", 0x7c}, {&(0x7f0000000b40)="297e106cbed878928ecc28ceeeacda14de82c8c406cb1012171d502498364e84586f2a29d9fe7d963c3e69db6c0b50bb8812a721e3fb65871e0159a459068ef1c15db731f3a77c5c6311ce5b797bcebf850f32ece55134ba506b8570d3d3cd36e64675b8bb9fa7dbefaf95b76e8ee493bdb827e804b14c394f1fe83768bb09ffe1ddf61ceff42b3152b1e5466ad4d4584aaec30e6dd1a37aa309b3b4734bb1dd14d3cbd1e0", 0xa5}], 0x6, &(0x7f0000000e40)=[{0xf0, 0x1, 0xe71, "2b9773753945fdcfb015268de5c7b0e740eba14cf69aa9bf1485a56fd440cab686a86a8d56cd3f50a652cf0ae0625d670838bd5e7a5f23d4298c5a8452dc8875eb6f37d2635b3f3414331eedf4249978c2e7e3404c2beb12ab07b02a10287abaea63819c255d2e45c5df8f998b9f55f4e482fb89d9f8aa5253de39ec9d34922cd00b9cf137696aa4fc558c697d3364f6a08947e34daf563476be3a3fd70bcfda2fe7c0bea641f57020f136ef7f31a5fbfaf514c4f7a247d8b6cb607e47e97f76ce1ccef5c15347aacc147e77ab279902de2f5907a4758de1a4ae74b658"}, {0x48, 0x110, 0xffffffff, "ca5f5b21b9b41f67091355082de844e85d3ae273b8bb44c963d14c1c4aa7e5c0ce67f432255c3626f249005fac91f6c8bebd352328f5f440"}, {0x18, 0x116, 0x2, 'tw'}, {0x30, 0x1, 0x3, "127bdf4d44c585ded0b26fa44da74524b98934cfcb2c472a6e56cd"}, {0xe8, 0x0, 0x6, "f72701ac4602d1d98f333aaa48766d4b7ed5b2483964be84a7969168c5cdb5bf63588d3c99740aa1d72b0ce386fbcb688547e87b772e2ab9ee86d60079a82fedefa3b1a65fac5e361fd1c9c60b1be7b84f43c9a753c1768ce7742fa24a35cfb9b74437700b0d0c32141c3b7d263a24d0a870c37ef465580d5e9cc053fa889d901ecc0b9468664e5a6049cf9470956fd16e89e1d91d53cf48b372e88d60f84f6f8e0e9f0554215a7fdb7801bb111f4481582b735beca55380e1d4b936c9538b1f1c1b290e83604169e897144c00c89f9b2c"}, {0x40, 0xff, 0x1, "9115b6c0b13786bf82e73e6bc043f1c966c458f4201097654b90be6ea31e1a105ea1ac29c3007b245606"}, {0xa8, 0x10d, 0x10000, "a80e4297e84ec77339f24f30eee5428c498c39f1a4f21452e6e638bb94d89621c0c0957457d38400fa00356fe07f1e450ebcd4eaaf008e142dbbeb3497952412891b748d42ecaa610ae374cebb45f8e0cafeb30ad45e9bea16baf582d9cf5b580d381cf30796e62abf6e8e5c6027c1043a9c948991568f77c941bca887f21ac482c3ab1eaf499c09b77d4552aad446dc3d6411c1dd127589"}, {0xb0, 0x101, 0xfffffffd, "fa68e651222250b787729d8b6ad7a24277bb9a14d4297e854b48cb3747b51d083edc68e6de7578b8fb747ef8895ee10e555655227c7f91635b7512e26beca5268cfb9474ed2c35b1c4fe3b67d9cbdc2fae610a8bedc6ffd12c08a15ce95cb14b484fc9a285e89af51c119a21778e9c4efbf4700788307950c632635d943d8e5001a7342e6a6df9621808d99e1b0091720518a47ac924b489693f"}, {0xd8, 0x102, 0x7fff, "6cfa5b9d698d4b143562765f1c7bdd9cb52ceb3c07c4cd93123817c85905327c7e80c2379932b3e649d191fda86d1136a3f58a28c9ad08edb614c2b34a45164dcaba64d874e1be762822577ce5686dd27d89613a62248aa6e5b7d3376afaeab94b2d3e4e509f13d8a415a7079afa6d5da077f2ab4246fc2e5596a7d0c8f9b1947c790ee8d9e904524a866e8c36c82fad0ae94d6a46ed826a37fe62249f0994640cf25babe4a1f00af1f948e67b70eceee746d0098093924d27c9d401e2ec5fa7fdc9"}, {0xc8, 0x29, 0x4, "3999359abdbcacc6618f78bcc00602de06b2c28f0687e49ae353c0758f6d68771f33d4beba0c29e935814c213174bbc295da8255369302ac278ac683dce564174a1a20c05f59ec02355a56cc4ac4278fb4d0ebe51ad07f930d59cc03dc0addabec19b439159acebbf2737cbe286481a868126b12d60a460ebcc5c1a1c4c2425f73d238fe52fafc866ad9eab6644326477350474c44a63243ee895af08c31d25410a4afcd060ea9a9ad4cf5971c3dedc5badc"}], 0x5a0}}, {{&(0x7f0000001400)=@ethernet={0x6, @local}, 0x80, &(0x7f0000001480), 0x0, &(0x7f00000014c0)=[{0x110, 0x10d, 0xfffffffb, "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"}, {0xc8, 0x10e, 0x2, "fd75e2c01494e954e41b209612fd365497f6463cc9109d4f30456e84e2fda4add8dae38e5d7a0f4cf4fd29a5fa33b4981afbb49118bfcb366f4e68c84c92573b30ead9f3c1be1b893647dca045329c9f9a552a37a05b4000f3b21fbee3698a71c9e8ba5a5a7883c233ec94ce448b9cb5a23d890750dddc85fd66295e51865dd067869666ff740e829a8c58c284357fcdfa7ebfdbf4098e6959c399d16183be2839fd1811679111393c1389587aeda336d96cd86e6a"}], 0x1d8}}], 0x3, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) 6.024172545s ago: executing program 5 (id=2177): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x5ed}], 0x1}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x7, &(0x7f0000000400)=[@cstype0={0x4, 0x6}], 0x1) syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040), 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66) r1 = semget$private(0x0, 0x6, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000400120001f2ffffff7d78a7697f00000000000000006ecfe59fa4b47d6fe95e7dfae022d995bc87ed8cc132e409fb"], 0x26}}, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r1, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x66}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f00000023c0)=""/4098, 0x1002}, {&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000880)=""/207, 0xcf}}], 0x1, 0x2040000, &(0x7f0000000000)={0x77359400}) 5.740315856s ago: executing program 6 (id=2181): socket$inet6(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80500, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000100), &(0x7f0000000140), 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, &(0x7f0000000180)="01010101", 0x4) close(r4) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000280), &(0x7f00000002c0), 0x0) pipe(&(0x7f00000003c0)) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000340), &(0x7f0000000380), 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047454, 0x0) 5.416521372s ago: executing program 6 (id=2183): r0 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f00007c2000/0x2000)=nil, 0x2000, 0x100000d) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000280)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000007c0)={0x40, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) 5.416050995s ago: executing program 5 (id=2184): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x8918, &(0x7f0000000240)={0x7, "a2d0cdd6817db2f3118bddc5f6c45a29996f1af8192a7ddcdd88e4822760ce2c26fd8ff3e63b86fd80cd6ec39a52deed455256c54baf22a3abe27dbacfb8befa98a43d62eac628e6847afcee97b056eb694ec0ddfd6be253a23793cf048511cbd0b8a38eec66dcee72543f23090018a8ca4830ab6cfc465117958440368a3382"}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='1', 0x1) 5.249321392s ago: executing program 6 (id=2186): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201f07ff030007db000bc695ae09e3278dcd088a790ec99044346f15fafb285794ede4a86319ada3b9cbe1535da6de47e788b96f29178674bd33c2a935b08355d9513a8c609e8cf9339539056fd95bd0d8f29690a5b2079139fda1d713c107f379f8bc02495c9d71e944e99be9360a66606d3b58231a4153bf7875decaf676fb17a36cfb95e944985f5c277c8500"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.193116016s ago: executing program 5 (id=2187): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xc, 0x40000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)=0x8) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_emit_vhci(&(0x7f0000001d00)=ANY=[@ANYBLOB="040e0704230c3b"], 0xa) 5.085582952s ago: executing program 3 (id=2188): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008da092b0200000000000109022400010000c004090400040103000300092106000e01222b0009058100100000dd7cf1"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x20, 0x31, 0x28, {0x28, 0x5, "4fb5e11d6aa6f2e4fac9d19c3a9b4ef3bc653e80ef8c1cdc91eb6d44a35e9f7854a2155e1d7c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x0, 0x3, 0x6, "af58b199e34c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.991526436s ago: executing program 5 (id=2189): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206030000000000000000000000000014000780080012400000000005001500020000000500010006000000050005000200000005"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000fff50000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 4.652703798s ago: executing program 5 (id=2190): r0 = syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES32], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003360000003603e7f1d656cd9889802c77565195219b00e7f522a3c9d821e840ae21c7d21103298e4b25430ccca1015f56f0bf86290000000000002177180cfed6b1afdbf2fadbaf5c2be582f6a8e973178d8230a414627597fa4fb7f3a760a889d64a67d96ac394fbf53571f63283f493de403908005ee04f94cf1d1e0e"]}, 0x0) 2.699902187s ago: executing program 4 (id=2191): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='10 1', 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) fchown(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x67bc, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) fchownat(r0, &(0x7f00000000c0)='./sys\x00', r1, r2, 0x800) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2.625023704s ago: executing program 4 (id=2192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @dev={0xac, 0x14, 0x14, 0x39}}, {0x2, 0x0, @broadcast}, 0x105, 0x500, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0xe1b2}) 2.508890077s ago: executing program 4 (id=2193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18200) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000005780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005740)={&(0x7f0000001c40)=ANY=[], 0x3ac8}, 0x1, 0x0, 0x0, 0x4004000}, 0x8090) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="f95d03000000000000f38fe09b06b5d8e72aa94fc282599c9d7f308006c164861577", @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000ac0)=[{&(0x7f0000001340)="02", 0x1}], 0x1, 0x4) landlock_restrict_self(r3, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYRES8=r2], 0x74}}, 0x4000050) r5 = socket(0xa, 0x3, 0xff) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r7 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty=0xe0000002}, 0x10) sendmsg$inet6(r5, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x20003, @mcast1}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3324a70e", 0x2c}], 0x1}, 0x10008b1c) 1.931173004s ago: executing program 6 (id=2194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000003c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007d00), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000007d40)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000007e40)={0x0, 0x0, &(0x7f0000007e00)={&(0x7f0000007d80)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x5, 0x200000) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0x6}, 0xc) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000340)={0x88ab1b249e3a04b3, 0x0, {[0x2, 0x12ad, 0x7611, 0xa, 0xed, 0xa, 0x7, 0x81]}}) 1.762525378s ago: executing program 3 (id=2195): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, r0, 0xc0a55000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='\\x01000000 2000000000 -', 0x17) 1.60850263s ago: executing program 3 (id=2196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000340)={0x88ab1b249e3a04b3, 0x0, {[0x2, 0x12ad, 0x7611, 0xa, 0xed, 0xa, 0x7, 0x81]}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.589184626s ago: executing program 4 (id=2197): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000000000000000aacc0000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000006000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa000000000000002d000000000600000004"], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) writev(r0, &(0x7f0000001a00)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="77a0040471e8c85d439557cc46290a6f74ed4eb5cb2164d1026def36666bc0086864b13163ab6feb0dee27c728365f95c68575e62ef0010a3e762b6d8ff57da8626fde69c4d6ff064ba256ad6b57f5e09a6b", 0x52}, {&(0x7f0000001780)="13d7d73baf71e892b83dd7f04b022fc4ff170a97a1b85c12be88fa06402330d42c5baa9e207a1651752ba429fecb00bd995173e010690b43559f1812b3db20d540cd830cf6132cc54bb86a587c02b33054fbfcd9c3636704e99c76c541a76691602c73d30773f52ba9d51b648eac076a3e63d40f30d047bfb09ee65fd3b1287cc53dbfe9bdaa48f458e774984d946d9c0e", 0x91}, {&(0x7f0000001840)="4b932b31fd27b6b8cb29fe55c704839721d91c80830ab02cf66451a4b7aeb539ed98824476695e77f4c127bd4419b580f96eaf300a3dc895b115bc48cfbb0bd7b9029a9f670e31baadaf5bab9a9315d2530e64e530a82fe6c66b562bb3b5fd6881e8766fb176e4ef", 0x68}, {&(0x7f00000018c0)="289c2f85fb49fc4cf0a9f67b4e9a499230424f4d4b303cf274e0f77e1d3c963f32818ef50d14914f9f760b4ba61b6c40bb4e32d577d104bd911cf76dae17214c20512199fe2fdeed5b49c49e746da15598ba0638340d3798dd8b13ee4ddf1a9ea4cf9d2b8068c6f05b16ecc98637ca1b01715fabcba1bf8f6bec7780af499a4cdc77f2593252d4f4de2c01b8a233a9bd7c", 0x91}, {&(0x7f0000001980)="afbcc1a4d33fd6fb11fa9e3a74237eabd04c34939e785b489754817a8e70a998cd7dcc0befa952d44cf19f5d9e43119877ba5319ec75adf39464bb67e1ba908e5ed56b909469a936f178feb9ff53cc17bbb9db02d4c7bdfd", 0x58}], 0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0xfffffffc, 0xfffffffe}}, 0x2e) 1.499993942s ago: executing program 4 (id=2198): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r4, r1, 0x68, 0x1) syz_ublk_setup_queues(r0, r2, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406"], 0x0) 1.389118225s ago: executing program 6 (id=2199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x80000a}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4008040) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.387736888s ago: executing program 5 (id=2200): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x40, 0x8, 0xa3, {0xa3, 0x0, "4750bad8cd80948c7a95084edd663b4087d77a5f9a18b8aa154c3787811cf0206023ae40b0d8663bb55967b052d56e035641d4a9229d411429e191eb7132da35e8f24a5af630d887a3f0a3865daa016c98b263bbff7a244cb7d3eb38231895242ee096b0a01071d32db161bedbd9aa757975e6b6f891aab023c141f4e1f431a23dbcff63495f6a582b2f8f4fc20a6fd8e8fefafc3782e30fa1971f1b59a38692b3"}}, &(0x7f0000000100)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "bdf38036e073092d82f6fa804b1b192f4c11da2a4026270defb87d06743b2f453a6e4552aac7c27a8436c531c6a5d4a22b889e168855c43620d07dcf1f69f41ae809b0c396e33ed458d7308b63c5a10acc9db688520cd2ed1d6a326045a45e7945824d2ecfb030786c9c1ebe7d78bf782a97f44f4530d0e3714f27f4d9d521cec01c2f89c1708abe33102ed57010ed6de3bf5a37eaf1422e59bf07e42d1bdf2416b9178e94be2ff7c47cc022c9b7dd8220b22b5d4c4fcf5a2e5f981949469ba2d599ce2876"}}}, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x0, 0x12, 0xbd, "92e0bc0929ed326d9053b2690a02115b6eca8a4e77b193f03f2891256a7302857dfb7cf0d358d01fea1944b68023322fa8b71315cae5a7f2abf8008b3ff560806f107978604daf16f586d84757b64c7a307517229a41bc47fb12636b9b1962d320ade22ea32663c63f0656d910fbffe31e7a49730a156edd5b5dca22e1599656d34b9dcde9b2510c6e0b6875c54a27a7452a71ee3255776d7d609a0bb73a93c43a0d08a9e67a8440fe0fb303e7bf167e43a3f4af7aa1758728a314d732"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xeb}, &(0x7f0000000400)={0x20, 0x81, 0x3, "bf90ec"}, &(0x7f0000000440)={0x20, 0x82, 0x1, "eb"}, &(0x7f0000000480)={0x20, 0x83, 0x1, "ef"}, &(0x7f00000004c0)={0x20, 0x84, 0x2, "6ba4"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "e5b458"}}) 1.274230821s ago: executing program 3 (id=2201): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240047bd, &(0x7f0000e68000)={0x2, 0x4e20, @broadcast}, 0xffffffffffffff5a) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000380)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6", 0xa2}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db2460", 0x38}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb5", 0xa5}, {&(0x7f0000001300)="e0cda6472d1ccf", 0x7}, {&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619", 0x1b}], 0x3}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000240)={0x2f, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x4, 0x34b}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x8, 0x1000002, 0x92, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x912, 0x4003bfff, 0x2b9, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200eb92, 0x800, 0x1, 0x269}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 308.188911ms ago: executing program 3 (id=2202): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1000000}) 121.887567ms ago: executing program 3 (id=2203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 0s ago: executing program 4 (id=2204): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x110) write(r0, &(0x7f0000000200)='p:_y_probe ./file0:0', 0x14) (fail_nth: 8) kernel console output (not intermixed with test programs): entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.232897][T11488] ? clear_bhb_loop+0x40/0x90 [ 488.232924][T11488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.232945][T11488] RIP: 0033:0x7fb68ee5e019 [ 488.232965][T11488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.232984][T11488] RSP: 002b:00007fb68d0b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 488.233008][T11488] RAX: ffffffffffffffda RBX: 00007fb68f0e5fa0 RCX: 00007fb68ee5e019 [ 488.233024][T11488] RDX: 0000000000000001 RSI: 0000200000002840 RDI: 0000000000000003 [ 488.233038][T11488] RBP: 00007fb68d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 488.233052][T11488] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 488.233065][T11488] R13: 00007fb68f0e6038 R14: 00007fb68f0e5fa0 R15: 00007fff410fd178 [ 488.233099][T11488] [ 488.597223][T11496] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1791'. [ 488.782961][T11499] usb usb6: usbfs: process 11499 (syz.5.1791) did not claim interface 3 before use [ 489.278998][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'. [ 489.717873][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'. [ 489.819328][T11529] bridge_slave_1: left allmulticast mode [ 489.819368][T11529] bridge_slave_1: left promiscuous mode [ 489.861734][T11529] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.055708][T11529] bridge_slave_0: left allmulticast mode [ 490.055761][T11529] bridge_slave_0: left promiscuous mode [ 490.056026][T11529] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.395398][T11535] exFAT-fs (nullb0): invalid boot record signature [ 490.395421][T11535] exFAT-fs (nullb0): failed to read boot sector [ 490.395432][T11535] exFAT-fs (nullb0): failed to recognize exfat type [ 490.564953][ T9086] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 490.725392][ T9086] usb 6-1: Using ep0 maxpacket: 16 [ 490.729931][ T9086] usb 6-1: config 0 interface 0 altsetting 134 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.729965][ T9086] usb 6-1: config 0 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 490.729994][ T9086] usb 6-1: config 0 interface 0 has no altsetting 0 [ 490.730032][ T9086] usb 6-1: New USB device found, idVendor=045e, idProduct=20f9, bcdDevice= 0.00 [ 490.730056][ T9086] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.827634][ T9086] usb 6-1: config 0 descriptor?? [ 490.847630][ T9086] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 491.516408][ T9086] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 491.617007][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1811'. [ 491.687167][ T9086] usb 7-1: Using ep0 maxpacket: 8 [ 491.693315][ T9086] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.700104][ T9086] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 491.700136][ T9086] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.700157][ T9086] usb 7-1: Product: syz [ 491.700171][ T9086] usb 7-1: Manufacturer: syz [ 491.700188][ T9086] usb 7-1: SerialNumber: syz [ 491.753413][ T9086] usb 7-1: config 0 descriptor?? [ 491.758225][ T9086] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 491.758289][ T9086] usb 7-1: selecting invalid altsetting 1 [ 491.972068][T11543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.972722][T11543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.249400][ T200] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 492.296657][ T9086] gspca_stk014: reg_r err -110 [ 492.296776][ T9086] stk014 7-1:0.0: probe with driver stk014 failed with error -110 [ 492.462261][ T200] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 492.462299][ T200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.462320][ T200] usb 4-1: Product: syz [ 492.462336][ T200] usb 4-1: Manufacturer: syz [ 492.462352][ T200] usb 4-1: SerialNumber: syz [ 492.538981][ T1839] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 492.561910][T11557] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1814'. [ 492.948447][ T200] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 493.111351][ T200] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.111569][ T200] usb 5-1: config 0 interface 0 has no altsetting 0 [ 493.111609][ T200] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 493.111822][ T200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.119103][ T200] usb 5-1: config 0 descriptor?? [ 493.193885][ T200] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 493.382877][ T9086] usb 5-1: USB disconnect, device number 86 [ 493.550535][ T10] usb 6-1: USB disconnect, device number 50 [ 493.610777][ T32] usb 4-1: USB disconnect, device number 102 [ 493.958822][ T1839] usb 4-1: Service connection timeout for: 256 [ 493.958842][ T1839] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 494.028509][ T1839] ath9k_htc: Failed to initialize the device [ 494.030434][ T32] usb 4-1: ath9k_htc: USB layer deinitialized [ 494.120115][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 494.275936][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 494.278807][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.278836][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.281888][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 494.281922][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.281943][ T10] usb 6-1: Product: syz [ 494.281958][ T10] usb 6-1: Manufacturer: syz [ 494.281973][ T10] usb 6-1: SerialNumber: syz [ 494.475233][ T1839] usb 7-1: USB disconnect, device number 47 [ 494.498847][ T200] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 494.663307][T11575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.663889][T11575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.669476][ T200] usb 4-1: Using ep0 maxpacket: 16 [ 494.708911][ T200] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 494.708943][ T200] usb 4-1: config 0 has no interface number 0 [ 494.709065][ T200] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 494.709094][ T200] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 494.747423][ T200] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 494.747521][ T200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.747542][ T200] usb 4-1: Product: syz [ 494.747555][ T200] usb 4-1: Manufacturer: syz [ 494.747569][ T200] usb 4-1: SerialNumber: syz [ 494.833080][ T200] usb 4-1: config 0 descriptor?? [ 494.834051][T11569] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 494.834201][T11569] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 494.936623][ T32] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 495.131176][T11569] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 495.131398][T11569] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 495.352974][ T200] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 495.558456][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1822'. [ 495.582764][ T200] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 113 [ 495.808606][ T9] usb 4-1: USB disconnect, device number 103 [ 496.198447][ T200] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 496.403168][ T200] usb 7-1: Using ep0 maxpacket: 16 [ 496.422572][ T200] usb 7-1: config 0 interface 0 altsetting 134 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.422651][ T200] usb 7-1: config 0 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 496.422670][ T200] usb 7-1: config 0 interface 0 has no altsetting 0 [ 496.422692][ T200] usb 7-1: New USB device found, idVendor=045e, idProduct=20f9, bcdDevice= 0.00 [ 496.422707][ T200] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.538086][ T200] usb 7-1: config 0 descriptor?? [ 496.586081][ T200] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 496.677789][T11589] FAULT_INJECTION: forcing a failure. [ 496.677789][T11589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.677826][T11589] CPU: 1 UID: 0 PID: 11589 Comm: syz.3.1825 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 496.677852][T11589] Tainted: [L]=SOFTLOCKUP [ 496.677859][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.677870][T11589] Call Trace: [ 496.677877][T11589] [ 496.677885][T11589] dump_stack_lvl+0xe8/0x150 [ 496.677916][T11589] should_fail_ex+0x467/0x600 [ 496.677946][T11589] _copy_to_user+0x31/0xb0 [ 496.677966][T11589] video_usercopy+0xdf4/0x1430 [ 496.677992][T11589] ? __pfx___video_do_ioctl+0x10/0x10 [ 496.678014][T11589] ? __pfx_video_usercopy+0x10/0x10 [ 496.678046][T11589] ? __fget_files+0x3a8/0x420 [ 496.678068][T11589] v4l2_ioctl+0x190/0x1e0 [ 496.678094][T11589] ? __pfx_v4l2_ioctl+0x10/0x10 [ 496.678120][T11589] __se_sys_ioctl+0xff/0x170 [ 496.678146][T11589] do_syscall_64+0x17b/0x530 [ 496.678166][T11589] ? irqentry_exit+0x10f/0x8f0 [ 496.678182][T11589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.678200][T11589] ? clear_bhb_loop+0x40/0x90 [ 496.678234][T11589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.678252][T11589] RIP: 0033:0x7fb68ee5e019 [ 496.678269][T11589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.678285][T11589] RSP: 002b:00007fb68d0b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.678305][T11589] RAX: ffffffffffffffda RBX: 00007fb68f0e5fa0 RCX: 00007fb68ee5e019 [ 496.678319][T11589] RDX: 00002000000006c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 496.678330][T11589] RBP: 00007fb68d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 496.678341][T11589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.678352][T11589] R13: 00007fb68f0e6038 R14: 00007fb68f0e5fa0 R15: 00007fff410fd178 [ 496.678380][T11589] [ 497.000960][ T10] usb 6-1: unit 0 not found! [ 497.259058][ T10] usb 6-1: USB disconnect, device number 51 [ 497.322453][ T5584] udevd[5584]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.822214][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 497.823494][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 497.902549][T11614] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1833'. [ 498.306191][T11618] loop4: detected capacity change from 0 to 7 [ 498.456175][T11618] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 498.456209][T11618] loop4: partition table partially beyond EOD, truncated [ 498.456458][T11618] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 498.870171][ T37] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 498.885431][ T5584] Flush: task=udevd[5584] dev=loop4 state=2 [ 499.044694][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 499.056502][ T37] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 499.056533][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.056553][ T37] usb 4-1: Product: syz [ 499.056568][ T37] usb 4-1: Manufacturer: syz [ 499.056583][ T37] usb 4-1: SerialNumber: syz [ 499.056637][ T5584] Teardown: task=udevd[5584] dev=loop4 state=2 [ 499.111598][ T10] usb 7-1: USB disconnect, device number 48 [ 499.161854][ T37] r8152-cfgselector 4-1: Unknown version 0x0000 [ 499.161884][ T37] r8152-cfgselector 4-1: config 0 descriptor?? [ 499.209684][ T5584] udevd[5584]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 499.577623][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 499.747573][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 499.747608][ T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 499.747626][ T9] usb 5-1: Product: syz [ 499.747639][ T9] usb 5-1: SerialNumber: syz [ 499.787978][ T9] usb 5-1: config 0 descriptor?? [ 500.049504][T11628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.057179][T11628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.282057][ T37] r8152-cfgselector 4-1: USB disconnect, device number 104 [ 500.602009][ T9] usb 5-1: USB disconnect, device number 88 [ 501.040109][ T9] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 501.213514][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 501.214670][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 72, changing to 7 [ 501.216813][ T9] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 501.216831][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.216843][ T9] usb 5-1: Product: syz [ 501.216852][ T9] usb 5-1: Manufacturer: syz [ 501.216861][ T9] usb 5-1: SerialNumber: syz [ 501.446139][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 501.510985][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 501.513559][ T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 501.577327][T11651] FAULT_INJECTION: forcing a failure. [ 501.577327][T11651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.577368][T11651] CPU: 1 UID: 0 PID: 11651 Comm: syz.3.1847 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 501.577398][T11651] Tainted: [L]=SOFTLOCKUP [ 501.577406][T11651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.577419][T11651] Call Trace: [ 501.577427][T11651] [ 501.577436][T11651] dump_stack_lvl+0xe8/0x150 [ 501.577478][T11651] should_fail_ex+0x467/0x600 [ 501.577514][T11651] _copy_to_user+0x31/0xb0 [ 501.577539][T11651] simple_read_from_buffer+0xe1/0x170 [ 501.577570][T11651] proc_fail_nth_read+0x1be/0x230 [ 501.577598][T11651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.577626][T11651] ? rw_verify_area+0x250/0x4d0 [ 501.577657][T11651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.577681][T11651] vfs_read+0x219/0xa90 [ 501.577715][T11651] ? __pfx_vfs_read+0x10/0x10 [ 501.577743][T11651] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 501.577766][T11651] ? lockdep_hardirqs_on+0x7a/0x110 [ 501.577788][T11651] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 501.577810][T11651] ? mutex_lock_nested+0x152/0x1d0 [ 501.577837][T11651] ? fdget_pos+0x252/0x320 [ 501.577870][T11651] ksys_read+0x156/0x270 [ 501.577900][T11651] ? __pfx_ksys_read+0x10/0x10 [ 501.577923][T11651] ? __pfx_sock_ioctl+0x10/0x10 [ 501.577954][T11651] do_syscall_64+0x17b/0x530 [ 501.577977][T11651] ? irqentry_exit+0x10f/0x8f0 [ 501.577998][T11651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.578020][T11651] ? clear_bhb_loop+0x40/0x90 [ 501.578048][T11651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.578070][T11651] RIP: 0033:0x7fb68ee1e84e [ 501.578092][T11651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 501.578112][T11651] RSP: 002b:00007fb68d0b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.578145][T11651] RAX: ffffffffffffffda RBX: 00007fb68d0b66c0 RCX: 00007fb68ee1e84e [ 501.578162][T11651] RDX: 000000000000000f RSI: 00007fb68d0b60a0 RDI: 0000000000000004 [ 501.578177][T11651] RBP: 00007fb68d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 501.578191][T11651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.578204][T11651] R13: 00007fb68f0e6038 R14: 00007fb68f0e5fa0 R15: 00007fff410fd178 [ 501.578240][T11651] [ 501.733322][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 501.733345][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.733358][ T10] usb 6-1: Product: syz [ 501.733366][ T10] usb 6-1: Manufacturer: syz [ 501.733375][ T10] usb 6-1: SerialNumber: syz [ 501.793290][T11654] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 501.976058][ T1839] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 502.093712][ T9] usb 5-1: USB disconnect, device number 89 [ 502.311861][ T32] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 502.485306][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 502.500758][ T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.500797][ T32] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.500845][ T32] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 502.500871][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.524071][ T32] usb 7-1: config 0 descriptor?? [ 502.764284][T11668] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1852'. [ 503.222462][ T32] shield 0003:0955:7214.001E: unknown main item tag 0x2 [ 503.222499][ T32] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 503.222526][ T32] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 503.222552][ T32] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 503.222578][ T32] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 503.222605][ T32] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 503.222632][ T32] shield 0003:0955:7214.001E: unexpected long global item [ 503.223432][ T32] shield 0003:0955:7214.001E: Parse failed [ 503.223514][ T32] shield 0003:0955:7214.001E: probe with driver shield failed with error -22 [ 503.421018][ T37] usb 7-1: USB disconnect, device number 49 [ 503.660095][ T32] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 503.854075][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 503.858135][ T32] usb 5-1: no configurations [ 503.858158][ T32] usb 5-1: can't read configurations, error -22 [ 503.989874][ T32] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 503.992344][ T1839] usb 6-1: Service connection timeout for: 256 [ 503.992369][ T1839] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 503.992599][ T200] usb 6-1: USB disconnect, device number 52 [ 504.014331][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 504.086389][ T1839] ath9k_htc: Failed to initialize the device [ 504.086828][ T200] usb 6-1: ath9k_htc: USB layer deinitialized [ 504.150627][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 504.152062][ T32] usb 5-1: no configurations [ 504.152082][ T32] usb 5-1: can't read configurations, error -22 [ 504.176188][ T32] usb usb5-port1: attempt power cycle [ 504.546145][ T32] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 504.568109][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 504.571317][ T32] usb 5-1: no configurations [ 504.571334][ T32] usb 5-1: can't read configurations, error -22 [ 504.692553][T11681] netlink: 'syz.5.1858': attribute type 1 has an invalid length. [ 504.706574][ T32] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 504.732337][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 504.733424][ T32] usb 5-1: no configurations [ 504.733442][ T32] usb 5-1: can't read configurations, error -22 [ 504.734314][ T32] usb usb5-port1: unable to enumerate USB device [ 504.835541][T11686] binder: 11685:11686 ioctl c0306201 200000000480 returned -14 [ 504.835713][T11686] FAULT_INJECTION: forcing a failure. [ 504.835713][T11686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.835746][T11686] CPU: 0 UID: 0 PID: 11686 Comm: syz.3.1859 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 504.835775][T11686] Tainted: [L]=SOFTLOCKUP [ 504.835783][T11686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.835795][T11686] Call Trace: [ 504.835804][T11686] [ 504.835813][T11686] dump_stack_lvl+0xe8/0x150 [ 504.835864][T11686] should_fail_ex+0x467/0x600 [ 504.835900][T11686] _copy_to_user+0x31/0xb0 [ 504.835924][T11686] simple_read_from_buffer+0xe1/0x170 [ 504.835953][T11686] proc_fail_nth_read+0x1be/0x230 [ 504.835981][T11686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.836008][T11686] ? rw_verify_area+0x250/0x4d0 [ 504.836043][T11686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.836067][T11686] vfs_read+0x219/0xa90 [ 504.836102][T11686] ? __pfx_vfs_read+0x10/0x10 [ 504.836130][T11686] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 504.836154][T11686] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.836175][T11686] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 504.836197][T11686] ? mutex_lock_nested+0x152/0x1d0 [ 504.836228][T11686] ? fdget_pos+0x252/0x320 [ 504.836261][T11686] ksys_read+0x156/0x270 [ 504.836290][T11686] ? __pfx_ksys_read+0x10/0x10 [ 504.836327][T11686] do_syscall_64+0x17b/0x530 [ 504.836349][T11686] ? irqentry_exit+0x10f/0x8f0 [ 504.836370][T11686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.836392][T11686] ? clear_bhb_loop+0x40/0x90 [ 504.836418][T11686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.836440][T11686] RIP: 0033:0x7fb68ee1e84e [ 504.836462][T11686] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 504.836479][T11686] RSP: 002b:00007fb68d0b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 504.836502][T11686] RAX: ffffffffffffffda RBX: 00007fb68d0b66c0 RCX: 00007fb68ee1e84e [ 504.836519][T11686] RDX: 000000000000000f RSI: 00007fb68d0b60a0 RDI: 0000000000000005 [ 504.836534][T11686] RBP: 00007fb68d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 504.836547][T11686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.836561][T11686] R13: 00007fb68f0e6038 R14: 00007fb68f0e5fa0 R15: 00007fff410fd178 [ 504.836597][T11686] [ 507.191252][T11727] FAULT_INJECTION: forcing a failure. [ 507.191252][T11727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.191279][T11727] CPU: 0 UID: 0 PID: 11727 Comm: syz.4.1874 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 507.191297][T11727] Tainted: [L]=SOFTLOCKUP [ 507.191302][T11727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.191310][T11727] Call Trace: [ 507.191315][T11727] [ 507.191321][T11727] dump_stack_lvl+0xe8/0x150 [ 507.191342][T11727] should_fail_ex+0x467/0x600 [ 507.191361][T11727] _copy_to_iter+0x59c/0x1810 [ 507.191387][T11727] ? __pfx__copy_to_iter+0x10/0x10 [ 507.191410][T11727] ? rt_spin_unlock+0x157/0x200 [ 507.191429][T11727] __skb_datagram_iter+0xf8/0x980 [ 507.191449][T11727] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 507.191473][T11727] skb_copy_datagram_iter+0xb5/0x240 [ 507.191495][T11727] netlink_recvmsg+0x2b9/0xa50 [ 507.191520][T11727] ? __pfx_netlink_recvmsg+0x10/0x10 [ 507.191545][T11727] ? rcu_is_watching+0x15/0xb0 [ 507.191567][T11727] ? __pfx_netlink_recvmsg+0x10/0x10 [ 507.191587][T11727] sock_recvmsg_nosec+0x130/0x170 [ 507.191604][T11727] ____sys_recvmsg+0x242/0x4f0 [ 507.191628][T11727] ? __pfx_____sys_recvmsg+0x10/0x10 [ 507.191655][T11727] ? import_iovec+0x73/0xa0 [ 507.191675][T11727] ___sys_recvmsg+0x213/0x5a0 [ 507.191694][T11727] ? lock_acquire+0x115/0x350 [ 507.191716][T11727] ? __pfx____sys_recvmsg+0x10/0x10 [ 507.191738][T11727] ? lock_acquire+0x115/0x350 [ 507.191766][T11727] ? __fget_files+0x3a8/0x420 [ 507.191785][T11727] do_recvmmsg+0x320/0x7f0 [ 507.191809][T11727] ? __pfx_do_recvmmsg+0x10/0x10 [ 507.191835][T11727] ? get_timespec64+0x119/0x1b0 [ 507.191849][T11727] ? __pfx_get_timespec64+0x10/0x10 [ 507.191867][T11727] __x64_sys_recvmmsg+0x1b7/0x250 [ 507.191888][T11727] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 507.191914][T11727] do_syscall_64+0x17b/0x530 [ 507.191926][T11727] ? irqentry_exit+0x10f/0x8f0 [ 507.191938][T11727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.191952][T11727] ? clear_bhb_loop+0x40/0x90 [ 507.191967][T11727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.191980][T11727] RIP: 0033:0x7fba93cae019 [ 507.191992][T11727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.192003][T11727] RSP: 002b:00007fba91f06028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 507.192018][T11727] RAX: ffffffffffffffda RBX: 00007fba93f35fa0 RCX: 00007fba93cae019 [ 507.192028][T11727] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 507.192036][T11727] RBP: 00007fba91f06090 R08: 0000200000000000 R09: 0000000000000000 [ 507.192045][T11727] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 507.192052][T11727] R13: 00007fba93f36038 R14: 00007fba93f35fa0 R15: 00007ffeab0b2678 [ 507.192075][T11727] [ 507.334859][ T200] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 507.667744][ T200] usb 4-1: Using ep0 maxpacket: 16 [ 507.683715][ T200] usb 4-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 507.683750][ T200] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 507.683773][ T200] usb 4-1: Product: syz [ 507.683788][ T200] usb 4-1: SerialNumber: syz [ 507.719970][ T200] usb 4-1: config 0 descriptor?? [ 507.734109][ T200] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 507.767861][ T200] usb 4-1: Detected FT2232C/D [ 507.940419][ T200] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 507.943853][ T200] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 507.971984][ T200] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 507.995952][ T200] usb 4-1: USB disconnect, device number 105 [ 508.016192][ T200] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 508.017086][ T200] ftdi_sio 4-1:0.0: device disconnected [ 508.573263][T11744] /dev/sg0: Can't lookup blockdev [ 508.605994][T11745] usb usb9: usbfs: process 11745 (syz.4.1880) did not claim interface 47 before use [ 508.721467][T11748] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1883'. [ 508.844155][ T200] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 509.003071][ T200] usb 7-1: Using ep0 maxpacket: 16 [ 509.006283][ T200] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 509.006314][ T200] usb 7-1: config 0 has no interface number 0 [ 509.006348][ T200] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 509.006364][ T200] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 509.009230][ T200] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 509.009260][ T200] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.009273][ T200] usb 7-1: Product: syz [ 509.009283][ T200] usb 7-1: Manufacturer: syz [ 509.009291][ T200] usb 7-1: SerialNumber: syz [ 509.017047][ T200] usb 7-1: config 0 descriptor?? [ 509.049870][T11744] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 509.049999][T11744] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 509.120658][ T1010] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 509.281543][ T1010] usb 4-1: Using ep0 maxpacket: 32 [ 509.302155][ T1010] usb 4-1: unable to get BOS descriptor or descriptor too short [ 509.322876][ T1010] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.322905][ T1010] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.375847][ T1010] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 509.375944][ T1010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.375965][ T1010] usb 4-1: Product: syz [ 509.375990][ T1010] usb 4-1: Manufacturer: syz [ 509.376005][ T1010] usb 4-1: SerialNumber: syz [ 509.386437][T11744] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 509.386646][T11744] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 509.615274][ T200] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 509.847060][ T1010] usb 4-1: unit 255 not found! [ 510.022599][ T1010] usb 4-1: USB disconnect, device number 106 [ 510.501777][ T5585] udevd[5585]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.772773][T11763] FAULT_INJECTION: forcing a failure. [ 510.772773][T11763] name failslab, interval 1, probability 100, space 0, times 984 [ 510.772816][T11763] CPU: 1 UID: 0 PID: 11763 Comm: syz.3.1888 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 510.772846][T11763] Tainted: [L]=SOFTLOCKUP [ 510.772854][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.772867][T11763] Call Trace: [ 510.772877][T11763] [ 510.772887][T11763] dump_stack_lvl+0xe8/0x150 [ 510.772940][T11763] should_fail_ex+0x467/0x600 [ 510.772977][T11763] should_failslab+0xa8/0x100 [ 510.773001][T11763] __kmalloc_cache_noprof+0xa1/0x670 [ 510.773035][T11763] ? genl_start+0x1c9/0x6d0 [ 510.773060][T11763] ? genl_start+0x1c9/0x6d0 [ 510.773093][T11763] genl_start+0x1c9/0x6d0 [ 510.773127][T11763] __netlink_dump_start+0x442/0x7b0 [ 510.773169][T11763] genl_family_rcv_msg_dumpit+0x213/0x310 [ 510.773201][T11763] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 510.773227][T11763] ? genl_get_cmd+0x4d6/0x960 [ 510.773259][T11763] ? __pfx_genl_start+0x10/0x10 [ 510.773284][T11763] ? __pfx_genl_dumpit+0x10/0x10 [ 510.773307][T11763] ? __pfx_genl_done+0x10/0x10 [ 510.773340][T11763] ? __pfx_clockevents_program_event+0x10/0x10 [ 510.773367][T11763] ? __lock_acquire+0x6df/0x2e40 [ 510.773396][T11763] genl_rcv_msg+0x5e1/0x7a0 [ 510.773429][T11763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.773455][T11763] ? __pfx_netdev_nl_qstats_get_dumpit+0x10/0x10 [ 510.773506][T11763] netlink_rcv_skb+0x226/0x4a0 [ 510.773541][T11763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.773570][T11763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.773617][T11763] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.773651][T11763] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.773685][T11763] genl_rcv+0x28/0x40 [ 510.773709][T11763] netlink_unicast+0x7f5/0x990 [ 510.773750][T11763] netlink_sendmsg+0x813/0xb40 [ 510.773795][T11763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.773830][T11763] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 510.773866][T11763] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 510.773908][T11763] ? arch_stack_walk+0xfb/0x150 [ 510.773944][T11763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.773973][T11763] sock_sendmsg_nosec+0x13a/0x180 [ 510.774001][T11763] ____sys_sendmsg+0x565/0x870 [ 510.774043][T11763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.774084][T11763] ? import_iovec+0x73/0xa0 [ 510.774121][T11763] ___sys_sendmsg+0x2a5/0x360 [ 510.774151][T11763] ? __lock_acquire+0x6df/0x2e40 [ 510.774176][T11763] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.774246][T11763] ? __fget_files+0x2a/0x420 [ 510.774269][T11763] ? __fget_files+0x3a8/0x420 [ 510.774302][T11763] __x64_sys_sendmsg+0x1b7/0x290 [ 510.774337][T11763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.774390][T11763] do_syscall_64+0x17b/0x530 [ 510.774412][T11763] ? irqentry_exit+0x10f/0x8f0 [ 510.774432][T11763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.774454][T11763] ? clear_bhb_loop+0x40/0x90 [ 510.774480][T11763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.774502][T11763] RIP: 0033:0x7fb68ee5e019 [ 510.774523][T11763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.774542][T11763] RSP: 002b:00007fb68d0b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.774565][T11763] RAX: ffffffffffffffda RBX: 00007fb68f0e5fa0 RCX: 00007fb68ee5e019 [ 510.774580][T11763] RDX: 6b7e369c4a37b0ea RSI: 0000200000000200 RDI: 0000000000000006 [ 510.774594][T11763] RBP: 00007fb68d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 510.774607][T11763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.774619][T11763] R13: 00007fb68f0e6038 R14: 00007fb68f0e5fa0 R15: 00007fff410fd178 [ 510.774653][T11763] [ 510.938534][ T200] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 510.938567][ T200] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 510.938857][ T200] asix 7-1:0.34: probe with driver asix failed with error -71 [ 510.979157][ T200] usb 7-1: USB disconnect, device number 50 [ 511.553711][ T37] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 511.728902][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 511.731914][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 511.732020][ T37] usb 5-1: no configurations [ 511.732035][ T37] usb 5-1: can't read configurations, error -22 [ 511.758835][T11771] netlink: 'syz.6.1891': attribute type 2 has an invalid length. [ 511.760608][ T32] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 511.867521][ T37] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 511.910316][ T32] usb 4-1: device descriptor read/64, error -71 [ 511.928973][T11774] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1892'. [ 512.038608][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 512.041231][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 512.041329][ T37] usb 5-1: no configurations [ 512.041344][ T37] usb 5-1: can't read configurations, error -22 [ 512.042240][ T37] usb usb5-port1: attempt power cycle [ 512.167015][ T32] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 512.252268][ T200] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 512.305789][ T32] usb 4-1: device descriptor read/64, error -71 [ 512.369880][ T9] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 512.418856][ T200] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.418922][ T200] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 512.418959][ T200] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.429699][ T200] usb 7-1: config 0 descriptor?? [ 512.456001][ T37] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 512.458490][ T32] usb usb4-port1: attempt power cycle [ 512.463236][ T200] pwc: Askey VC010 type 2 USB webcam detected. [ 512.477494][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 512.479973][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 512.480065][ T37] usb 5-1: no configurations [ 512.480080][ T37] usb 5-1: can't read configurations, error -22 [ 512.543773][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 512.543811][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.578735][ T9] usb 6-1: config 0 descriptor?? [ 512.647805][ T37] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 512.674477][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 512.697073][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 512.697172][ T37] usb 5-1: no configurations [ 512.697186][ T37] usb 5-1: can't read configurations, error -22 [ 512.724456][ T37] usb usb5-port1: unable to enumerate USB device [ 512.829522][ T32] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 512.851834][ T32] usb 4-1: device descriptor read/8, error -71 [ 513.107832][ T32] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 513.130115][ T32] usb 4-1: device descriptor read/8, error -71 [ 513.278393][ T32] usb usb4-port1: unable to enumerate USB device [ 513.307171][ T9] usb 6-1: string descriptor 0 read error: -71 [ 513.308280][ T9] uclogic 0003:256C:006E.001F: failed retrieving string descriptor #200: -71 [ 513.308595][ T9] uclogic 0003:256C:006E.001F: failed retrieving pen parameters: -71 [ 513.308616][ T9] uclogic 0003:256C:006E.001F: failed probing pen v2 parameters: -71 [ 513.308755][ T9] uclogic 0003:256C:006E.001F: failed probing parameters: -71 [ 513.308945][ T9] uclogic 0003:256C:006E.001F: probe with driver uclogic failed with error -71 [ 513.379617][ T9] usb 6-1: USB disconnect, device number 53 [ 513.646619][ T200] pwc: recv_control_msg error -71 req 02 val 2b00 [ 513.647638][ T200] pwc: recv_control_msg error -71 req 02 val 2700 [ 513.648393][ T200] pwc: recv_control_msg error -71 req 02 val 2c00 [ 513.648935][ T200] pwc: recv_control_msg error -71 req 04 val 1000 [ 513.649605][ T200] pwc: recv_control_msg error -71 req 04 val 1300 [ 513.650134][ T200] pwc: recv_control_msg error -71 req 04 val 1400 [ 513.650663][ T200] pwc: recv_control_msg error -71 req 02 val 2000 [ 513.651191][ T200] pwc: recv_control_msg error -71 req 02 val 2100 [ 513.706049][ T200] pwc: recv_control_msg error -71 req 04 val 1500 [ 513.713708][ T200] pwc: recv_control_msg error -71 req 02 val 2500 [ 513.714415][ T200] pwc: recv_control_msg error -71 req 02 val 2400 [ 513.715851][ T200] pwc: recv_control_msg error -71 req 02 val 2600 [ 513.727309][ T200] pwc: recv_control_msg error -71 req 02 val 2900 [ 513.746324][ T200] pwc: recv_control_msg error -71 req 02 val 2800 [ 513.755356][ T200] pwc: recv_control_msg error -71 req 04 val 1100 [ 513.766991][ T200] pwc: recv_control_msg error -71 req 04 val 1200 [ 513.854254][ T200] pwc: Registered as video103. [ 513.871334][ T200] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input29 [ 513.904095][ T200] usb 7-1: USB disconnect, device number 51 [ 514.347348][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 514.539698][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 514.557616][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 514.557654][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 514.560648][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 514.560679][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.560699][ T9] usb 6-1: Product: syz [ 514.560714][ T9] usb 6-1: Manufacturer: syz [ 514.560729][ T9] usb 6-1: SerialNumber: syz [ 514.634327][ T9] usb 6-1: config 0 descriptor?? [ 514.678812][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 514.678851][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 515.297031][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 515.308726][ T9] em28xx 6-1:0.0: Config register raw data: 0x41 [ 515.475101][T11798] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1901'. [ 515.521747][ T9086] usb 6-1: USB disconnect, device number 54 [ 515.525670][ T9086] em28xx 6-1:0.0: Disconnecting em28xx [ 515.655146][ T9086] em28xx: Freeing device [ 515.715504][ T200] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 516.012586][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.012706][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.383078][ T5602] block nbd1: Receive control failed (result -32) [ 516.518676][ T9086] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 516.701449][ T9086] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 516.701485][ T9086] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.701507][ T9086] usb 7-1: Product: syz [ 516.701523][ T9086] usb 7-1: Manufacturer: syz [ 516.701538][ T9086] usb 7-1: SerialNumber: syz [ 516.757523][ T9086] usb 7-1: config 0 descriptor?? [ 517.016908][ T9086] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 517.126445][ T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 517.231941][T11821] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1910'. [ 517.307258][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.307320][ T9] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 517.307345][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.471990][ T9] as10x_usb: device has been detected [ 517.472991][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 517.516000][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 517.537586][ T9] as10x_usb: error during firmware upload part1 [ 517.549429][ T9] Registered device Abilis Systems DVB-Titan [ 518.112400][T11834] netlink: 'syz.5.1912': attribute type 2 has an invalid length. [ 518.308332][T11838] FAULT_INJECTION: forcing a failure. [ 518.308332][T11838] name failslab, interval 1, probability 100, space 0, times 983 [ 518.308361][T11838] CPU: 0 UID: 0 PID: 11838 Comm: syz.3.1913 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 518.308385][T11838] Tainted: [L]=SOFTLOCKUP [ 518.308393][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.308405][T11838] Call Trace: [ 518.308414][T11838] [ 518.308424][T11838] dump_stack_lvl+0xe8/0x150 [ 518.308460][T11838] should_fail_ex+0x467/0x600 [ 518.308493][T11838] should_failslab+0xa8/0x100 [ 518.308514][T11838] __kmalloc_cache_noprof+0xa1/0x670 [ 518.308534][T11838] ? __trace_uprobe_create+0x7d3/0xe40 [ 518.308555][T11838] ? __trace_uprobe_create+0x7d3/0xe40 [ 518.308594][T11838] __trace_uprobe_create+0x7d3/0xe40 [ 518.308637][T11838] ? __pfx___trace_uprobe_create+0x10/0x10 [ 518.308670][T11838] ? __kmalloc_noprof+0x436/0x790 [ 518.308691][T11838] ? argv_split+0x18d/0x400 [ 518.308703][T11838] ? argv_split+0x18d/0x400 [ 518.308719][T11838] ? argv_split+0x378/0x400 [ 518.308742][T11838] trace_probe_create+0xce/0x130 [ 518.308775][T11838] ? __pfx___trace_uprobe_create+0x10/0x10 [ 518.308812][T11838] ? __pfx_trace_probe_create+0x10/0x10 [ 518.308838][T11838] ? lockdep_hardirqs_on+0x7a/0x110 [ 518.308858][T11838] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 518.308877][T11838] ? mutex_lock_nested+0x152/0x1d0 [ 518.308893][T11838] ? dyn_event_create+0x20/0x70 [ 518.308917][T11838] dyn_event_create+0x4f/0x70 [ 518.308943][T11838] create_or_delete_trace_uprobe+0x65/0xa0 [ 518.308967][T11838] trace_parse_run_command+0x1f3/0x380 [ 518.309001][T11838] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 518.309023][T11838] ? __pfx_probes_write+0x10/0x10 [ 518.309039][T11838] vfs_write+0x29f/0xbb0 [ 518.309059][T11838] ? __pfx_vfs_write+0x10/0x10 [ 518.309077][T11838] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 518.309099][T11838] ? lockdep_hardirqs_on+0x7a/0x110 [ 518.309121][T11838] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 518.309143][T11838] ? mutex_lock_nested+0x152/0x1d0 [ 518.309168][T11838] ? fdget_pos+0x252/0x320 [ 518.309199][T11838] ksys_write+0x156/0x270 [ 518.309218][T11838] ? __pfx_ksys_write+0x10/0x10 [ 518.309239][T11838] do_syscall_64+0x17b/0x530 [ 518.309255][T11838] ? irqentry_exit+0x10f/0x8f0 [ 518.309275][T11838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.309298][T11838] ? clear_bhb_loop+0x40/0x90 [ 518.309325][T11838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.309346][T11838] RIP: 0033:0x7fb68ee5e019 [ 518.309366][T11838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.309390][T11838] RSP: 002b:00007fb68d0b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 518.309405][T11838] RAX: ffffffffffffffda RBX: 00007fb68f0e5fa0 RCX: 00007fb68ee5e019 [ 518.309415][T11838] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 518.309424][T11838] RBP: 00007fb68d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 518.309436][T11838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.309449][T11838] R13: 00007fb68f0e6038 R14: 00007fb68f0e5fa0 R15: 00007fff410fd178 [ 518.309486][T11838] [ 518.778047][ T9086] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 518.802768][ T9086] usb 7-1: USB disconnect, device number 52 [ 519.030633][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 519.213284][ T9] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 519.213319][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 519.215980][ T9] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 519.216015][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.216043][ T9] usb 6-1: Product: syz [ 519.216053][ T9] usb 6-1: Manufacturer: syz [ 519.216062][ T9] usb 6-1: SerialNumber: syz [ 519.220727][ T9] usb 6-1: config 0 descriptor?? [ 519.344843][ T200] usb 5-1: USB disconnect, device number 99 [ 519.539639][ T200] Unregistered device Abilis Systems DVB-Titan [ 519.547587][ T200] as10x_usb: device has been disconnected [ 519.895475][ T9] mos7840 6-1:0.0: required endpoints missing [ 519.912952][ T9] usb 6-1: USB disconnect, device number 55 [ 519.973727][T11862] dvmrp8: entered allmulticast mode [ 520.076981][ T32] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 520.174585][T11866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.236932][ T32] usb 7-1: Using ep0 maxpacket: 16 [ 520.242440][ T32] usb 7-1: config 0 interface 0 altsetting 134 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.242464][ T32] usb 7-1: config 0 interface 0 altsetting 134 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.242479][ T32] usb 7-1: config 0 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 520.242495][ T32] usb 7-1: config 0 interface 0 has no altsetting 0 [ 520.242517][ T32] usb 7-1: New USB device found, idVendor=045e, idProduct=20f9, bcdDevice= 0.00 [ 520.242531][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.246545][ T32] usb 7-1: config 0 descriptor?? [ 520.388102][ T200] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 520.562386][ T200] usb 4-1: config index 0 descriptor too short (expected 561, got 49) [ 520.562418][ T200] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 520.562449][ T200] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.562470][ T200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 520.562526][ T200] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 520.562552][ T200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.659107][T11870] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 520.689318][ T200] usb 4-1: config 0 descriptor?? [ 520.695414][ T200] rndis_host 4-1:0.0: rndis: master #0/ffff88805ad80000 slave #1/0000000000000000 [ 520.726009][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 520.728159][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 520.743072][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 520.743678][ T32] usbhid 7-1:0.0: can't add hid device: -32 [ 520.743788][ T32] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 520.774816][ T32] usb 7-1: USB disconnect, device number 53 [ 521.007924][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1923'. [ 521.007984][T11875] block nbd2: Unsupported socket: should be TCP or UNIX. [ 521.351633][T11890] tipc: Cannot configure node identity twice [ 521.529292][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 521.629640][T11899] sg_write: data in/out 483292/136 bytes for SCSI command 0x0-- guessing data in; [ 521.629640][T11899] program syz.6.1933 not setting count and/or reply_len properly [ 521.651535][T11899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.653264][T11899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.741596][T11902] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 521.882893][ T32] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 522.045653][ T32] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.045685][ T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.047123][ T32] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 522.047153][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 522.047176][ T32] usb 7-1: SerialNumber: syz [ 522.299804][ T9086] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 522.359957][ T32] usb 7-1: 0:2 : does not exist [ 522.360050][ T32] usb 7-1: unit 5 not found! [ 522.425604][ T32] usb 7-1: USB disconnect, device number 54 [ 522.461182][ T9086] usb 6-1: Using ep0 maxpacket: 32 [ 522.466975][ T9086] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 522.467014][ T9086] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 522.467042][ T9086] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 522.467066][ T9086] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 522.467092][ T9086] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 522.467117][ T9086] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 522.469458][ T9086] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 522.469490][ T9086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.469513][ T9086] usb 6-1: Product: syz [ 522.469528][ T9086] usb 6-1: Manufacturer: syz [ 522.469545][ T9086] usb 6-1: SerialNumber: syz [ 522.488680][ T9086] usb 6-1: config 0 descriptor?? [ 522.601432][ T5584] udevd[5584]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.741291][T11911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1937'. [ 522.743613][T11911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.744401][T11911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.069440][ T32] usb 6-1: USB disconnect, device number 56 [ 523.113900][T11923] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1939'. [ 523.318680][ T9] usb 4-1: USB disconnect, device number 111 [ 523.454139][ T200] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 523.510831][T11923] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[8977] was attempted by " [ 523.626072][ T200] usb 5-1: Using ep0 maxpacket: 16 [ 523.679692][ T200] usb 5-1: config 0 interface 0 altsetting 134 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.679732][ T200] usb 5-1: config 0 interface 0 altsetting 134 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.679758][ T200] usb 5-1: config 0 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 523.679787][ T200] usb 5-1: config 0 interface 0 has no altsetting 0 [ 523.679824][ T200] usb 5-1: New USB device found, idVendor=045e, idProduct=20f9, bcdDevice= 0.00 [ 523.679850][ T200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.809338][ T200] usb 5-1: config 0 descriptor?? [ 523.978963][T11938] loop9: detected capacity change from 0 to 524287936 [ 524.219357][ T9086] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 524.283909][ T200] usbhid 5-1:0.0: can't add hid device: -71 [ 524.284011][ T200] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 524.289969][ T32] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 524.312744][ T200] usb 5-1: USB disconnect, device number 100 [ 524.373567][ T9086] usb 7-1: Using ep0 maxpacket: 32 [ 524.378772][ T9086] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 524.378806][ T9086] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.407203][ T9086] usb 7-1: config 0 descriptor?? [ 524.431162][ T9086] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 524.510633][ T32] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 524.510656][ T32] usb 4-1: config 0 has no interface number 0 [ 524.535494][ T32] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 524.535528][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.535547][ T32] usb 4-1: Product: syz [ 524.535561][ T32] usb 4-1: Manufacturer: syz [ 524.535840][ T32] usb 4-1: SerialNumber: syz [ 524.562593][ T32] usb 4-1: config 0 descriptor?? [ 524.635804][ T9086] gspca_vc032x: reg_r err -71 [ 524.636435][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636453][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636849][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636859][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636865][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636871][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636876][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636881][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636887][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636892][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636898][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636903][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636908][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636913][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636919][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636925][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636930][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.636935][ T9086] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.645025][ T9086] gspca_vc032x: Unknown sensor... [ 524.645195][ T9086] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 524.702673][ T9086] usb 7-1: USB disconnect, device number 55 [ 524.819877][ T32] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 524.926557][ T32] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 524.926664][ T32] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 524.926717][ T32] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 525.040280][ T32] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 525.621378][T11953] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1949'. [ 525.782159][T11957] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1950'. [ 525.818231][T11953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.945708][T11953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.038389][T11953] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 526.077886][T11953] veth1_vlan: left allmulticast mode [ 526.124147][T11953] bond0 (unregistering): Released all slaves [ 526.180664][T11954] netlink: 'syz.6.1948': attribute type 3 has an invalid length. [ 526.213938][T11963] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1952'. [ 526.560059][T11968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1954'. [ 527.100429][ T5746] usb 4-1: USB disconnect, device number 112 [ 527.116411][ T5746] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 527.117698][ T5746] keyspan 4-1:0.133: device disconnected [ 527.161405][T11983] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1959'. [ 527.933664][ T5746] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 527.984968][T12010] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1969'. [ 528.112214][ T5746] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 528.112249][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.112272][ T5746] usb 4-1: Product: syz [ 528.112306][ T5746] usb 4-1: Manufacturer: syz [ 528.112323][ T5746] usb 4-1: SerialNumber: syz [ 528.186233][ T5746] usb 4-1: config 0 descriptor?? [ 528.435856][ T5746] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 528.548318][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 528.884242][ T37] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 529.054985][ T37] usb 5-1: Using ep0 maxpacket: 8 [ 529.057804][ T37] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 529.057838][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.110459][ T37] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 529.124213][ T37] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input89 [ 529.379477][ T37] usb 5-1: USB disconnect, device number 101 [ 530.082573][ T200] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 530.164288][T12042] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1981'. [ 530.203685][ T5746] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 530.232538][ T5746] usb 4-1: USB disconnect, device number 113 [ 530.250067][ T200] usb 6-1: device descriptor read/64, error -71 [ 530.517273][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 530.530529][ T200] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 530.679701][ T200] usb 6-1: device descriptor read/64, error -71 [ 530.701217][ T37] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 530.798101][ T200] usb usb6-port1: attempt power cycle [ 530.861510][ T37] usb 7-1: Using ep0 maxpacket: 16 [ 530.871816][ T37] usb 7-1: config 0 interface 0 altsetting 134 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.871855][ T37] usb 7-1: config 0 interface 0 altsetting 134 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.871898][ T37] usb 7-1: config 0 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 530.908964][ T37] usb 7-1: config 0 interface 0 has no altsetting 0 [ 530.909013][ T37] usb 7-1: New USB device found, idVendor=045e, idProduct=20f9, bcdDevice= 0.00 [ 530.909039][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.945902][ T37] usb 7-1: config 0 descriptor?? [ 531.172194][ T200] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 531.198124][ T200] usb 6-1: device descriptor read/8, error -71 [ 531.287027][T12067] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1991'. [ 531.399122][ T9086] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 531.460243][ T200] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 531.482279][ T200] usb 6-1: device descriptor read/8, error -71 [ 531.560327][ T9086] usb 5-1: unable to get BOS descriptor or descriptor too short [ 531.562142][ T9086] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.562272][ T9086] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 531.564928][ T9086] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 531.564955][ T9086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.565013][ T9086] usb 5-1: Product: syz [ 531.565023][ T9086] usb 5-1: Manufacturer: syz [ 531.565032][ T9086] usb 5-1: SerialNumber: syz [ 531.599332][ T200] usb usb6-port1: unable to enumerate USB device [ 531.635990][ T37] usbhid 7-1:0.0: can't add hid device: -71 [ 531.636130][ T37] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 531.660635][ T37] usb 7-1: USB disconnect, device number 56 [ 531.928991][ T9086] usb 5-1: USB disconnect, device number 102 [ 532.753423][ T9086] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 532.919977][ T9086] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 532.920012][ T9086] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.920028][ T9086] usb 7-1: Product: syz [ 532.920037][ T9086] usb 7-1: Manufacturer: syz [ 532.920045][ T9086] usb 7-1: SerialNumber: syz [ 532.958592][ T9086] usb 7-1: config 0 descriptor?? [ 532.971632][T12088] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2000'. [ 533.057816][ T37] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 533.195133][ T9086] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 533.245024][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 533.340003][ T37] usb 4-1: config 249 has an invalid interface number: 55 but max is 0 [ 533.340036][ T37] usb 4-1: config 249 has no interface number 0 [ 533.340162][ T37] usb 4-1: config 249 interface 55 has no altsetting 0 [ 533.347078][ T37] usb 4-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice=f8.5a [ 533.347350][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.347375][ T37] usb 4-1: Product: syz [ 533.347392][ T37] usb 4-1: Manufacturer: syz [ 533.347408][ T37] usb 4-1: SerialNumber: syz [ 533.733916][ T37] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:249.55/input/input90 [ 533.765757][ T4946] bcm5974 4-1:249.55: could not read from device [ 533.831758][ T37] usb 4-1: USB disconnect, device number 114 [ 534.153531][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2006'. [ 534.239145][ T32] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 534.403480][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2007'. [ 534.423327][ T32] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 534.423360][ T32] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 534.423380][ T32] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 534.423623][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 534.469348][ T32] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 534.469383][ T32] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 534.469404][ T32] usb 5-1: Product: syz [ 534.469421][ T32] usb 5-1: Manufacturer: syz [ 534.541193][ T32] cdc_wdm 5-1:1.0: skipping garbage [ 534.541219][ T32] cdc_wdm 5-1:1.0: skipping garbage [ 534.623343][ T32] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 534.623623][ T32] cdc_wdm 5-1:1.0: Unknown control protocol [ 534.651025][ T5746] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 534.701761][T12116] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2009'. [ 534.752318][ T9086] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 534.809889][ T9086] usb 7-1: USB disconnect, device number 57 [ 534.815750][ T5746] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 534.815785][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.815805][ T5746] usb 4-1: Product: syz [ 534.815820][ T5746] usb 4-1: Manufacturer: syz [ 534.815836][ T5746] usb 4-1: SerialNumber: syz [ 534.956521][ T1839] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 535.062366][T12121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.063071][T12121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.341311][ T32] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 535.411171][ T37] usb 5-1: USB disconnect, device number 103 [ 535.544030][T12127] FAULT_INJECTION: forcing a failure. [ 535.544030][T12127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.544179][T12127] CPU: 0 UID: 0 PID: 12127 Comm: syz.6.2013 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 535.544212][T12127] Tainted: [L]=SOFTLOCKUP [ 535.544220][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.544233][T12127] Call Trace: [ 535.544243][T12127] [ 535.544252][T12127] dump_stack_lvl+0xe8/0x150 [ 535.544293][T12127] should_fail_ex+0x467/0x600 [ 535.544328][T12127] _copy_to_user+0x31/0xb0 [ 535.544354][T12127] simple_read_from_buffer+0xe1/0x170 [ 535.544385][T12127] proc_fail_nth_read+0x1be/0x230 [ 535.544411][T12127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.544438][T12127] ? rw_verify_area+0x250/0x4d0 [ 535.544466][T12127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.544486][T12127] vfs_read+0x219/0xa90 [ 535.544519][T12127] ? __pfx_vfs_read+0x10/0x10 [ 535.544546][T12127] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 535.544568][T12127] ? lockdep_hardirqs_on+0x7a/0x110 [ 535.544597][T12127] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 535.544619][T12127] ? mutex_lock_nested+0x152/0x1d0 [ 535.544656][T12127] ? fdget_pos+0x252/0x320 [ 535.544699][T12127] ksys_read+0x156/0x270 [ 535.544727][T12127] ? __pfx_ksys_read+0x10/0x10 [ 535.544763][T12127] do_syscall_64+0x17b/0x530 [ 535.544784][T12127] ? irqentry_exit+0x10f/0x8f0 [ 535.544803][T12127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.544823][T12127] ? clear_bhb_loop+0x40/0x90 [ 535.544848][T12127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.544869][T12127] RIP: 0033:0x7fb7686fe84e [ 535.544890][T12127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 535.544909][T12127] RSP: 002b:00007fb766995fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 535.544934][T12127] RAX: ffffffffffffffda RBX: 00007fb7669966c0 RCX: 00007fb7686fe84e [ 535.544950][T12127] RDX: 000000000000000f RSI: 00007fb7669960a0 RDI: 0000000000000005 [ 535.544963][T12127] RBP: 00007fb766996090 R08: 0000000000000000 R09: 0000000000000000 [ 535.544977][T12127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.544990][T12127] R13: 00007fb7689c6038 R14: 00007fb7689c5fa0 R15: 00007ffc1fc9ee08 [ 535.545023][T12127] [ 535.552723][T12126] netlink: 'syz.5.2012': attribute type 21 has an invalid length. [ 535.552829][T12126] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2012'. [ 536.441095][ T9086] usb 7-1: new low-speed USB device number 58 using dummy_hcd [ 536.604996][ T9086] usb 7-1: unable to get BOS descriptor or descriptor too short [ 536.609963][ T9086] usb 7-1: config 142 has an invalid interface number: 251 but max is 0 [ 536.609995][ T9086] usb 7-1: config 142 has no interface number 0 [ 536.610044][ T9086] usb 7-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 536.610083][ T9086] usb 7-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 536.610110][ T9086] usb 7-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 536.610135][ T9086] usb 7-1: config 142 interface 251 has no altsetting 0 [ 536.695899][ T9086] usb 7-1: string descriptor 0 read error: -22 [ 536.696076][ T9086] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 536.696102][ T9086] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.757463][T12133] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 536.757860][T12133] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 536.819968][ T9086] cypress_m8 7-1:142.251: HID->COM RS232 Adapter converter detected [ 536.876983][ T9086] usb 7-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 536.889756][ T1839] usb 4-1: Service connection timeout for: 256 [ 536.889779][ T1839] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 536.929603][ T200] usb 4-1: USB disconnect, device number 115 [ 537.037853][ T1839] ath9k_htc: Failed to initialize the device [ 537.119558][T12139] netlink: 'syz.5.2016': attribute type 4 has an invalid length. [ 537.119583][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2016'. [ 537.144717][T12141] netlink: 'syz.5.2016': attribute type 4 has an invalid length. [ 537.144740][T12141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2016'. [ 537.159186][ T200] usb 4-1: ath9k_htc: USB layer deinitialized [ 537.179983][T12142] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2018'. [ 537.359188][ T9086] usb 7-1: USB disconnect, device number 58 [ 537.387053][ T9086] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 537.388043][ T9086] cypress_m8 7-1:142.251: device disconnected [ 537.468877][ T5746] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 537.644579][ T5746] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.644610][ T5746] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.648431][ T5746] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 537.648464][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.648486][ T5746] usb 6-1: Product: syz [ 537.648502][ T5746] usb 6-1: Manufacturer: syz [ 537.648517][ T5746] usb 6-1: SerialNumber: syz [ 537.699867][ T5746] usb 6-1: 0:2 : does not exist [ 538.099216][ T5746] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 538.369589][ T5746] usb 6-1: USB disconnect, device number 62 [ 538.404675][T12167] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2027'. [ 538.506612][ T5584] udevd[5584]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.541264][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 538.607498][T12159] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2024'. [ 538.629580][ T9086] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 538.781857][ T9086] usb 7-1: device descriptor read/64, error -71 [ 538.876207][T12176] FAULT_INJECTION: forcing a failure. [ 538.876207][T12176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.876250][T12176] CPU: 1 UID: 0 PID: 12176 Comm: syz.4.2031 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 538.876281][T12176] Tainted: [L]=SOFTLOCKUP [ 538.876288][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 538.876302][T12176] Call Trace: [ 538.876311][T12176] [ 538.876321][T12176] dump_stack_lvl+0xe8/0x150 [ 538.876356][T12176] should_fail_ex+0x467/0x600 [ 538.876392][T12176] _copy_from_iter+0x1d3/0x1660 [ 538.876439][T12176] ? __pfx__copy_from_iter+0x10/0x10 [ 538.876488][T12176] file_tty_write+0x48a/0x980 [ 538.876535][T12176] vfs_write+0x61e/0xbb0 [ 538.876572][T12176] ? __pfx_vfs_write+0x10/0x10 [ 538.876611][T12176] ? __fget_files+0x2a/0x420 [ 538.876653][T12176] ksys_write+0x156/0x270 [ 538.876683][T12176] ? __pfx_ksys_write+0x10/0x10 [ 538.876721][T12176] do_syscall_64+0x17b/0x530 [ 538.876744][T12176] ? irqentry_exit+0x10f/0x8f0 [ 538.876764][T12176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.876787][T12176] ? clear_bhb_loop+0x40/0x90 [ 538.876815][T12176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.876837][T12176] RIP: 0033:0x7fba93cae019 [ 538.876859][T12176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.876879][T12176] RSP: 002b:00007fba91f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.876904][T12176] RAX: ffffffffffffffda RBX: 00007fba93f35fa0 RCX: 00007fba93cae019 [ 538.876921][T12176] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 538.876936][T12176] RBP: 00007fba91f06090 R08: 0000000000000000 R09: 0000000000000000 [ 538.876950][T12176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.876964][T12176] R13: 00007fba93f36038 R14: 00007fba93f35fa0 R15: 00007ffeab0b2678 [ 538.877001][T12176] [ 538.963710][ T1839] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 539.129608][ T1839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.129659][ T1839] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 539.129675][ T1839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.144350][ T1839] usb 6-1: config 0 descriptor?? [ 539.177518][ T9086] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 539.316208][ T9086] usb 7-1: device descriptor read/64, error -71 [ 539.434154][ T9086] usb usb7-port1: attempt power cycle [ 539.562110][ T5746] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 539.582638][T12183] misc userio: No port type given on /dev/userio [ 539.609163][ T1839] ath6kl: Failed to read usb control message: -71 [ 539.609228][ T1839] ath6kl: Unable to read the bmi data from the device: -71 [ 539.609245][ T1839] ath6kl: Unable to recv target info: -71 [ 539.695637][ T1839] ath6kl: Failed to init ath6kl core: -71 [ 539.696285][ T1839] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 539.703983][ T1839] usb 6-1: USB disconnect, device number 63 [ 539.744233][ T5746] usb 5-1: Using ep0 maxpacket: 32 [ 539.748400][ T5746] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 539.748421][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.748433][ T5746] usb 5-1: Product: syz [ 539.748442][ T5746] usb 5-1: Manufacturer: syz [ 539.748450][ T5746] usb 5-1: SerialNumber: syz [ 539.752376][ T5746] usb 5-1: config 0 descriptor?? [ 539.862562][ T9086] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 539.892510][ T9086] usb 7-1: device descriptor read/8, error -71 [ 540.014933][ T5746] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 104 [ 540.139287][ T9086] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 540.161841][ T9086] usb 7-1: device descriptor read/8, error -71 [ 540.213170][ T5746] usb 5-1: USB disconnect, device number 104 [ 540.220949][ T32] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 540.245931][T12189] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2036'. [ 540.293257][ T9086] usb usb7-port1: unable to enumerate USB device [ 540.387635][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.387693][ T32] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 540.387717][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.479426][ T32] as10x_usb: device has been detected [ 540.480537][ T32] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 540.500972][T12191] tipc: Enabling of bearer rejected, already enabled [ 540.533134][ T32] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 540.568443][ T32] as10x_usb: error during firmware upload part1 [ 540.569206][ T32] Registered device Abilis Systems DVB-Titan [ 540.646643][T12193] 9p: Could not find request transport: fu [ 540.848938][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2041'. [ 540.885530][T12201] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2041'. [ 540.885559][T12201] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2041'. [ 540.885576][T12201] netlink: 'syz.4.2041': attribute type 5 has an invalid length. [ 540.885590][T12201] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2041'. [ 540.906074][T12199] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2040'. [ 541.572776][T12214] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2045'. [ 541.701649][T12218] netlink: 'syz.4.2047': attribute type 10 has an invalid length. [ 542.088243][ T32] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 542.266254][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 542.270715][ T32] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 542.270748][ T32] usb 6-1: config 0 has no interface number 0 [ 542.270800][ T32] usb 6-1: config 0 interface 12 has no altsetting 0 [ 542.305482][ T32] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 542.305518][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.305541][ T32] usb 6-1: Product: syz [ 542.305557][ T32] usb 6-1: Manufacturer: syz [ 542.305574][ T32] usb 6-1: SerialNumber: syz [ 542.366861][ T32] usb 6-1: config 0 descriptor?? [ 542.475867][ T9086] usb 4-1: USB disconnect, device number 116 [ 542.611980][ T9086] Unregistered device Abilis Systems DVB-Titan [ 542.632966][ T9086] as10x_usb: device has been disconnected [ 542.672682][ T200] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 542.705047][ T32] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 542.705194][ T32] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 542.705224][ T32] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 542.705338][ T32] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 542.761236][ T32] usb 6-1: USB disconnect, device number 64 [ 542.822951][T12241] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2053'. [ 542.870557][ T200] usb 5-1: Using ep0 maxpacket: 32 [ 542.881537][ T200] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.881568][ T200] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 542.881607][ T200] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 542.881622][ T200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.052867][ T200] usb 5-1: config 0 descriptor?? [ 543.296464][T12255] tipc: Enabling of bearer rejected, failed to enable media [ 543.567054][T12265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.907024][T12272] __nla_validate_parse: 2 callbacks suppressed [ 543.907223][T12272] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2065'. [ 544.226341][T12283] openvswitch: netlink: Missing key (keys=40, expected=100) [ 544.287443][ T32] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 544.453962][ T32] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 544.453999][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.454021][ T32] usb 6-1: Product: syz [ 544.454037][ T32] usb 6-1: Manufacturer: syz [ 544.454053][ T32] usb 6-1: SerialNumber: syz [ 544.497698][T12290] netlink: 'syz.3.2072': attribute type 1 has an invalid length. [ 544.497722][T12290] netlink: 'syz.3.2072': attribute type 2 has an invalid length. [ 544.594039][ T37] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 544.683236][T12294] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2074'. [ 545.141840][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 546.042562][ T37] usb 6-1: Service connection timeout for: 256 [ 546.042670][ T37] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 546.124995][ T200] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 546.130902][ T32] usb 5-1: USB disconnect, device number 105 [ 546.167923][ T37] ath9k_htc: Failed to initialize the device [ 546.297136][ T37] usb 6-1: ath9k_htc: USB layer deinitialized [ 546.298945][ T200] usb 4-1: Using ep0 maxpacket: 16 [ 546.317435][ T200] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 546.317467][ T200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.317497][ T200] usb 4-1: Product: syz [ 546.317511][ T200] usb 4-1: Manufacturer: syz [ 546.317525][ T200] usb 4-1: SerialNumber: syz [ 546.392221][ T200] usb 4-1: config 0 descriptor?? [ 546.452094][ T200] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 546.454590][ T5746] usb 6-1: USB disconnect, device number 65 [ 546.623967][ T200] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 546.624218][ T200] visor 4-1:0.0: probe with driver visor failed with error -71 [ 546.641251][ T200] usb 4-1: USB disconnect, device number 117 [ 546.904241][T12331] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2084'. [ 547.332894][ T37] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 547.438681][T12348] netlink: 'syz.3.2091': attribute type 61 has an invalid length. [ 547.439873][ T200] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 547.499854][ T37] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 547.499877][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.499890][ T37] usb 6-1: Product: syz [ 547.499900][ T37] usb 6-1: Manufacturer: syz [ 547.499908][ T37] usb 6-1: SerialNumber: syz [ 547.536867][ T37] usb 6-1: config 0 descriptor?? [ 547.610824][ T200] usb 5-1: Using ep0 maxpacket: 16 [ 547.616675][ T200] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.616705][ T200] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.618564][ T200] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 547.618597][ T200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 547.618619][ T200] usb 5-1: SerialNumber: syz [ 547.677987][ T200] usb 5-1: 0:2 : does not exist [ 547.740589][ T5746] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 547.781791][ T37] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 547.781907][ T37] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 547.805124][ T37] usb 6-1: USB disconnect, device number 66 [ 547.885424][ T1010] usb 5-1: USB disconnect, device number 106 [ 547.910993][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 547.913727][ T5746] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 547.913757][ T5746] usb 4-1: config 0 has no interface number 0 [ 547.916969][ T5746] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 547.917002][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.917023][ T5746] usb 4-1: Product: syz [ 547.917038][ T5746] usb 4-1: Manufacturer: syz [ 547.917053][ T5746] usb 4-1: SerialNumber: syz [ 547.933226][ T5746] usb 4-1: config 0 descriptor?? [ 548.371682][ T5746] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 548.371721][ T5746] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 548.455516][T12351] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2093'. [ 548.666437][ T5746] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 548.666806][ T5746] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 548.694617][ T5746] usb 4-1: USB disconnect, device number 118 [ 548.799007][ T200] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 548.963134][ T200] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 548.963169][ T200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.963191][ T200] usb 6-1: Product: syz [ 548.963207][ T200] usb 6-1: Manufacturer: syz [ 548.963222][ T200] usb 6-1: SerialNumber: syz [ 548.989521][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 549.047463][ T5746] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 549.177915][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 549.177938][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.177951][ T9] usb 5-1: Product: syz [ 549.178023][ T9] usb 5-1: Manufacturer: syz [ 549.178033][ T9] usb 5-1: SerialNumber: syz [ 549.214391][ T9] usb 5-1: config 0 descriptor?? [ 549.223327][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 107 [ 549.340864][T12359] FAULT_INJECTION: forcing a failure. [ 549.340864][T12359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.340901][T12359] CPU: 0 UID: 0 PID: 12359 Comm: syz.3.2097 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.340930][T12359] Tainted: [L]=SOFTLOCKUP [ 549.340936][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.340946][T12359] Call Trace: [ 549.340953][T12359] [ 549.340961][T12359] dump_stack_lvl+0xe8/0x150 [ 549.340987][T12359] should_fail_ex+0x467/0x600 [ 549.341014][T12359] _copy_from_iter+0x1d3/0x1660 [ 549.341037][T12359] ? skb_set_owner_w+0x263/0x3d0 [ 549.341074][T12359] ? __pfx__copy_from_iter+0x10/0x10 [ 549.341118][T12359] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 549.341139][T12359] skb_copy_datagram_from_iter+0xe6/0x720 [ 549.341173][T12359] ? skb_put+0x112/0x210 [ 549.341200][T12359] tun_get_user+0x1502/0x4380 [ 549.341219][T12359] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 549.341245][T12359] ? __lock_acquire+0x690/0x2e40 [ 549.341265][T12359] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 549.341296][T12359] ? __pfx_tun_get_user+0x10/0x10 [ 549.341312][T12359] ? rt_spin_unlock+0x157/0x200 [ 549.341357][T12359] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 549.341377][T12359] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 549.341408][T12359] ? tun_get+0x1c/0x2f0 [ 549.341431][T12359] tun_chr_write_iter+0x119/0x210 [ 549.341453][T12359] vfs_write+0x61e/0xbb0 [ 549.341482][T12359] ? __pfx_vfs_write+0x10/0x10 [ 549.341513][T12359] ? __fget_files+0x2a/0x420 [ 549.341540][T12359] ksys_write+0x156/0x270 [ 549.341563][T12359] ? __pfx_ksys_write+0x10/0x10 [ 549.341592][T12359] do_syscall_64+0x17b/0x530 [ 549.341610][T12359] ? irqentry_exit+0x10f/0x8f0 [ 549.341626][T12359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.341643][T12359] ? clear_bhb_loop+0x40/0x90 [ 549.341666][T12359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.341684][T12359] RIP: 0033:0x7fb68ee5e019 [ 549.341701][T12359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.341717][T12359] RSP: 002b:00007fb68d0b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 549.341737][T12359] RAX: ffffffffffffffda RBX: 00007fb68f0e5fa0 RCX: 00007fb68ee5e019 [ 549.341750][T12359] RDX: 000000000000004a RSI: 0000200000000200 RDI: 0000000000000003 [ 549.341761][T12359] RBP: 00007fb68d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 549.341773][T12359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.341783][T12359] R13: 00007fb68f0e6038 R14: 00007fb68f0e5fa0 R15: 00007fff410fd178 [ 549.341811][T12359] [ 549.476668][ T9] (null): error -EIO: failure setting delay to 10us [ 549.476835][ T9] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 549.535431][ T9] usb 5-1: USB disconnect, device number 107 [ 549.961677][ T37] usb 6-1: USB disconnect, device number 67 [ 550.167714][T12367] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 550.167745][T12367] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 550.173058][T12367] vhci_hcd vhci_hcd.0: Device attached [ 550.252451][T12368] vhci_hcd: connection closed [ 550.255204][ T3337] vhci_hcd vhci_hcd.3: stop threads [ 550.255235][ T3337] vhci_hcd vhci_hcd.3: release socket [ 550.255338][ T3337] vhci_hcd vhci_hcd.3: disconnect device [ 550.348498][T12373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2101'. [ 550.348532][T12373] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2101'. [ 550.431706][T12376] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2102'. [ 550.464732][ T5746] usb 6-1: Service connection timeout for: 256 [ 550.464757][ T5746] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 550.550237][ T5746] ath9k_htc: Failed to initialize the device [ 550.551477][ T37] usb 6-1: ath9k_htc: USB layer deinitialized [ 550.813431][T12386] netlink: 'syz.5.2108': attribute type 75 has an invalid length. [ 551.025855][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2107'. [ 551.059800][T12386] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2108'. [ 551.091778][T12391] FAULT_INJECTION: forcing a failure. [ 551.091778][T12391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.091816][T12391] CPU: 0 UID: 0 PID: 12391 Comm: syz.3.2109 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 551.091846][T12391] Tainted: [L]=SOFTLOCKUP [ 551.091853][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 551.091866][T12391] Call Trace: [ 551.091874][T12391] [ 551.091883][T12391] dump_stack_lvl+0xe8/0x150 [ 551.091919][T12391] should_fail_ex+0x467/0x600 [ 551.091954][T12391] _copy_to_user+0x31/0xb0 [ 551.091979][T12391] simple_read_from_buffer+0xe1/0x170 [ 551.092008][T12391] proc_fail_nth_read+0x1be/0x230 [ 551.092036][T12391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.092064][T12391] ? rw_verify_area+0x250/0x4d0 [ 551.092093][T12391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.092120][T12391] vfs_read+0x219/0xa90 [ 551.092157][T12391] ? __pfx_vfs_read+0x10/0x10 [ 551.092186][T12391] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 551.092210][T12391] ? lockdep_hardirqs_on+0x7a/0x110 [ 551.092232][T12391] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 551.092253][T12391] ? mutex_lock_nested+0x152/0x1d0 [ 551.092278][T12391] ? fdget_pos+0x252/0x320 [ 551.092310][T12391] ksys_read+0x156/0x270 [ 551.092339][T12391] ? __pfx_ksys_read+0x10/0x10 [ 551.092376][T12391] do_syscall_64+0x17b/0x530 [ 551.092400][T12391] ? irqentry_exit+0x10f/0x8f0 [ 551.092421][T12391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.092444][T12391] ? clear_bhb_loop+0x40/0x90 [ 551.092472][T12391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.092503][T12391] RIP: 0033:0x7fb68ee1e84e [ 551.092524][T12391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 551.092543][T12391] RSP: 002b:00007fb68d0b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 551.092568][T12391] RAX: ffffffffffffffda RBX: 00007fb68d0b66c0 RCX: 00007fb68ee1e84e [ 551.092586][T12391] RDX: 000000000000000f RSI: 00007fb68d0b60a0 RDI: 0000000000000003 [ 551.092601][T12391] RBP: 00007fb68d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 551.092615][T12391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.092629][T12391] R13: 00007fb68f0e6038 R14: 00007fb68f0e5fa0 R15: 00007fff410fd178 [ 551.092665][T12391] [ 551.700305][T12399] FAULT_INJECTION: forcing a failure. [ 551.700305][T12399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.700344][T12399] CPU: 1 UID: 0 PID: 12399 Comm: syz.3.2112 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 551.700370][T12399] Tainted: [L]=SOFTLOCKUP [ 551.700377][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 551.700388][T12399] Call Trace: [ 551.700396][T12399] [ 551.700404][T12399] dump_stack_lvl+0xe8/0x150 [ 551.700438][T12399] should_fail_ex+0x467/0x600 [ 551.700466][T12399] _copy_to_user+0x31/0xb0 [ 551.700494][T12399] simple_read_from_buffer+0xe1/0x170 [ 551.700519][T12399] proc_fail_nth_read+0x1be/0x230 [ 551.700541][T12399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.700564][T12399] ? rw_verify_area+0x250/0x4d0 [ 551.700587][T12399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.700605][T12399] vfs_read+0x219/0xa90 [ 551.700634][T12399] ? __pfx_vfs_read+0x10/0x10 [ 551.700657][T12399] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 551.700675][T12399] ? lockdep_hardirqs_on+0x7a/0x110 [ 551.700693][T12399] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 551.700709][T12399] ? mutex_lock_nested+0x152/0x1d0 [ 551.700730][T12399] ? fdget_pos+0x252/0x320 [ 551.700757][T12399] ksys_read+0x156/0x270 [ 551.700781][T12399] ? __pfx_ksys_read+0x10/0x10 [ 551.700798][T12399] ? __pfx_v4l2_ioctl+0x10/0x10 [ 551.700834][T12399] do_syscall_64+0x17b/0x530 [ 551.700852][T12399] ? irqentry_exit+0x10f/0x8f0 [ 551.700868][T12399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.700885][T12399] ? clear_bhb_loop+0x40/0x90 [ 551.700907][T12399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.700924][T12399] RIP: 0033:0x7fb68ee1e84e [ 551.700942][T12399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 551.700958][T12399] RSP: 002b:00007fb68d0b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 551.700978][T12399] RAX: ffffffffffffffda RBX: 00007fb68d0b66c0 RCX: 00007fb68ee1e84e [ 551.700993][T12399] RDX: 000000000000000f RSI: 00007fb68d0b60a0 RDI: 0000000000000004 [ 551.701003][T12399] RBP: 00007fb68d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 551.701015][T12399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.701025][T12399] R13: 00007fb68f0e6038 R14: 00007fb68f0e5fa0 R15: 00007fff410fd178 [ 551.701054][T12399] [ 551.914078][T12397] overlay: filesystem on ./bus not supported [ 552.047908][ T1010] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 552.208334][ T1010] usb 5-1: Using ep0 maxpacket: 8 [ 552.211369][ T1010] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.211414][ T1010] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.214746][ T1010] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 552.214777][ T1010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.214790][ T1010] usb 5-1: Product: syz [ 552.214800][ T1010] usb 5-1: Manufacturer: syz [ 552.214809][ T1010] usb 5-1: SerialNumber: syz [ 552.273973][ T5746] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 552.377847][ T37] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 552.460753][ T5746] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.460781][ T5746] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.490101][ T5746] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 552.490135][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.490157][ T5746] usb 4-1: Product: syz [ 552.490173][ T5746] usb 4-1: Manufacturer: syz [ 552.490188][ T5746] usb 4-1: SerialNumber: syz [ 552.611067][ T37] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 552.611167][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.611189][ T37] usb 6-1: Product: syz [ 552.611204][ T37] usb 6-1: Manufacturer: syz [ 552.611217][ T37] usb 6-1: SerialNumber: syz [ 552.682277][ T37] usb 6-1: config 0 descriptor?? [ 552.967155][ T37] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 553.304301][ T5746] usb 4-1: 0:1 : does not exist [ 553.412659][ T5746] usb 4-1: USB disconnect, device number 119 [ 553.498885][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.700047][ T1010] usb 5-1: unit 0 not found! [ 554.109926][T12427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.244076][ T1010] usb 5-1: USB disconnect, device number 108 [ 554.600945][ T37] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 554.726349][ T37] usb 6-1: USB disconnect, device number 68 [ 554.751222][ T38] audit: type=1326 audit(1788246279.940:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12436 comm="syz.6.2126" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76873e019 code=0x7ffc0000 [ 554.751280][ T38] audit: type=1326 audit(1788246279.959:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12436 comm="syz.6.2126" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76873e019 code=0x7ffc0000 [ 554.760232][ T38] audit: type=1326 audit(1788246279.959:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12436 comm="syz.6.2126" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7686fe84e code=0x7ffc0000 [ 554.760893][ T38] audit: type=1326 audit(1788246279.959:13): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12436 comm="syz.6.2126" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76873e019 code=0x7ffc0000 [ 554.862465][ T38] audit: type=1326 audit(1788246279.959:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12436 comm="syz.6.2126" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76873e019 code=0x7ffc0000 [ 554.862527][ T38] audit: type=1326 audit(1788246280.052:15): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12436 comm="syz.6.2126" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb76873e019 code=0x7ffc0000 [ 554.864058][ T38] audit: type=1326 audit(1788246280.052:16): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12436 comm="syz.6.2126" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76873e019 code=0x7ffc0000 [ 554.864112][ T38] audit: type=1326 audit(1788246280.052:17): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12436 comm="syz.6.2126" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76873e019 code=0x7ffc0000 [ 554.948129][ T5584] udevd[5584]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.039535][T12435] netlink: 'syz.4.2125': attribute type 4 has an invalid length. [ 555.039569][T12435] netlink: 'syz.4.2125': attribute type 1 has an invalid length. [ 555.143170][T12442] netlink: 822 bytes leftover after parsing attributes in process `syz.3.2127'. [ 555.396156][T12452] fuse: Unknown parameter '000000000000000000030x000000000000000400000000000000000000' [ 555.467044][T12454] FAULT_INJECTION: forcing a failure. [ 555.467044][T12454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.467084][T12454] CPU: 0 UID: 0 PID: 12454 Comm: syz.5.2134 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 555.467114][T12454] Tainted: [L]=SOFTLOCKUP [ 555.467123][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.467137][T12454] Call Trace: [ 555.467146][T12454] [ 555.467156][T12454] dump_stack_lvl+0xe8/0x150 [ 555.467191][T12454] should_fail_ex+0x467/0x600 [ 555.467226][T12454] _copy_to_user+0x31/0xb0 [ 555.467251][T12454] iommufd_ucmd_respond+0x87/0xe0 [ 555.467387][T12454] iommufd_ioas_map+0x3f7/0x4c0 [ 555.467430][T12454] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 555.467475][T12454] iommufd_fops_ioctl+0x468/0x600 [ 555.467505][T12454] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 555.467542][T12454] ? __fget_files+0x3a8/0x420 [ 555.467565][T12454] ? __fget_files+0x2a/0x420 [ 555.467592][T12454] ? bpf_lsm_file_ioctl+0x9/0x20 [ 555.467626][T12454] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 555.467650][T12454] __se_sys_ioctl+0xff/0x170 [ 555.467683][T12454] do_syscall_64+0x17b/0x530 [ 555.467706][T12454] ? irqentry_exit+0x10f/0x8f0 [ 555.467726][T12454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.467748][T12454] ? clear_bhb_loop+0x40/0x90 [ 555.467775][T12454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.467797][T12454] RIP: 0033:0x7ffaa43be019 [ 555.467818][T12454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.467837][T12454] RSP: 002b:00007ffaa2616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.467862][T12454] RAX: ffffffffffffffda RBX: 00007ffaa4645fa0 RCX: 00007ffaa43be019 [ 555.467879][T12454] RDX: 0000200000000000 RSI: 0000000000003b85 RDI: 0000000000000003 [ 555.467895][T12454] RBP: 00007ffaa2616090 R08: 0000000000000000 R09: 0000000000000000 [ 555.467909][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.467923][T12454] R13: 00007ffaa4646038 R14: 00007ffaa4645fa0 R15: 00007ffd0fe7a4a8 [ 555.467956][T12454] [ 555.575259][T12459] random: crng reseeded on system resumption [ 556.465746][ T32] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 556.621279][ T5746] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 556.633238][ T32] usb 5-1: device descriptor read/64, error -71 [ 556.695834][T12469] zram: Can't change algorithm for initialized device [ 556.706420][T12469] zram: Cannot change disksize for initialized device [ 556.818392][ T5746] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 556.818428][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.818450][ T5746] usb 6-1: Product: syz [ 556.818466][ T5746] usb 6-1: Manufacturer: syz [ 556.818482][ T5746] usb 6-1: SerialNumber: syz [ 556.860932][ T5746] usb 6-1: config 0 descriptor?? [ 556.899192][ T32] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 557.050353][ T32] usb 5-1: device descriptor read/64, error -71 [ 557.082206][ T5746] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 557.168764][ T32] usb usb5-port1: attempt power cycle [ 557.196422][T12475] xt_hashlimit: overflow, try lower: 0/0 [ 557.529878][ T32] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 557.533274][T12480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2143'. [ 557.558249][ T32] usb 5-1: device descriptor read/8, error -71 [ 557.822759][ T32] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 557.848164][ T32] usb 5-1: device descriptor read/8, error -71 [ 557.971035][ T32] usb usb5-port1: unable to enumerate USB device [ 558.610012][ T5746] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 558.635738][ T5746] usb 6-1: USB disconnect, device number 69 [ 559.036923][ T200] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 559.176147][ T200] usb 4-1: device descriptor read/64, error -71 [ 559.432739][ T200] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 559.475303][ T5746] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 559.571316][ T200] usb 4-1: device descriptor read/64, error -71 [ 559.637700][ T5746] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 559.637734][ T5746] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 559.637756][ T5746] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 559.637833][ T5746] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 559.639796][ T5746] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 559.639824][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 559.639846][ T5746] usb 6-1: Product: syz [ 559.639861][ T5746] usb 6-1: Manufacturer: syz [ 559.688932][ T32] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 559.728585][ T200] usb usb4-port1: attempt power cycle [ 559.754975][ T5746] cdc_wdm 6-1:1.0: skipping garbage [ 559.755000][ T5746] cdc_wdm 6-1:1.0: skipping garbage [ 559.759198][ T5746] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 559.759221][ T5746] cdc_wdm 6-1:1.0: Unknown control protocol [ 559.868639][ T32] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 559.868673][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.868696][ T32] usb 5-1: Product: syz [ 559.868712][ T32] usb 5-1: Manufacturer: syz [ 559.868729][ T32] usb 5-1: SerialNumber: syz [ 559.875866][ T32] usb 5-1: config 0 descriptor?? [ 560.095058][ T200] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 560.117301][ T200] usb 4-1: device descriptor read/8, error -71 [ 560.226732][ T9] usb 6-1: USB disconnect, device number 70 [ 560.310433][ T32] usb 5-1: Firmware: major: 255, minor: 61, hardware type: UNKNOWN (57) [ 560.395397][ T200] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 560.416554][ T200] usb 4-1: device descriptor read/8, error -71 [ 560.544446][ T200] usb usb4-port1: unable to enumerate USB device [ 560.599616][ T32] usb 5-1: failed to fetch extended address, random address set [ 560.599649][ T32] usb 5-1: atusb_probe: initialization failed, error = -524 [ 560.618050][ T32] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 560.632371][ T32] usb 5-1: USB disconnect, device number 113 [ 562.289971][T12519] netlink: zone id is out of range [ 562.290390][T12519] netlink: zone id is out of range [ 562.322355][T12519] netlink: zone id is out of range [ 562.322948][T12519] netlink: zone id is out of range [ 562.323224][T12519] netlink: zone id is out of range [ 562.345036][T12519] netlink: zone id is out of range [ 562.345266][T12519] netlink: zone id is out of range [ 562.345337][T12519] netlink: zone id is out of range [ 562.345723][T12519] netlink: zone id is out of range [ 562.345852][T12519] netlink: zone id is out of range [ 562.713949][ T1010] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 562.875173][ T1010] usb 4-1: Using ep0 maxpacket: 16 [ 562.877272][ T1010] usb 4-1: config 0 interface 0 altsetting 88 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 562.877297][ T1010] usb 4-1: config 0 interface 0 has no altsetting 0 [ 562.877319][ T1010] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 562.877333][ T1010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.881693][ T1010] usb 4-1: config 0 descriptor?? [ 563.053409][T12541] FAULT_INJECTION: forcing a failure. [ 563.053409][T12541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.053451][T12541] CPU: 0 UID: 0 PID: 12541 Comm: syz.5.2168 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.053486][T12541] Tainted: [L]=SOFTLOCKUP [ 563.053495][T12541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.053510][T12541] Call Trace: [ 563.053519][T12541] [ 563.053529][T12541] dump_stack_lvl+0xe8/0x150 [ 563.053567][T12541] should_fail_ex+0x467/0x600 [ 563.053601][T12541] _copy_to_user+0x31/0xb0 [ 563.053625][T12541] simple_read_from_buffer+0xe1/0x170 [ 563.053655][T12541] proc_fail_nth_read+0x1be/0x230 [ 563.053685][T12541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.053714][T12541] ? rw_verify_area+0x250/0x4d0 [ 563.053743][T12541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.053767][T12541] vfs_read+0x219/0xa90 [ 563.053801][T12541] ? __pfx_vfs_read+0x10/0x10 [ 563.053829][T12541] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 563.053864][T12541] ? lockdep_hardirqs_on+0x7a/0x110 [ 563.053886][T12541] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 563.053907][T12541] ? mutex_lock_nested+0x152/0x1d0 [ 563.053933][T12541] ? fdget_pos+0x252/0x320 [ 563.053964][T12541] ksys_read+0x156/0x270 [ 563.053992][T12541] ? __pfx_ksys_read+0x10/0x10 [ 563.054029][T12541] do_syscall_64+0x17b/0x530 [ 563.054053][T12541] ? irqentry_exit+0x10f/0x8f0 [ 563.054073][T12541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.054096][T12541] ? clear_bhb_loop+0x40/0x90 [ 563.054124][T12541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.054145][T12541] RIP: 0033:0x7ffaa437e84e [ 563.054167][T12541] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 563.054186][T12541] RSP: 002b:00007ffaa2615fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.054211][T12541] RAX: ffffffffffffffda RBX: 00007ffaa26166c0 RCX: 00007ffaa437e84e [ 563.054227][T12541] RDX: 000000000000000f RSI: 00007ffaa26160a0 RDI: 0000000000000003 [ 563.054241][T12541] RBP: 00007ffaa2616090 R08: 0000000000000000 R09: 0000000000000000 [ 563.054254][T12541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.054268][T12541] R13: 00007ffaa4646038 R14: 00007ffaa4645fa0 R15: 00007ffd0fe7a4a8 [ 563.054308][T12541] [ 563.109652][ T32] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 563.324647][ T32] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 563.324683][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.324705][ T32] usb 5-1: Product: syz [ 563.324794][ T32] usb 5-1: Manufacturer: syz [ 563.324812][ T32] usb 5-1: SerialNumber: syz [ 563.341440][T12529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.349772][T12529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.811137][ T9086] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 564.110652][ T13] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 564.135822][T12529] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 565.712499][ T9086] usb 5-1: Service connection timeout for: 256 [ 565.712527][ T9086] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 565.737609][ T32] usb 5-1: USB disconnect, device number 114 [ 565.972287][ T9086] ath9k_htc: Failed to initialize the device [ 565.972885][ T32] usb 5-1: ath9k_htc: USB layer deinitialized [ 566.147913][ T1010] usb 4-1: string descriptor 0 read error: -71 [ 566.162741][ T1010] usbhid 4-1:0.0: can't add hid device: -71 [ 566.162886][ T1010] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 566.326145][ T1010] usb 4-1: USB disconnect, device number 124 [ 566.585937][T12576] FAULT_INJECTION: forcing a failure. [ 566.585937][T12576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.585977][T12576] CPU: 0 UID: 0 PID: 12576 Comm: syz.3.2182 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 566.586009][T12576] Tainted: [L]=SOFTLOCKUP [ 566.586018][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 566.586031][T12576] Call Trace: [ 566.586040][T12576] [ 566.586050][T12576] dump_stack_lvl+0xe8/0x150 [ 566.586083][T12576] should_fail_ex+0x467/0x600 [ 566.586117][T12576] _copy_to_user+0x31/0xb0 [ 566.586142][T12576] simple_read_from_buffer+0xe1/0x170 [ 566.586172][T12576] proc_fail_nth_read+0x1be/0x230 [ 566.586200][T12576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 566.586229][T12576] ? rw_verify_area+0x250/0x4d0 [ 566.586256][T12576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 566.586279][T12576] vfs_read+0x219/0xa90 [ 566.586315][T12576] ? __pfx_vfs_read+0x10/0x10 [ 566.586343][T12576] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 566.586367][T12576] ? lockdep_hardirqs_on+0x7a/0x110 [ 566.586388][T12576] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 566.586411][T12576] ? mutex_lock_nested+0x152/0x1d0 [ 566.586439][T12576] ? fdget_pos+0x252/0x320 [ 566.586476][T12576] ksys_read+0x156/0x270 [ 566.586505][T12576] ? __pfx_ksys_read+0x10/0x10 [ 566.586540][T12576] do_syscall_64+0x17b/0x530 [ 566.586563][T12576] ? irqentry_exit+0x10f/0x8f0 [ 566.586582][T12576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.586604][T12576] ? clear_bhb_loop+0x40/0x90 [ 566.586631][T12576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.586654][T12576] RIP: 0033:0x7fb68ee1e84e [ 566.586676][T12576] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 566.586695][T12576] RSP: 002b:00007fb68d0b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 566.586720][T12576] RAX: ffffffffffffffda RBX: 00007fb68d0b66c0 RCX: 00007fb68ee1e84e [ 566.586746][T12576] RDX: 000000000000000f RSI: 00007fb68d0b60a0 RDI: 0000000000000007 [ 566.586761][T12576] RBP: 00007fb68d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 566.586776][T12576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.586791][T12576] R13: 00007fb68f0e6038 R14: 00007fb68f0e5fa0 R15: 00007fff410fd178 [ 566.586827][T12576] [ 566.903949][ T5746] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 567.015940][T12589] FAULT_INJECTION: forcing a failure. [ 567.015940][T12589] name failslab, interval 1, probability 100, space 0, times 981 [ 567.015980][T12589] CPU: 1 UID: 0 PID: 12589 Comm: syz.3.2185 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 567.016009][T12589] Tainted: [L]=SOFTLOCKUP [ 567.016016][T12589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.016029][T12589] Call Trace: [ 567.016039][T12589] [ 567.016049][T12589] dump_stack_lvl+0xe8/0x150 [ 567.016085][T12589] should_fail_ex+0x467/0x600 [ 567.016119][T12589] should_failslab+0xa8/0x100 [ 567.016142][T12589] kmem_cache_alloc_node_noprof+0xac/0x660 [ 567.016175][T12589] ? __alloc_skb+0x1d7/0x7a0 [ 567.016202][T12589] ? __alloc_skb+0x1d7/0x7a0 [ 567.016236][T12589] __alloc_skb+0x1d7/0x7a0 [ 567.016269][T12589] netlink_dump+0x1e7/0xee0 [ 567.016307][T12589] ? rcu_is_watching+0x15/0xb0 [ 567.016338][T12589] ? __pfx_netlink_dump+0x10/0x10 [ 567.016384][T12589] ? genl_start+0x497/0x6d0 [ 567.016416][T12589] __netlink_dump_start+0x589/0x7b0 [ 567.016454][T12589] genl_family_rcv_msg_dumpit+0x213/0x310 [ 567.016486][T12589] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 567.016509][T12589] ? genl_get_cmd+0x4d6/0x960 [ 567.016539][T12589] ? __pfx_genl_start+0x10/0x10 [ 567.016562][T12589] ? __pfx_genl_dumpit+0x10/0x10 [ 567.016585][T12589] ? __pfx_genl_done+0x10/0x10 [ 567.016613][T12589] ? __lock_acquire+0x6df/0x2e40 [ 567.016640][T12589] ? __lock_acquire+0x6df/0x2e40 [ 567.016667][T12589] genl_rcv_msg+0x5e1/0x7a0 [ 567.016700][T12589] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.016726][T12589] ? __pfx_netdev_nl_qstats_get_dumpit+0x10/0x10 [ 567.016774][T12589] netlink_rcv_skb+0x226/0x4a0 [ 567.016816][T12589] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.016844][T12589] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.016890][T12589] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.016920][T12589] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.016953][T12589] genl_rcv+0x28/0x40 [ 567.016976][T12589] netlink_unicast+0x7f5/0x990 [ 567.017017][T12589] netlink_sendmsg+0x813/0xb40 [ 567.017060][T12589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.017088][T12589] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 567.017109][T12589] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 567.017128][T12589] ? arch_stack_walk+0xfb/0x150 [ 567.017149][T12589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.017167][T12589] sock_sendmsg_nosec+0x13a/0x180 [ 567.017183][T12589] ____sys_sendmsg+0x565/0x870 [ 567.017207][T12589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.017232][T12589] ? import_iovec+0x73/0xa0 [ 567.017253][T12589] ___sys_sendmsg+0x2a5/0x360 [ 567.017271][T12589] ? __lock_acquire+0x6df/0x2e40 [ 567.017285][T12589] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.017329][T12589] ? __fget_files+0x2a/0x420 [ 567.017342][T12589] ? __fget_files+0x3a8/0x420 [ 567.017361][T12589] __x64_sys_sendmsg+0x1b7/0x290 [ 567.017381][T12589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.017412][T12589] do_syscall_64+0x17b/0x530 [ 567.017426][T12589] ? irqentry_exit+0x10f/0x8f0 [ 567.017437][T12589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.017451][T12589] ? clear_bhb_loop+0x40/0x90 [ 567.017466][T12589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.017479][T12589] RIP: 0033:0x7fb68ee5e019 [ 567.017492][T12589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.017506][T12589] RSP: 002b:00007fb68d0b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.017521][T12589] RAX: ffffffffffffffda RBX: 00007fb68f0e5fa0 RCX: 00007fb68ee5e019 [ 567.017531][T12589] RDX: 6b7e369c4a37b0ea RSI: 0000200000000200 RDI: 0000000000000006 [ 567.017539][T12589] RBP: 00007fb68d0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 567.017547][T12589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.017555][T12589] R13: 00007fb68f0e6038 R14: 00007fb68f0e5fa0 R15: 00007fff410fd178 [ 567.017575][T12589] [ 567.087335][ T5746] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 567.087369][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.087390][ T5746] usb 5-1: Product: syz [ 567.087406][ T5746] usb 5-1: Manufacturer: syz [ 567.087420][ T5746] usb 5-1: SerialNumber: syz [ 567.348772][T12597] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2189'. [ 567.474789][ T5746] usb 5-1: config 0 descriptor?? [ 567.555805][ T1010] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 567.694901][ T1010] usb 4-1: device descriptor read/64, error -71 [ 567.701363][ T5746] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 567.844439][ T9086] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 567.951280][ T1010] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 567.983347][ T9086] usb 6-1: device descriptor read/64, error -71 [ 568.102600][ T1010] usb 4-1: device descriptor read/64, error -71 [ 568.231158][ T1010] usb usb4-port1: attempt power cycle [ 568.240088][ T9086] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 568.389587][ T9086] usb 6-1: device descriptor read/64, error -71 [ 568.511246][ T9086] usb usb6-port1: attempt power cycle [ 568.603535][ T1010] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 568.625679][ T1010] usb 4-1: device descriptor read/8, error -71 [ 568.882727][ T1010] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 568.882938][ T9086] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 568.904136][ T9086] usb 6-1: device descriptor read/8, error -71 [ 568.914799][ T1010] usb 4-1: device descriptor read/8, error -71 [ 568.996150][ T5746] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 569.013487][ T5746] usb 5-1: USB disconnect, device number 115 [ 569.031316][ T1010] usb usb4-port1: unable to enumerate USB device [ 569.173317][ T9086] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 569.192301][ T9086] usb 6-1: device descriptor read/8, error -71 [ 569.309790][ T9086] usb usb6-port1: unable to enumerate USB device [ 570.526156][T12608] pim6reg9: entered allmulticast mode [ 571.147279][ T9] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 571.286202][ T5746] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 571.311437][ T9] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 571.311487][ T9] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 571.311528][ T9] usb 5-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 571.313134][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 571.313165][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 571.313180][ T9] usb 5-1: SerialNumber: syz [ 571.465696][ T5746] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 571.465780][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.465800][ T5746] usb 6-1: Product: syz [ 571.465810][ T5746] usb 6-1: Manufacturer: syz [ 571.465819][ T5746] usb 6-1: SerialNumber: syz [ 571.505611][ T5746] usb 6-1: config 0 descriptor?? [ 571.613287][ T9] rndis_host 5-1:253.0: missing cdc header ether descriptor [ 571.631891][ T9] usb 5-1: USB disconnect, device number 116 [ 571.726956][ T5746] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 572.313007][T12643] FAULT_INJECTION: forcing a failure. [ 572.313007][T12643] name failslab, interval 1, probability 100, space 0, times 980 [ 572.313052][T12643] CPU: 1 UID: 0 PID: 12643 Comm: syz.4.2204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 572.313083][T12643] Tainted: [L]=SOFTLOCKUP [ 572.313091][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.313104][T12643] Call Trace: [ 572.313113][T12643] [ 572.313124][T12643] dump_stack_lvl+0xe8/0x150 [ 572.313159][T12643] should_fail_ex+0x467/0x600 [ 572.313194][T12643] should_failslab+0xa8/0x100 [ 572.313219][T12643] __kmalloc_noprof+0xfb/0x790 [ 572.313252][T12643] ? alloc_trace_uprobe+0x32/0x300 [ 572.313283][T12643] ? alloc_trace_uprobe+0x32/0x300 [ 572.313322][T12643] alloc_trace_uprobe+0x32/0x300 [ 572.313359][T12643] __trace_uprobe_create+0x9b5/0xe40 [ 572.313407][T12643] ? __pfx___trace_uprobe_create+0x10/0x10 [ 572.313443][T12643] ? __kmalloc_noprof+0x436/0x790 [ 572.313475][T12643] ? argv_split+0x18d/0x400 [ 572.313497][T12643] ? argv_split+0x18d/0x400 [ 572.313526][T12643] ? argv_split+0x378/0x400 [ 572.313555][T12643] trace_probe_create+0xce/0x130 [ 572.313588][T12643] ? __pfx___trace_uprobe_create+0x10/0x10 [ 572.313623][T12643] ? __pfx_trace_probe_create+0x10/0x10 [ 572.313652][T12643] ? lockdep_hardirqs_on+0x7a/0x110 [ 572.313677][T12643] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 572.313699][T12643] ? mutex_lock_nested+0x152/0x1d0 [ 572.313727][T12643] ? dyn_event_create+0x20/0x70 [ 572.313758][T12643] dyn_event_create+0x4f/0x70 [ 572.313794][T12643] create_or_delete_trace_uprobe+0x65/0xa0 [ 572.313817][T12643] trace_parse_run_command+0x1f3/0x380 [ 572.313855][T12643] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 572.313879][T12643] ? __pfx_probes_write+0x10/0x10 [ 572.313901][T12643] vfs_write+0x29f/0xbb0 [ 572.313940][T12643] ? __pfx_vfs_write+0x10/0x10 [ 572.313972][T12643] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 572.313994][T12643] ? lockdep_hardirqs_on+0x7a/0x110 [ 572.314017][T12643] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 572.314039][T12643] ? mutex_lock_nested+0x152/0x1d0 [ 572.314067][T12643] ? fdget_pos+0x252/0x320 [ 572.314102][T12643] ksys_write+0x156/0x270 [ 572.314133][T12643] ? __pfx_ksys_write+0x10/0x10 [ 572.314170][T12643] do_syscall_64+0x17b/0x530 [ 572.314193][T12643] ? irqentry_exit+0x10f/0x8f0 [ 572.314214][T12643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.314237][T12643] ? clear_bhb_loop+0x40/0x90 [ 572.314265][T12643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.314288][T12643] RIP: 0033:0x7fba93cae019 [ 572.314310][T12643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.314329][T12643] RSP: 002b:00007fba91f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 572.314354][T12643] RAX: ffffffffffffffda RBX: 00007fba93f35fa0 RCX: 00007fba93cae019 [ 572.314370][T12643] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 572.314385][T12643] RBP: 00007fba91f06090 R08: 0000000000000000 R09: 0000000000000000 [ 572.314399][T12643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.314413][T12643] R13: 00007fba93f36038 R14: 00007fba93f35fa0 R15: 00007ffeab0b2678 [ 572.314450][T12643] [ 572.314657][T12643] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 572.314822][T12643] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 572.314845][T12643] CPU: 1 UID: 0 PID: 12643 Comm: syz.4.2204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 572.314875][T12643] Tainted: [L]=SOFTLOCKUP [ 572.314884][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.314897][T12643] RIP: 0010:path_put+0x24/0x60 [ 572.314919][T12643] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 17 ea 81 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e0 40 ee ff 48 8b 7b 08 e8 37 8a 03 00 48 [ 572.314939][T12643] RSP: 0018:ffffc90004cbf9c8 EFLAGS: 00010203 [ 572.314959][T12643] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff888027c5ddc0 [ 572.314974][T12643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 572.314989][T12643] RBP: ffffc90004cbfb50 R08: ffffffff99d12fd7 R09: 0000000000000000 [ 572.315004][T12643] R10: ffffffff99d12fc0 R11: fffffbfff33a25fb R12: fffffffffffffff4 [ 572.315021][T12643] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 572.315036][T12643] FS: 00007fba91f066c0(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 572.315055][T12643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.315071][T12643] CR2: 0000001b33f63fff CR3: 0000000033888000 CR4: 00000000003526f0 [ 572.315091][T12643] DR0: 0000000000000002 DR1: 00000000000012ad DR2: 0000000000007611 [ 572.315106][T12643] DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 572.315120][T12643] Call Trace: [ 572.315128][T12643] [ 572.315138][T12643] __trace_uprobe_create+0x53c/0xe40 [ 572.315176][T12643] ? __pfx___trace_uprobe_create+0x10/0x10 [ 572.315209][T12643] ? __kmalloc_noprof+0x436/0x790 [ 572.315238][T12643] ? argv_split+0x18d/0x400 [ 572.315257][T12643] ? argv_split+0x18d/0x400 [ 572.315280][T12643] ? argv_split+0x378/0x400 [ 572.315302][T12643] trace_probe_create+0xce/0x130 [ 572.315332][T12643] ? __pfx___trace_uprobe_create+0x10/0x10 [ 572.315365][T12643] ? __pfx_trace_probe_create+0x10/0x10 [ 572.315392][T12643] ? lockdep_hardirqs_on+0x7a/0x110 [ 572.315413][T12643] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 572.315434][T12643] ? mutex_lock_nested+0x152/0x1d0 [ 572.315458][T12643] ? dyn_event_create+0x20/0x70 [ 572.315483][T12643] dyn_event_create+0x4f/0x70 [ 572.315506][T12643] create_or_delete_trace_uprobe+0x65/0xa0 [ 572.315528][T12643] trace_parse_run_command+0x1f3/0x380 [ 572.315559][T12643] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 572.315582][T12643] ? __pfx_probes_write+0x10/0x10 [ 572.315602][T12643] vfs_write+0x29f/0xbb0 [ 572.315633][T12643] ? __pfx_vfs_write+0x10/0x10 [ 572.315658][T12643] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 572.315679][T12643] ? lockdep_hardirqs_on+0x7a/0x110 [ 572.315698][T12643] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 572.315719][T12643] ? mutex_lock_nested+0x152/0x1d0 [ 572.315745][T12643] ? fdget_pos+0x252/0x320 [ 572.315769][T12643] ksys_write+0x156/0x270 [ 572.315831][T12643] ? __pfx_ksys_write+0x10/0x10 [ 572.315847][T12643] do_syscall_64+0x17b/0x530 [ 572.315865][T12643] ? irqentry_exit+0x10f/0x8f0 [ 572.315882][T12643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.315903][T12643] ? clear_bhb_loop+0x40/0x90 [ 572.315927][T12643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.315946][T12643] RIP: 0033:0x7fba93cae019 [ 572.315963][T12643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.315981][T12643] RSP: 002b:00007fba91f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 572.315994][T12643] RAX: ffffffffffffffda RBX: 00007fba93f35fa0 RCX: 00007fba93cae019 [ 572.316003][T12643] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 572.316011][T12643] RBP: 00007fba91f06090 R08: 0000000000000000 R09: 0000000000000000 [ 572.316019][T12643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.316026][T12643] R13: 00007fba93f36038 R14: 00007fba93f35fa0 R15: 00007ffeab0b2678 [ 572.316046][T12643] [ 572.316054][T12643] Modules linked in: [ 572.316084][T12643] ---[ end trace 0000000000000000 ]--- [ 572.316137][T12643] RIP: 0010:path_put+0x24/0x60 [ 572.316159][T12643] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 17 ea 81 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e0 40 ee ff 48 8b 7b 08 e8 37 8a 03 00 48 [ 572.316177][T12643] RSP: 0018:ffffc90004cbf9c8 EFLAGS: 00010203 [ 572.316194][T12643] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff888027c5ddc0 [ 572.316208][T12643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 572.316251][T12643] RBP: ffffc90004cbfb50 R08: ffffffff99d12fd7 R09: 0000000000000000 [ 572.316267][T12643] R10: ffffffff99d12fc0 R11: fffffbfff33a25fb R12: fffffffffffffff4 [ 572.316282][T12643] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 572.316297][T12643] FS: 00007fba91f066c0(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 572.316310][T12643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.316319][T12643] CR2: 0000001b33f63fff CR3: 0000000033888000 CR4: 00000000003526f0 [ 572.316332][T12643] DR0: 0000000000000002 DR1: 00000000000012ad DR2: 0000000000007611 [ 572.316340][T12643] DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 572.316381][T12643] Kernel panic - not syncing: Fatal exception [ 572.316733][T12643] Kernel Offset: disabled